Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Sep 10, 2025

This PR contains the following updates:

Package Type Update Change OpenSSF
@biomejs/biome (source) devDependencies patch 2.2.3 -> 2.2.4 OpenSSF Scorecard

Release Notes

biomejs/biome (@​biomejs/biome)

v2.2.4

Compare Source

Patch Changes
  • #​7453 aa8cea3 Thanks @​arendjr! - Fixed #​7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

  • #​7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

    In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

  • #​7447 7139aad Thanks @​rriski! - Fixes #​7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

  • #​6710 98cf9af Thanks @​arendjr! - Fixed #​4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

Example
type BagOfPromises = {
  // This is an index signature definition. It declares that instances of type
  // `BagOfPromises` can be indexed using arbitrary strings.
  [property: string]: Promise<void>;
};

let bag: BagOfPromises = {};
// Because `bag.iAmAPromise` is equivalent to `bag["iAmAPromise"]`, this is
// considered an access to the string index, and a Promise is expected.
bag.iAmAPromise;
  • 351bccd Thanks @​ematipico! - Fixed #​7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

  • 351bccd Thanks @​ematipico! - Fixed #​7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

    In the following example, member as previously reported as unused.
    It is no longer reported.

    class TsBioo {
      private member: number;
    
      set_with_name(name: string, value: number) {
        this[name] = value;
      }
    }
  • 351bccd Thanks @​ematipico! - Added the new nursery lint rule noJsxLiterals, which disallows the use of string literals inside JSX.

    The rule catches these cases:

    <>
      <div>test</div> {/* test is invalid */}
      <>test</>
      <div>
        {/* this string is invalid */}
        asdjfl test foo
      </div>
    </>
  • 351bccd Thanks @​ematipico! - Fixed an issue (#​6393) where the useHookAtTopLevel rule reported excessive diagnostics for nested hook calls.

    The rule now reports only the offending top-level call site, not sub-hooks of composite hooks.

    // Before: reported twice (useFoo and useBar).
    function useFoo() {
      return useBar();
    }
    function Component() {
      if (cond) useFoo();
    }
    // After: reported once at the call to useFoo().
  • #​7461 ea585a9 Thanks @​arendjr! - Improved performance of noPrivateImports by eliminating allocations.

    In one repository, the total runtime of Biome with only noPrivateImports enabled went from ~3.2s down to ~1.4s.

  • 351bccd Thanks @​ematipico! - Fixed #​7411. The Biome Language Server had a regression where opening an editor with a file already open wouldn't load the project settings correctly.

  • 351bccd Thanks @​ematipico! - Added the new nursery rule noDuplicateDependencies, which verifies that no dependencies are duplicated between the bundledDependencies, bundleDependencies, dependencies, devDependencies, overrides, optionalDependencies, and peerDependencies sections.

    For example, the following snippets will trigger the rule:

    {
      "dependencies": {
        "foo": ""
      },
      "devDependencies": {
        "foo": ""
      }
    }
    {
      "dependencies": {
        "foo": ""
      },
      "optionalDependencies": {
        "foo": ""
      }
    }
    {
      "dependencies": {
        "foo": ""
      },
      "peerDependencies": {
        "foo": ""
      }
    }
  • 351bccd Thanks @​ematipico! - Fixed #​3824. Now the option CLI --color is correctly applied to logging too.


Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot added the dependencies Dependency updates label Sep 10, 2025
@renovate renovate bot enabled auto-merge (squash) September 10, 2025 22:57
@renovate renovate bot added the dependencies Dependency updates label Sep 10, 2025
@github-actions github-actions bot added qa:running QA workflow is currently running status:approved Pull request has been approved labels Sep 10, 2025
@github-actions
Copy link

📦 Packages

Package NPM Docker
SDK Cli @settlemint/sdk-cli@2.6.2-prd6a8045f
SDK The Graph @settlemint/sdk-thegraph@2.6.2-prd6a8045f
SDK Portal @settlemint/sdk-portal@2.6.2-prd6a8045f
SDK Hasura @settlemint/sdk-hasura@2.6.2-prd6a8045f
SDK JS @settlemint/sdk-js@2.6.2-prd6a8045f
SDK Utils @settlemint/sdk-utils@2.6.2-prd6a8045f
SDK Next @settlemint/sdk-next@2.6.2-prd6a8045f
SDK Minio @settlemint/sdk-minio@2.6.2-prd6a8045f
SDK IPFS @settlemint/sdk-ipfs@2.6.2-prd6a8045f
SDK Blockscout @settlemint/sdk-blockscout@2.6.2-prd6a8045f
SDK MCP @settlemint/sdk-mcp@2.6.2-prd6a8045f
SDK Viem @settlemint/sdk-viem@2.6.2-prd6a8045f
SDK EAS @settlemint/sdk-eas@2.6.2-prd6a8045f

@github-actions github-actions bot added qa:success QA workflow passed successfully status:ready-for-review Pull request is ready for review status:mergeable Pull request is approved, tests pass, and ready to merge and removed qa:running QA workflow is currently running status:ready-for-review Pull request is ready for review status:approved Pull request has been approved labels Sep 10, 2025
@renovate renovate bot merged commit 5935d87 into main Sep 10, 2025
15 checks passed
@renovate renovate bot deleted the renovate/biomejs-biome-2.x branch September 10, 2025 22:59
@github-actions github-actions bot added status:merged Pull request has been merged and removed status:mergeable Pull request is approved, tests pass, and ready to merge labels Sep 10, 2025
robbeverhelst pushed a commit that referenced this pull request Sep 18, 2025
This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [@biomejs/biome](https://biomejs.dev)
([source](https://redirect.github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome))
| devDependencies | patch | [`2.2.3` ->
`2.2.4`](https://renovatebot.com/diffs/npm/@biomejs%2fbiome/2.2.3/2.2.4)
| [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/biomejs/biome/badge)](https://securityscorecards.dev/viewer/?uri=github.com/biomejs/biome)
|

---

<details>
<summary>biomejs/biome (@&#8203;biomejs/biome)</summary>

[`v2.2.4`](https://redirect.github.com/biomejs/biome/blob/HEAD/packages/@&#8203;biomejs/biome/CHANGELOG.md#224)

[Compare
Source](https://redirect.github.com/biomejs/biome/compare/@biomejs/biome@2.2.3...@biomejs/biome@2.2.4)

- [#&#8203;7453](https://redirect.github.com/biomejs/biome/pull/7453)
[`aa8cea3`](https://redirect.github.com/biomejs/biome/commit/aa8cea31af675699e18988fe79242ae5d5215af1)
Thanks [@&#8203;arendjr](https://redirect.github.com/arendjr)! - Fixed
[#&#8203;7242](https://redirect.github.com/biomejs/biome/issues/7242):
Aliases specified in `package.json`'s `imports` section now support
having multiple targets as part of an array.

- [#&#8203;7454](https://redirect.github.com/biomejs/biome/pull/7454)
[`ac17183`](https://redirect.github.com/biomejs/biome/commit/ac171839a31600225e3b759470eaa026746e9cf4)
Thanks [@&#8203;arendjr](https://redirect.github.com/arendjr)! - Greatly
improved performance of `noImportCycles` by eliminating allocations.

In one repository, the total runtime of Biome with only `noImportCycles`
enabled went from \~23s down to \~4s.

- [#&#8203;7447](https://redirect.github.com/biomejs/biome/pull/7447)
[`7139aad`](https://redirect.github.com/biomejs/biome/commit/7139aad75b6e8045be6eb09425fb82eb035fb704)
Thanks [@&#8203;rriski](https://redirect.github.com/rriski)! - Fixes
[#&#8203;7446](https://redirect.github.com/biomejs/biome/issues/7446).
The GritQL `$...` spread metavariable now correctly matches members in
object literals, aligning its behavior with arrays and function calls.

- [#&#8203;6710](https://redirect.github.com/biomejs/biome/pull/6710)
[`98cf9af`](https://redirect.github.com/biomejs/biome/commit/98cf9af0a4e02434983899ce49d92209a6abab02)
Thanks [@&#8203;arendjr](https://redirect.github.com/arendjr)! - Fixed
[#&#8203;4723](https://redirect.github.com/biomejs/biome/issues/7423):
Type inference now recognises *index signatures* and their accesses when
they are being indexed as a string.

```ts
type BagOfPromises = {
  // This is an index signature definition. It declares that instances of type
  // `BagOfPromises` can be indexed using arbitrary strings.
  [property: string]: Promise<void>;
};

let bag: BagOfPromises = {};
// Because `bag.iAmAPromise` is equivalent to `bag["iAmAPromise"]`, this is
// considered an access to the string index, and a Promise is expected.
bag.iAmAPromise;
```

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Fixed
[#&#8203;7212](https://redirect.github.com/biomejs/biome/issues/7212),
now the
[`useOptionalChain`](https://biomejs.dev/linter/rules/use-optional-chain/)
rule recognizes optional chaining using `typeof` (e.g., `typeof foo !==
'undefined' && foo.bar`).

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Fixed
[#&#8203;7323](https://redirect.github.com/biomejs/biome/issues/7323).
[`noUnusedPrivateClassMembers`](https://biomejs.dev/linter/rules/no-unused-private-class-members/)
no longer reports as unused TypeScript `private` members if the rule
encounters a computed access on `this`.

  In the following example, `member` as previously reported as unused.
  It is no longer reported.

  ```ts
  class TsBioo {
    private member: number;

    set_with_name(name: string, value: number) {
      this[name] = value;
    }
  }
  ```

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Added the new nursery lint rule `noJsxLiterals`, which disallows the use
of string literals inside JSX.

  The rule catches these cases:

  ```jsx
  <>
    <div>test</div> {/* test is invalid */}
    <>test</>
    <div>
      {/* this string is invalid */}
      asdjfl test foo
    </div>
  </>
  ```

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Fixed an issue
([#&#8203;6393](https://redirect.github.com/biomejs/biome/issues/6393))
where the
[useHookAtTopLevel](https://biomejs.dev/linter/rules/use-hook-at-top-level/)
rule reported excessive diagnostics for nested hook calls.

The rule now reports only the offending top-level call site, not
sub-hooks of composite hooks.

  ```js
  // Before: reported twice (useFoo and useBar).
  function useFoo() {
    return useBar();
  }
  function Component() {
    if (cond) useFoo();
  }
  // After: reported once at the call to useFoo().
  ```

- [#&#8203;7461](https://redirect.github.com/biomejs/biome/pull/7461)
[`ea585a9`](https://redirect.github.com/biomejs/biome/commit/ea585a9394a4126370b865f565ad43b757e736ab)
Thanks [@&#8203;arendjr](https://redirect.github.com/arendjr)! -
Improved performance of `noPrivateImports` by eliminating allocations.

In one repository, the total runtime of Biome with only
`noPrivateImports` enabled went from \~3.2s down to \~1.4s.

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Fixed
[#&#8203;7411](https://redirect.github.com/biomejs/biome/issues/7411).
The Biome Language Server had a regression where opening an editor with
a file already open wouldn't load the project settings correctly.

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Added the new nursery rule
[`noDuplicateDependencies`](https://next.biomejs.dev/linter/rules/no-duplicate-dependencies/),
which verifies that no dependencies are duplicated between the
`bundledDependencies`, `bundleDependencies`, `dependencies`,
`devDependencies`, `overrides`, `optionalDependencies`, and
`peerDependencies` sections.

  For example, the following snippets will trigger the rule:

  ```json
  {
    "dependencies": {
      "foo": ""
    },
    "devDependencies": {
      "foo": ""
    }
  }
  ```

  ```json
  {
    "dependencies": {
      "foo": ""
    },
    "optionalDependencies": {
      "foo": ""
    }
  }
  ```

  ```json
  {
    "dependencies": {
      "foo": ""
    },
    "peerDependencies": {
      "foo": ""
    }
  }
  ```

-
[`351bccd`](https://redirect.github.com/biomejs/biome/commit/351bccdfe49a6173cb1446ef2a8a9171c8d78c26)
Thanks [@&#8203;ematipico](https://redirect.github.com/ematipico)! -
Fixed
[#&#8203;3824](https://redirect.github.com/biomejs/biome/issues/3824).
Now the option CLI `--color` is correctly applied to logging too.

</details>

---

📅 **Schedule**: Branch creation - At 12:00 AM through 04:59 AM and 10:00
PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only
on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time
(no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/settlemint/sdk).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS45Ny4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjk3LjEwIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates qa:success QA workflow passed successfully status:merged Pull request has been merged

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant