Skip to content

build(deps-dev): bump the frontend-development-tooling group across 1 directory with 14 updates - #70

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-development-tooling-2a678591ad
Closed

build(deps-dev): bump the frontend-development-tooling group across 1 directory with 14 updates#70
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-development-tooling-2a678591ad

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the frontend-development-tooling group with 14 updates in the /XE-Local-AI-Engine.Client.React directory:

Package From To
@biomejs/biome 2.5.13 2.5.14
@cspell/dict-en_us 4.4.37 4.4.40
@tanstack/react-query-devtools 5.102.8 5.103.1
@tanstack/react-router-devtools 1.167.1 1.167.2
@tanstack/router-plugin 1.168.37 1.168.40
@vitest/coverage-v8 4.1.11 5.0.1
@vitest/ui 4.1.11 5.0.1
cspell 10.3.0 10.3.3
dependency-cruiser 18.2.0 18.4.0
jsdom 30.0.1 30.1.0
knip 6.35.1 6.37.0
react-doctor 0.9.13 0.9.14
unocss 66.10.1 66.10.5
vitest 4.1.11 5.0.1

Updates @biomejs/biome from 2.5.13 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

  • #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
{@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;

  • #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

  • #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

    // Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })

    Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

  • #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

    <!-- Invalid: leftover debugging tag -->
{@debug user}

    The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

  • #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

  • #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

  • #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

  • #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

  • #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

     const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;

  • #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

  • #11790 17d0ff0 Thanks @​ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

Updates @cspell/dict-en_us from 4.4.37 to 4.4.40

Release notes

Sourced from @​cspell/dict-en_us's releases.

@​cspell/dict-en_us: v4.4.40

4.4.40 (2026-09-12)

Updates and Bug Fixes

@​cspell/dict-en_us: v4.4.39

4.4.39 (2026-09-12)

Updates and Bug Fixes

  • be able to track change to the English dictionaries (#5716) (75bd0c3)
  • Revert the changes to the English dictionaries. Too many changes were made that caused downstream issues. The next step is to evaluate what exactly changed before updating the dictionaries. (5e24b94)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​cspell/aoo-mozilla-en-dict bumped to 1.0.13

@​cspell/dict-en_us: v4.4.38

4.4.38 (2026-09-11)

Updates and Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​cspell/aoo-mozilla-en-dict bumped to 1.0.12
Changelog

Sourced from @​cspell/dict-en_us's changelog.

4.4.40 (2026-09-12)

Updates and Bug Fixes

4.4.39 (2026-09-12)

Updates and Bug Fixes

  • be able to track change to the English dictionaries (#5716) (75bd0c3)
  • Revert the changes to the English dictionaries. Too many changes were made that caused downstream issues. The next step is to evaluate what exactly changed before updating the dictionaries. (5e24b94)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​cspell/aoo-mozilla-en-dict bumped to 1.0.13

4.4.38 (2026-09-11)

Updates and Bug Fixes

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​cspell/aoo-mozilla-en-dict bumped to 1.0.12
Commits

Updates @tanstack/react-query-devtools from 5.102.8 to 5.103.1

Changelog

Sourced from @​tanstack/react-query-devtools's changelog.

5.103.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.103.1
    • @​tanstack/react-query@​5.103.1

5.103.0

Patch Changes

  • #11501 9567367 - Declare dependencies used by the published devtools source and type declarations so they resolve with strict package managers. Keep runtime dependencies bundled in the compiled devtools.

    Declare the React types used by React Query Devtools as a peer dependency, compatible with React 18 and 19.

  • Updated dependencies [9567367]:

    • @​tanstack/query-devtools@​5.103.0
    • @​tanstack/react-query@​5.103.0
Commits

Updates @tanstack/react-router-devtools from 1.167.1 to 1.167.2

Changelog

Sourced from @​tanstack/react-router-devtools's changelog.

1.167.2

Patch Changes

Commits

Updates @tanstack/router-plugin from 1.168.37 to 1.168.40

Release notes

Sourced from @​tanstack/router-plugin's releases.

@​tanstack/router-plugin@​1.168.40

Patch Changes

@​tanstack/router-plugin@​1.168.39

Patch Changes

Changelog

Sourced from @​tanstack/router-plugin's changelog.

1.168.40

Patch Changes

1.168.39

Patch Changes

1.168.38

Patch Changes

Commits

Updates @vitest/coverage-v8 from 4.1.11 to 5.0.1

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

Updates @vitest/ui from 4.1.11 to 5.0.1

Release notes

Sourced from @​vitest/ui's releases.

v5.0.1

   🚀 Features

   🐞 Bug Fixes

@dependabot
build(deps-dev): bump the frontend-development-tooling group across 1…
3c236fb 
… directory with 14 updates

Bumps the frontend-development-tooling group with 14 updates in the /XE-Local-AI-Engine.Client.React directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.13` | `2.5.14` |
| [@cspell/dict-en_us](https://github.com/streetsidesoftware/cspell-dicts/tree/HEAD/dictionaries/en_US) | `4.4.37` | `4.4.40` |
| [@tanstack/react-query-devtools](https://github.com/TanStack/query/tree/HEAD/packages/react-query-devtools) | `5.102.8` | `5.103.1` |
| [@tanstack/react-router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/react-router-devtools) | `1.167.1` | `1.167.2` |
| [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin) | `1.168.37` | `1.168.40` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.11` | `5.0.1` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.1.11` | `5.0.1` |
| [cspell](https://github.com/streetsidesoftware/cspell/tree/HEAD/packages/cspell) | `10.3.0` | `10.3.3` |
| [dependency-cruiser](https://github.com/sverweij/dependency-cruiser) | `18.2.0` | `18.4.0` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.0.1` | `30.1.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.35.1` | `6.37.0` |
| [react-doctor](https://github.com/millionco/react-doctor/tree/HEAD/packages/react-doctor) | `0.9.13` | `0.9.14` |
| [unocss](https://github.com/unocss/unocss/tree/HEAD/packages-presets/unocss) | `66.10.1` | `66.10.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.11` | `5.0.1` |



Updates `@biomejs/biome` from 2.5.13 to 2.5.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.14/packages/@biomejs/biome)

Updates `@cspell/dict-en_us` from 4.4.37 to 4.4.40
- [Release notes](https://github.com/streetsidesoftware/cspell-dicts/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell-dicts/blob/main/dictionaries/en_US/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell-dicts/commits/@cspell/dict-en_us@4.4.40/dictionaries/en_US)

Updates `@tanstack/react-query-devtools` from 5.102.8 to 5.103.1
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query-devtools@5.103.1/packages/react-query-devtools)

Updates `@tanstack/react-router-devtools` from 1.167.1 to 1.167.2
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router-devtools/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router-devtools@1.167.2/packages/react-router-devtools)

Updates `@tanstack/router-plugin` from 1.168.37 to 1.168.40
- [Release notes](https://github.com/TanStack/router/releases)
- [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md)
- [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.40/packages/router-plugin)

Updates `@vitest/coverage-v8` from 4.1.11 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/coverage-v8)

Updates `@vitest/ui` from 4.1.11 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/ui)

Updates `cspell` from 10.3.0 to 10.3.3
- [Release notes](https://github.com/streetsidesoftware/cspell/releases)
- [Changelog](https://github.com/streetsidesoftware/cspell/blob/main/packages/cspell/CHANGELOG.md)
- [Commits](https://github.com/streetsidesoftware/cspell/commits/v10.3.3/packages/cspell)

Updates `dependency-cruiser` from 18.2.0 to 18.4.0
- [Release notes](https://github.com/sverweij/dependency-cruiser/releases)
- [Changelog](https://github.com/sverweij/dependency-cruiser/blob/main/CHANGELOG.md)
- [Commits](sverweij/dependency-cruiser@v18.2.0...v18.4.0)

Updates `jsdom` from 30.0.1 to 30.1.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.0.1...v30.1.0)

Updates `knip` from 6.35.1 to 6.37.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.37.0/packages/knip)

Updates `react-doctor` from 0.9.13 to 0.9.14
- [Release notes](https://github.com/millionco/react-doctor/releases)
- [Changelog](https://github.com/millionco/react-doctor/blob/main/packages/react-doctor/CHANGELOG.md)
- [Commits](https://github.com/millionco/react-doctor/commits/react-doctor@0.9.14/packages/react-doctor)

Updates `unocss` from 66.10.1 to 66.10.5
- [Release notes](https://github.com/unocss/unocss/releases)
- [Commits](https://github.com/unocss/unocss/commits/v66.10.5/packages-presets/unocss)

Updates `vitest` from 4.1.11 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: "@cspell/dict-en_us"
  dependency-version: 4.4.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: "@tanstack/react-query-devtools"
  dependency-version: 5.103.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-development-tooling
- dependency-name: "@tanstack/react-router-devtools"
  dependency-version: 1.167.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: "@tanstack/router-plugin"
  dependency-version: 1.168.40
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-development-tooling
- dependency-name: "@vitest/ui"
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-development-tooling
- dependency-name: cspell
  dependency-version: 10.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: dependency-cruiser
  dependency-version: 18.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-development-tooling
- dependency-name: jsdom
  dependency-version: 30.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-development-tooling
- dependency-name: knip
  dependency-version: 6.37.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: frontend-development-tooling
- dependency-name: react-doctor
  dependency-version: 0.9.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: unocss
  dependency-version: 66.10.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: frontend-development-tooling
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: frontend-development-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
@dependabot
dependabot Bot requested a review from w0rldx as a code owner September 28, 2026 04:42
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 28, 2026
w0rldx added a commit that referenced this pull request Sep 28, 2026
@w0rldx
build(deps): absorb Dependabot #64, #68, #69, #70 and fix the license…
3284336 
… inventory

- fix(licenses): regenerate the third-party inventory; the Providers.ProcessSupervision
  consolidation dropped four transitive Microsoft.Extensions.*@10.0.3 entries, which
  turned client-react red on develop and on every open pull request.
- Meziantou.Analyzer 3.0.290 (#68): 3.0.279 widened MA0054 to derived exception types.
  37 sites now embed the caught exception as innerException; three keep a scoped,
  justified suppression (DevelopmentWorkspaceTools and DevelopmentRepositoryBindingService
  deliberately withhold host paths; LlamaServerRuntimeMutationGate's
  ObjectDisposedException has no (objectName, inner) constructor).
- TUnit 1.70.1 (#68) pulls Microsoft.Testing.Platform 2.4.1, which aborts dotnet test
  (exit 134) when {TMPDIR}/{32 hex} exceeds sun_path's 103 bytes. Dev Mode's per-task
  TMPDIR always does on Unix, so a non-isolated Development command now gets
  TESTINGPLATFORM_PIPE_DIRECTORY pointing at a 0700 mkdtemp directory removed after the
  command; isolated and container sandboxes get none.
- Microsoft.Agents.AI 1.22.0 (#64): PR #8375 makes ApprovalResponseBindingChatClient
  default-on and it trusts only approval requests recorded in an AgentSession, so every
  sessionless InvocationRunner resume threw. InvocationAgentFactory.BuildApprovalValidatedAgent
  sets DisableApprovalResponseBinding (ApprovalResponseValidatingAgent enforces binding)
  and is the one construction the approval tests build through.
- Frontend runtime (#69) and tooling (#70) with Vitest 5.0.2 instead of 5.0.1
  (vitest#11298). jsdom held at 30.0.1 (vitest#11336). Supply-chain exceptions:
  why-is-node-running pinned to the provenance-attested 3.2.1; pnpm's
  minimumReleaseAgeExclude entries for vitest 5.0.2 are removable after 2026-10-02.
  rrweb 2.1.6 license override re-pinned at the rrweb@2.1.6 tag commit.
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/XE-Local-AI-Engine.Client.React/develop/frontend-development-tooling-2a678591ad branch September 28, 2026 16:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@w0rldx w0rldx Awaiting requested review from w0rldx w0rldx is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants