chore(deps-dev): bump the dependencies group with 2 updates by dependabot[bot] · Pull Request #18 · frontal-labs/cli

dependabot · 2026-06-13T18:33:01Z

Bumps the dependencies group with 2 updates: @biomejs/biome and ultracite.

Updates @biomejs/biome from 2.4.16 to 2.5.0

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.
/* styles.css — .ghost is never used in any importing file */

... (truncated)

Commits

c0b9832 ci: release (#10499)
995c1ff feat(lint): add useFunctionComponentDefinition rule (#10498)
311c2b2 fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...
04c3f19 fix: docs and readme (#10584)
961f41c refactor(useExportType): improve docs and code (#10569)
78075b7 feat(useExportType): add style option (#10561)
6642895 feat: rule promotion for v2.5 (#10562)
9a5855e feat: noRestrictedDependencies (#10467)
608a62f Merge branch 'main' into chore/merge-main-into-next
0f29b83 feat(linter): implement useIncludes rule (#10516)
Additional commits viewable in compare view

Updates ultracite from 7.8.0 to 7.8.3

Release notes

Sourced from ultracite's releases.

[email protected]

Patch Changes

c863d09: Fix automatic editor extension installation during ultracite init.

The whole command line (e.g. code --install-extension) was passed to spawnSync as the executable name, which always failed with ENOENT and silently fell back to the "install manually" message. The command is now split into the binary and its arguments, so the linter extension actually installs for VS Code-based editors.

6888129: Enable the eslint/no-await-in-loop rule as an error in the core Oxlint preset.

Awaiting inside a loop forces each iteration to run sequentially, which can lead to serious performance issues when the asynchronous operations could otherwise run concurrently. Promoting this rule to an error encourages collecting promises and resolving them together (e.g. with Promise.all) instead of blocking on each one in turn.

62a9b5c: Fix the generated Husky pre-commit hook's error handling and section replacement.

The standalone hook script set set -e and then tried to capture the formatter's exit code, re-stage files, and print a failure message — but a non-zero formatter exit terminated the script immediately, so none of that ever ran. The script now captures the exit code with || FORMAT_EXIT_CODE=$? so files are re-staged and failures are reported with the right exit code.

Re-running ultracite init also deleted everything from the # ultracite marker to the end of the hook, including commands the user added after the ultracite section. The section is now terminated with an explicit # ultracite end marker and updates replace only the section between the markers (legacy sections without an end marker are detected by their closing echo line).

6608ceb: Make the lint-staged integration idempotent and respect dedicated config files.

package.json was always treated as the lint-staged config because the file exists in every project, so ultracite init wrote the lint-staged config into package.json even when a dedicated .lintstagedrc.* or lint-staged.config.* file was present — leaving two conflicting configs. package.json now only counts when it actually has a lint-staged key; otherwise the dedicated config file is updated (or .lintstagedrc.json is created).

Re-running ultracite init also appended another npx ultracite fix entry on every run because the merge concatenates arrays. Updates are now skipped when the existing config already references ultracite.

... (truncated)

Commits

f48ea13 Version Packages (#720)
61ea0a1 Fix write guard error message and validate before creating directories
62a9b5c Fix husky hook error handling and scoped section replacement
c1e651f Point agent logoFile values at existing logo assets
6608ceb Make lint-staged integration idempotent and respect dedicated configs
4e847f7 Forward --skip flag through npm in generated hook commands
c863d09 Fix editor extension auto-install spawn invocation
ecb0d5b Scope Stylelint step to style files in check/fix
6888129 Enable no-await-in-loop
a9d704b Version Packages (#719)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

Bumps the dependencies group with 2 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) and [ultracite](https://github.com/haydenbleasel/ultracite). Updates `@biomejs/biome` from 2.4.16 to 2.5.0 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome) Updates `ultracite` from 7.8.0 to 7.8.3 - [Release notes](https://github.com/haydenbleasel/ultracite/releases) - [Commits](https://github.com/haydenbleasel/ultracite/compare/[email protected]@7.8.3) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ultracite dependency-version: 7.8.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-06-13T18:33:02Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

snyk-io · 2026-06-13T18:33:11Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
🔚	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

greptile-apps · 2026-06-13T18:33:53Z

Greptile Summary

This is a routine Dependabot dependency bump updating two dev dependencies: @biomejs/biome from 2.4.16 to 2.5.0 and ultracite from 7.8.0 to 7.8.3.

@biomejs/biome 2.5.0 is a minor release adding new lint rules (nursery noUndeclaredClasses, noUnusedClasses, promoted rules) and a new concise reporter — no breaking changes expected for existing configs.
ultracite 7.8.3 is a patch release with bug fixes for init command behavior (Husky hook error handling, lint-staged idempotency, editor extension spawning) and a new eslint/no-await-in-loop error rule.

Confidence Score: 5/5

Safe to merge — only dev dependency version bumps with no production code changes.

Both updated packages are dev-only tools (@biomejs/biome for linting/formatting and ultracite for code quality tooling). The @biomejs/biome 2.5.0 minor release adds new nursery lint rules that are opt-in and won't break existing configs. The ultracite 7.8.3 patch release contains only bug fixes for the init command. Neither update affects production runtime behavior.

No files require special attention — only package.json is modified with two dev dependency version bumps.

Important Files Changed

Filename	Overview
package.json	Bumps `@biomejs/biome` from 2.4.16 to 2.5.0 and `ultracite` from 7.8.0 to 7.8.3 in devDependencies; no other changes.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json devDependencies] --> B["@biomejs/biome\n2.4.16 → 2.5.0\n(minor)"]
    A --> C["ultracite\n7.8.0 → 7.8.3\n(patch)"]
    B --> D["New lint rules\n(nursery: noUndeclaredClasses,\nnoUnusedClasses)"]
    B --> E["New concise reporter"]
    C --> F["Bug fixes for init command\n(Husky, lint-staged,\neditor extension)"]
    C --> G["New no-await-in-loop rule\nenabled as error"]

_{Reviews (1): Last reviewed commit: "chore(deps-dev): bump the dependencies g..." | Re-trigger Greptile}

dependabot · 2026-06-20T18:32:41Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot closed this Jun 20, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dependencies-2f3c75e0b0 branch June 20, 2026 18:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump the dependencies group with 2 updates#18

chore(deps-dev): bump the dependencies group with 2 updates#18
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-2f3c75e0b0

dependabot Bot commented on behalf of github Jun 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Uh oh!

snyk-io Bot commented Jun 13, 2026

Uh oh!

greptile-apps Bot commented Jun 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.0

2.5.0

Minor Changes

2.5.0

Minor Changes

[email protected]

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Jun 13, 2026

Labels

Uh oh!

snyk-io Bot commented Jun 13, 2026

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

greptile-apps Bot commented Jun 13, 2026

Greptile Summary

Confidence Score: 5/5

Important Files Changed

Flowchart

Uh oh!

dependabot Bot commented on behalf of github Jun 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 13, 2026 •

edited

Loading