Skip to content

Update all non-major dependencies#521

Merged
paulzakin merged 1 commit into
mainfrom
renovate/all-minor-patch
May 18, 2026
Merged

Update all non-major dependencies#521
paulzakin merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 18, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@biomejs/biome (source) 2.4.142.4.15 age confidence
@jest/globals (source) 30.3.030.4.1 age confidence
@sentry/react (source) 10.51.010.52.0 age confidence
@types/node (source) 24.12.224.12.3 age confidence
firebase (source, changelog) 12.12.112.13.0 age confidence
firebase-admin (source) 13.8.013.9.0 age confidence
graphql 16.13.216.14.0 age confidence
immer 11.1.411.1.8 age confidence
jest (source) 30.3.030.4.2 age confidence
react (source) 19.2.519.2.6 age confidence
react-dom (source) 19.2.519.2.6 age confidence
workbox-build (source) 7.4.07.4.1 age confidence

Release Notes

biomejs/biome (@​biomejs/biome)

v2.4.15

Compare Source

Patch Changes
  • #​9394 ba3480e Thanks @​dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.

  • #​10254 e0a54cc Thanks @​dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

    For example, the following snippet triggers the rule:

    import { nextTick } from "vue";
    
    nextTick(() => {
      updateDom();
    });
  • #​10219 64aee45 Thanks @​dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

    For example, the following snippet triggers the rule:

    <input @&#8203;keyup.13="submit" />
  • #​10195 7b8d4e1 Thanks @​dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

  • #​10238 1110256 Thanks @​dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

  • #​10201 1a08f89 Thanks @​realknove! - Fixed #​10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

  • #​9574 3bd2b6a Thanks @​Conaclos! - Fixed #​9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.

  • #​10205 a704a6c Thanks @​Conaclos! - Fixed #​10185. `organizeImports now errors when it encounters an unknown predefined group.

    The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.

    {
      "assist": {
        "actions": {
          "source": {
            "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
          }
        }
      }
    }
  • #​10052 b565bed Thanks @​minseong0324! - Improved noMisleadingReturnType: it now flags union annotations whose extra variants are never returned, and suggests the narrower type (e.g. string | nullstring).

    These functions are now reported because null and number are included in the return annotations but never returned:

    function getUser(): string | null {
      return "hello";
    } // null is never returned
    function getCode(): string | number {
      return "hello";
    } // number is never returned
  • #​10213 ac30057 Thanks @​dyc3! - Fixed #​9450: HTML and Vue element formatting now preserves child line breaks when an element contains another element child on its own line, instead of collapsing the child element onto the same line.

  • #​10275 9ee6c03 Thanks @​solithcy! - Fixed #​10274: Svelte templates with missing expressions no longer parsed as HtmlBogusElement

  • #​10143 56798a7 Thanks @​minseong0324! - noMisleadingReturnType now detects misleading return type annotations when object literal properties are initialized with as const.

    This function is now reported because the return annotation widens a property initialized with as const:

    function f(): { value: string } {
      return { value: "text" as const };
    }
  • #​10143 56798a7 Thanks @​minseong0324! - noUselessTypeConversion now detects redundant conversions on object literal properties initialized with as const.

    This conversion is now reported because message.value is inferred as a string literal:

    const message = { value: "text" as const };
    String(message.value);
  • #​9807 0ae5840 Thanks @​dyc3! - Added the new nursery rule useThisInClassMethods, based on ESLint's class-methods-use-this.

    The rule now reports instance methods, getters, setters, and function-valued instance fields that do not use this, and biome migrate eslint preserves the supported ignoreMethods, ignoreOverrideMethods, and ignoreClassesWithImplements options.

    Invalid:

    class Foo {
      bar() {
        // does not use `this`, invalid
        console.log("Hello Biome");
      }
    }
  • #​10258 e7b18f7 Thanks @​ematipico! - Improved linter performance by narrowing the query nodes for several lint rules, reducing how often they are evaluated.

  • #​10273 04e22a1 Thanks @​dyc3! - Fixed #​10271: The HTML parser now correctly parses of as text content when in text contexts.

  • #​9838 83f7385 Thanks @​dyc3! - Added the nursery rule noBaseToString, which reports stringification sites that fall back to Object's default "[object Object]" formatting. The rule also supports the ignoredTypeNames option.

  • #​10143 56798a7 Thanks @​minseong0324! - useExhaustiveSwitchCases now checks switch statements over object literal properties initialized with as const.

    This switch is now reported because status.kind is inferred as the string literal "ready" but no case handles it:

    const status = { kind: "ready" as const };
    switch (status.kind) {
    }
  • #​10143 56798a7 Thanks @​minseong0324! - useStringStartsEndsWith now detects string index comparisons on object literal properties initialized with as const.

    This comparison is now reported because message.value is inferred as a string literal:

    const message = { value: "hello" as const };
    message.value[0] === "h";
jestjs/jest (@​jest/globals)

v30.4.1

Compare Source

Features
  • [jest-config, jest-core, jest-runner, jest-schemas, jest-types] Allow custom runner configuration options via tuple format ['runner-path', {options}] (#​16141)
Fixes
  • [jest-runtime] Align CJS-from-ESM default export with Node: module.exports is always the ESM default, __esModule unwrapping is no longer applied (#​16143)

v30.4.0

Compare Source

Features
  • [babel-jest] Support collecting coverage from .mts, .cts (and other) files (#​15994)
  • [jest-circus, jest-cli, jest-config, jest-core, jest-jasmine2, jest-types] Add --collect-tests flag to discover and list tests without executing them (#​16006)
  • [jest-config, jest-runner, jest-worker] Add workerGracefulExitTimeout config option to control how long workers are given to exit before being force-killed (#​15984)
  • [jest-config] Add support for jest.config.mts as a valid configuration file (#​16005)
  • [jest-config, jest-core, jest-reporters, jest-runner] verbose and silent can now be set per-project; the project-level value overrides the global value for that project's tests (#​16133)
  • [@jest/fake-timers] Accept Temporal.Duration in jest.advanceTimersByTime() and jest.advanceTimersByTimeAsync() (#​16128)
  • [@jest/fake-timers] Accept Temporal.Instant and Temporal.ZonedDateTime in jest.setSystemTime() and useFakeTimers({now}) (#​16128)
  • [@jest/fake-timers] Support faking Temporal.Now.* (#​16131)
  • [jest-mock] Add clearMocksOnScope(scope) on ModuleMocker for clearing every mock function exposed on a scope object (#​16088)
  • [jest-resolve] Add canResolveSync() on Resolver so callers can detect when a user-configured resolver only exports an async hook (#​16064)
  • [jest-runtime] Use synchronous evaluate() for ES modules without top-level await on Node versions that support it (v24.9+), and prefer the synchronous transform path when a sync transformer is configured (#​16062)
  • [jest-runtime] Support require() of ES modules on Node v24.9+ (#​16074)
  • [jest-runtime] Validate TC39 import attributes (with { type: 'json' }) on ESM imports (#​16127)
  • [@jest/transform] Add canTransformSync(filename) on ScriptTransformer so callers can pick the sync vs async transform path (#​16062)
  • [jest-util] Add isError helper (#​16076)
  • [pretty-format] Support React 19 (#​16123)
Fixes
  • [expect-utils] Fix toStrictEqual failing on structuredClone results due to cross-realm constructor mismatch (#​15959)
  • [@jest/expect-utils] Prevent toMatchObject/subset matching from throwing when encountering exotic iterables (#​15952)
  • [fake-timers] Convert Date to milliseconds before passing to @sinonjs/fake-timers (#​16029)
  • [jest] Export GlobalConfig and ProjectConfig TypeScript types (#​16132)
  • [jest-circus] Prevent crash when asyncError is undefined for non-Error throws (#​16003)
  • [jest-circus, jest-jasmine2] Include Error.cause in JSON failureMessages output (#​15967)
  • [jest-config] Fix preset path resolution on Windows when the preset uses subpath exports (#​15961)
  • [jest-config] Allow collectCoverage and coverageProvider in project config without a validation warning (#​16132)
  • [jest-config] Project config validator now emits "is not supported in an individual project configuration" instead of "probably a typing mistake" for known global-only options (#​16132)
  • [jest-environment-node] Fix --localstorage-file warning on Node 25+ (#​16086)
  • [jest-reporters] Apply global coverage threshold to unmatched pattern files in addition to glob/path thresholds (#​16137)
  • [jest-reporters, jest-runner, jest-runtime, jest-transform] Fix coverage report not showing correct code coverage when using projects config option (#​16140)
  • [jest-runtime] Resolve expect and @jest/expect from the internal module registry so test-file imports share the same JestAssertionError as the global expect (#​16130)
  • [jest-runtime] Improve CJS-from-ESM interop: __esModule/Babel default unwrap, broader named-export coverage, and shared CJS singleton across importers (#​16050)
  • [jest-runtime] Load .js files with ESM syntax but no "type":"module" marker as native ESM (#​16050)
  • [jest-runtime] Extend the .js-with-ESM-syntax fallback to require() on Node v24.9+ - falls back to require(esm) when the CJS parser rejects ESM syntax (#​16078)
  • [jest-runtime] Fix deadlocks and double-evaluation in concurrent ESM and wasm imports (#​16050)
  • [jest-runtime] Fix error when require() is called after the Jest environment has been torn down (#​15951)
  • [jest-runtime] Fix missing error when import() is called after the Jest environment has been torn down (#​16080)
  • [jest-runtime] Fix virtual unstable_mockModule registrations not respected in ESM (#​16081)
  • [jest-runtime] Apply moduleNameMapper when resolving modules with require.resolve() and the paths option (#​16135)
Chore & Maintenance
  • [@jest/fake-timers] Upgrade @sinonjs/fake-timers (#​16139)
  • [jest-runtime] Use synchronous linkRequests / instantiate for ESM linking on Node v24.9+ (#​16063)
getsentry/sentry-javascript (@​sentry/react)

v10.52.0

Compare Source

Important Changes
  • Beta release of the official Hono Sentry SDK

    This release marks the beta release of the @sentry/hono Sentry SDK. For details on how to use it, check out the
    Sentry Hono SDK docs. Please reach out on
    GitHub if you have any feedback or concerns.

  • feat(browser): Add ingest_settings to v2 log envelope payload (#​20453)

    Inference of user data (e.g. IP address, browser name/version) on log events is now gated behind the sendDefaultPii option. Previously, this data was always inferred by default.

Other Changes
  • docs(hono): Add new docs link and move to BETA release (#​20666)
  • feat(browser): Add ingest_settings to v2 metrics envelope payload (#​20454)
  • feat(browser): Migrate spotlight event processor to ignoreSpans (#​20595)
  • feat(cloudflare): Capture request body via httpServerIntegration (#​20614)
  • feat(cloudflare): Support rpc trace propagation for WorkerEntrypoint (#​20523)
  • feat(cloudflare): Support tracing for queue producer (#​20529)
  • feat(core): Apply request data to segment spans in span streaming (#​20654)
  • feat(core): Migrate Vercel AI event processor to span streaming (#​20608)
  • feat(deno): Add processSegmentSpan to Deno context integration (#​20613)
  • feat(http): Portable node:http client instrumentation (#​20393)
  • feat(nitro): Add unstorage tracing channel instrumentation (#​20615)
  • feat(node-core): Add processSegmentSpan to node context integration (#​20678)
  • feat(node): Use diagnostics_channel for redis >= 5.12.0 (#​20573)
  • feat(node): Vendor ioredis, redis instrumentations (#​20510)
  • feat(replay): Reset replay id from DSC on session expiry/refresh (#​20129)
  • fix: Bump fast-xml-parser to fix vulnerability (#​20644)
  • fix: Bump vite versions to fix vulnerability (#​20646)
  • fix(core): Drain buffers in flush() when there is no transport (#​20207)
  • fix(core): Guard against undefined chained in copyProps (#​20637)
  • fix(deps): Bump rollup-plugin-license to fix lodash vulnerabilities (#​20636)
  • fix(deps): Bump transitive deps for medium security fixes (#​20683)
  • fix(hono): Do not capture 3xx and 4xx errors and add tests (#​20640)
  • fix(nextjs): Skip build modification when SRI is enabled (#​20694)
  • fix(opentelemetry): Respect OTEL_SERVICE_NAME, OTEL_RESOURCE_ATTRIBUTES (#​20509)
Internal Changes
  • chore: Remove bundle-analyzer-scenarios dev packages (#​20680)
  • chore(deps): Bump @​hono/node-server from 1.19.10 to 1.19.13 (#​20117)
  • chore(deps): Bump @​nestjs packages to fix path-to-regexp ReDoS (#​20642)
  • chore(deps): Bump axios from 1.15.0 to 1.15.2 (#​20665)
  • chore(deps): Bump ip-address from 10.1.0 to 10.2.0 (#​20695)
  • chore(deps): Bump simple-git from 3.33.0 to 3.36.0 (#​20696)
  • chore(deps): Bump vulnerable testem version (#​20634)
  • ci(deps): Bump actions/checkout from 4 to 6 (#​20620)
  • ci(deps): Bump actions/create-github-app-token from 2 to 3 (#​20079)
  • ci(deps): Bump denoland/setup-deno from 2.0.3 to 2.0.4 (#​20080)
  • ci(deps): Bump getsentry/craft from 2.24.1 to 2.26.2 (#​20621)
  • feat(deps): Bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#​20457)
  • feat(deps): Bump follow-redirects from 1.15.11 to 1.16.0 (#​20267)
  • feat(deps): Bump hono from 4.12.12 to 4.12.14 (#​20340)
  • fix(tests): Use stable instrumentations api in rr tests (#​20690)
  • ref(tests): Rename streamed http.client span test folders (#​20602)
  • test(browser): Fix browserTracingIntegration unit test (#​20604)
  • test(browser): Fix flaky browser integration test for profiles (#​20587)
  • test(browser): Fix flaky loader test (#​20596)
  • test(browser): Fix flaky loader test (#​20655)
  • test(browser): Make browser profiling test less flaky (#​20664)
  • test(cloudflare): Add e2e test for MCPAgent with DurableObject instrumentation (#​20601)
  • test(cloudflare): Add integration tests for scheduled, D1, and workflow (#​20609)
  • test(cloudflare): Reduce flakiness for cloudflare with sub workers (#​20632)
  • test(cloudflare): Use Node v24 for Cloudflare e2e tests (#​20628)
  • test(deps): Bump Next.js in E2E test apps to fix Server Components DoS (#​20633)
  • test(e2e): Add node-express-streaming E2E test app (#​20684)
  • test(e2e): Add span streaming test app for Cloudflare Workers (#​20681)
  • test(e2e): Add span streaming test app for next 16 (#​20648)
  • test(e2e): Add span streaming test app for React Router 7 SPA (#​20677)
  • test(e2e): Remove remaining npmrc pointing to Verdaccio (#​20611)
  • test(nextjs): Fix flaky node runtime metrics E2E tests (#​20624)
  • test(node): Fix ANR test for flakiness (#​20656)
  • test(node): Fix flaky node cron test (#​20661)
  • test(node): Unflake mongodb test (#​20662)
  • test(react-router): Fix flaky E2E tests (#​20630)
  • test(test-utils): Add MemoryProfiler for heap snapshot testing via CDP (#​20555)

Work in this release was contributed by @​sbs44. Thank you for your contribution!

Bundle size 📦
Path Size
@​sentry/browser 25.68 KB
@​sentry/browser - with treeshaking flags 24.2 KB
@​sentry/browser (incl. Tracing) 43.13 KB
@​sentry/browser (incl. Tracing + Span Streaming) 45.3 KB
@​sentry/browser (incl. Tracing, Profiling) 47.99 KB
@​sentry/browser (incl. Tracing, Replay) 81.67 KB
@​sentry/browser (incl. Tracing, Replay) - with treeshaking flags 71.37 KB
@​sentry/browser (incl. Tracing, Replay with Canvas) 86.25 KB
@​sentry/browser (incl. Tracing, Replay, Feedback) 98.57 KB
@​sentry/browser (incl. Feedback) 42.42 KB
@​sentry/browser (incl. sendFeedback) 30.38 KB
@​sentry/browser (incl. FeedbackAsync) 35.35 KB
@​sentry/browser (incl. Metrics) 26.95 KB
@​sentry/browser (incl. Logs) 27.08 KB
@​sentry/browser (incl. Metrics & Logs) 27.76 KB
@​sentry/react 27.38 KB
@​sentry/react (incl. Tracing) 45.31 KB
@​sentry/vue 30.45 KB
@​sentry/vue (incl. Tracing) 44.94 KB
@​sentry/svelte 25.7 KB
CDN Bundle 28.23 KB
CDN Bundle (incl. Tracing) 45.83 KB
CDN Bundle (incl. Logs, Metrics) 29.62 KB
CDN Bundle (incl. Tracing, Logs, Metrics) 46.91 KB
CDN Bundle (incl. Replay, Logs, Metrics) 67.84 KB
CDN Bundle (incl. Tracing, Replay) 82.15 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) 83.2 KB
CDN Bundle (incl. Tracing, Replay, Feedback) 87.84 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) 88.89 KB
CDN Bundle - uncompressed 82.89 KB
CDN Bundle (incl. Tracing) - uncompressed 137.15 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed 86.99 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed 140.53 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed 208.3 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed 252.48 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed 255.85 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 265.86 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed 269.22 KB
@​sentry/nextjs (client) 47.75 KB
@​sentry/sveltekit (client) 43.6 KB
@​sentry/node-core 59.05 KB
@​sentry/node 161.63 KB
@​sentry/node - without tracing 71.76 KB
@​sentry/aws-serverless 105.11 KB
@​sentry/cloudflare (withSentry) - minified 165.38 KB
@​sentry/cloudflare (withSentry) 417.48 KB
firebase/firebase-js-sdk (firebase)

v12.13.0

Compare Source

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.12.0

Minor Changes
  • ffa39f6 #​9795 - Added LiveSession.resumeSession() to allow resuming a previous LiveSession. Also added contextWindowCompression feature.

  • 86dc0db #​9819 - Added support for ImageConfig (aspect ratio and size).
    Expanded FinishReason values to include all currently available values provided by the models.

  • 345c5f6 #​9458 - AI Logic : Feature : Added support for Grounding with Google Maps.

Patch Changes

@​firebase/data-connect@​0.7.0

Minor Changes
  • 714b41d #​9905 - Hardened the Firebase SQL Connect streaming transport with intelligent reconnection, query de-duplication, and resume optimizations.
Patch Changes

firebase@​12.13.0

Minor Changes
  • ffa39f6 #​9795 - Added LiveSession.resumeSession() to allow resuming a previous LiveSession. Also added contextWindowCompression feature.

  • 714b41d #​9905 - Hardened the Firebase SQL Connect streaming transport with intelligent reconnection, query de-duplication, and resume optimizations.

  • 86dc0db #​9819 - Added support for ImageConfig (aspect ratio and size).
    Expanded FinishReason values to include all currently available values provided by the models.

  • 345c5f6 #​9458 - AI Logic : Feature : Added support for Grounding with Google Maps.

Patch Changes

@​firebase/analytics@​0.10.22

Patch Changes

@​firebase/analytics-compat@​0.2.28

Patch Changes

@​firebase/analytics-interop-types@​0.3.5

Patch Changes

@​firebase/analytics-types@​0.8.4

Patch Changes

@​firebase/app@​0.14.12

Patch Changes

@​firebase/app-check@​0.11.3

Patch Changes

@​firebase/app-check-compat@​0.4.3

Patch Changes

@​firebase/app-check-interop-types@​0.3.4

Patch Changes

@​firebase/app-check-types@​0.5.4

Patch Changes

@​firebase/app-compat@​0.5.12

Patch Changes

@​firebase/app-types@​0.9.5

Patch Changes

@​firebase/auth@​1.13.1

Patch Changes

@​firebase/auth-compat@​0.6.6

Patch Changes

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 6:00am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from paulzakin as a code owner May 18, 2026 04:56
@renovate renovate Bot added the enhancement You want to improve something label May 18, 2026
@renovate renovate Bot enabled auto-merge (squash) May 18, 2026 04:56
@paulzakin paulzakin disabled auto-merge May 18, 2026 13:45
@paulzakin paulzakin merged commit de7c4fa into main May 18, 2026
6 checks passed
@paulzakin paulzakin deleted the renovate/all-minor-patch branch May 18, 2026 13:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement You want to improve something

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant