Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-e799454749
Closed

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-e799454749

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 30, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the dev-dependencies group with 5 updates in the / directory:

Package From To
@biomejs/biome 2.3.11 2.3.13
@openai/codex 0.89.0 0.92.0
@typescript-eslint/parser 8.53.1 8.54.0
eslint-plugin-jsdoc 62.3.1 62.5.0
turbo 2.7.5 2.8.0

Updates @biomejs/biome from 2.3.11 to 2.3.13

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.13

2.3.13

Patch Changes

  • #8815 f924f23 Thanks @​dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

    Now treated valid:

    <div @keydown.arrow-down="handler"></div>
<div @keydown.a="handler"></div>
<div @keydown.b="handler"></div>
<div @keydown.27="foo"></div>

  • #8856 85f81f9 Thanks @​dyc3! - Fixed #8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].

  • #8850 2a190e0 Thanks @​dyc3! - Fixed #8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.

  • #8863 79386e0 Thanks @​dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.

  • #8771 6f56b6e Thanks @​lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #8730

  • #8714 ac3a71f Thanks @​Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

What's Changed

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.13

Patch Changes

  • #8815 f924f23 Thanks @​dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

    Now treated valid:

    <div @keydown.arrow-down="handler"></div>
<div @keydown.a="handler"></div>
<div @keydown.b="handler"></div>
<div @keydown.27="foo"></div>

  • #8856 85f81f9 Thanks @​dyc3! - Fixed #8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].

  • #8850 2a190e0 Thanks @​dyc3! - Fixed #8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.

  • #8863 79386e0 Thanks @​dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.

  • #8771 6f56b6e Thanks @​lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #8730

  • #8714 ac3a71f Thanks @​Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

2.3.12

Patch Changes

  • #8653 047576d Thanks @​dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.

  • #8648 96d09f4 Thanks @​BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

    Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

    For example, the following now triggers this rule:

    <script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>

  • #8832 b08270b Thanks @​Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

... (truncated)

Commits

Updates @openai/codex from 0.89.0 to 0.92.0

Release notes

Sourced from @​openai/codex's releases.

0.92.0

New Features

  • API v2 threads can now inject dynamic tools at startup and route their calls/responses end-to-end through the server and core tool pipeline. (#9539)
  • Added filtering on the thread list in the app server to make large thread sets easier to browse. (#9897)
  • Introduced a thread/unarchive RPC to restore archived rollouts back into active sessions. (#9843)
  • MCP servers can now define OAuth scopes in config.toml, reducing the need to pass --scopes on each login. (#9647)
  • Multi-agent collaboration is more capable and safer, with an explorer role, better collab event mapping, and max-depth guardrails. (#9817, #9818, #9918, #9899)
  • Cached web_search is now the default client behavior. (#9974)

Bug Fixes

  • Fixed a TUI deadlock/freeze under high streaming throughput by avoiding blocking sends on the main Tokio thread. (#9951)
  • The web_search tool now handles and displays all action types, and shows in-progress activity instead of appearing stuck. (#9960)
  • Reduced high CPU usage in collaboration flows by eliminating busy-waiting on subagents. (#9776)
  • Fixed codex resume --last --json so prompts parse correctly without conflicting argument errors. (#9475)
  • Windows sandbox logging now handles UTF-8 safely, preventing failures when truncating multibyte content. (#8647)
  • request_user_input is now rejected outside Plan/Pair modes to prevent invalid tool calls. (#9955)

Documentation

  • Updated the contribution guidelines for clearer onboarding and workflow expectations. (#9933)
  • Refreshed protocol/MCP docs to reflect thread/unarchive and the updated request_user_input question shape. (#9843, #9890)

Chores

  • Self-update via Homebrew now uses an explicit cask upgrade command to avoid warnings and ambiguity. (#9823)
  • Release packaging now consistently writes the bundle zip to dist/. (#9934)
  • Updated key dependencies in the Rust workspace (including axum, tracing, globset, and tokio-test). (#9880, #9882, #9883, #9884)
  • Aligned feature stage naming with public maturity stages and added clearer warnings for underdevelopment features. (#9929, #9954)

Changelog

Full Changelog: openai/codex@rust-v0.91.0...rust-v0.92.0

... (truncated)

Commits

Updates @typescript-eslint/parser from 8.53.1 to 8.54.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.54.0

8.54.0 (2026-01-26)

🚀 Features

  • eslint-plugin-internal: add prefer-tsutils-methods rule (#11974, #11625)
  • scope-manager: support ScopeManager#addGlobals (#11914)
  • typescript-estree: add shortcut methods to ParserServicesWithTypeInformation (#11965, #11955)

🩹 Fixes

  • eslint-plugin: [no-unused-private-class-members] private destructured class member is defined but used (#11785)
  • eslint-plugin: [no-unnecessary-type-assertion] check both base constraint and actual type for non-null assertions (#11967, #11559)
  • scope-manager: fix catch clause scopes def.name (#11982)
  • scope-manager: prevent misidentification of "use strict" directives (#11995)
  • utils: handle missing FlatESLint and LegacyESLint (#11958)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.54.0 (2026-01-26)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint-plugin-jsdoc from 62.3.1 to 62.5.0

Release notes

Sourced from eslint-plugin-jsdoc's releases.

v62.5.0

62.5.0 (2026-01-29)

Features

  • check-tag-names: add Typedoc include, includeCode, and TSDoc inheritDoc/inheritdoc and label to allowable inline tags; add TSDoc and typedoc tags (925f6e3)
  • require-description-complete-sentence: allow inline inheritDoc, inheritdoc, include, includeCode, label to avoid rule; fixes #1641 (c5a09c8)
  • valid-types: add Typedoc include, includeCode, and TSDoc inheritDoc/inheritdoc and label to allowable inline tags (c078633)

v62.4.1

62.4.1 (2026-01-24)

Bug Fixes

v62.4.0

62.4.0 (2026-01-23)

Features

  • type-formatting: support trailingPunctuationMultilineOnly boolean option; fixes #1636 (#1638) (3907822)
Commits
  • 925f6e3 feat(check-tag-names): add Typedoc include, includeCode, and TSDoc `inh...
  • c078633 feat(valid-types): add Typedoc include, includeCode, and TSDoc `inherit...
  • c5a09c8 feat(require-description-complete-sentence): allow inline inheritDoc, `in...
  • ba0034e fix: update jsdoccomment, devDeps. (#1639)
  • 3907822 feat(type-formatting): support trailingPunctuationMultilineOnly boolean o...
  • See full diff in compare view

Updates turbo from 2.7.5 to 2.8.0

Release notes

Sourced from turbo's releases.

Turborepo v2.8.0

What's Changed

Docs

@​turbo/repository

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.7.6...v2.8.0

Turborepo v2.7.6

What's Changed

Docs

@​turbo/codemod

Changelog

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group across 1 directory w…
9eebe3e 
…ith 5 updates

Bumps the dev-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.11` | `2.3.13` |
| [@openai/codex](https://github.com/openai/codex/tree/HEAD/codex-cli) | `0.89.0` | `0.92.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.53.1` | `8.54.0` |
| [eslint-plugin-jsdoc](https://github.com/gajus/eslint-plugin-jsdoc) | `62.3.1` | `62.5.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.7.5` | `2.8.0` |



Updates `@biomejs/biome` from 2.3.11 to 2.3.13
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.13/packages/@biomejs/biome)

Updates `@openai/codex` from 0.89.0 to 0.92.0
- [Release notes](https://github.com/openai/codex/releases)
- [Commits](https://github.com/openai/codex/commits/rust-v0.92.0/codex-cli)

Updates `@typescript-eslint/parser` from 8.53.1 to 8.54.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.54.0/packages/parser)

Updates `eslint-plugin-jsdoc` from 62.3.1 to 62.5.0
- [Release notes](https://github.com/gajus/eslint-plugin-jsdoc/releases)
- [Commits](gajus/eslint-plugin-jsdoc@v62.3.1...v62.5.0)

Updates `turbo` from 2.7.5 to 2.8.0
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.7.5...v2.8.0)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.13
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@openai/codex"
  dependency-version: 0.92.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.54.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-jsdoc
  dependency-version: 62.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 30, 2026
@coderabbitai

coderabbitai Bot commented Jan 30, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

  • 🔍 Trigger a full review

Comment @coderabbitai help to get the list of available commands and usage tips.

@dependabot @github

dependabot Bot commented on behalf of github Feb 6, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Feb 6, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-e799454749 branch February 6, 2026 04:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants