chore(deps): update dependency @biomejs/biome to v2.4.12 by renovate[bot] · Pull Request #22 · codize-dev/piston-sdk-js

renovate · 2026-02-14T04:27:13Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`2.3.13` → `2.4.12`
@biomejs/biome (source)	`2.3.13` → `2.4.12`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.4.12`

Compare Source

Patch Changes

#9376 9701a33 Thanks @dyc3! - Added the nursery/noIdenticalTestTitle lint rule. This rule disallows using the same title for two describe blocks or two test cases at the same nesting level.

describe("foo", () => {});
describe("foo", () => {
  // invalid: same title as previous describe block
  test("baz", () => {});
  test("baz", () => {}); // invalid: same title as previous test case
});

#9889 7ae83f2 Thanks @dyc3! - Improved the diagnostics for useForOf to better explain the problem, why it matters, and how to fix it.

#9916 27dd7b1 Thanks @Jayllyz! - Added a new nursery rule noComponentHookFactories, that disallows defining React components or custom hooks inside other functions.

For example, the following snippets trigger the rule:

function createComponent(label) {
  function MyComponent() {
    return <div>{label}</div>;
  }
  return MyComponent;
}

function Parent() {
  function Child() {
    return <div />;
  }
  return <Child />;
}

#9980 098f1ff Thanks @ematipico! - Fixed #9941: Biome now emits a warning diagnostic when a file exceed the files.maxSize limit.
#9942 9956f1d Thanks @dyc3! - Fixed #9918: useConsistentTestIt no longer panics when applying fixes to chained calls such as test.for([])("x", () => {});.
#9891 4d9ac51 Thanks @dyc3! - Improved the noGlobalObjectCalls diagnostic to better explain why calling global objects like Math or JSON is invalid and how to fix it.
#9902 3f4d103 Thanks @ematipico! - Fixed #9901: the command lint --write is now idempotent when it's run against HTML-ish files that contains scripts and styles.
#9891 4d9ac51 Thanks @dyc3! - Improved the noMultiStr diagnostic to explain why escaped multiline strings are discouraged and what to use instead.
#9966 322675e Thanks @siketyan! - Fixed #9113: Biome now parses and formats @media and other conditional blocks correctly inside embedded CSS snippets.
#9835 f8d49d9 Thanks @bmish! - The noFloatingPromises rule now detects floating promises through cross-module generic wrapper functions. Previously, patterns like export const fn = trace(asyncFn) — where trace preserves the function signature via a generic <F>(fn: F): F — were invisible to the rule when the wrapper was defined in a different file.
#9981 02bd8dd Thanks @siketyan! - Fixed #9975: Biome now parses nested CSS selectors correctly inside embedded snippets without requiring an explicit &.
#9949 e0ba71d Thanks @Netail! - Added the nursery rule useIframeSandbox, which enforces the sandbox attribute for iframe tags.

Invalid:
```
<iframe></iframe>
```
#9913 d417803 Thanks @Netail! - Added the nursery rule noJsxNamespace, which disallows JSX namespace syntax.

Invalid:
```
<ns:testcomponent />
```
#9892 e75d70e Thanks @dyc3! - Improved the noSelfCompare diagnostic to better explain why comparing a value to itself is suspicious and what to use for NaN checks.
#9861 2cff700 Thanks @dyc3! - Added the new nursery rule useVarsOnTop, which requires var declarations to appear at the top of their containing scope.

For example, the following code now triggers the rule:
```
function f() {
  doSomething();
  var value = 1;
}
```
#9892 e75d70e Thanks @dyc3! - Improved the noThenProperty diagnostic to better explain why exposing then can create thenable behavior and how to avoid it.
#9892 e75d70e Thanks @dyc3! - Improved the noShorthandPropertyOverrides diagnostic to explain why later shorthand declarations can unintentionally overwrite earlier longhand properties.
#9978 4847715 Thanks @mdevils! - Fixed #9744: useExhaustiveDependencies no longer reports false positives for variables obtained via object destructuring with computed keys, e.g. const { [KEY]: key1 } = props.
#9892 e75d70e Thanks @dyc3! - Improved the noRootType diagnostic to better explain that the reported root type is disallowed by project configuration and how to proceed.
#9927 7974ab7 Thanks @dyc3! - Added eslint-plugin-unicorn's no-nested-ternary as a rule source for noNestedTernary
#9873 19ff706 Thanks @minseong0324! - noMisleadingReturnType now checks class methods, object methods, and getters in addition to functions.
#9888 362b638 Thanks @dyc3! - Updated metadata for biome migrate eslint to better reflect which ESLint rules are redundant versus unsupported versus unimplemented.
#9892 e75d70e Thanks @dyc3! - Improved the noAutofocus diagnostic to better explain why autofocus harms accessibility outside allowed modal contexts.
#9982 d6bdf4a Thanks @dyc3! - Improved performance of noMagicNumbers.
Biome now maps ESLint no-magic-numbers sources more accurately during biome migrate eslint.
#9889 7ae83f2 Thanks @dyc3! - Improved the diagnostics for noConstantCondition to better explain the problem, why it matters, and how to fix it.
#9866 40bd180 Thanks @dyc3! - Added a new nursery rule noExcessiveSelectorClasses, which limits how many class selectors can appear in a single CSS selector.
#9796 f1c1363 Thanks @dyc3! - Added a new nursery rule useStringStartsEndsWith, which prefers startsWith() and endsWith() over verbose string prefix and suffix checks.

The rule uses type information, so it only reports on strings and skips array lookups such as items[0] === "a".
#9942 9956f1d Thanks @dyc3! - Fixed the safe fix for noSkippedTests so it no longer panics when rewriting skipped test function names such as xit(), xtest(), and xdescribe().
#9874 9e570d1 Thanks @minseong0324! - Type-aware lint rules now resolve members through Pick<T, K> and Omit<T, K> utility types.
#9909 0d0e611 Thanks @Netail! - Added the nursery rule useReactAsyncServerFunction, which requires React server actions to be async.

Invalid:
```
function serverFunction() {
  "use server";
  // ...
}
```
#9925 29accb3 Thanks @ematipico! - Fixed #9910: added support for parsing member expressions in Svelte directive properties. Biome now correctly parses directives like in:renderer.in|global, use:obj.action, and deeply nested forms like in:a.b.c|global.
#9904 e7775a5 Thanks @ematipico! - Fixed #9626: noUnresolvedImports no longer reports false positives for named imports from packages that have a corresponding @types/* package installed. For example, import { useState } from "react" with @types/react installed is now correctly recognised.
#9942 9956f1d Thanks @dyc3! - Fixed the safe fix for noFocusedTests so it no longer panics when rewriting focused test function names such as fit() and fdescribe().
#9577 c499f46 Thanks @tt-a1i! - Added the nursery rule useReduceTypeParameter. It flags type assertions on the initial value passed to Array#reduce and Array#reduceRight and recommends using a type parameter instead.
```
// before: type assertion on initial value
arr.reduce((sum, num) => sum + num, [] as number[]);

// after: type parameter on the call
arr.reduce<number[]>((sum, num) => sum + num, []);
```
#9895 1c8e1ef Thanks @Netail! - Added extra rule sources from react-xyz. biome migrate eslint should do a bit better detecting rules in your eslint configurations.
#9891 4d9ac51 Thanks @dyc3! - Improved the noInvalidUseBeforeDeclaration diagnostic to better explain why using a declaration too early is problematic and how to fix it.
#9889 7ae83f2 Thanks @dyc3! - Improved the diagnostics for noRedeclare to better explain the problem, why it matters, and how to fix it.
#9875 a951586 Thanks @minseong0324! - Type-aware lint rules now resolve members through Partial<T>, Required<T>, and Readonly<T> utility types, preserving optional, readonly, and nullable member flags.

`v2.4.11`

Compare Source

Patch Changes

#9350 4af4a3a Thanks @dyc3! - Added the new nursery rule useConsistentTestIt in the test domain. The rule enforces consistent use of either it or test for test functions in Jest/Vitest suites, with separate control for top-level tests and tests inside describe blocks.

Invalid:
```
test("should fly", () => {}); // Top-level test using 'test' flagged, convert to 'it'

describe("pig", () => {
  test("should fly", () => {}); // Test inside 'describe' using 'test' flagged, convert to 'it'
});
```
#9429 a2f3f7e Thanks @ematipico! - Added the new nursery lint rule useExplicitReturnType. It reports TypeScript functions and methods that omit an explicit return type.
```
function toString(x: any) {
  // rule triggered, it doesn't declare a return type
  return x.toString();
}
```
#9828 9e40844 Thanks @ematipico! - Fixed #9484: the formatter no longer panics when formatting files that contain graphql tagged template literals combined with parenthesized expressions.
#9886 e7c681e Thanks @ematipico! - Fixed an issue where, occasionally, some bindings and references were not properly tracked, causing false positives from noUnusedVariables and noUndeclaredVariables in Svelte, Vue, and Astro files.
#9760 5b16d18 Thanks @myx0m0p! - Fixed #4093: the noDelete rule no longer triggers for delete process.env.FOO, since delete is the documented way to remove environment variables in Node.js.
#9799 2af8efd Thanks @minseong0324! - Added the rule noMisleadingReturnType. The rule detects when a function's return type annotation is wider than what the implementation actually returns.
```
// Flagged: `: string` is wider than `"loading" | "idle"`
function getStatus(b: boolean): string {
  if (b) return "loading";
  return "idle";
}
```
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useFind to better explain the problem, why it matters, and how to fix it.
#9755 bff7bdb Thanks @ematipico! - Improved performance of fix-all operations (--write). Biome is now smarter when it runs lint rules and assist actions. First, it runs only rules that have code fixes, and then runs the rest of the rules.
#8651 aafca2d Thanks @siketyan! - Add a new lint rule useDisposables for JavaScript, which detects disposable objects assigned to variables without using or await using syntax. Disposable objects that implement the Disposable or AsyncDisposable interface are intended to be disposed of after use. Not disposing them can lead to resource or memory leaks, depending on the implementation.

Invalid:
```
function createDisposable(): Disposable {
  return {
    [Symbol.dispose]() {
      // do something
    },
  };
}

const disposable = createDisposable();
```
Valid:
```
function createDisposable(): Disposable {
  return {
    [Symbol.dispose]() {
      // do something
    },
  };
}

using disposable = createDisposable();
```
#9788 53b8e57 Thanks @MeGaNeKoS! - Fixed #7760: Added support for CSS scroll-driven animation timeline-range-name keyframe selectors (cover, contain, entry, exit, entry-crossing, exit-crossing). Biome no longer reports parse errors on keyframes like entry 0% { ... } or exit 100% { ... }.
#9728 5085424 Thanks @mkosei! - Fixed #9696: Astro frontmatter now correctly parses regular expression literals like /\d{4}/.
#9261 16b6c49 Thanks @ematipico! - Fixed #8409: CSS formatter now correctly places comments after the colon in property declarations.

Previously, comments that appeared after the colon in CSS property values were incorrectly moved before the property name:
```
[lang]:lang(ja) {
-  /* system-ui,*/ font-family:
+  font-family: /* system-ui,*/
    Hiragino Sans,
    sans-serif;
}
```
#9441 957ea4c Thanks @soconnor-seeq! - Fixed #1630: LSP project selection now prefers the most specific project root in nested workspaces.
#9878 de6210f Thanks @ematipico! - Fixed #9118: noUnusedImports no longer reports false positives for default imports used inside Svelte, Vue and Astro components.
#9879 ce7e2b7 Thanks @dyc3! - Fixed a parser diagnostic's message when vue syntax is disabled so that it no longer references the non-existant html.parser.vue option. This option will become available in 2.5.
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useRegexpExec to better explain the problem, why it matters, and how to fix it.
#9846 b7134d9 Thanks @ematipico! - Fixed #9140: Biome now parses Astro's attribute shorthand inside .astro files. The following snippet no longer reports a parse error:
```
---
const items = ['a', 'b'];
---
<ul>
  {items.map((item) => <li {item}>row</li>)}
</ul>
```
#9790 67df09d Thanks @dyc3! - Fixed #9781: Trailing comments after a top-level biome-ignore-all format suppression are now preserved instead of being dropped. This applies to JavaScript, CSS, HTML, JSONC, GraphQL, and Grit files.
#9745 d87073e Thanks @ematipico! - Fixed #9741: the LSP server now correctly returns the organizeImports code action when the client requests it via source.organizeImports.biome in the only filter. Previously, editors with codeAction/resolve support (e.g. Zed) received an empty response because the action was serialized with the wrong kind (source.biome.organizeImports instead of source.organizeImports.biome).
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useArraySome to better explain the problem, why it matters, and how to fix it.
#9795 1d09f0f Thanks @dyc3! - Relaxed useExplicitType for trivially inferrable types.

Type annotations can now be omitted when types are trivially inferrable from:
- Binary expressions (const sum = 1 + 1)
- Comparison expressions (const isEqual = 'a' === 'b', const isTest = process.env.NODE_ENV === 'test')
- Logical expressions (const and = true && false)
- Class instantiation (const date = new Date())
- Array literals (const arr = [1, 2, 3])
- Conditional expressions (const val = true ? 'yes' : 'no')
- Function calls (const num = Math.random())
- Parameter defaults - any expression is now allowed (const fn = (max = MAX_ATTEMPTS) => ...)
Comparison expressions always return boolean, so any operands are now allowed
(including property access like process.env.NODE_ENV).

Parameters with default values no longer require type annotations, as TypeScript
can infer the type from the default value (even when referencing variables).

Also removed the redundant any type validation from this rule. The any type
is now only validated by the dedicated noExplicitAny rule, following the
Single Responsibility Principle.
#9809 e8cad58 Thanks @Netail! - Added the new nursery rule useQwikLoaderLocation, which enforces that Qwik loader functions are declared in the correct location.
#9877 fc9d715 Thanks @ematipico! - Fixed #9136 and #9653: noUndeclaredVariables and noUnusedVariables no longer report false positives on several Svelte template constructs that declare or reference bindings in the host grammar:
- {#snippet name(params)} — the snippet name and its parameters (including object, array, rest, and nested destructuring) are now tracked.
- {@render name(args)} — the snippet name used at the render site is now resolved against the snippet declaration.
- {#each items as item, index (key)} — the item binding (plain identifier or destructured), the optional index, and the optional key expression are now tracked.
- {@const name = value} — the declared name is now tracked as a binding and the initializer is analyzed for undeclared references.
- {@debug a, b, c} — each debugged identifier is now analyzed and reported if undeclared.
- Shorthand attributes <img {src} /> — the curly-shorthand attribute is now analyzed as an expression, so undeclared references inside it are reported.
For example, the following template no longer triggers either rule:
```
<script>
let items = [];
let total = 0;
</script>

{#snippet figure(image)}
    <figure>
        <img src={image.src} alt={image.caption} />
        <figcaption>{image.caption}</figcaption>
    </figure>
{/snippet}

{#each items as item}
    {@&#8203;const price = item.price}
    {@&#8203;render figure(item)}
    <span>{price}</span>
{/each}

{@&#8203;debug items, total}
```
#9869 78bce77 Thanks @Netail! - Updated noDuplicateFieldDefinitionNames to also flag duplicate fields within type extensions, interface extensions & input extensions.
#9739 0bc2198 Thanks @dyc3! - Fixed Grit queries that use native Biome AST node names with the native field names that are in our .ungram grammar files. Queries such as JsConditionalExpression(consequent = $cons, alternate = $alt) now compile successfully in biome search and grit plugins.
#9811 2dddca3 Thanks @dyc3! - Updated noImpliedEval to flag new Function() usages, as its a form of indirect eval, and to include no-new-func as a rule source.
#9870 ccf9770 Thanks @Netail! - Marked eslint-qwik-plugin's unused-server as redundant since it was covered by noUnusedVariables.
#9701 1417c3b Thanks @dyc3! - Added the new nursery rule noUselessTypeConversion, which reports redundant primitive conversion patterns such as String(value) when value is already a string.
#9248 49f00a3 Thanks @pkallos! - useNullishCoalescing now also detects ternary expressions that check for null or undefined and suggests rewriting them with ??. A new ignoreTernaryTests option allows disabling this behavior.
#9863 6a44619 Thanks @ematipico! - Fixed #9690: biome check --write is now idempotent on HTML files that contain embedded <style> or <script> blocks. Previously, each run reported "Fixed 1 file" even when the file content did not actually change, because the embedded language formatter's output was not re-indented to match the surrounding HTML block.

`v2.4.10`

Compare Source

Patch Changes

#8838 f3a6a6b Thanks @baeseokjae! - Added new lint nursery rule noImpliedEval.

The rule detects implied eval() usage through functions like setTimeout, setInterval, and setImmediate when called with string arguments.
```
// Invalid
setTimeout("alert('Hello');", 100);

// Valid
setTimeout(() => alert("Hello"), 100);
```
#9320 93c3b6c Thanks @taberoajorge! - Fixed #7664: noUnusedVariables no longer reports false positives for TypeScript namespace declarations that participate in declaration merging with an exported or used value declaration (const, function, or class) of the same name. The reverse direction is also handled: a value declaration merged with an exported namespace is no longer flagged.
#9630 1dd4a56 Thanks @raashish1601! - Fixed #9629: noNegationElse now keeps ternary branch comments attached to the correct branch when applying its fixer.
#9216 04243b0 Thanks @FrederickStempfle! - Fixed #9061: noProcessEnv now also detects process.env when process is imported from the "process" or "node:process" modules.

Previously, only the global process object was flagged:
```
import process from "node:process";
// This was not flagged, but now it is:
console.log(process.env.NODE_ENV);
```
#9692 61b7ec5 Thanks @mkosei! - Fixed Svelte #each destructuring parsing and formatting for nested patterns such as [key, { a, b }].
#9627 06a0f35 Thanks @ematipico! - Fixed #191: Improved the performance of how the Biome Language Server pulls code actions and diagnostics.

Before, code actions were pulled and computed all at once in one request. This approach couldn't work in big files, and caused Biome to stale and have CPU usage spikes up to 100%.

Now, code actions are pulled and computed lazily, and Biome won't choke anymore in big files.
#9643 5bfee36 Thanks @dyc3! - Fixed #9347: useVueValidVBind no longer reports valid object bindings like v-bind="props".
#9627 06a0f35 Thanks @ematipico! - Fixed assist diagnostics being invisible when using --diagnostic-level=error. Enforced assist violations (e.g. useSortedKeys) were filtered out before being promoted to errors, causing biome check to incorrectly return success.
#9695 9856a87 Thanks @dyc3! - Added the new nursery rule noUnsafePlusOperands, which reports + and += operations that use object-like, symbol, unknown, or never operands, or that mix number with bigint.
#9627 06a0f35 Thanks @ematipico! - Fixed duplicate parse errors in check and ci output. When a file had syntax errors, the same parse error was printed twice and the error count was inflated.
#9627 06a0f35 Thanks @ematipico! - Improved the performance of the commands lint and check when they are called with --write.
#9627 06a0f35 Thanks @ematipico! - Fixed --diagnostic-level not fully filtering diagnostics. Setting --diagnostic-level=error now correctly excludes warnings and infos from both the output and the summary counts.
#9623 13b3261 Thanks @ematipico! - Fixed #9258: --skip no longer causes suppressions/unused warnings for suppression comments targeting skipped rules or domains.
#9631 599dd04 Thanks @raashish1601! - Fixed #9625: experimentalEmbeddedSnippetsEnabled no longer crashes when a file mixes formatable CSS-in-JS templates with tagged templates that the embedded formatter can't currently delegate, such as a styled-components interpolation returning `css```.

`v2.4.9`

Compare Source

Patch Changes

#9315 085d324 Thanks @ematipico! - Added a new nursery CSS rule noDuplicateSelectors, that disallows duplicate selector lists within the same at-rule context.

For example, the following snippet triggers the rule because the second selector and the first selector are the same:
```
/* First selector */
.x .y .z {
}

/* Second selector */
.x {
  .y {
    .z {
    }
  }
}
```
#9567 b7ab931 Thanks @ematipico! - Fixed #7211: useOptionalChain now detects negated logical OR chains. The following code is now considered invalid:
```
!foo || !foo.bar;
```
#8670 607ebf9 Thanks @tt-a1i! - Fixed #8345: useAdjacentOverloadSignatures no longer reports false positives for static and instance methods with the same name. Static methods and instance methods are now treated as separate overload groups.
```
class Kek {
  static kek(): number {
    return 0;
  }
  another(): string {
    return "";
  }
  kek(): number {
    return 1;
  } // no longer reported as non-adjacent
}
```
#9476 97b80a8 Thanks @masterkain! - Fixed #9475: Fixed a panic when Biome analyzed ambient TypeScript modules containing class constructor, getter, or setter signatures that reference local type aliases. Biome now handles these declarations without crashing during semantic analysis.
#9553 0cd5298 Thanks @dyc3! - Fixed a bug where enabling the rules of a whole group, would enable rules that belonged to a domain under the same group.

For example, linter.rules.correctness = "error" no longer enables React- or Qwik-specific correctness rules unless linter.domains.react, linter.domains.qwik, or an explicit rule config also enables them, or their relative dependencies are installed.
#9586 4cafb71 Thanks @dyc3! - Fixed #8828: Grit patterns using export { $foo } from $source now match named re-exports in JavaScript and TypeScript files.
#9550 d4e3d6e Thanks @dyc3! - Fixed #9548: Biome now parses conditional expressions whose consequent is an arrow function returning a parenthesized object expression.
#8696 a7c19cc Thanks @Faizanq! - Fixed #8685 where noUselessLoneBlockStatements would remove empty blocks containing comments. The rule now preserves these blocks since comments may contain important information like TODOs or commented-out code.
#9557 6671ac5 Thanks @datalek! - Fixed #9557: Biome's LSP server no longer crashes on startup when used with editors that don't send workspaceFolders during initialization. This affected any LSP client that only sends rootUri, which is valid per the LSP specification.
#9455 1710cf1 Thanks @omar-y-abdi! - Fixed #9174: useExpect now correctly rejects asymmetric matchers in Vitest or Jest like expect.stringContaining(), expect.objectContaining(), and utilities like expect.extend() that are not valid assertions. Previously these constructs caused false negatives, allowing tests without real assertions to pass the lint rule.
#9584 956e367 Thanks @ematipico! - Fixed a bug where Vue directive attribute values like v-bind:class="{'dynamic': true}" were incorrectly parsed as JavaScript statements instead of expressions. Object literals inside directive values like :class, v-if, and v-html are now correctly parsed as expressions, preventing spurious parse errors.
#9474 e168494 Thanks @ematipico! - Added the new nursery rule noUntrustedLicenses. This rule disallows dependencies that ship with invalid licenses or licenses that don't meet the criteria of your project/organisation.

The rule has the following options:
- allow: a list of licenses that can be allowed. Useful to bypass possible invalid licenses from downstream dependencies.
- deny: a list of licenses that should trigger the rule. Useful to deny licenses that don't fit your project/organisation.
  When both deny and allow are provided, deny takes precedence.
- requireOsiApproved: whether the licenses need to be approved by the Open Source Initiative.
- requireFsfLibre: whether the licenses need to be approved by the Free Software Foundation.
#9544 723798b Thanks @ViniciusDev26! - Added an unsafe fix to useConsistentMethodSignatures that automatically converts between method-style and property-style signatures.
#9555 8a3647b Thanks @ematipico! - Fixed #188: the Biome Language Server no longer panics when open files change abruptly, such as during git branch checkouts.
#9605 f65c637 Thanks @ematipico! - Fixed #9589. Now Biome correctly parses object expressions inside props and directives. The following code doesn't emit errors anymore:
```
<style is:global define:vars={{ bgLight: light }}>
<Component name={{ first, name }} />
```
#9565 ccb249e Thanks @eyupcanakman! - Fixed #9505: noUselessStringConcat no longer reports tagged template literals as useless string concatenations. Tagged templates invoke a function and can return non-string values, so combining them with + is not equivalent to a single template literal.
#9534 4d050df Thanks @Netail! - Added the nursery rule noInlineStyles. The rule disallows the use of inline style attributes in HTML and the style prop in JSX, including React.createElement calls. Inline styles make code harder to maintain and can interfere with Content Security Policy.
#9611 cddaa44 Thanks @gaauwe! - Fixed a regression where Biome LSP could misread editor settings sent through workspace/didChangeConfiguration when the payload was wrapped in a top-level biome key. This caused requireConfiguration and related settings to be ignored in some editors.

`v2.4.8`

Compare Source

Patch Changes

#9488 bc709f6 Thanks @mvanhorn! - Fixed #9463: the "Biome found a configuration file outside of the current working directory" diagnostic now includes the configuration file path and the working directory, giving users actionable information to debug the issue.
#9527 2f8bf80 Thanks @mdm317! - Fixed #8959: Fixed TypeScript arrow function formatting when a comment appears after =>.
#9525 e7b3b10 Thanks @ViniciusDev26! - Added the rule noDrizzleUpdateWithoutWhere to prevent accidental full-table updates when using Drizzle ORM without a .where() clause.
#9531 1302740 Thanks [@ematipico](https://redirec

Configuration

📅 Schedule: (UTC)

Branch creation
- At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-02-14T14:15:45Z

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

This PR updates @biomejs/biome from version 2.3.13 to 2.4.12, spanning multiple minor and patch releases (2.4.8, 2.4.9, 2.4.10, 2.4.11, and 2.4.12).

Major Changes:

New Lint Rules (Nursery): Multiple new rules added to the nursery category including:
- noIdenticalTestTitle - Disallows duplicate test titles
- useConsistentTestIt - Enforces consistent test function naming
- noComponentHookFactories - Prevents React components/hooks inside functions
- useIframeSandbox - Enforces iframe sandbox attribute
- noJsxNamespace - Disallows JSX namespace syntax
- useVarsOnTop - Requires var declarations at scope top
- useStringStartsEndsWith - Prefers startsWith/endsWith over verbose checks
- useReactAsyncServerFunction - Requires React server actions to be async
- useExplicitReturnType - Reports functions without explicit return types
- noMisleadingReturnType - Detects when return type is wider than actual return
- useDisposables - Detects disposable objects not using using syntax
- noExcessiveSelectorClasses - Limits class selectors in CSS
- noImpliedEval - Detects implied eval() usage
- noUnsafePlusOperands - Reports unsafe + operations with incompatible types
- useReduceTypeParameter - Flags type assertions on reduce initial values
- noUselessTypeConversion - Reports redundant primitive conversions
- noDuplicateSelectors - Disallows duplicate CSS selectors
- noInlineStyles - Disallows inline style attributes
- useQwikLoaderLocation - Enforces Qwik loader location
- noUntrustedLicenses - Disallows invalid or untrusted licenses
- noDrizzleUpdateWithoutWhere - Prevents full-table Drizzle updates

Breaking Changes:

No breaking changes that affect this project's usage
All changes are backward compatible for this codebase
Schema URL updated from 2.3.13 to 2.4.12 (non-breaking)

Bug Fixes:

Fixed parsing issues with Vue, Svelte, and Astro files
Fixed LSP server stability and performance improvements
Fixed false positives in various lint rules including noUnusedVariables, noUndeclaredVariables, useExhaustiveDependencies
Fixed formatting issues with comments and embedded code
Fixed idempotency issues with --write flag on HTML files

Performance Improvements:

Improved performance of fix-all operations (--write)
Enhanced LSP code action performance for large files
Better diagnostic pulling and computation

Security Fixes:

No specific security vulnerabilities addressed in these releases

🎯 Impact Scope Investigation

Usage Location Identification:

@biomejs/biome is used as a devDependency only
Primary usage in package.json scripts:
- lint: biome check
- format: biome check --write
Used in lint-staged configuration: .lintstagedrc.json
- Command: bunx biome check --write --unsafe --no-errors-on-unmatched
Configuration file: biome.json with recommended rules enabled

Configuration Impact:

The biome.json schema URL is updated from 2.3.13 to 2.4.12
Current configuration uses:
- rules.recommended: true - Will automatically adopt new recommended rules
- VCS integration enabled
- Formatter with tab indentation
- Double quotes for JavaScript
- Organize imports assist action enabled

Testing Results:

✅ bun install - Successfully installed version 2.4.12
✅ bun run lint - Passed with no issues (25 files checked)
✅ bun run format - Passed with no fixes needed (25 files checked)
✅ bunx vitest run - All 59 tests passed (2 test files)
✅ bun run build - TypeScript compilation successful

Impact on Dependencies:

No impact on other dependencies
Biome is a standalone tool with optional platform-specific binaries
All optional dependencies (@biomejs/cli-*) updated consistently

Code Compatibility:

No source code changes required
All existing code passes with the new version
No new violations introduced
Configuration remains fully compatible

💡 Recommended Actions

Immediate Actions:

✅ Merge this PR - The update is safe and backward compatible
No code changes required
No configuration changes required

Optional Considerations:

Review New Nursery Rules: While the current configuration only enables recommended rules, you may want to explore new nursery rules that could benefit the codebase:
- noIdenticalTestTitle - Could improve test quality
- useStringStartsEndsWith - Could improve code readability
- Consider enabling specific nursery rules if they align with project standards
Monitor for Future Promotions: Some nursery rules may be promoted to recommended in future releases, which will automatically apply when using rules.recommended: true

No Breaking Changes:

The update maintains full backward compatibility
All tests pass without modification
Linting and formatting work as expected
Build process unaffected

🔗 Reference Links

Generated by koki-develop/claude-renovate-review

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch 2 times, most recently from 6452c5b to 4202a82 Compare February 14, 2026 14:11

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.3.14~~ chore(deps): update dependency @biomejs/biome to v2.3.15 Feb 14, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 4202a82 to 03a6fc5 Compare February 18, 2026 19:33

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.3.15~~ chore(deps): update dependency @biomejs/biome to v2.4.0 Feb 18, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 03a6fc5 to 475a347 Compare February 19, 2026 18:13

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.0~~ chore(deps): update dependency @biomejs/biome to v2.4.1 Feb 19, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 475a347 to 62c11ac Compare February 20, 2026 02:15

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.1~~ chore(deps): update dependency @biomejs/biome to v2.4.2 Feb 20, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 62c11ac to d07c34c Compare February 22, 2026 20:44

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.2~~ chore(deps): update dependency @biomejs/biome to v2.4.3 Feb 22, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from d07c34c to 528da3b Compare February 23, 2026 21:53

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.3~~ chore(deps): update dependency @biomejs/biome to v2.4.4 Feb 23, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 528da3b to fd53611 Compare March 5, 2026 20:43

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.4~~ chore(deps): update dependency @biomejs/biome to v2.4.5 Mar 5, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from fd53611 to 34dc7be Compare March 8, 2026 16:38

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.5~~ chore(deps): update dependency @biomejs/biome to v2.4.6 Mar 8, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 34dc7be to eed2f3d Compare March 16, 2026 21:22

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.6~~ chore(deps): update dependency @biomejs/biome to v2.4.7 Mar 16, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from eed2f3d to 1200b60 Compare March 21, 2026 13:55

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.7~~ chore(deps): update dependency @biomejs/biome to v2.4.8 Mar 21, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 1200b60 to 837e8fb Compare March 28, 2026 13:01

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.8~~ chore(deps): update dependency @biomejs/biome to v2.4.9 Mar 28, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from 837e8fb to e382196 Compare April 2, 2026 19:03

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.9~~ chore(deps): update dependency @biomejs/biome to v2.4.10 Apr 2, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from e382196 to cbebb07 Compare April 16, 2026 19:00

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.10~~ chore(deps): update dependency @biomejs/biome to v2.4.11 Apr 16, 2026

chore(deps): update dependency @biomejs/biome to v2.4.12

176b646

renovate Bot force-pushed the renovate/biomejs-biome-2.x branch from cbebb07 to 176b646 Compare April 21, 2026 20:58

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.11~~ chore(deps): update dependency @biomejs/biome to v2.4.12 Apr 21, 2026

Navigation Menu

chore(deps): update dependency @biomejs/biome to v2.4.12 - #22

chore(deps): update dependency @biomejs/biome to v2.4.12#22
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/biomejs-biome-2.x

renovate Bot commented Feb 14, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Feb 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Feb 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.4.12

Patch Changes

v2.4.11

Patch Changes

v2.4.10

Patch Changes

v2.4.9

Patch Changes

v2.4.8

Patch Changes

Configuration

Uh oh!

github-actions Bot commented Feb 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

🎯 Impact Scope Investigation

💡 Recommended Actions

🔗 Reference Links

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Feb 14, 2026 •

edited

Loading

`v2.4.12`

`v2.4.11`

`v2.4.10`

`v2.4.9`

`v2.4.8`

github-actions Bot commented Feb 14, 2026 •

edited

Loading