chore(deps-dev): Bump the development-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the development-dependencies group with 2 updates in the / directory: @biomejs/biome and tsx.

Updates @biomejs/biome from 2.5.6 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

  type Mapper<T> = () => T;
  declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

• 191d051 ci: release (#11119)
• 9847e68 feat(lint): add noNonScalableViewport rule (#11168)
• e63354c feat(lint): add noExtendNative nursery rule (#11136)
• 2fa0a62 docs: rework CLI (#11134)
• e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
• c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
• See full diff in compare view

Updates tsx from 4.23.1 to 4.23.5

Release notes

Sourced from tsx's releases.

v4.23.5

4.23.5 (2026-08-02)

Bug Fixes

• detect the Node inspector enabled via NODE_OPTIONS (3c1d051)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.4

4.23.4 (2026-08-02)

Bug Fixes

• cli: allow async process.once() signal handlers to finish (#827) (2afc7bb)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.3

4.23.3 (2026-08-02)

Bug Fixes

• preserve listenerCount overload semantics (#823) (b6574d4)

---

This release is also available on:

• npm package (@​latest dist-tag)

v4.23.2

4.23.2 (2026-08-02)

Bug Fixes

• watch: exit with 128 + signal number when interrupted (#820) (0b00bc8)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• c55004d test: remove legacy PTY retry
• e368161 chore(deps): update pty-spawn to 1.1.1
• 8d39496 ci: validate GitHub Actions workflows
• 6fe724e test: clean up timed-out PTY attempts
• e0a0536 ci: skip unused Windows Node cache
• 6d6dd84 ci: remove broken lock automation
• 3c1d051 fix: detect the Node inspector enabled via NODE_OPTIONS
• 40380a4 ci: lock down the release toolchain
• f217b6b ci: restrict releases to public repository
• 2afc7bb fix(cli): allow async process.once() signal handlers to finish (#827)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/@biomejs/biome	2.5.7	Unknown	Unknown
npm/@biomejs/cli-darwin-arm64	2.5.7	Unknown	Unknown
npm/@biomejs/cli-darwin-x64	2.5.7	Unknown	Unknown
npm/@biomejs/cli-linux-arm64	2.5.7	Unknown	Unknown
npm/@biomejs/cli-linux-arm64-musl	2.5.7	Unknown	Unknown
npm/@biomejs/cli-linux-x64	2.5.7	Unknown	Unknown
npm/@biomejs/cli-linux-x64-musl	2.5.7	Unknown	Unknown
npm/@biomejs/cli-win32-arm64	2.5.7	Unknown	Unknown
npm/@biomejs/cli-win32-x64	2.5.7	Unknown	Unknown
npm/tsx	4.23.5	Unknown	Unknown

Scanned Files

• package-lock.json

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.