Skip to content

chore(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the npm group across 1 directory - #2

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-46e95d6caa
Closed

chore(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the npm group across 1 directory#2
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-46e95d6caa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the npm group with 1 update in the / directory: @biomejs/biome.

Updates @biomejs/biome from 2.4.13 to 2.4.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.14

2.4.14

Patch Changes

  • #9393 491b171 Thanks @​dyc3! - Added the nursery rule useTestHooksOnTop in the test domain. The rule flags lifecycle hooks (beforeEach, beforeAll, afterEach, afterAll) that appear after test cases in the same block, enforcing that hooks are defined before any test case.

  • #10157 eefc5ab Thanks @​dyc3! - Fixed #7882: The HTML parser will now emit better diagnostics when it encounters a void element with a closing tag, such as <br></br>. Previously, the parser would emit multiple diagnostics with conflicting advice. Now it emits a single diagnostic that clearly states that void elements should not have closing tags.

  • #10054 0e9f569 Thanks @​minseong0324! - noMisleadingReturnType no longer misses widening from concrete object types, class instances, object literals, tuples, functions, and regular expressions to : object.

    A function annotated : object returning an object literal:

    function f(): object {
      return { retry: true };
    }
  • #10116 53269eb Thanks @​jiwon79! - Fixed #6201: noUselessEscapeInRegex no longer flags an escaped backslash followed by - as a useless escape. Patterns like /[\\-]/ are now considered valid because the second \ is the escaped backslash, not an unnecessary escape of the trailing dash.

  • #10092 33d8543 Thanks @​Conaclos! - Fixed #9097: organizeImports no longer adds a blank line between a never-matched group and a matched group.

    Given the following organizeImports options:

    {
      "groups": [":NODE:", ":BLANK_LINE:", ":PACKAGE:", ":BLANK_LINE:", ":PATH:"]
    }

    The following code...

    // Comment
    import "package";
    import "./file.js";

    ...was organized as:

    +
      // Comment
      import "package";
    +
      import "./file.js";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.14

Patch Changes

  • #9393 491b171 Thanks @​dyc3! - Added the nursery rule useTestHooksOnTop in the test domain. The rule flags lifecycle hooks (beforeEach, beforeAll, afterEach, afterAll) that appear after test cases in the same block, enforcing that hooks are defined before any test case.

  • #10157 eefc5ab Thanks @​dyc3! - Fixed #7882: The HTML parser will now emit better diagnostics when it encounters a void element with a closing tag, such as <br></br>. Previously, the parser would emit multiple diagnostics with conflicting advice. Now it emits a single diagnostic that clearly states that void elements should not have closing tags.

  • #10054 0e9f569 Thanks @​minseong0324! - noMisleadingReturnType no longer misses widening from concrete object types, class instances, object literals, tuples, functions, and regular expressions to : object.

    A function annotated : object returning an object literal:

    function f(): object {
      return { retry: true };
    }
  • #10116 53269eb Thanks @​jiwon79! - Fixed #6201: noUselessEscapeInRegex no longer flags an escaped backslash followed by - as a useless escape. Patterns like /[\\-]/ are now considered valid because the second \ is the escaped backslash, not an unnecessary escape of the trailing dash.

  • #10092 33d8543 Thanks @​Conaclos! - Fixed #9097: organizeImports no longer adds a blank line between a never-matched group and a matched group.

    Given the following organizeImports options:

    {
      "groups": [":NODE:", ":BLANK_LINE:", ":PACKAGE:", ":BLANK_LINE:", ":PATH:"]
    }

    The following code...

    // Comment
    import "package";
    import "./file.js";

    ...was organized as:

    +
      // Comment
      import "package";
    +
      import "./file.js";

    A blank line was added even though the group ':NODE:' doesn't match any imports here. :BLANK_LINE: between never-matched groups and matched groups are now ignored.

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 1 update in the / directory: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome).


Updates `@biomejs/biome` from 2.4.13 to 2.4.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.14/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 2, 2026
@mobileskyfi

Copy link
Copy Markdown
Contributor

Superseded by direct fix on main in 2dcca0f.

That commit takes the same @biomejs/biome 2.4.14 bump, refreshes bun.lock, and also makes the Bun runtime explicit in CI (bun-version: 1.3.13) so the workflow versioning is easier to audit.

Closing this PR to avoid leaving a redundant red branch open.

@mobileskyfi mobileskyfi closed this May 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-46e95d6caa branch May 2, 2026 05:17
mobileskyfi added a commit that referenced this pull request May 5, 2026
… and clarity

---

  Issues worth addressing
  1. S006 has a self-contradiction on the CLI parser — the Proposed defaults table commits to "Hand-written
  argv parsing until at least three real commands exist" but the Open questions section still asks "Should the
   alpha CLI add a framework such as clipanion…?". Either drop the question or mark the default as tentative.
  2. scope: grammar isn't quite consistent with WORKFLOW.md template. WORKFLOW.md specifies extends S###
  (singular). S006 uses extends S002, S003, S004. Either update the template in WORKFLOW.md to permit a
  comma-separated list, or rephrase S006 as extends S002 with the others noted in review_source. Small thing,
  but front-matter values are now meant to be query-able, so it matters more than before.
  3. The "longer --timeout might trigger a different protocol over time" half of answer #2 didn't fully land.
  The new spec text is "reject values above the effective ceiling" — correct for alpha, but the future
  "ceiling exceeded → consider another protocol" idea isn't captured anywhere. Worth a one-liner in
  work/20260504A-typed-core-seams/STATUS.md or in S006's Open questions so it isn't lost.
  4. S007 adds a details URL to every error envelope but doesn't say what happens before that page exists.
  Worth one sentence on the policy (e.g. "details URL is required and may resolve to a generic stub page until
   the per-code page lands") so this doesn't turn into 404 churn the first time the contract is used.
  5. The CDB password disambiguation in S004 is stricter than the answer. Answer #3 allowed --password to
  double as the CDB password if no --cdb-password was given; the new S004 row treats them as fully separate
  settings. Cleaner is probably better — but the answer's intent was "minimize prompts when CDB password
  equals the only password the user has" so it's worth a deliberate yes/no, not silent tightening.
mobileskyfi added a commit that referenced this pull request May 31, 2026
- routeros-errors: split the unknown-path rule so an anchored
  'failure: <object> not found' classifies as command-failed, while
  'no such ...' and bare path-shaped 'not found' stay unknown-path (#4).
- retrieve: the path-existence probe also flattens routeros/unknown-path
  (now produced by mapRouterOsError for native traps) to a single
  validation/unknown-path (#1).
- devices: comment-only edit/set no longer flips the saved-password flag
  (#2) or drops romon-agent (#3); rewrites preserve the prior record's
  field layout instead of forcing the ipAdmin canonical order (#11).
- resolver/target: an explicit well-known native-api port wins over the
  URL scheme, so https + --port 8728 stays plaintext (#8).
- protocols/adapter: REST script execute posts to /execute (baseUrl
  already ends in /rest), fixing the doubled /rest/rest/execute path (#5).
- cli: only treat --help/-h as global when it is the first argument so
  per-command help works; derive command summaries from each command's
  exported metadata (single source of truth) (#7, #9).

Adds regression tests for each fix; updates the adapter test baseUrl to
the realistic /rest form that masked #5.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
mobileskyfi added a commit that referenced this pull request Jul 18, 2026
…, load-error split (#134 review)

Address PR #181 review findings (Copilot, CodeRabbit, Codex):

- Descriptor shape validation before mapping (Codex #1 / CodeRabbit): an
  old/pre-v1 descriptor with no `descriptorVersion` and no `services` now
  raises a typed `quickchr/unsupported` instead of a raw
  `TypeError: Object.entries(undefined)`. Missing `services` is rejected, not
  silently mapped to `{}`, so a provider contract violation surfaces at
  resolve time rather than a later `--via` lookup. Descriptor now crosses the
  optional-dependency boundary as `unknown` until `validateDescriptor()`.

- Per-key `ServiceEndpointMap` + generic `isEndpointAvailable` (Codex #2 /
  Copilot #1): `map.ssh` keeps its `SshServiceEndpoint` type, so narrowing
  preserves the `auth: SshEndpointAuth`/`batchModes` guarantee Phase 4 gates
  `--via ssh`/`transfer --via sftp` on — no cast/`"batchModes" in` probe.

- Load-error split (Copilot #2): only a genuine module-not-found maps to
  `quickchr/package-unavailable`; an installed package that throws on load is
  a real fault → `quickchr/unsupported` preserving the cause.

- Enrich the four `docs/errors/quickchr/*.md` pages with typical trigger and
  remediation (Codex #3 / actionable-errors instruction).

No-alias decisions for the `expandCdbSelection`/`CdbSelection*` rename
(Copilot #3/#4) declined by the maintainer — nothing depends on centrs as a
library. New unit tests cover every added error path.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant