Skip to content

deps(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 in the js-patch group across 1 directory#4

Open
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/npm_and_yarn/js-patch-907c66e59e
Open

deps(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 in the js-patch group across 1 directory#4
dependabot[bot] wants to merge 61 commits into
mainfrom
dependabot/npm_and_yarn/js-patch-907c66e59e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Apr 18, 2026

Bumps the js-patch group with 1 update in the / directory: @biomejs/biome.

Updates @biomejs/biome from 2.4.11 to 2.4.12

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.12

2.4.12

Patch Changes

  • #9376 9701a33 Thanks @​dyc3! - Added the nursery/noIdenticalTestTitle lint rule. This rule disallows using the same title for two describe blocks or two test cases at the same nesting level.

    describe("foo", () => {});
    describe("foo", () => {
      // invalid: same title as previous describe block
      test("baz", () => {});
      test("baz", () => {}); // invalid: same title as previous test case
    });
  • #9889 7ae83f2 Thanks @​dyc3! - Improved the diagnostics for useForOf to better explain the problem, why it matters, and how to fix it.

  • #9916 27dd7b1 Thanks @​Jayllyz! - Added a new nursery rule noComponentHookFactories, that disallows defining React components or custom hooks inside other functions.

    For example, the following snippets trigger the rule:

    function createComponent(label) {
      function MyComponent() {
        return <div>{label}</div>;
      }
      return MyComponent;
    }
    function Parent() {
      function Child() {
        return <div />;
      }
      return <Child />;
    }
  • #9980 098f1ff Thanks @​ematipico! - Fixed #9941: Biome now emits a warning diagnostic when a file exceed the files.maxSize limit.

  • #9942 9956f1d Thanks @​dyc3! - Fixed #9918: useConsistentTestIt no longer panics when applying fixes to chained calls such as test.for([])("x", () => {});.

  • #9891 4d9ac51 Thanks @​dyc3! - Improved the noGlobalObjectCalls diagnostic to better explain why calling global objects like Math or JSON is invalid and how to fix it.

  • #9902 3f4d103 Thanks @​ematipico! - Fixed #9901: the command lint --write is now idempotent when it's run against HTML-ish files that contains scripts and styles.

  • #9891 4d9ac51 Thanks @​dyc3! - Improved the noMultiStr diagnostic to explain why escaped multiline strings are discouraged and what to use instead.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.12

Patch Changes

  • #9376 9701a33 Thanks @​dyc3! - Added the nursery/noIdenticalTestTitle lint rule. This rule disallows using the same title for two describe blocks or two test cases at the same nesting level.

    describe("foo", () => {});
    describe("foo", () => {
      // invalid: same title as previous describe block
      test("baz", () => {});
      test("baz", () => {}); // invalid: same title as previous test case
    });
  • #9889 7ae83f2 Thanks @​dyc3! - Improved the diagnostics for useForOf to better explain the problem, why it matters, and how to fix it.

  • #9916 27dd7b1 Thanks @​Jayllyz! - Added a new nursery rule noComponentHookFactories, that disallows defining React components or custom hooks inside other functions.

    For example, the following snippets trigger the rule:

    function createComponent(label) {
      function MyComponent() {
        return <div>{label}</div>;
      }
      return MyComponent;
    }
    function Parent() {
      function Child() {
        return <div />;
      }
      return <Child />;
    }
  • #9980 098f1ff Thanks @​ematipico! - Fixed #9941: Biome now emits a warning diagnostic when a file exceed the files.maxSize limit.

  • #9942 9956f1d Thanks @​dyc3! - Fixed #9918: useConsistentTestIt no longer panics when applying fixes to chained calls such as test.for([])("x", () => {});.

  • #9891 4d9ac51 Thanks @​dyc3! - Improved the noGlobalObjectCalls diagnostic to better explain why calling global objects like Math or JSON is invalid and how to fix it.

  • #9902 3f4d103 Thanks @​ematipico! - Fixed #9901: the command lint --write is now idempotent when it's run against HTML-ish files that contains scripts and styles.

  • #9891 4d9ac51 Thanks @​dyc3! - Improved the noMultiStr diagnostic to explain why escaped multiline strings are discouraged and what to use instead.

  • #9966 322675e Thanks @​siketyan! - Fixed #9113: Biome now parses and formats @media and other conditional blocks correctly inside embedded CSS snippets.

... (truncated)

Commits

…ipeline state management

- Updated UI components to display activity and pipeline status.
- Introduced new hooks and IPC methods for better integration with the atomization process.
- Refactored related code for improved clarity and maintainability.
… backend

- Add wizard_logic.rs: advance_wizard_step, save_wizard_draft, mark_wizard_stale,
  validate_describe_input, validate_project_config, validate_launch_readiness,
  get_default_config, add/update/remove/reorder/get_stories commands
- Add wizard_state.rs: WizardStepState with advance/mark_stale/clear_stale
- Add validation.rs: validate_config, validate_describe, validate_launch_readiness
  with unit tests; ConfigLimits and ConfigDefaultsResponse
- Add stories_crud.rs: full CRUD over prd.json (add, update, remove, reorder, get)
- Add notification_filter.rs: should_emit_verification_failed, build_notification
- Add plan_engine/filters.rs: noise filtering for plan stream output
- Add wizard-logic.ts: IPC bindings for all new Tauri commands
- Remove draft-payload.ts: draft construction moved to save_wizard_draft (Rust)
- Remove plan-stream-filters.ts: filtering moved to plan_engine/filters.rs (Rust)
- Remove wizard store mutations for stories: all writes go through backend
- Replace hardcoded DEFAULT_CONFIG with PLACEHOLDER_CONFIG; config loaded from
  get_default_config on Configure mount
- Wire all new commands in invoke.rs
Standardize linting and formatting across frontend and Rust so Biome, TypeScript, rustfmt, and clippy run clean in strict mode through hooks and CI.
Align rule coverage with artifact and vertical-slice contracts while splitting guidance into focused files to reduce implementation ambiguity.
…g failure

Make AppHandle generic over R: Runtime across the test call chain so
MockRuntime tests compile. Add tauri test feature as dev-dependency,
supply missing StartLoopArgs fields, annotate closure parameter types,
and skip updater artifact creation in CI builds.
Move SystemReadiness to its alphabetically correct position.
…izer prompts

Fix activity, contract, invoke, and plan engine test fixtures so the
full suite passes green. Upgrade atomize templates with richer context
and clearer instructions for chunk, merge, stories, and summarize stages.
…xa token

Introduce a product focused README with GitHub Flavored Markdown, a short
contributing guide and the MIT license so the project is ready for open
source. Ignore OpenSpec generated agent folders and replace the hardcoded
Exa MCP bearer token with an environment variable reference.
Keep the Cursor MCP configuration outside version control so API keys live
only in shell environment variables on the developer machine.
Keep the Cursor agent definitions outside version control because they
are workstation specific and may contain absolute paths.
Prepare the repository for open source release by adding the community
health files that GitHub looks for and by storing the automation that
will finish the lockdown when the repo becomes public.

Adds:
  * SECURITY.md with a reporting policy and scope.
  * .github/CODEOWNERS so future pull requests route to the maintainer.
  * .github/dependabot.yml with weekly updates for cargo, npm, and
    github-actions grouped by patch and minor bumps.
  * .github/ISSUE_TEMPLATE with a config that forces structured forms
    plus bug and feature request templates.
  * scripts/setup-github-security.sh that applies branch rulesets,
    secret scanning, push protection, CodeQL default setup, private
    vulnerability reporting, and SHA pinning for Actions as soon as the
    repository goes public or is upgraded to GitHub Pro.
The initial version of the script required status checks that did not
exist in .github/workflows/test.yml. Point the ruleset at the real job
names so the protection becomes effective as soon as the repository
goes public.

Required checks: typecheck, lint, rust-tests.
The build matrix stays out of the required list because the four
platform combinations are not needed to accept a pull request.
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 18, 2026

Labels

The following labels could not be found: dependencies, javascript. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

GitHub now enforces sha_pinning_required for this repository, so every
uses reference in the workflows needs to point at a full 40 character
commit hash instead of a moving tag. The comments next to each hash
keep the semver visible for humans and let Dependabot bump the pin
when a new release ships.

Also drops required_signatures from the main ruleset script because
the maintainer signs commits through GitHub and does not run local
GPG or SSH signing. The rule can come back once signing keys are set
up and the signing workflow is documented.
@taberoajorge
Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot dependabot Bot changed the title deps(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 in the js-patch group deps(deps-dev): bump @biomejs/biome from 2.4.11 to 2.4.12 in the js-patch group across 1 directory Apr 18, 2026
Bumps the js-patch group with 1 update: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome).

Updates `@biomejs/biome` from 2.4.11 to 2.4.12
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.12/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: js-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/js-patch-907c66e59e branch from 48012fc to ebeea01 Compare April 18, 2026 16:06
@dependabot dependabot Bot requested a review from taberoajorge as a code owner April 18, 2026 16:06
@taberoajorge taberoajorge force-pushed the dependabot/npm_and_yarn/js-patch-907c66e59e branch from ebeea01 to 73a58ba Compare April 20, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant