Skip to content

chore(deps): bump the all-npm group with 7 updates - #15

Merged
guenhter merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/all-npm-a515390177
Jul 28, 2026
Merged

chore(deps): bump the all-npm group with 7 updates#15
guenhter merged 1 commit into
mainfrom
dependabot/npm_and_yarn/main/all-npm-a515390177

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-npm group with 7 updates:

Package From To
js-yaml 4.1.1 5.2.2
@biomejs/biome 2.4.15 2.5.6
@electron-forge/cli 7.11.1 7.11.2
@electron-forge/maker-deb 7.11.1 7.11.2
@electron-forge/maker-squirrel 7.11.1 7.11.2
@electron-forge/maker-zip 7.11.1 7.11.2
electron 42.0.1 43.2.0

Updates js-yaml from 4.1.1 to 5.2.2

Changelog

Sourced from js-yaml's changelog.

[5.2.2] - 2026-07-24

Fixed

  • Quote flow scalars where a colon precedes a flow indicator, #773.

Security

  • Avoid exponential parsing time for nested flow sequence pairs.

[5.2.1] - 2026-07-02

Fixed

  • Add Map support to !!omap (should work when realMapTag used)

Security

  • Remove quadratic complexity from !!omap addItem. Regression from v5 (usually not critical, because YAML11_SCHEMA is not default anymore).

4.3.0, 3.15.0 - 2026-06-27

Security

  • Backported maxTotalMergeKeys option.

[5.2.0] - 2026-06-26

Added

  • Added maxTotalMergeKeys (10000) loader option to limit the total number of keys processed by YAML merge (<<) across one load() / loadAll() call.
  • Added maxAliases (-1) loader option to limit the number of YAML aliases per document.

Removed

  • maxMergeSeqLength replaced with maxTotalMergeKeys for limiting YAML merge processing.

Fixed

  • Round-trip of integers with exponential form (>= 1e21)

[5.1.0] - 2026-06-23

Added

  • Collection tags can finalize an incrementally populated carrier into a different result value.

Changed

  • [breaking] quoteStyle now selects the preferred quote style; use the restored forceQuotes option to force quoting non-key strings.

[5.0.0] - 2026-06-20

Added

... (truncated)

Commits

Updates @biomejs/biome from 2.4.15 to 2.5.6

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.6

2.5.6

Patch Changes

  • #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

  • #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

     .example {
   value: outer(
     1,
     /* comment */
     nested(
-      first,
-      second
-    )
+        first,
+        second
+      )
   );
 }

  • #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

  • #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

  • #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

  • #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

  • #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

  • #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

  • #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

    The following statements are now reported:

    type AsyncCallback = () => Promise<void>;
declare const callback: AsyncCallback;
callback();
[1, 2, 3].map(async (value) => value);

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.6

Patch Changes

  • #11035 0e4b03b Thanks @​ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.

  • #11043 22ec076 Thanks @​denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:

     .example {
   value: outer(
     1,
     /* comment */
     nested(
-      first,
-      second
-    )
+        first,
+        second
+      )
   );
 }

  • #11007 c9acb25 Thanks @​BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

  • #10152 50a9bd8 Thanks @​Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

  • #11105 8ffe2b9 Thanks @​dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

  • #10533 5809875 Thanks @​Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

  • #11040 0abb620 Thanks @​Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

  • #10858 6d18204 Thanks @​ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.

  • #11009 2c36626 Thanks @​ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

    The following statements are now reported:

    type AsyncCallback = () => Promise<void>;
declare const callback: AsyncCallback;
callback();
[1, 2, 3].map(async (value) => value);

  • #10973 9cb044c Thanks @​ematipico! - Fixed false positives in noMisleadingReturnType when generic-constraint, normalization, substitution, or structural return-type comparison cannot complete. The rule now suppresses diagnostics rather than suggesting a return type derived from partial information. For example, this unresolved return type is no longer reported:

... (truncated)

Commits

Updates @electron-forge/cli from 7.11.1 to 7.11.2

Release notes

Sourced from @​electron-forge/cli's releases.

v7.11.2

What's Changed

New Contributors

Full Changelog: electron/forge@v7.11.1...v7.11.2

Commits
  • f2a3ec8 chore: bump version to 7.11.2 (#4262)
  • c57487c build(deps): bump ip-address from 10.0.1 to 10.1.1 (#4246)
  • aa6e75d build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#4261)
  • c6d2614 build(deps): audit clearing (#4243)
  • aacc96d build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 (#4257)
  • 2a8c9ad fix(cli): detect TTY for interactive mode instead of hardcoding true (#4219)
  • 9b4be2d build(deps): bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#4254)
  • 9a6f204 build(deps): bump postcss from 8.5.6 to 8.5.13 (#4253)
  • a59d64c build(deps): bump axios from 1.15.0 to 1.15.2 (#4252)
  • 0c38d76 fix(cli): allow pre-release package manager ranges (#4242)
  • Additional commits viewable in compare view

Updates @electron-forge/maker-deb from 7.11.1 to 7.11.2

Release notes

Sourced from @​electron-forge/maker-deb's releases.

v7.11.2

What's Changed

New Contributors

Full Changelog: electron/forge@v7.11.1...v7.11.2

Commits
  • f2a3ec8 chore: bump version to 7.11.2 (#4262)
  • c57487c build(deps): bump ip-address from 10.0.1 to 10.1.1 (#4246)
  • aa6e75d build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#4261)
  • c6d2614 build(deps): audit clearing (#4243)
  • aacc96d build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 (#4257)
  • 2a8c9ad fix(cli): detect TTY for interactive mode instead of hardcoding true (#4219)
  • 9b4be2d build(deps): bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#4254)
  • 9a6f204 build(deps): bump postcss from 8.5.6 to 8.5.13 (#4253)
  • a59d64c build(deps): bump axios from 1.15.0 to 1.15.2 (#4252)
  • 0c38d76 fix(cli): allow pre-release package manager ranges (#4242)
  • Additional commits viewable in compare view

Updates @electron-forge/maker-squirrel from 7.11.1 to 7.11.2

Release notes

Sourced from @​electron-forge/maker-squirrel's releases.

v7.11.2

What's Changed

New Contributors

Full Changelog: electron/forge@v7.11.1...v7.11.2

Commits
  • f2a3ec8 chore: bump version to 7.11.2 (#4262)
  • c57487c build(deps): bump ip-address from 10.0.1 to 10.1.1 (#4246)
  • aa6e75d build(deps): bump fast-uri from 3.1.0 to 3.1.2 (#4261)
  • c6d2614 build(deps): audit clearing (#4243)
  • aacc96d build(deps): bump actions/setup-node from 6.2.0 to 6.4.0 (#4257)
  • 2a8c9ad fix(cli): detect TTY for interactive mode instead of hardcoding true (#4219)
  • 9b4be2d build(deps): bump @​xmldom/xmldom from 0.8.12 to 0.8.13 (#4254)
  • 9a6f204 build(deps): bump postcss from 8.5.6 to 8.5.13 (#4253)
  • a59d64c build(deps): bump axios from 1.15.0 to 1.15.2 (#4252)
  • 0c38d76 fix(cli): allow pre-release package manager ranges (#4242)
  • Additional commits viewable in compare view

Updates @electron-forge/maker-zip from 7.11.1 to 7.11.2

Release notes

Sourced from @​electron-forge/maker-zip's releases.

v7.11.2

What's Changed

New Contributors

Full Changelog: electron/forge@v7.11.1...v7.11.2

Commits
  • f2a3ec8 chore: bump version to 7.11.2 (#4262)
  • c57487c build(deps): bump ip-address from 10.0.1 to 10.1.1 (#4246)
  • aa6e75d build(deps): bump fast-uri from 3.1.0 to 3.1.2 (Description has been truncated

@dependabot
chore(deps): bump the all-npm group with 7 updates
cadac0e 
Bumps the all-npm group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `5.2.2` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.6` |
| [@electron-forge/cli](https://github.com/electron/forge) | `7.11.1` | `7.11.2` |
| [@electron-forge/maker-deb](https://github.com/electron/forge) | `7.11.1` | `7.11.2` |
| [@electron-forge/maker-squirrel](https://github.com/electron/forge) | `7.11.1` | `7.11.2` |
| [@electron-forge/maker-zip](https://github.com/electron/forge) | `7.11.1` | `7.11.2` |
| [electron](https://github.com/electron/electron) | `42.0.1` | `43.2.0` |


Updates `js-yaml` from 4.1.1 to 5.2.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.1...5.2.2)

Updates `@biomejs/biome` from 2.4.15 to 2.5.6
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.6/packages/@biomejs/biome)

Updates `@electron-forge/cli` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-deb` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-squirrel` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `@electron-forge/maker-zip` from 7.11.1 to 7.11.2
- [Release notes](https://github.com/electron/forge/releases)
- [Changelog](https://github.com/electron/forge/blob/main/CHANGELOG.md)
- [Commits](electron/forge@v7.11.1...v7.11.2)

Updates `electron` from 42.0.1 to 43.2.0
- [Release notes](https://github.com/electron/electron/releases)
- [Commits](electron/electron@v42.0.1...v43.2.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-npm
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm
- dependency-name: "@electron-forge/cli"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@electron-forge/maker-deb"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@electron-forge/maker-squirrel"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: "@electron-forge/maker-zip"
  dependency-version: 7.11.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm
- dependency-name: electron
  dependency-version: 43.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
@guenhter
guenhter merged commit 41ef858 into main Jul 28, 2026
1 check passed
@guenhter
guenhter deleted the dependabot/npm_and_yarn/main/all-npm-a515390177 branch July 28, 2026 17:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@guenhter