📦 deps: Bump the npm-minor group across 1 directory with 6 updates by dependabot[bot] · Pull Request #10 · CodesWhat/sockguard

dependabot · 2026-04-13T19:40:19Z

Bumps the npm-minor group with 6 updates in the / directory:

Package	From	To
@biomejs/biome	`2.4.10`	`2.4.11`
turbo	`2.9.5`	`2.9.6`
lucide-react	`1.7.0`	`1.8.0`
react	`19.2.4`	`19.2.5`
react-dom	`19.2.4`	`19.2.5`
@types/node	`25.5.2`	`25.6.0`

Updates @biomejs/biome from 2.4.10 to 2.4.11

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.11

2.4.11

Patch Changes
#9350 4af4a3a Thanks @dyc3! - Added the new nursery rule useConsistentTestIt in the test domain. The rule enforces consistent use of either it or test for test functions in Jest/Vitest suites, with separate control for top-level tests and tests inside describe blocks.

Invalid:
test("should fly", () => {}); // Top-level test using 'test' flagged, convert to 'it'
describe("pig", () => {
test("should fly", () => {}); // Test inside 'describe' using 'test' flagged, convert to 'it'
});
#9429 a2f3f7e Thanks @ematipico! - Added the new nursery lint rule useExplicitReturnType. It reports TypeScript functions and methods that omit an explicit return type.
function toString(x: any) {
  // rule triggered, it doesn't declare a return type
  return x.toString();
}
#9828 9e40844 Thanks @ematipico! - Fixed #9484: the formatter no longer panics when formatting files that contain graphql tagged template literals combined with parenthesized expressions.

#9886 e7c681e Thanks @ematipico! - Fixed an issue where, occasionally, some bindings and references were not properly tracked, causing false positives from noUnusedVariables and noUndeclaredVariables in Svelte, Vue, and Astro files.

#9760 5b16d18 Thanks @myx0m0p! - Fixed #4093: the noDelete rule no longer triggers for delete process.env.FOO, since delete is the documented way to remove environment variables in Node.js.
#9799 2af8efd Thanks @minseong0324! - Added the rule noMisleadingReturnType. The rule detects when a function's return type annotation is wider than what the implementation actually returns.
// Flagged: `: string` is wider than `"loading" | "idle"`
function getStatus(b: boolean): string {
  if (b) return "loading";
  return "idle";
}
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useFind to better explain the problem, why it matters, and how to fix it.

#9755 bff7bdb Thanks @ematipico! - Improved performance of fix-all operations (--write). Biome is now smarter when it runs lint rules and assist actions. First, it runs only rules that have code fixes, and then runs the rest of the rules.

#8651 aafca2d Thanks @siketyan! - Add a new lint rule useDisposables for JavaScript, which detects disposable objects assigned to variables without using or await using syntax. Disposable objects that implement the Disposable or AsyncDisposable interface are intended to be disposed of after use. Not disposing them can lead to resource or memory leaks, depending on the implementation.

Invalid:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.11

Patch Changes
#9350 4af4a3a Thanks @dyc3! - Added the new nursery rule useConsistentTestIt in the test domain. The rule enforces consistent use of either it or test for test functions in Jest/Vitest suites, with separate control for top-level tests and tests inside describe blocks.

Invalid:
test("should fly", () => {}); // Top-level test using 'test' flagged, convert to 'it'
describe("pig", () => {
test("should fly", () => {}); // Test inside 'describe' using 'test' flagged, convert to 'it'
});
#9429 a2f3f7e Thanks @ematipico! - Added the new nursery lint rule useExplicitReturnType. It reports TypeScript functions and methods that omit an explicit return type.
function toString(x: any) {
  // rule triggered, it doesn't declare a return type
  return x.toString();
}
#9828 9e40844 Thanks @ematipico! - Fixed #9484: the formatter no longer panics when formatting files that contain graphql tagged template literals combined with parenthesized expressions.

#9886 e7c681e Thanks @ematipico! - Fixed an issue where, occasionally, some bindings and references were not properly tracked, causing false positives from noUnusedVariables and noUndeclaredVariables in Svelte, Vue, and Astro files.

#9760 5b16d18 Thanks @myx0m0p! - Fixed #4093: the noDelete rule no longer triggers for delete process.env.FOO, since delete is the documented way to remove environment variables in Node.js.
#9799 2af8efd Thanks @minseong0324! - Added the rule noMisleadingReturnType. The rule detects when a function's return type annotation is wider than what the implementation actually returns.
// Flagged: `: string` is wider than `"loading" | "idle"`
function getStatus(b: boolean): string {
  if (b) return "loading";
  return "idle";
}
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useFind to better explain the problem, why it matters, and how to fix it.

#9755 bff7bdb Thanks @ematipico! - Improved performance of fix-all operations (--write). Biome is now smarter when it runs lint rules and assist actions. First, it runs only rules that have code fixes, and then runs the rest of the rules.
#8651 aafca2d Thanks @siketyan! - Add a new lint rule useDisposables for JavaScript, which detects disposable objects assigned to variables without using or await using syntax. Disposable objects that implement the Disposable or AsyncDisposable interface are intended to be disposed of after use. Not disposing them can lead to resource or memory leaks, depending on the implementation.

Invalid:

... (truncated)

Commits

a2933bf ci: release (#9733)
e8cad58 feat(js_analyze): implement useQwikLoaderLocation (#9809)
2af8efd feat(lint): add nursery rule noMisleadingReturnType (#9799)
a2f3f7e feat(lint): rule useExplicitReturnType (#9429)
aafca2d feat(js/lint): implement rule useDisposables (#8651)
49f00a3 feat(lint): add ternary expression detection to useNullishCoalescing (#9248)
4af4a3a feat(lint/js): add useConsistentTestIt (#9350)
1417c3b feat(lint/js): add noUselessTypeConversion (#9701)
See full diff in compare view

Updates turbo from 2.9.5 to 2.9.6

Release notes

Sourced from turbo's releases.

Turborepo v2.9.6

What's Changed

create-turbo

chore: Update dependencies found in audits by @anthonyshew in vercel/turborepo#12586

Examples

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in vercel/turborepo#12585

Changelog

docs: Add Bun equivalent for updating dependencies by @anthonyshew in vercel/turborepo#12580

fix: Mention turbo.json in concurrency error message by @anthonyshew in vercel/turborepo#12582

fix: Surface actionable message when remote cache is requested but not linked by @anthonyshew in vercel/turborepo#12584

chore: Delete agents app by @anthonyshew in vercel/turborepo#12587

fix: Load custom CA certificates in fast webpki-only HTTP client by @anthonyshew in vercel/turborepo#12591

docs: Remove pre-release badges by @anthonyshew in vercel/turborepo#12592

Full Changelog: vercel/turborepo@v2.9.5...v2.9.6

Turborepo v2.9.6-canary.3

What's Changed

Changelog

chore: Delete agents app by @anthonyshew in vercel/turborepo#12587

fix: Load custom CA certificates in fast webpki-only HTTP client by @anthonyshew in vercel/turborepo#12591

Full Changelog: vercel/turborepo@v2.9.6-canary.2...v2.9.6-canary.3

Turborepo v2.9.6-canary.2

What's Changed

create-turbo

chore: Update dependencies found in audits by @anthonyshew in vercel/turborepo#12586

Examples

fix: Add missing @types/node to with-svelte example apps by @anthonyshew in vercel/turborepo#12585

Changelog

fix: Surface actionable message when remote cache is requested but not linked by @anthonyshew in vercel/turborepo#12584

Full Changelog: vercel/turborepo@v2.9.6-canary.1...v2.9.6-canary.2

Turborepo v2.9.6-canary.1

What's Changed

@turbo/telemetry

fix: Suppress telemetry alert when running on Vercel by @anthonyshew in vercel/turborepo#12576

... (truncated)

Commits

77bca2b publish 2.9.6 to registry
5a8f2e8 release(turborepo): 2.9.6-canary.3 (#12593)
861efa8 docs: Remove pre-release badges (#12592)
28db7d0 fix: Load custom CA certificates in fast webpki-only HTTP client (#12591)
b412177 release(turborepo): 2.9.6-canary.2 (#12588)
9018c65 chore: Delete agents app (#12587)
5d19186 chore: Update dependencies found in audits (#12586)
8338f42 fix: Add missing @types/node to with-svelte example apps (#12585)
219b602 fix: Surface actionable message when remote cache is requested but not linked...
aba98af release(turborepo): 2.9.6-canary.1 (#12583)
Additional commits viewable in compare view

Updates lucide-react from 1.7.0 to 1.8.0

Release notes

Sourced from lucide-react's releases.

Version 1.8.0

What's Changed

docs(packages/angular): add packageDirname for @lucide/angular by @rhutchison in lucide-icons/lucide#4211

chore(icons): Username change knarlix to RajnishKMehta by @RajnishKMehta in lucide-icons/lucide#4208

ci(@lucide/angular): Fix publishing problem by @ericfennis in lucide-icons/lucide#4213

docs: fix broken links in pull_request_template.md (got 404 page) by @whoisBugsbunny in lucide-icons/lucide#4224

fix(lucide-static): add viewBox to sprite symbol elements by @TomaTV in lucide-icons/lucide#4223

docs: Fix link to icon design principles in statement by @whoisBugsbunny in lucide-icons/lucide#4225

feat(docs): add Zephyr Cloud to Hero Backers tier by @karsa-mistmere in lucide-icons/lucide#4226

fix(icons): fixes gap issues in radio-off.svg by @karsa-mistmere in lucide-icons/lucide#4227

fix(icons): renamed text-select to square-dashed-text by @jguddas in lucide-icons/lucide#3943

fix(docs): improve mobile layout of v1 banner by @karsa-mistmere in lucide-icons/lucide#4254

fix(@lucide/svelte): aria-hidden="true" was never set by @blt-r in lucide-icons/lucide#4234

fix(icons): remove ui/ux tag from heart-minus, add delete instead by @karsa-mistmere in lucide-icons/lucide#4266

chore(deps-dev): bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in lucide-icons/lucide#4276

chore(deps): bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in lucide-icons/lucide#4251

chore(deps): bump vite from 5.4.21 to 6.4.2 by @dependabot[bot] in lucide-icons/lucide#4286

feat(docs): use initOnMounted: true for useSessionStorage in CarbonAdOverlay by @karsa-mistmere in lucide-icons/lucide#4275

feat(icons): added bookmark-off icon by @ZeenatLawal in lucide-icons/lucide#4283

New Contributors

@rhutchison made their first contribution in lucide-icons/lucide#4211

@whoisBugsbunny made their first contribution in lucide-icons/lucide#4224

@TomaTV made their first contribution in lucide-icons/lucide#4223

@blt-r made their first contribution in lucide-icons/lucide#4234

@ZeenatLawal made their first contribution in lucide-icons/lucide#4283

Full Changelog: lucide-icons/lucide@1.7.0...1.8.0

Commits

7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
See full diff in compare view

Updates react from 19.2.4 to 19.2.5

Release notes

Sourced from react's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates react-dom from 19.2.4 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

Commits

23f4f9f 19.2.5
See full diff in compare view

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

dependabot · 2026-04-13T19:40:20Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Bumps the npm-minor group with 6 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.10` | `2.4.11` | | [turbo](https://github.com/vercel/turborepo) | `2.9.5` | `2.9.6` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.7.0` | `1.8.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.4` | `19.2.5` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.4` | `19.2.5` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` | Updates `@biomejs/biome` from 2.4.10 to 2.4.11 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.11/packages/@biomejs/biome) Updates `turbo` from 2.9.5 to 2.9.6 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.5...v2.9.6) Updates `lucide-react` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.8.0/packages/lucide-react) Updates `react` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react) Updates `react-dom` from 19.2.4 to 19.2.5 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom) Updates `@types/node` from 25.5.2 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: turbo dependency-version: 2.9.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: lucide-react dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor - dependency-name: react dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: react-dom dependency-version: 19.2.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-04-14T00:49:20Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
sockguard-website	Ready	Preview, Comment	Apr 14, 2026 0:50am

dependabot bot changed the title ~~📦 deps: Bump the npm-minor group with 6 updates~~ 📦 deps: Bump the npm-minor group across 1 directory with 6 updates Apr 14, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/npm-minor-75dd2fc4bc branch from 071c26a to 5b12868 Compare April 14, 2026 00:49

dependabot bot requested a review from biggest-littlest as a code owner April 14, 2026 00:49

vercel bot deployed to Preview April 14, 2026 00:50 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

📦 deps: Bump the npm-minor group across 1 directory with 6 updates#10

📦 deps: Bump the npm-minor group across 1 directory with 6 updates#10
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/npm-minor-75dd2fc4bc

dependabot bot commented on behalf of github Apr 13, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Apr 13, 2026

Uh oh!

vercel bot commented Apr 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Apr 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.4.11

2.4.11

Patch Changes

2.4.11

Patch Changes

Turborepo v2.9.6

What's Changed

create-turbo

Examples

Changelog

Turborepo v2.9.6-canary.3

What's Changed

Changelog

Turborepo v2.9.6-canary.2

What's Changed

create-turbo

Examples

Changelog

Turborepo v2.9.6-canary.1

What's Changed

@​turbo/telemetry

Version 1.8.0

What's Changed

New Contributors

19.2.5 (April 8th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

Uh oh!

dependabot bot commented on behalf of github Apr 13, 2026

Labels

Uh oh!

vercel bot commented Apr 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Apr 13, 2026 •

edited

Loading

`@turbo/telemetry`

vercel bot commented Apr 14, 2026 •

edited

Loading