build(deps): bump the npm group with 4 updates

[dependabot]

Bumps the npm group with 4 updates: remove-markdown, @biomejs/biome, @types/node and fast-check.

Updates remove-markdown from 0.6.4 to 0.7.0

Release notes

Sourced from remove-markdown's releases.

remove-markdown 0.7.0: CommonJS, native ESM, and Deno support

remove-markdown 0.7.0 modernizes how the package can be loaded while preserving the CommonJS API used by existing applications.

The package now supports CommonJS and ES modules in Node.js, native browser ES modules, and Deno 2 through npm compatibility. It also ships module-specific TypeScript declarations and an explicit export map for predictable resolution across runtimes and tooling.

Highlights

• Native ES module support for Node.js and browsers
• Existing CommonJS usage remains supported and behavior-compatible
• Deno 2 support through npm:remove-markdown
• Matching TypeScript declarations for CommonJS and ESM consumers
• Explicit package exports for the root API, established deep imports, declarations, metadata, README, and license
• Browser-aware and Node-aware entry selection
• No runtime dependencies

Usage

CommonJS

Existing CommonJS consumers can continue using the package without changing their imports:

const removeMarkdown = require('remove-markdown');
const plainText = removeMarkdown('# A Markdown heading');
// A Markdown heading

Node.js ES modules

ESM projects can use a native default import:

import removeMarkdown from 'remove-markdown';
const plainText = removeMarkdown('# A Markdown heading');
// A Markdown heading

Browser ES modules

The ESM entry is self-contained, so it can be loaded directly from a CDN that serves JavaScript with the correct MIME type. Pin browser imports to a version you have tested:

<script type="module">
  import removeMarkdown from 'https://unpkg.com/remove-markdown@0.7.0/index.mjs';
const plainText = removeMarkdown('# A Markdown heading');
</script>
</tr></table>

... (truncated)

Changelog

Sourced from remove-markdown's changelog.

[0.7.0] - 2026-08-31

Added

• Added a native ES module entry point while preserving the existing CommonJS API.
• Added Deno 2.x support through the npm package.
• Added module-specific TypeScript declarations and package-level compatibility tests.

Changed

• Added conditional package exports for CommonJS, ES modules, and their matching type declarations.

Fixed

• Made the ES module entry self-contained so it works when loaded directly by browsers and URL-based module loaders without CommonJS interop.

ESM and Deno support was originally proposed in #116 by @​tukkek.

[0.6.3] - 2026-01-14

Added

• New separateLinksAndTexts option to replace inline links with text and URL separated by a custom string (#101 by @​tafel)
  • Example: removeMd('[link](http://example.com)', { separateLinksAndTexts: ': ' }) returns 'link: http://example.com'

[0.6.2] - 2025-05-02

Fixed

• Improved handling of links with square brackets inside them (#93)

[0.6.1] - 2025-05-02

Improved

• Better support for multiline code blocks (#96 by @​johnjiang)

[0.6.0] - 2024-12-16

Added

• htmlTagsToSkip option to preserve specific HTML tags while stripping others (#88)

Fixed

• Horizontal rules regex pattern (#91)

Commits

• cb827f8 chore: prepare 0.7.0 release (#124)
• a780e43 chore: prepare 0.7.0-rc.1 release candidate (#123)
• 1b1485a fix: make ESM entry browser-native (#122)
• 6d6c4af chore: prepare 0.7.0 release candidate (#121)
• d5d204d feat: add dual CommonJS, ESM, and Deno support (#119)
• 390ed3a Bump brace-expansion from 2.1.0 to 2.1.4 (#117)
• 453db38 Bump js-yaml from 4.3.0 to 4.3.1 (#115)
• 16091ef Bump js-yaml from 4.1.1 to 4.3.0 (#114)
• 28f25a5 fix(deps): override serialize-javascript to ^7.0.5 to resolve CVEs (#112)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for remove-markdown since your current version.

Updates @biomejs/biome from 2.5.11 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

• #11790 17d0ff0 Thanks @​ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

• af4365d ci: release (#11711)
• 7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
• 02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
• 64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
• a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
• 1fc17e3 feat: expand useIncludes (#11739)
• 71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
• 9bd70c7 fix: various bug fixes (#11735)
• c7c4e2b fix(analyzer): various bugs (#11720)
• 5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
• Additional commits viewable in compare view

Updates @types/node from 22.20.1 to 22.20.4

Commits

• See full diff in compare view

Updates fast-check from 4.9.0 to 4.10.2

Release notes

Sourced from fast-check's releases.

v4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

Fix fake-timer compatibility in timeout and interrupt plugins

[Code][Diff]

Fixes

• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

New plugin API and deprecations ahead of v5

[Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

• (PR#7225) Bug: Proper ordering between plugins
• (PR#7127) CI: Announce on Bluesky when drafting the release
• (PR#7217) CI: Dedupe packages for pnpm
• (PR#7137) Doc: Release note for 4.9.0

... (truncated)

Changelog

Sourced from fast-check's changelog.

4.10.2

Fix interrupt plugin (throwing) [Code][Diff]

Fixes

• (PR#7333) Bug: Plugin interruptAfterTimeLimit crashes

4.10.1

Fix fake-timer compatibility in timeout and interrupt plugins [Code][Diff]

Fixes

• (PR#7292) Bug: Capture timer globals for timeout plugin
• (PR#7293) Bug: Capture timers for interruptAfterTimeLimit plugin
• (PR#7282) CI: Temporarily disable documentation updates until v5
• (PR#7279) Doc: Release note for 4.10.0

4.10.0

New plugin API and deprecations ahead of v5 [Code][Diff]

Features

• (PR#7216) Introduce a plugin API
• (PR#7221) Refine plugin API
• (PR#7222) Add ability to configure plugins globally
• (PR#7224) Add the beforeEach plugin to hook in life-cycle
• (PR#7227) Create an afterEach plugin
• (PR#7232) Deprecate life-cycle methods
• (PR#7235) Support teardown of beforeEach plugin
• (PR#7228) Add timeout plugin to stop long running predicates
• (PR#7237) Deprecate timeout from parameters
• (PR#7238) Pass a store to plugins
• (PR#7239) Add extra plugin's method called onAllRunsComplete
• (PR#7240) Deprecate reporter and asyncReporter from parameters
• (PR#7229) Add plugin to interrupt after time limit
• (PR#7245) Support failOnInterrupt on the plugin
• (PR#7230) Add plugins to drop runs on already covered cases
• (PR#7259) Add ability to decorate generate via Plugins
• (PR#7231) Add the unbiased plugin to generate without bias
• (PR#7260) Deprecate parameters superseded by plugins
• (PR#7261) Deprecate v5 removals

Fixes

... (truncated)

Commits

• c77afa8 v4.10.2
• 1e80f3a v4.10.2
• 2df3265 🐛 Plugin interruptAfterTimeLimit crashes (#7333)
• e93c6a8 🔖 Update CHANGELOG.md for fast-check@4.10.1 (#7294)
• 15744d0 🐛 Capture timers for interruptAfterTimeLimit plugin (#7293)
• fb2ea50 🐛 Capture timer globals for timeout plugin (#7292)
• 4fba17d 🔖 Update CHANGELOG.md for fast-check@4.10.0, @​fast-check/jest@​2.3.0, @​fast-ch...
• a433d8b ⬆️ Update dependency @​types/node to ^24.13.4 (#7263)
• 8470c46 ⬆️ Update dependency @​microsoft/api-extractor to ^7.59.1 (#7255)
• 5382221 🗑️ Deprecate v5 removals (#7261)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions