Skip to content

fix(deps): update npm non-major dependencies#4694

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-minor-patch
Open

fix(deps): update npm non-major dependencies#4694
renovate[bot] wants to merge 1 commit intomainfrom
renovate/npm-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 1, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
@biomejs/biome (source) 2.4.9 → 2.4.10 age confidence
@navikt/aksel-icons (source) ^8.8.0 → ^8.9.0 age confidence
cssnano ^7.1.3 → ^7.1.4 age confidence
express-rate-limit ^8.3.1 → ^8.3.2 age confidence
invokers-polyfill ^1.0.1 → ^1.0.2 age confidence
isbot (source) ^5.1.36 → ^5.1.37 age confidence
playwright (source) ^1.58.2 → ^1.59.1 age confidence
react-i18next ^17.0.0 → ^17.0.2 age confidence
rollup (source) ^4.60.0 → ^4.60.1 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

biomejs/biome (@​biomejs/biome)

v2.4.10

Compare Source

Patch Changes

  • #​8838 f3a6a6b Thanks @​baeseokjae! - Added new lint nursery rule noImpliedEval.

    The rule detects implied eval() usage through functions like setTimeout, setInterval, and setImmediate when called with string arguments.

    // Invalid
setTimeout("alert('Hello');", 100);

// Valid
setTimeout(() => alert("Hello"), 100);

  • #​9320 93c3b6c Thanks @​taberoajorge! - Fixed #​7664: noUnusedVariables no longer reports false positives for TypeScript namespace declarations that participate in declaration merging with an exported or used value declaration (const, function, or class) of the same name. The reverse direction is also handled: a value declaration merged with an exported namespace is no longer flagged.

  • #​9630 1dd4a56 Thanks @​raashish1601! - Fixed #​9629: noNegationElse now keeps ternary branch comments attached to the correct branch when applying its fixer.

  • #​9216 04243b0 Thanks @​FrederickStempfle! - Fixed #​9061: noProcessEnv now also detects process.env when process is imported from the "process" or "node:process" modules.

    Previously, only the global process object was flagged:

    import process from "node:process";
// This was not flagged, but now it is:
console.log(process.env.NODE_ENV);

  • #​9692 61b7ec5 Thanks @​mkosei! - Fixed Svelte #each destructuring parsing and formatting for nested patterns such as [key, { a, b }].

  • #​9627 06a0f35 Thanks @​ematipico! - Fixed #​191: Improved the performance of how the Biome Language Server pulls code actions and diagnostics.

    Before, code actions were pulled and computed all at once in one request. This approach couldn't work in big files, and caused Biome to stale and have CPU usage spikes up to 100%.

    Now, code actions are pulled and computed lazily, and Biome won't choke anymore in big files.

  • #​9643 5bfee36 Thanks @​dyc3! - Fixed #​9347: useVueValidVBind no longer reports valid object bindings like v-bind="props".

  • #​9627 06a0f35 Thanks @​ematipico! - Fixed assist diagnostics being invisible when using --diagnostic-level=error. Enforced assist violations (e.g. useSortedKeys) were filtered out before being promoted to errors, causing biome check to incorrectly return success.

  • #​9695 9856a87 Thanks @​dyc3! - Added the new nursery rule noUnsafePlusOperands, which reports + and += operations that use object-like, symbol, unknown, or never operands, or that mix number with bigint.

  • #​9627 06a0f35 Thanks @​ematipico! - Fixed duplicate parse errors in check and ci output. When a file had syntax errors, the same parse error was printed twice and the error count was inflated.

  • #​9627 06a0f35 Thanks @​ematipico! - Improved the performance of the commands lint and check when they are called with --write.

  • #​9627 06a0f35 Thanks @​ematipico! - Fixed --diagnostic-level not fully filtering diagnostics. Setting --diagnostic-level=error now correctly excludes warnings and infos from both the output and the summary counts.

  • #​9623 13b3261 Thanks @​ematipico! - Fixed #​9258: --skip no longer causes suppressions/unused warnings for suppression comments targeting skipped rules or domains.

  • #​9631 599dd04 Thanks @​raashish1601! - Fixed #​9625: experimentalEmbeddedSnippetsEnabled no longer crashes when a file mixes formatable CSS-in-JS templates with tagged templates that the embedded formatter can't currently delegate, such as a styled-components interpolation returning `css```.

navikt/aksel (@​navikt/aksel-icons)

v8.9.0

Compare Source

cssnano/cssnano (cssnano)

v7.1.4: v7.1.4

Compare Source

Bug Fixes

Update color conversion library to @​colordx/core to fix rounding errors in color conversions #​1755

express-rate-limit/express-rate-limit (express-rate-limit)

v8.3.2

Compare Source

You can view the changelog here.

keithamus/invokers-polyfill (invokers-polyfill)

v1.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: keithamus/invokers-polyfill@v1.0.1...v1.0.2

omrilotan/isbot (isbot)

v5.1.37

Compare Source

  • Better checking for non empty strings in the interface functions
  • [Internal] Build with tsup
microsoft/playwright (playwright)

v1.59.1

Compare Source

v1.59.0

Compare Source

i18next/react-i18next (react-i18next)

v17.0.2

Compare Source

  • fix(types): values prop on <Trans /> now only requires interpolation variables for the specific i18nKey, not all variables in the namespace 1913
rollup/rollup (rollup)

v4.60.1

Compare Source

2026-03-30

Bug Fixes
  • Resolve a situation where side effect imports could be dropped due to a caching issue (#​6286)
Pull Requests

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@changeset-bot
Copy link
Copy Markdown

changeset-bot bot commented Apr 1, 2026 •
edited
Loading

⚠️ No Changeset found

Latest commit: 3e6720e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026 •
edited
Loading

Preview deployments for this pull request:

storybook - 4. Apr 2026 - 22:52

themebuilder - 4. Apr 2026 - 22:52

www - 4. Apr 2026 - 22:59

@renovate renovate bot force-pushed the renovate/npm-minor-patch branch 7 times, most recently from 9049e4b to 5a0d442 Compare April 4, 2026 01:05
@renovate renovate bot force-pushed the renovate/npm-minor-patch branch from 5a0d442 to 3e6720e Compare April 4, 2026 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mimarz mimarz Awaiting requested review from mimarz mimarz is a code owner

@Barsnes Barsnes Awaiting requested review from Barsnes Barsnes is a code owner

@eirikbacker eirikbacker Awaiting requested review from eirikbacker eirikbacker is a code owner

@oddvernes oddvernes Awaiting requested review from oddvernes oddvernes is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants