chore(deps): update dependency @biomejs/biome to v2.3.8

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.3.7 -> 2.3.8

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.3.8

Compare Source

Patch Changes

• #​8188 4ca088c Thanks @​ematipico! - Fixed #​7390, where Biome couldn't apply the correct configuration passed via --config-path.

  If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

• #​8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

  For example, the following code triggers the rule because the component would render 0:

  const Component = () => {
    const count = 0;
    return <div>{count && <span>Count: {count}</span>}</div>;
  };

• #​8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

  Invalid:

  <div {...props} something="else" {...props} />

• #​8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

• #​8226 3f19b52 Thanks @​dyc3! - Fixed #​8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. <template #foo>.

• #​8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

  Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

• #​8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

  Invalid:

  const foo =
    "Line 1\n\
  Line 2";

  Valid:

  const foo = "Line 1\nLine 2";
  const bar = `Line 1
  Line 2`;

• #​8225 98ca2ae Thanks @​ongyuxing! - Fixed #​7806: Prefer breaking after the assignment operator for conditional types with generic parameters to match Prettier.

  -type True = unknown extends Type<
  -  "many",
  -  "generic",
  -  "parameters",
  -  "one",
  -  "two",
  -  "three"
  ->
  -  ? true
  -  : false;
  +type True =
  +  unknown extends Type<"many", "generic", "parameters", "one", "two", "three">
  +    ? true
  +    : false;

• #​6765 23f7855 Thanks @​emilyinure! - Fixed #​6569: Allow files to export from themselves with noImportCycles.

  This means the following is now allowed:

  // example.js
  export function example() {
    return 1;
  }
  
  // Re-exports all named exports from the current module under a single namespace
  // and then imports the namespace from the current module.
  // Allows for encapsulating functions/variables into a namespace instead
  // of using a static class.
  export * as Example from "./example.js";
  
  import { Example } from "./example.js";

• #​8214 68c052e Thanks @​hirokiokada77! - Added the noEqualsToNull rule, which enforces the use of === and !== for comparison with null instead of == or !=.

  Invalid:

  foo == null;
  foo != null;

  Valid:

  foo === null;
  foo !== null;

• #​8219 793bb9a Thanks @​dyc3! - Fixed #​8190: The HTML parser will now parse Vue event handlers that contain : correctly, e.g. @update:modelValue="onUpdate".

• #​8259 4a9139b Thanks @​hirokiokada77! - Fixed #​8254: The noParameterAssign rule with propertyAssignment: "deny" was incorrectly reporting an error when a function parameter was used on the right-hand side of an assignment to a local variable's property.

  The rule should only flag assignments that modify the parameter binding or its properties (L-value), not the use of its value.

  Valid:

  (input) => {
    const local = { property: 0 };
    local.property = input;
  };

• #​8201 cd2edd7 Thanks @​Netail! - Added the nursery rule noTernary. Disallow ternary operators.

  Invalid:

  const foo = isBar ? baz : qux;

• #​8172 de98933 Thanks @​JeremyMoeglich! - Fixed #​8145: handling of large hex literals, which previously caused both false positives and false negatives.

  This affects noPrecisionLoss and noConstantMathMinMaxClamp.

• #​8210 7b44e9e Thanks @​Netail! - Corrected rule source reference. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

• #​8213 e430555 Thanks @​ruidosujeira! - Fixed #​8209: Recognized formatting capability when either range or on-type formatting is supported, not only full-file formatting. This ensures editors and the language server correctly detect formatting support in files like JSONC.

• #​8202 6f49d95 Thanks @​hirokiokada77! - Fixed #​8079: Properly handle name and value metavariables for JsxAttribute GritQL queries.

  The following biome search command no longer throws an error:

  biome search 'JsxAttribute($name, $value) as $attr where { $name <: "style" }'
  

• #​8276 f7e836f Thanks @​hirokiokada77! - Added the noProto rule, which disallows the use of the __proto__ property for getting or setting the prototype of an object.

  Invalid:

  obj.__proto__ = a;
  const b = obj.__proto__;

  Valid:

  const a = Object.getPrototypeOf(obj);
  Object.setPrototypeOf(obj, b);

---

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​biomejs/​biome@​2.3.7 ⏵ 2.3.8	+1			+1

View full report

[codspeed-hq]

CodSpeed Performance Report

Merging #128 will not alter performance

_{Comparing renovate/biomejs-biome-2.x (9d61fd4) with main (9836d34)¹}

Summary

✅ 158 untouched
⏩ 22 skipped²

Footnotes

1. No successful run was found on main (0e84df6) during the generation of this report, so 9836d34 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩

2. 22 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (0e84df6) to head (9d61fd4).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@            Coverage Diff            @@
##              main      #128   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            3         3           
  Lines          216       216           
  Branches        73        73           
=========================================
  Hits           216       216           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.