Skip to content

deps: bump the app-dependencies group across 1 directory with 12 updates#127

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app-dependencies-2c2d06f40b
Closed

deps: bump the app-dependencies group across 1 directory with 12 updates#127
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/app-dependencies-2c2d06f40b

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 11, 2026 •
edited
Loading

Bumps the app-dependencies group with 12 updates in the / directory:

Package From To
@biomejs/biome 2.4.8 2.4.16
ultracite 7.3.2 7.8.0
@opentui/core 0.1.107 0.3.0
@opentui/solid 0.1.107 0.3.0
babel-preset-solid 1.9.10 1.9.12
solid-js 1.9.11 1.9.13
@sveltejs/kit 2.55.0 2.61.1
@sveltejs/vite-plugin-svelte 7.0.0 7.1.2
svelte 5.54.1 5.55.10
svelte-check 4.4.5 4.4.8
vite 8.0.1 8.0.14
convex-test 0.0.43 0.0.53

Updates @biomejs/biome from 2.4.8 to 2.4.16

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.16

2.4.16

Patch Changes

  • #10329 ef764d5 Thanks @​Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.

  • #10363 50aa415 Thanks @​dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

    Input:

    <span
  ><!-- 1
--><span>a</span
  ><!-- 2
--><span>b</span
  ><!-- 3
--></span>

    Output:

      <span
	  ><!-- 1
- --> <span>a</span<!-- 2
- --> ><span>b</span><!-- 3
+ --><span>a</span><!-- 2
+ --><span>b</span><!-- 3
  --></span
  >

  • #10465 0c718da Thanks @​dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

  • #10358 05c2617 Thanks @​dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

  • #10300 950247c Thanks @​dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

  • #9786 e71f584 Thanks @​MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

  • #10425 1948b72 Thanks @​sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

  • #10442 001f94f Thanks @​ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

  • #10318 9b1577f Thanks @​dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

  • #10319 2e37709 Thanks @​dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.16

Patch Changes

  • #10329 ef764d5 Thanks @​Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.

  • #10363 50aa415 Thanks @​dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

    Input:

    <span
  ><!-- 1
--><span>a</span
  ><!-- 2
--><span>b</span
  ><!-- 3
--></span>

    Output:

      <span
	  ><!-- 1
- --> <span>a</span<!-- 2
- --> ><span>b</span><!-- 3
+ --><span>a</span><!-- 2
+ --><span>b</span><!-- 3
  --></span
  >

  • #10465 0c718da Thanks @​dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

  • #10358 05c2617 Thanks @​dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

  • #10300 950247c Thanks @​dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

  • #9786 e71f584 Thanks @​MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

  • #10425 1948b72 Thanks @​sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

  • #10442 001f94f Thanks @​ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

  • #10318 9b1577f Thanks @​dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

  • #10319 2e37709 Thanks @​dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

    

    • 






... (truncated)





Commits






Updates ultracite from 7.3.2 to 7.8.0



Release notes

Sourced from ultracite's releases.




ultracite@7.8.0


Minor Changes


    

  • 

    4e2fea0: Add a dedicated tanstack framework preset for Biome, ESLint, and Oxlint. The ESLint preset layers @tanstack/eslint-plugin-query, @tanstack/eslint-plugin-router, and @tanstack/eslint-plugin-start, while the Biome and Oxlint presets relax file-naming conventions for routes/ directories and the generated routeTree.gen.ts. Framework detection now maps @tanstack/react-query, @tanstack/react-router, and @tanstack/react-start to the new tanstack preset.
    

    Two behavior changes for existing consumers: TanStack Query rules now live in the tanstack preset instead of react, so projects that relied on Query rules must opt into tanstack; and TanStack Router projects now resolve to the tanstack preset rather than remix.
    

    • 



Patch Changes


    

  • 

    51a2af0: Recognize .biome.json and .biome.jsonc as valid Biome config files across the CLI. detectLinter, the doctor command, and the Biome config resolver now match the dot-prefixed names alongside biome.json/biome.jsonc, following Biome's documented configuration file resolution order. Closes #700.
    

    • 

  • 

    14b557c: Harden the generated standalone Husky hook by using git add -- "$file" when restaging formatted files. This prevents option-shaped filenames from being interpreted as Git options during the hook.
    

    • 

  • 

    baa3dd0: Add ignorePatterns to the generated oxlint config at the root level so they are actually applied. Oxlint does not merge ignorePatterns through extends (see oxc-project/oxc#10223), so patterns set in the core preset were silently ignored. The generated config now sets ignorePatterns: core.ignorePatterns at the top level, reusing the patterns from the imported core preset.
    

    • 

  • 

    bd27fd4: Add newly supported Oxlint rules from the latest release to the core, React, and Vitest presets:
    

      

    • Core: id-match, no-implicit-globals, no-implied-eval, prefer-arrow-callback, prefer-regex-literals, import/newline-after-import, jsdoc/require-throws-description, jsdoc/require-throws-type, and jsdoc/require-yields-type
      • 

    • React: jsx-a11y/control-has-associated-label, jsx-a11y/no-interactive-element-to-noninteractive-role, jsx-a11y/no-noninteractive-element-interactions, jsx-a11y/no-noninteractive-element-to-interactive-role, react/no-object-type-as-default-prop, and react/no-unstable-nested-components
      • 

    • Vitest: vitest/padding-around-after-all-blocks
      • 

    

    • 

  • 

    14b557c: Reject symlinked generated config targets before writing project files. CLI config writers now route through a shared project-file write guard that checks for symlinks and project-root escapes before mutating files.
    

    • 

  • 

    14b557c: Validate package-manager names before generating agent and editor hook commands. Hook configuration now only uses supported package-manager prefixes, preventing unsafe values from being persisted into later-executed hook commands.
    

    • 

  • 

    14b557c: Reject unsupported package-manager names during ultracite init. Explicit --pm values and detected packageManager metadata are now runtime-validated against the supported package managers before dependency installation, preventing malicious project metadata from selecting an arbitrary executable.
    

    • 



ultracite@7.7.0


Minor Changes


    

  • 

    24b0d27: Wire up the nestjs ESLint preset to actually enforce rules. Previously the preset exported an empty const config = [], meaning users who imported ultracite/eslint/nestjs got nothing. It now layers @darraghor/eslint-plugin-nestjs-typed (22 rules covering NestJS conventions, dependency injection correctness, and class-validator/Swagger usage) using the same dynamic-enable pattern as the other framework presets.
    

    Consumers who already had the empty preset in their config may see new violations on first run.
    

    • 



Patch Changes


    

  • 

    161418a: Add missing Biome stable rules to the core config:
    

      

    • suspicious/noDuplicateDependencies → "error" — flags a dependency listed multiple times in the same group, or across dependencies and devDependencies, in package.json.
      • 

    • suspicious/useDeprecatedDate → "off" — GraphQL-only convention requiring a deletionDate argument on @deprecated; too opinionated for the default preset.
      • 

    

    • 

  • 

    9a2b548: Pin @angular-eslint/eslint-plugin to ^21.3.1 in packages/cli/package.json. Previously declared as "latest", which defeats lockfile reproducibility and means each bun install could pull a newer version than what was tested at publish time. The current resolved version (21.3.1) is unchanged.
    

    • 

  • 

    44f6d7f: Align ESLint presets with the oxlint configs (the maintained source of truth). Mostly tightens ESLint where oxlint was stricter; a few documented behavioural exceptions oxlint carries (rule conflicts, bun:test compat) are mirrored back.
    

    core — eslint.mjs now enforces complexity, no-unused-private-class-members, sort-keys, sort-vars, and full prefer-destructuring (object + array). typescript.mjs now enforces no-confusing-void-expression, no-misused-promises, prefer-readonly, strict-boolean-expressions, and sets return-await: ["error", "always"]. import.mjs now sets consistent-type-specifier-style: ["error", "prefer-top-level"].
    

    next — added next-env.d.ts override that disables import-x/no-unassigned-import on the generated file.
    

    remix — added routeTree.gen.ts override that disables unicorn/filename-case and unicorn/no-abusive-eslint-disable on the generated file.
    

    • 






... (truncated)





Commits

    

  • 02e79d9 Version Packages (#705)
    • 

  • 37210dd Revert "fix: move mockFs to module scope for unicorn/consistent-function-scop...
    • 

  • cc16ca2 fix: move mockFs to module scope for unicorn/consistent-function-scoping (#708)
    • 

  • bd27fd4 Bump deps
    • 

  • 14b557c Fix Codex code scanning issues
    • 

  • 4e2fea0 Add TanStack framework presets for Biome, ESLint, and Oxlint (#704)
    • 

  • e7af665 Update preload.ts
    • 

  • baa3dd0 fix: add ignorePatterns to generated oxlint config at root level (#703)
    • 

  • 51a2af0 feat: support dot-prefixed Biome config files (#701)
    • 

  • 129e754 Version Packages (#699)
    • 

  • Additional commits viewable in compare view
    • 







Updates @opentui/core from 0.1.107 to 0.3.0



Release notes

Sourced from @​opentui/core's releases.




Release v0.3.0


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.16...v0.3.0


Release v0.2.16


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.15...v0.2.16


Release v0.2.15


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.14...v0.2.15





... (truncated)





Commits






Updates @opentui/solid from 0.1.107 to 0.3.0



Release notes

Sourced from @​opentui/solid's releases.




Release v0.3.0


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.16...v0.3.0


Release v0.2.16


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.15...v0.2.16


Release v0.2.15


What's Changed



New Contributors



Full Changelog: anomalyco/opentui@v0.2.14...v0.2.15





... (truncated)





Commits






Updates babel-preset-solid from 1.9.10 to 1.9.12



Commits






Updates solid-js from 1.9.11 to 1.9.13



Commits






Updates @sveltejs/kit from 2.55.0 to 2.61.1



Release notes

Sourced from @​sveltejs/kit's releases.




@​sveltejs/kit@​2.61.1


Patch Changes


    

  • fix: regression where routes starting and ending with a route group are not matched correctly (#15903)
    • 



@​sveltejs/kit@​2.61.0


Minor Changes


    

  • 

    breaking: the .run() method has been removed from remote queries on both the client and the server. Use await query() directly instead — it now works everywhere (#15779)
    

    • 

  • 

    feat: remote queries can now be awaited in any context (event handlers, module scope, async callbacks), not just inside reactive contexts. The cache is shared across reactive and non-reactive subscribers, so awaiting a query in an event handler will dedupe with components that have already subscribed to the same query. (#15779)
    

    • 

  • 

    feat: live query instances are now themselves async-iterable (#15878)
    

    • 

  • 

    feat: add programmatic submit method to form remote function instances (#15657)
    

    • 

  • 

    feat: pass form remote function instance into enhance callback (#15657)
    

    • 



Patch Changes


    

  • 

    fix: resolve the app payload without using process.env.NODE_ENV (#15852)
    

    • 

  • 

    fix: support exactOptionalPropertyTypes for optional route params (#15825)
    

    • 

  • 

    fix: correctly send true value to the server for 'submit' and 'hidden' form fields (#15858)
    

    • 

  • 

    fix: avoid build warnings about undefined universal hooks (#15895)
    

    • 

  • 

    fix: prefer default error page when failing to decode the URL pathname (#15744)
    

    • 

  • 

    fix: disable link prefetching on slow internet connections (#15885)
    

    • 

  • 

    fix: allow routes ending with optional parameters next to more specific routes (#15861)
    

    • 

  • 

    fix: remove reliance on Content-Length header in deserialize_binary_form, which caused failures when proxies (e.g. Vercel, Azure) strip the header and use chunked transfer encoding (#15796)
    

    • 



@​sveltejs/kit@​2.60.1


Patch Changes





... (truncated)





Changelog

Sourced from @​sveltejs/kit's changelog.




2.61.1


Patch Changes


    

  • fix: regression where routes starting and ending with a route group are not matched correctly (#15903)
    • 



2.61.0


Minor Changes


    

  • 

    breaking: the .run() method has been removed from remote queries on both the client and the server. Use await query() directly instead — it now works everywhere (#15779)
    

    • 

  • 

    feat: remote queries can now be awaited in any context (event handlers, module scope, async callbacks), not just inside reactive contexts. The cache is shared across reactive and non-reactive subscribers, so awaiting a query in an event handler will dedupe with components that have already subscribed to the same query. (#15779)
    

    • 

  • 

    feat: live query instances are now themselves async-iterable (#15878)
    

    • 

  • 

    feat: add programmatic submit method to form remote function instances (#15657)
    

    • 

  • 

    feat: pass form remote function instance into enhance callback (#15657)
    

    • 



Patch Changes


    

  • 

    fix: resolve the app payload without using process.env.NODE_ENV (#15852)
    

    • 

  • 

    fix: support exactOptionalPropertyTypes for optional route params (#15825)
    

    • 

  • 

    fix: correctly send true value to the server for 'submit' and 'hidden' form fields (#15858)
    

    • 

  • 

    fix: avoid build warnings about undefined universal hooks (#15895)
    

    • 

  • 

    fix: prefer default error page when failing to decode the URL pathname (#15744)
    

    • 

  • 

    fix: disable link prefetching on slow internet connections (#15885)
    

    • 

  • 

    fix: allow routes ending with optional parameters next to more specific routes (#15861)
    

    • 

  • 

    fix: remove reliance on Content-Length header in deserialize_binary_form, which caused failures when proxies (e.g. Vercel, Azure) strip the header and use chunked transfer encoding (#15796)
    

    • 






... (truncated)





Commits

    

  • b714743 Version Packages (#15904)
    • 

  • 131fdc7 fix: regression where routes starting and ending with a route group are not f...
    • 

  • 4f961ab Version Packages (#15853)
    • 

  • 1817da0 fix: support exactOptionalPropertyTypes for optional route params (#15825)
    • 

  • 8feb2af chore: dedupe replacer code (#15877)
    • 

  • 95ca921 fix: remove Content-Length dependency in binary form deserialization (#15796)
    • 

  • e75024c feat: LiveQuery self-iterability (#15878)
    • 

  • 0cc67d9 fix: avoid build warnings about undefined hooks on Windows (#15895)
    • 

  • 1949057 chore(prefetch): disable link prefetching on slow internet connections (#15885)
    • 

  • 69b5787 fix: prefer the default error page when failing to decode the URL pathname (#...
    • 

  • Additional commits viewable in compare view
    • 







Updates @sveltejs/vite-plugin-svelte from 7.0.0 to 7.1.2



Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.




@​sveltejs/vite-plugin-svelte@​7.1.2


Patch Changes


    

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)
    • 



@​sveltejs/vite-plugin-svelte@​7.1.1


Patch Changes


    

  • 

    fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)
    

    • 

  • 

    fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)
    

    • 



@​sveltejs/vite-plugin-svelte@​7.1.0


Minor Changes


    

  • feat: enable optimizer for server environments during dev (#1328)
    • 








Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.




7.1.2


Patch Changes


    

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)
    • 



7.1.1


Patch Changes


    

  • 

    fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)
    

    • 

  • 

    fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)
    

    • 



7.1.0


Minor Changes


    

  • feat: enable optimizer for server environments during dev (#1328)
    • 








Commits






Updates svelte from 5.54.1 to 5.55.10



Release notes

Sourced from svelte's releases.




svelte@5.55.10


Patch Changes


    

  • 

    fix: unlink errored and otherwise finished batch (#18264)
    

    • 

  • 

    perf: walk composedPath() directly in delegated event propagation (#18268)
    

    • 

  • 

    fix: transfer effects when merging batches (#18254)
    

    • 

  • 

    fix: allow $derived(await ...) in disconnected effect roots (#18273)
    

    • 

  • 

    fix: remove temporary raw-text hydration markers (#18269)
    

    • 

  • 

    fix: propagate async @const blockers through closure references so template expressions like {(() => host)()} correctly wait for the awaited value (#18309)
    

    • 

  • 

    fix: properly unlink batches (#18298)
    

    • 

  • 

    fix: settle discarded batch (#18290)
    

    • 

  • 

    fix: declare let: directives before {@const} declarations on slotted elements (#18271)
    

    • 

  • 

    fix: resume outro-ed branches if they were kept around (#18291)
    

    • 

  • 

    fix: avoid waterfall-warning when async resolves to same value (#18297)
    

    • 

  • 

    fix: correctly coordinate component-level effects inside async blocks (#18260)
    

    • 

  • 

    fix: make unnecessary commit work less likely (#18263)
    

    • 

  • 

    chore: add tag name to a11y_click_events_have_key_events warning (#18272)
    

    • 

  • 

    fix: catch rejected promises while merging/committing (#18266)
    

    • 



svelte@5.55.9


Patch Changes


    

  • 

    fix: don't unset batch when calling {#await ...} promise (#18243)
    

    • 

  • 

    fix: promise-ify {#await await ...} expressions on the server and correctly hydrate them on the client (#18243)
    

    • 

  • 

    fix: deduplicate dependencies that are added outside the init/update cycle (#18243)
    

    • 

  • 

    fix: avoid false-positive batch invariant error (#18246)
    

    • 

  • 

    fix: inline primitive constants in attribute values during SSR (#18232)
    

    • 



svelte@5.55.8


Patch Changes


    

  • fix(print): handle svelte:body and fix keyframe percentage double-printing (#18234)
    • 






... (truncated)





Changelog

Sourced from svelte's changelog.




5.55.10


Patch Changes


    

  • 

    fix: unlink errored and otherwise finished batch (#18264)
    

    • 

  • 

    perf: walk composedPath() directly in delegated event propagation (#18268)
    

    • 

  • 

    fix: transfer effects when merging batches (#18254)
    

    • 

  • 

    fix: allow $derived(await ...) in disconnected effect roots (#18273)
    

    • 

  • 

    fix: remove temporary raw-text hydration markers (#18269)
    

    • 

  • 

    fix: propagate async @const blockers through closure references so template expressions like {(() => host)()} correctly wait for the awaited value (#18309)
    

    • 

  • 

    fix: properly unlink batches (#18298)
    

    • 

  • 

    fix: settle discarded batch (#18290)
    

    • 

  • 

    fix: declare let: directives before {@const} declarations on slotted elements (#18271)
    

    • 

  • 

    fix: resume outro-ed branches if they were kept around (#18291)
    

    • 

  • 

    fix: avoid waterfall-warning when async resolves to same value (#18297)
    

    • 

  • 

    fix: correctly coordinate component-level effects inside async blocks (#18260)
    

    • 

  • 

    fix: make unnecessary commit work less likely (#18263)
    

    • 

  • 

    chore: add tag name to a11y_click_events_have_key_events warning (#18272)
    

    • 

  • 

    fix: catch rejected promises while merging/committing (#18266)
    

    • 



5.55.9


Patch Changes


    

  • 

    fix: don't unset batch when calling {#await ...} promise (#18243)
    

    • 

  • 

    fix: promise-ify {#await await ...} expressions on the server and correctly hydrate them on the client (#18243)
    

    • 

  • 

    fix: deduplicate dependencies that are added outside the init/update cycle (#18243)
    

    • 

  • 

    fix: avoid false-positive batch invariant error (#18246)
    

    • 

  • 

    fix: inline primitive constants in attribute values during SSR (#18232)
    

    • 



5.55.8





... (truncated)





Commits


    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  


  

    

      
          
      

      
            dependabot
  Bot

      

      

      commented

        on behalf of github

        May 11, 2026



      
    


  





      


        



  
    

      
          
Labels


The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.


Please fix the above issues or remove invalid values from dependabot.yml.


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



          added
  the 

  dependencies

  Pull requests that update a dependency file
 label


      May 11, 2026

    

  








      

  
      



  

  @vercel






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        



        

    

  


  

    

      
          
      

      
            vercel
  Bot

      

      

      commented


        May 11, 2026



      
  •

  

    
      

        
          edited
          
        
        
      

    
    
      
  
        
      Loading


  
    
  



    


  





      


        



  
    

      
          
The latest updates on your projects. Learn more about Vercel for GitHub.






Project
Deployment
Actions
Updated (UTC)






cable-intel-web
Ready Ready
Preview, Comment
May 29, 2026 3:58am






Request Review


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  







      

  
        

  

      

  
  

  
          

  

    

      


  

      
        @dependabot
  




      

        
          deps: bump the app-dependencies group across 1 directory with 12 updates
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          3b19209
        
      

    

  

    

      
Bumps the app-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.8` | `2.4.16` |
| [ultracite](https://github.com/haydenbleasel/ultracite) | `7.3.2` | `7.8.0` |
| [@opentui/core](https://github.com/anomalyco/opentui/tree/HEAD/packages/core) | `0.1.107` | `0.3.0` |
| [@opentui/solid](https://github.com/anomalyco/opentui/tree/HEAD/packages/solid) | `0.1.107` | `0.3.0` |
| [babel-preset-solid](https://github.com/solidjs/solid) | `1.9.10` | `1.9.12` |
| [solid-js](https://github.com/solidjs/solid) | `1.9.11` | `1.9.13` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.55.0` | `2.61.1` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `7.0.0` | `7.1.2` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.54.1` | `5.55.10` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.5` | `4.4.8` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.1` | `8.0.14` |
| [convex-test](https://github.com/get-convex/convex-test) | `0.0.43` | `0.0.53` |



Updates `@biomejs/biome` from 2.4.8 to 2.4.16
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.16/packages/@biomejs/biome)

Updates `ultracite` from 7.3.2 to 7.8.0
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.3.2...ultracite@7.8.0)

Updates `@opentui/core` from 0.1.107 to 0.3.0
- [Release notes](https://github.com/anomalyco/opentui/releases)
- [Commits](https://github.com/anomalyco/opentui/commits/v0.3.0/packages/core)

Updates `@opentui/solid` from 0.1.107 to 0.3.0
- [Release notes](https://github.com/anomalyco/opentui/releases)
- [Commits](https://github.com/anomalyco/opentui/commits/v0.3.0/packages/solid)

Updates `babel-preset-solid` from 1.9.10 to 1.9.12
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits)

Updates `solid-js` from 1.9.11 to 1.9.13
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits/v1.9.13)

Updates `@sveltejs/kit` from 2.55.0 to 2.61.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.61.1/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 7.0.0 to 7.1.2
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.1.2/packages/vite-plugin-svelte)

Updates `svelte` from 5.54.1 to 5.55.10
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.10/packages/svelte)

Updates `svelte-check` from 4.4.5 to 4.4.8
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.5...svelte-check@4.4.8)

Updates `vite` from 8.0.1 to 8.0.14
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.14/packages/vite)

Updates `convex-test` from 0.0.43 to 0.0.53
- [Changelog](https://github.com/get-convex/convex-test/blob/main/CHANGELOG.md)
- [Commits](get-convex/convex-test@v0.0.43...v0.0.53)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: "@opentui/core"
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: "@opentui/solid"
  dependency-version: 0.2.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.59.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: babel-preset-solid
  dependency-version: 1.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: convex-test
  dependency-version: 0.0.51
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: solid-js
  dependency-version: 1.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: svelte
  dependency-version: 5.55.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: svelte-check
  dependency-version: 4.4.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: ultracite
  dependency-version: 7.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: vite
  dependency-version: 8.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
          

  
  

  
      @dependabot
  dependabot
Bot

        force-pushed
    the
        
      
  dependabot/npm_and_yarn/app-dependencies-2c2d06f40b


    
 branch
    from
    c34df1d    to
    3b19209      
    Compare
  



    May 29, 2026 03:58    
    




  

  







      

  
      



  

  @anand-testcompare






  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        

  
    Collaborator


        

    

  


  

    

      
          
      

      
            anand-testcompare
  

      

      

      commented


        May 29, 2026



      
    


  





      


        



  
    

      
          
Superseded by #130, which carries the legitimate app dependency updates with a refreshed lockfile and excludes the linter bump that caused unrelated formatting churn.


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
            

    







      

  
      



  

  @dependabot


    @github




  



    

      

  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

              
  
      
                Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  


  

    

      
          
      

      
            dependabot
  Bot

      

      

      commented

        on behalf of github

        May 29, 2026



      
    


  





      


        



  
    

      
          
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.


To ignore these dependencies, configure ignore rules in dependabot.yml


      		
    

  





        


            

            
            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












      

  
          

  
  

  
      @anand-testcompare
  anand-testcompare


    
    deleted the
    
      
        dependabot/npm_and_yarn/app-dependencies-2c2d06f40b
    
    branch

    May 29, 2026 04:48    
    













  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews






    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      1 participant
    

    

        
          @anand-testcompare