build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2972 · CoderLine/alphaTab

dependabot · 2026-10-22T10:05:25Z

Bumps the development-dependencies group with 5 updates in the / directory:

Package	From	To
@biomejs/biome	`2.5.14`	`2.5.15`
@types/node	`26.6.2`	`26.6.5`
vite	`8.3.0`	`8.3.4`
@microsoft/api-extractor	`7.59.1`	`7.59.4`
webpack	`5.111.1`	`5.112.0`

Updates @biomejs/biome from 2.5.14 to 2.5.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.15

Patch Changes
#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
function Component({ items = [] }) {
  return items;
}
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
<script>
  export let name;
</script>
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
import { page } from "$app/stores";
#11723 3b429d1 Thanks @m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

0b4c11f ci: release (#11815)
ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
034366d chore: update codspeed logo in readme (#12019)
717db8c feat(lint): add noMisplacedListElements (#11917)
089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
b2b4400 chore: update sponsors (#11973)
ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
1b9479e feat(lint): add useLogicalProperties rule (#10816)
Additional commits viewable in compare view

Updates @types/node from 26.6.2 to 26.6.5

Commits

See full diff in compare view

Updates vite from 8.3.0 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)

build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)

build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)

bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)

client: skip rewriting unchanged adopted styles (#23697) (fa71469)

css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)

deps: update all non-major dependencies (#23648) (8a4c19c)

deps: update rolldown-related dependencies (#23649) (794516d)

dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)

don't treat modules ending with js-like query as js (#23687) (fcb6f12)

html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)

html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)

optimizer: scan deep imports with custom extensions (#23678) (8579189)

remove input option unescaping for now (#23694) (facc2fb)

server: match static aliases on path boundaries (#23643) (b28db28)

watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)

html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)

server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)

server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

v8.3.2

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)

build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)

build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)

bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)

client: skip rewriting unchanged adopted styles (#23697) (fa71469)

css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)

deps: update all non-major dependencies (#23648) (8a4c19c)

deps: update rolldown-related dependencies (#23649) (794516d)

dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)

don't treat modules ending with js-like query as js (#23687) (fcb6f12)

html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)

html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)

optimizer: scan deep imports with custom extensions (#23678) (8579189)

remove input option unescaping for now (#23694) (facc2fb)

server: match static aliases on path boundaries (#23643) (b28db28)

watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

8.3.3 (2026-10-06)

Bug Fixes

deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)

html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)

server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)

server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)

8.3.2 (2026-10-01)

Bug Fixes

build: preload CSS correctly when renderBuiltUrl returns URLs with queries (#23611) (64e0a21)

bundled-dev: serve lazy chunk sourcemaps (#23026) (eb7aa9a)

bundled-dev: serve the rolldown runtime from the installed rolldown (#23568) (bc598a6)

deps: update all non-major dependencies (#23601) (9944fa6)

deps: update rolldown-related dependencies (#23602) (88c1741)

html: resolve percent-encoded srcset urls (#23609) (53f1ce7)

limit size of object and array printing via forwardConsole (#23565) (e64a587)

... (truncated)

Commits

b6c20f6 release: v8.3.4 (#23702)
b28db28 fix(server): match static aliases on path boundaries (#23643)
bc0f21c feat(bundled-dev): support import.meta.hot.acceptExports (#23463)
fa71469 fix(client): skip rewriting unchanged adopted styles (#23697)
2a8c0f0 fix(build): correct preloads when chunkImportMap is enabled with non-root bas...
3a7f2ae fix(html): avoid adding filesystem root to watcher (#23689)
facc2fb fix: remove input option unescaping for now (#23694)
70d56ea fix(dev): a restart requested during a restart used to be dropped (fix #23392...
cf52011 fix(css): resolve imported preprocessors from their file path with lightningc...
fcb6f12 fix: don't treat modules ending with js-like query as js (#23687)
Additional commits viewable in compare view

Updates @microsoft/api-extractor from 7.59.1 to 7.59.4

Changelog

Sourced from @microsoft/api-extractor's changelog.

7.59.4

Tue, 06 Oct 2026 00:04:37 GMT

Version update only

7.59.3

Mon, 28 Sep 2026 20:08:26 GMT

Version update only

7.59.2

Tue, 22 Sep 2026 17:35:41 GMT

Patches

Update the @microsoft/tsdoc dependency to ~0.17.0 and the @microsoft/tsdoc-config dependency to ~0.18.2.

Commits

See full diff in compare view

Updates webpack from 5.111.1 to 5.112.0

Release notes

Sourced from webpack's releases.

v5.112.0

Minor Changes

Apply plugins set on a multi-configuration array to the MultiCompiler. (by @alexander-akait in #22702)

Add optimization.minimize.css.dropOverriddenDeclarations, dropping a declaration a later one overrides where no target is named. (by @alexander-akait in #22175)

Export more plugins under their scope, move eleven loose exports under theirs, deprecate the old, and expose template.DependencyTemplate, module.NullFactory and util.makeSerializable. (by @alexander-akait in #22261)

Let util.makeSerializable take several requests, current one first. (by @alexander-akait in #22340)

Emit the source map scopes field, so a debugger resolves imported ESM bindings by name. (by @alexander-akait in #21999)

Add library.entryExports: "all" to expose the exports of every entry module. (by @alexander-akait in #22235)

Recognize a required const binding assigned to exports as a re-export. (by @hai-x in #22276)

Accept glob patterns in more path, module and file filter options. (by @hai-x in #22422)

Bundle a run of inline <script> tags into one chunk the page can inline. (by @alexander-akait in #22188)

Add module.parser.javascript.topLevelThis for classic-script this semantics. (by @alexander-akait in #22193)

Add module.parser.html.chunkName and a webpackChunkName comment for tags. (by @alexander-akait in #22200)

Add include/exclude version and request filters to shared modules. (by @alexander-akait in #22297)

Keep module side-effect information in ESM output as PURE annotations. (by @alexander-akait in #21789)

Add optimization.splitChunks.dedupDepth to discover chunk intersections. (by @alexander-akait in #22240)

Add optimization.minimizeOptions.json, on by default with futureDefaults. (by @alexander-akait in #22286)

Add SSRManifestPlugin and fix server-rendered CSS collection and adoption. (by @alexander-akait in #21913)

Add an ignore hook to output.copy and keep unfollowed from symlinks. (by @alexander-akait in #22216)

Add optimization.minimize.css.convertApproximateColors. (by @alexander-akait in #22157)

Add XML parsing and SVG/XML minification with data URLs and attribute sorting. (by @alexander-akait in #22269)

Extract CSS/HTML license comments like JS and safely shorten CSS gradients. (by @alexander-akait in #22408)

Resolve an async DefinePlugin.runtimeValue over an async beforeParse hook. (by @alexander-akait in #22210)

Add CSS customMedia/customSelectors minimize options; resolve chained names. (by @alexander-akait in #22360)

Rename the Harmony* names to ESM* and deprecate the old spellings. (by @hai-x in #22283)

Reduce css.syntax/html.syntax to parser, printer, SourceProcessor with one node path. (by @alexander-akait in #22233)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.112.0

Minor Changes

Apply plugins set on a multi-configuration array to the MultiCompiler. (by @alexander-akait in #22702)

Add optimization.minimize.css.dropOverriddenDeclarations, dropping a declaration a later one overrides where no target is named. (by @alexander-akait in #22175)

Export more plugins under their scope, move eleven loose exports under theirs, deprecate the old, and expose template.DependencyTemplate, module.NullFactory and util.makeSerializable. (by @alexander-akait in #22261)

Let util.makeSerializable take several requests, current one first. (by @alexander-akait in #22340)

Emit the source map scopes field, so a debugger resolves imported ESM bindings by name. (by @alexander-akait in #21999)

Add library.entryExports: "all" to expose the exports of every entry module. (by @alexander-akait in #22235)

Recognize a required const binding assigned to exports as a re-export. (by @hai-x in #22276)

Accept glob patterns in more path, module and file filter options. (by @hai-x in #22422)

Bundle a run of inline <script> tags into one chunk the page can inline. (by @alexander-akait in #22188)

Add module.parser.javascript.topLevelThis for classic-script this semantics. (by @alexander-akait in #22193)

Add module.parser.html.chunkName and a webpackChunkName comment for tags. (by @alexander-akait in #22200)

Add include/exclude version and request filters to shared modules. (by @alexander-akait in #22297)

Keep module side-effect information in ESM output as PURE annotations. (by @alexander-akait in #21789)

Add optimization.splitChunks.dedupDepth to discover chunk intersections. (by @alexander-akait in #22240)

Add optimization.minimizeOptions.json, on by default with futureDefaults. (by @alexander-akait in #22286)

Add SSRManifestPlugin and fix server-rendered CSS collection and adoption. (by @alexander-akait in #21913)

Add an ignore hook to output.copy and keep unfollowed from symlinks. (by @alexander-akait in #22216)

Add optimization.minimize.css.convertApproximateColors. (by @alexander-akait in #22157)

Add XML parsing and SVG/XML minification with data URLs and attribute sorting. (by @alexander-akait in #22269)

Extract CSS/HTML license comments like JS and safely shorten CSS gradients. (by @alexander-akait in #22408)

Resolve an async DefinePlugin.runtimeValue over an async beforeParse hook. (by @alexander-akait in #22210)

Add CSS customMedia/customSelectors minimize options; resolve chained names. (by @alexander-akait in #22360)

Rename the Harmony* names to ESM* and deprecate the old spellings. (by @hai-x in #22283)

... (truncated)

Commits

755c49e chore(release): new release (#22170)
35b066f feat(javascript): fold switches, PURE IIFEs, null tests, Babel helpers and pr...
edea0f5 refactor(css,html): give the ASCII helpers one Infra name in both parsers (#2...
916cf37 fix(css): keep a rule nested under a selector opening on a combinator when lo...
2ebe482 ci: pin Chrome and Firefox to the builds puppeteer-core names (#22703)
ed18fa1 fix(css): reach for no newer spelling where a target browser is one the data ...
26d315a refactor: ask the dependency and module kind instead of flags and type string...
3020447 refactor(cache): normalize build dependencies once (#22704)
9b5fab7 fix(deps): bump the dependencies group with 4 updates (#22683)
b46763e feat: apply top-level plugins of a multi-configuration to the MultiCompiler (...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ectory with 5 updates Bumps the development-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.14` | `2.5.15` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.2` | `26.6.5` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.0` | `8.3.4` | | [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.59.1` | `7.59.4` | | [webpack](https://github.com/webpack/webpack) | `5.111.1` | `5.112.0` | Updates `@biomejs/biome` from 2.5.14 to 2.5.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.15/packages/@biomejs/biome) Updates `@types/node` from 26.6.2 to 26.6.5 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `vite` from 8.3.0 to 8.3.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite) Updates `@microsoft/api-extractor` from 7.59.1 to 7.59.4 - [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md) - [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor) Updates `webpack` from 5.111.1 to 5.112.0 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.1...v5.112.0) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.6.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vite dependency-version: 8.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@microsoft/api-extractor" dependency-version: 7.59.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: webpack dependency-version: 5.112.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added area-dependencies Pull requests that update a dependency file platform-javascript Related to the JavaScript version of alphaTab labels Oct 22, 2026

github-actions Bot enabled auto-merge (squash) October 22, 2026 10:05

Navigation Menu

Repository navigation

build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates - #2972

build(deps-dev): bump the development-dependencies group across 1 directory with 5 updates#2972
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/development-dependencies-1066cfcd95

dependabot Bot commented on behalf of github Oct 22, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 22, 2026

Biome CLI v2.5.15

2.5.15

Patch Changes

2.5.15

Patch Changes

v8.3.4

Features

Bug Fixes

Performance Improvements

Code Refactoring

v8.3.3

Bug Fixes

v8.3.2

Bug Fixes

8.3.4 (2026-10-08)

Features

Bug Fixes

Performance Improvements

Code Refactoring

8.3.3 (2026-10-06)

Bug Fixes

8.3.2 (2026-10-01)

Bug Fixes

7.59.4

7.59.3

7.59.2

Patches

v5.112.0

Minor Changes

5.112.0

Minor Changes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants