Bump the pnpm group across 1 directory with 17 updates #8

dependabot · 2025-11-03T20:00:27Z

Bumps the pnpm group with 17 updates in the / directory:

Package	From	To
@dotenvx/dotenvx	`1.46.0`	`1.51.0`
@hono/node-server	`1.15.0`	`1.19.6`
@prisma/client	`6.11.1`	`6.18.0`
@scalar/hono-api-reference	`0.9.9`	`0.9.23`
@scalar/openapi-to-markdown	`0.2.19`	`0.3.0`
argon2	`0.43.0`	`0.44.0`
hono	`4.8.4`	`4.10.4`
jose	`6.0.11`	`6.1.0`
radashi	`12.6.0`	`12.7.0`
ts-pattern	`5.7.1`	`5.9.0`
@biomejs/biome	`2.1.1`	`2.3.3`
@types/node	`24.0.10`	`24.10.0`
chalk	`5.4.1`	`5.6.2`
prisma	`6.11.1`	`6.18.0`
rimraf	`6.0.1`	`6.1.0`
tsx	`4.20.3`	`4.20.6`
typescript	`5.8.3`	`5.9.3`

Updates @dotenvx/dotenvx from 1.46.0 to 1.51.0

Release notes

Sourced from @dotenvx/dotenvx's releases.

v1.51.0

see CHANGELOG

v1.50.1

see CHANGELOG

v1.50.0

see CHANGELOG

v1.49.1

see CHANGELOG

v1.49.0

see CHANGELOG

v1.48.4

see CHANGELOG

v1.48.3

see CHANGELOG

v1.48.2

see CHANGELOG

v1.48.1

see CHANGELOG

v1.48.0

see CHANGELOG

v1.47.7

see CHANGELOG

v1.47.6

see CHANGELOG

v1.47.5

see CHANGELOG

v1.47.4

see CHANGELOG

v1.47.3

see CHANGELOG

v1.47.2

see CHANGELOG

v1.47.1

see CHANGELOG

... (truncated)

Changelog

Sourced from @dotenvx/dotenvx's changelog.

1.51.0 (2025-09-23)

Added

Add config({opsOff: true}) options and --ops-off flag for turning off Dotenvx Ops features. (#680)

1.50.1 (2025-09-18)

Removed

Remove listed command to radar (now ops) (#678)

1.50.0 (2025-09-18)

Added

Add optional dotenvx ops command (#677)
Ops is a coming rename of Radar. Radar will become a feature inside ops.
With dotenvx ops use dotenvx across your team, infrastructure, agents, and more.

 _______________________________________________________________________
|                                                                       |
|  Dotenvx Ops: Commercial Tooling for Dotenvx                          |
|                                                                       |
|  ░▒▓██████▓▒░░▒▓███████▓▒░ ░▒▓███████▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░                                     |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓███████▓▒░ ░▒▓██████▓▒░                               |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
| ░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░             ░▒▓█▓▒░                              |
|  ░▒▓██████▓▒░░▒▓█▓▒░      ░▒▓███████▓▒░                               |
|                                                                       |
|  Use dotenvx across your team, infrastructure, agents, and more.      |
|                                                                       |
|  Learn more at https://dotenvx.com/ops                                |
|_______________________________________________________________________|

1.49.1 (2025-09-15)

Changed

🐞 patch bug with variable expansion of single quoted values (#675)

1.49.0 (2025-08-18)

Added

For precommit and prebuild, ignore .env.x file like we do with .env.vault file. (#666)

... (truncated)

Commits

66d40b2 1.51.0
5317ec8 changelog 🪵
505ee6a add features to README
c7b9a65 Merge pull request #680 from dotenvx/ops-off
4257488 test details
d9dfd3a add -ops-off flag
4765b69 add opsOff option to config
1906d89 add deprecation notice
f3eda0a standard formatting 🧼
be06ba2 tests
Additional commits viewable in compare view

Updates @hono/node-server from 1.15.0 to 1.19.6

Release notes

Sourced from @hono/node-server's releases.

v1.19.6

What's Changed

fix(serve-static): fix onFound timing by @usualoma in honojs/node-server#286

Full Changelog: honojs/node-server@v1.19.5...v1.19.6

v1.19.5

What's Changed

fix: cancel a readable stream if a writable stream is closed before a readable stream is closed. by @usualoma in honojs/node-server#280

Full Changelog: honojs/node-server@v1.19.4...v1.19.5

v1.19.4

What's Changed

fix(serve-static): Add error handling in createStreamBody by @thongdoan in honojs/node-server#278

New Contributors

@thongdoan made their first contribution in honojs/node-server#278

Full Changelog: honojs/node-server@v1.19.3...v1.19.4

v1.19.3

What's Changed

fix: Refactor promise check for response handling by @kay-is in honojs/node-server#277

New Contributors

@kay-is made their first contribution in honojs/node-server#277

Full Changelog: honojs/node-server@v1.19.2...v1.19.3

v1.19.2

What's Changed

fix: better handle range parse to avoid NaN error by @zwpaper in honojs/node-server#276

New Contributors

@zwpaper made their first contribution in honojs/node-server#276

Full Changelog: honojs/node-server@v1.19.1...v1.19.2

v1.19.1

What's Changed

fix: Keep lightweight request even if accessing method, url or headers by @usualoma in honojs/node-server#274

chore: add packageManager field in package.json by @yusukebe in honojs/node-server#275

Full Changelog: honojs/node-server@v1.19.0...v1.19.1

v1.19.0

... (truncated)

Commits

3cdef3f 1.19.6
3435875 fix(serve-static): fix onFound timing (#286)
840c22b 1.19.5
4b5a8d1 fix: cancel a readable stream if a writable stream is closed before a readabl...
a5e7d50 1.19.4
0ee7ce1 fix(serve-static): Add error handling in createStreamBody (#278)
f3156d9 1.19.3
4f50527 fix: Refactor promise check for response handling (#277)
cf75f9d 1.19.2
fc9f9ab fix: better handle range parse to avoid NaN error (#276)
Additional commits viewable in compare view

Updates @prisma/client from 6.11.1 to 6.18.0

Release notes

Sourced from @prisma/client's releases.

6.18.0

Today, we are excited to share the 6.18.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Prisma ORM

Prisma ORM is the most popular ORM in the TypeScript ecosystem. Today’s release brings a bunch of new bug fixes and overall improvements:

prisma init now creates a prisma.config.ts automatically

When creating a new project with 6.18.0, prisma init will now create a prisma.config.ts file automatically. This prepares new applications for the future of Prisma 7. Some fields that have been historically set in the schema.prisma file are now able to be set in the prisma.config.ts, and we encourage people to migrate over to the new structure before the release of version 7, where this file will become a requirement.

Support for defining your datasource in prisma.config.ts

If you’re adopting the new prisma.config.ts setup in your projects, version 6.18.0 brings the ability to set your datasource directly in your config file. Once this is in your config file, any datasource set in your schema.prisma will be ignored. To set the datasource, we also must include the new engine key which we can set to "classic" , which will be required for Prisma v7
import { defineConfig, env } from "prisma/config";
export default defineConfig({
    // The Rust-compiled schema engine 
    engine: "classic",
    datasource: {
        url: env('DATABASE_URL'),
    }
});
prisma/prisma#28291 Support multiple Prisma instances with different providers

prisma/prisma#28305 Add env helper function

prisma/prisma#28266 Add support for js or classic as engine types in prisma.config

prisma/prisma#28139 Map Bytes to Uint8Array depending on Typescript version

Preparing for Prisma v7

While it has been mentioned a few times already, many of the changes in this release are here to prepare folks for the upcoming release of Prisma v7. It’s worth repeating that these changes and the migration to prisma.config.ts will be required for Prisma v7, so we’re releasing this as opt-in features for developers. But come Prisma v7, they will be the new way of configuring your project.

Prisma Postgres

Prisma Postgres is our fully managed Postgres service designed with the same philosophy of great DX that has guided Prisma for close to a decade. With this release we are introducing the following improvements:

Database Metric in Console

Inside of your database console, you can now view metrics on your database usage and interactions. You can get insights into the follow:

Total egress

Average response size

Average query duration

In addition, you can also get insights into how to improve your query caching and gain better performance.

... (truncated)

Commits

1bd7fd2 fix(tests): don't replace the process.env object (#28331)
7633148 chore(deps): update engines to 6.18.0-8.34b5a692b7bd79939a9a2c3ef97d816e749cd...
4078626 chore: fix jest inline snapshot update (#28330)
50f6514 fix: support multiple Prisma instances with different providers (#28291)
3bc04bc chore(deps): update engines to 6.18.0-7.d3fc122f88ca3ce86f67a797debfb179a39cc...
6c5a217 fix(adapter-pg): historical dates (#28212)
30bdd63 chore(deps): update engines to 6.18.0-6.9bf76dbea6c9e34d59a3577015bd1e94bfda7...
1341489 chore(deps): update engines to 6.18.0-3.b03d75f1a67e62289420f5697c28a3ff8dbb0...
c524934 chore: upgrade OpenTelemetry deps and refresh tracing setup in client (#28268)
423b585 fix: revert "chore: use pnpm catalog (#28236)" (#28271)
Additional commits viewable in compare view

Updates @scalar/hono-api-reference from 0.9.9 to 0.9.23

Changelog

Sourced from @scalar/hono-api-reference's changelog.

0.9.23

Patch Changes

#7170 5d2a740 Thanks @renovate! - Bump dependency to patch GHSA-q7jf-gf43-6x6p

Updated dependencies []:

@scalar/core@0.3.21

0.9.22

Patch Changes

@scalar/core@0.3.20

0.9.21

Patch Changes

Updated dependencies [1e01464]

@scalar/core@0.3.19

0.9.20

Patch Changes

@scalar/core@0.3.18

0.9.19

Patch Changes

Updated dependencies [fd2c4ba]

@scalar/core@0.3.17

0.9.18

Patch Changes

@scalar/core@0.3.16

0.9.17

Patch Changes

@scalar/core@0.3.15

0.9.16

Patch Changes

... (truncated)

Commits

See full diff in compare view

Updates @scalar/openapi-to-markdown from 0.2.19 to 0.3.0

Changelog

Sourced from @scalar/openapi-to-markdown's changelog.

0.3.0

Minor Changes

#7121 9661e81 Thanks @marcalexiei! - feat(oas-utils): make dereference synchronous

#7199 0d9c945 Thanks @marcalexiei! - feat: update vue to 3.5.21

Patch Changes

Updated dependencies [eb022f2, 348f8f6, 11a6e64, c22fc4e, 2239843, 6ec8c29, 9661e81, 134ff5f, 134ff5f, 81b0a7a, 8a5a6a0, 704fa30, c84b7c5, 0319b8a, da7ab2f, a26ced6, 134ff5f, 6a090a2, 592533f, eba18d0, a821986, c72a2c5, 0d9c945, e23229d]:

@scalar/types@0.4.0

@scalar/components@0.16.0

@scalar/openapi-upgrader@0.1.4

@scalar/openapi-parser@0.23.0

@scalar/openapi-types@0.5.1

@scalar/helpers@0.0.13

@scalar/oas-utils@0.6.0

@scalar/snippetz@0.5.2

0.2.45

Patch Changes

Updated dependencies [f8efecd]

Updated dependencies [3f6d0b9]

Updated dependencies [f3e17d8]

Updated dependencies [f8efecd]

Updated dependencies [f69e7cc]

@scalar/components@0.15.1

@scalar/helpers@0.0.12

@scalar/types@0.3.2

@scalar/oas-utils@0.5.2

@scalar/openapi-types@0.5.0

@scalar/openapi-parser@0.22.3

@scalar/openapi-upgrader@0.1.3

@scalar/snippetz@0.5.1

0.2.44

Patch Changes

Updated dependencies [15c4240]

Updated dependencies [debdcf6]

Updated dependencies [63ff417]

Updated dependencies [e0cdd9a]

Updated dependencies [a747da6]

Updated dependencies [1e01464]

Updated dependencies [c69cb71]

Updated dependencies [90d54b6]

... (truncated)

Commits

See full diff in compare view

Updates argon2 from 0.43.0 to 0.44.0

Release notes

Sourced from argon2's releases.

v0.44.0

What's Changed

Bump node-addon-api from 8.4.0 to 8.5.0 by @dependabot[bot] in ranisalt/node-argon2#466

Bump node-gyp from 11.2.0 to 11.3.0 by @dependabot[bot] in ranisalt/node-argon2#467

Build system tweaks for reproducible builds by @threema-danilo in ranisalt/node-argon2#447

Full Changelog: ranisalt/node-argon2@v0.43.1...v0.44.0

v0.43.1

Fixes #456 caused by Typescript 5.7 changing how Buffer types work (see microsoft/TypeScript#59417). FreeBSD ARM64 prebuilds are now available.

What's Changed

Avoid overriding _FORTIFY_SOURCE if already set by @threema-danilo in ranisalt/node-argon2#455

Support FreeBSD ARM64 builds by @ranisalt in ranisalt/node-argon2#459

Bump node-addon-api from 8.3.1 to 8.4.0 by @dependabot[bot] in ranisalt/node-argon2#460

Bump tar-fs from 2.1.2 to 2.1.3 by @dependabot[bot] in ranisalt/node-argon2#458

New Contributors

@threema-danilo made their first contribution in ranisalt/node-argon2#455

Full Changelog: ranisalt/node-argon2@v0.43.0...v0.43.1

Commits

cd4eae5 v0.44.0
0d88d0d Build system tweaks for reproducible builds
a6ca2fd Bump @biomejs/biome from 1.9.4 to 2.1.4
c33250d Bump node-gyp from 11.2.0 to 11.3.0 (#467)
e4ff08c Bump node-addon-api from 8.4.0 to 8.5.0 (#466)
b3de3a2 Potential fix for code scanning alert no. 35: Workflow does not contain permi...
bcf7232 v0.43.1
93fa469 Fix linter formatting
6727b44 Upgrade dependencies, revert Typescript to v5.6.3
e96cf5a Bump tar-fs from 2.1.2 to 2.1.3 (#458)
Additional commits viewable in compare view

Updates hono from 4.8.4 to 4.10.4

Release notes

Sourced from hono's releases.

v4.10.4

What's Changed

chore: add a monochrome logo image by @yusukebe in honojs/hono#4487

chore: fix the monochrome logo by @yusukebe in honojs/hono#4488

fix(secure-headers): proposed features typo spelling mistake by @RosApr in honojs/hono#4494

fix(types): preserve handler response typing in createHandlers by @s-junio in honojs/hono#4492

New Contributors

@RosApr made their first contribution in honojs/hono#4494

@s-junio made their first contribution in honojs/hono#4492

Full Changelog: honojs/hono@v4.10.3...v4.10.4

v4.10.3

Securiy Fix

A security issue in the CORS middleware has been fixed. In some cases, a request header could affect the Vary response header. Please update to the latest version if you are using the CORS middleware.

What's Changed

fix(aws-lambda): serve microsoft office files as binary in lambda handler by @matthiasfeist in honojs/hono#4469

fix(request-id): validation accepts = by @ryuapp in honojs/hono#4478

refactor(jwt): reduce the size of the code generated by minification by @usualoma in honojs/hono#4480

New Contributors

@matthiasfeist made their first contribution in honojs/hono#4469

Full Changelog: honojs/hono@v4.10.2...v4.10.3

v4.10.2

Security hardening improvement

If you are using JWT middleware, please read the following and consider applying the configuration.

Improper Authorization in Hono (JWT Audience Validation)

Hono’s JWT authentication middleware did not validate the aud (Audience) claim by default. As a result, applications using the middleware without an explicit audience check could accept tokens intended for other audiences, leading to potential cross-service access (token mix-up).

The issue is addressed by adding a new verification.aud configuration option to allow RFC 7519–compliant audience validation. This change is classified as a security hardening improvement, but the lack of validation can still be considered a vulnerability in deployments that rely on default JWT verification.

Recommended secure configuration

You can enable RFC 7519–compliant audience validation using the new verification.aud option:
import { Hono } from 'hono'
import { jwt } from 'hono/jwt'
const app = new Hono()
app.use(
</tr></table>

... (truncated)

Commits

3a550d2 4.10.4
b7117c4 fix(types): preserve handler response typing in createHandlers (#4492)
16b21fb fix(secure-headers): proposed features typo spelling mistake (#4494)
c12d21c chore: fix the monochrome logo (#4488)
d149fe9 chore: add a monochrome logo image (#4487)
fcefd50 4.10.3
95ae4d3 refactor(jwt): reduce the size of the code generated by minification (#4480)
d9b8b4b Merge commit from fork
5216117 fix(request-id): validation accepts = (#4478)
253ec28 fix(aws-lambda): serve microsoft office files as binary in lambda handler (#4...
Additional commits viewable in compare view

Updates jose from 6.0.11 to 6.1.0

Release notes

Sourced from jose's releases.

v6.1.0

Features

support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)

support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

v6.0.13

Refactor

more readability in ecdhes.ts (84da9de)

update asn1.ts helpers (b4f8fb3)

v6.0.12

Documentation

add known caveats to customFetch (02e1f1e)

mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)

update compact setKeyManagementParameters (2f44381)

use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

createPublicKey is not a constructor (61ded78)

update asn1.ts helper functions (b2b611c)

Changelog

Sourced from jose's changelog.

6.1.0 (2025-08-27)

Features

support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri (cf2092a)

support for the ML-DSA PQC Algorithm Identifiers (25ddce4)

6.0.13 (2025-08-21)

Refactor

more readability in ecdhes.ts (84da9de)

update asn1.ts helpers (b4f8fb3)

6.0.12 (2025-07-15)

Documentation

add known caveats to customFetch (02e1f1e)

mention the apu/apv parameter names in setKeyManagementParameters (6274d5a)

update compact setKeyManagementParameters (2f44381)

use GitHub Flavored Markdown for notes and warnings (f6b4ffc)

Refactor

createPublicKey is not a constructor (61ded78)

update asn1.ts helper functions (b2b611c)

Commits

6f3e004 chore(release): 6.1.0
25ddce4 feat: support for the ML-DSA PQC Algorithm Identifiers
cf2092a feat: support AKP JWKs in calculateJwkThumbprint and calculateJwkThumbprintUri
2c519cc chore: cleanup after release
1e36dd2 chore(release): 6.0.13
b4f8fb3 refactor: update asn1.ts helpers
413fa45 chore: bump packages
84da9de refactor: more readability in ecdhes.ts
475a3ed chore: npm run format
b59c547 chore: bump packages
Additional commits viewable in compare view

Updates radashi from 12.6.0 to 12.7.0

Release notes

Sourced from radashi's releases.

v12.7.0

New Functions

Add getOrInsert and getOrInsertComputed functions [→ PR #444](radashi-org/radashi#444)

Access or initialize map entries without boilerplate branching. getOrInsert writes the provided value once, while getOrInsertComputed lazily creates an entry only when it is missing.

Works with both Map and WeakMap instances

Returns the stored entry so you can chain additional logic

Avoids unnecessary factory calls when a key already exists
import * as _ from 'radashi'
const counts = new Map<string, number>()
_.getOrInsert(counts, 'clicks', 1) // => 1
_.getOrInsert(counts, 'clicks', 5) // => 1
_.getOrInsertComputed(counts, 'views', () => 10) // => 10
_.getOrInsertComputed(counts, 'views', () => 0) // => 10
Inspired by TC39's upsert proposal.

🔗 Docs: getOrInsert · getOrInsertComputed / Source: getOrInsert.ts · getOrInsertComputed.ts / Tests: getOrInsert.test.ts · getOrInsertComputed.test.ts

Add isArrayEqual function [→ PR #417](radashi-org/radashi#417)

Compare arrays with Object.is precision. isArrayEqual checks length and element identity, correctly handling tricky cases like NaN, sparse arrays, and the +0/-0 distinction.

Uses Object.is so NaN matches itself while +0 and -0 stay distinct

Short-circuits when lengths differ for a fast inequality check

Leaves the original arrays untouched
import * as _ from 'radashi'
_.isArrayEqual([1, 2, 3], [1, 2, 3]) // => true
_.isArrayEqual([0], [-0]) // => false
_.isArrayEqual([Number.NaN], [Number.NaN]) // => true
🔗 Docs / Source / Tests

Add isMapEqual and isSetEqual functions [→ PR #437](radashi-org/radashi#437)

Quickly compare collections without writing loops. isMapEqual uses isEqual to traverse nested values, while isSetEqual focuses on membership equality for reference types.

Checks map sizes first, then verifies each key/value pair deeply

Compares set entries via Set#has, perfect for shared object references or primitive values

... (truncated)

Changelog

Sourced from radashi's changelog.

[radashi@12.7.0] - 2025-10-17

Details

Added

Add identity function in 38e2f37

Add isArrayEqual function in 095f2b0

Add isMapEqual and isSetEqual functions in 0fa566a

Add getOrInsert and getOrInsertComputed in 4675076

(objectify) Add index parameter to getKey and getValue functions in 1506472

Add absoluteJitter and proportionalJitter in ebea7d7

Changed

Preserve tuple type in min/max even with a getter in c72a1c4

Use identity as default getter for sort in df55a6e

[radashi@12.6.2] - 2025-08-20

Details

Fixed

(range) Ensure end parameter works when 0 in 9c8ffa0

[radashi@12.6.1] - 2025-08-09

Details

Fixed

(group) Use Object.create(null) for the returned object in 5db8c37

Commits

900f2e8 chore(release): 12.7.0
11d932d chore: prepare release notes
ebea7d7 feat: add absoluteJitter and proportionalJitter (#446)
df55a6e feat: use identity as default getter for sort (#423)
1506472 feat(objectify): add index parameter to getKey and getValue functions (#440)
c72a1c4 feat: preserve tuple type in min/max even with a getter (#436)
4675076 feat: add getOrInsert and getOrInsertComputed (#444)
0fa566a feat: add isMapEqual and isSetEqual functions (#437)
095f2b0 feat: add isArrayEqual function (#417)
38e2f37 feat: add identity function (#422)
Additional commits viewable in compare view

Updates ts-pattern from 5.7.1 to 5.9.0

Release notes

Sourced from ts-pattern's releases.

v5.9.0

New features

P.record patterns

To match a Record<Key, Value> (an object with consistent key and value types), you can use P.record(keyPattern, valuePattern). It takes a sub-pattern to match against the key, a sub-pattern to match against the value, and will match if all entries in the object match these two sub-patterns.
import { match, P } from 'ts-pattern';
type Input = Record<string, number>;
const input: Input = {
alice: 100,
bob: 85,
charlie: 92,
};
const output = match(input)
.with(P.record(P.string, P.number), (scores) => All user scores)
.with(P.record(P.string, P.string), (names) => All user names)
.otherwise(() => '');
console.log(output);
// => "All user scores"
You can also use P.record with a single argument P.record(valuePattern), which assumes string keys:
const userProfiles = {
  alice: { name: 'Alice', age: 25 },
  bob: { name: 'Bob', age: 30 },
};
const output = match(userProfiles)
.with(
P.record({ name: P.string, age: P.number }),
(profiles) => User profiles with name and age
)
.otherwise(() => 'Different format');
console.log(output);
// => "User profiles with name and age"
When using P.select in record patterns, you can extract all keys or all values as arrays:

... (truncated)

Commits

0e15315 fix: remove unused import
07fb919 Merge pull request #332 from gvergnaud/gvergnaud/feat-p-record-implementation
2b18391 add chainable tests
b16276a ç5.9.0
e073980 feat(P.record): Add docs
07508ba feat(P.record): add exhaustive checking tests
fbefc6b deps: update TS and jest
4070733 feat(P.record): implementation
29fbd3a Merge pull request #317 from timvandam/patch-1
2721652 Update README.md
Additional commits viewable in compare view

Updates @biomejs/biome from 2.1.1 to 2.3.3

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.3

2.3.3

Patch Changes
#7907 57bd662 Thanks @ematipico! - Fixed #7839. Now the Biome parser correctly parses the Astro frontmatter even when a triple fence is inside quotes.

#7934 a35c496 Thanks @alissonlauffer! - Fixed #7919: The HTML parser now correctly handles Unicode BOM (Byte Order Mark) characters at the beginning of HTML files, ensuring proper parsing and tokenization.

#7869 c80361d Thanks @matanshavit! - Fixed #7864: Biome now preserves component tag name casing in Svelte, Astro, and Vue files.
#7926 69cecec Thanks @matanshavit! - Added the rule noParametersOnlyUsedInRecursion.

This rule detects function parameters that are exclusively used in recursive calls and can be removed to simplify the function signature since they are effectively unused.
function factorial(n, acc) {
  if (n === 0) return 1;
  return factorial(n - 1, acc); // acc is only used here
}
Fixes #6484.
#7774 2509b91 Thanks @dibashthapa! - Fixed #7657: Added the new rule no-unknown-property from ESLint

#7918 7165d06 Thanks @dyc3! - Fixed #7913: The CSS parser, with tailwindDirectives enabled, will now correctly handle @slot.

#7959 ffae203 Thanks @siketyan! - Fixed the Biome Language Server so it no longer returns an internal error when the formatter is disabled in the configuration.
What's Changed

fix(html): parse frontmatter inside quotes by @ematipico in biomejs/biome#7907

fix(parse/css): add @slot tailwind at rule by @dyc3 in biomejs/biome#7918

fix(formatter): preserve component tag casing in Svelte/Astro/Vue files by @matanshavit in biomejs/biome#7869

feat(lint): new rule: no parameters only used in recursion by @matanshavit in biomejs/biome#7926Description has been truncated

Bumps the pnpm group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@dotenvx/dotenvx](https://github.com/dotenvx/dotenvx) | `1.46.0` | `1.51.0` | | [@hono/node-server](https://github.com/honojs/node-server) | `1.15.0` | `1.19.6` | | [@prisma/client](https://github.com/prisma/prisma/tree/HEAD/packages/client) | `6.11.1` | `6.18.0` | | [@scalar/hono-api-reference](https://github.com/scalar/scalar/tree/HEAD/integrations/hono) | `0.9.9` | `0.9.23` | | [@scalar/openapi-to-markdown](https://github.com/scalar/scalar/tree/HEAD/packages/openapi-to-markdown) | `0.2.19` | `0.3.0` | | [argon2](https://github.com/ranisalt/node-argon2) | `0.43.0` | `0.44.0` | | [hono](https://github.com/honojs/hono) | `4.8.4` | `4.10.4` | | [jose](https://github.com/panva/jose) | `6.0.11` | `6.1.0` | | [radashi](https://github.com/radashi-org/radashi) | `12.6.0` | `12.7.0` | | [ts-pattern](https://github.com/gvergnaud/ts-pattern) | `5.7.1` | `5.9.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.1.1` | `2.3.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `24.0.10` | `24.10.0` | | [chalk](https://github.com/chalk/chalk) | `5.4.1` | `5.6.2` | | [prisma](https://github.com/prisma/prisma/tree/HEAD/packages/cli) | `6.11.1` | `6.18.0` | | [rimraf](https://github.com/isaacs/rimraf) | `6.0.1` | `6.1.0` | | [tsx](https://github.com/privatenumber/tsx) | `4.20.3` | `4.20.6` | | [typescript](https://github.com/microsoft/TypeScript) | `5.8.3` | `5.9.3` | Updates `@dotenvx/dotenvx` from 1.46.0 to 1.51.0 - [Release notes](https://github.com/dotenvx/dotenvx/releases) - [Changelog](https://github.com/dotenvx/dotenvx/blob/main/CHANGELOG.md) - [Commits](dotenvx/dotenvx@v1.46.0...v1.51.0) Updates `@hono/node-server` from 1.15.0 to 1.19.6 - [Release notes](https://github.com/honojs/node-server/releases) - [Commits](honojs/node-server@v1.15.0...v1.19.6) Updates `@prisma/client` from 6.11.1 to 6.18.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/6.18.0/packages/client) Updates `@scalar/hono-api-reference` from 0.9.9 to 0.9.23 - [Changelog](https://github.com/scalar/scalar/blob/main/integrations/hono/CHANGELOG.md) - [Commits](https://github.com/scalar/scalar/commits/HEAD/integrations/hono) Updates `@scalar/openapi-to-markdown` from 0.2.19 to 0.3.0 - [Changelog](https://github.com/scalar/scalar/blob/main/packages/openapi-to-markdown/CHANGELOG.md) - [Commits](https://github.com/scalar/scalar/commits/HEAD/packages/openapi-to-markdown) Updates `argon2` from 0.43.0 to 0.44.0 - [Release notes](https://github.com/ranisalt/node-argon2/releases) - [Commits](ranisalt/node-argon2@v0.43.0...v0.44.0) Updates `hono` from 4.8.4 to 4.10.4 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.8.4...v4.10.4) Updates `jose` from 6.0.11 to 6.1.0 - [Release notes](https://github.com/panva/jose/releases) - [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md) - [Commits](panva/jose@v6.0.11...v6.1.0) Updates `radashi` from 12.6.0 to 12.7.0 - [Release notes](https://github.com/radashi-org/radashi/releases) - [Changelog](https://github.com/radashi-org/radashi/blob/main/CHANGELOG.md) - [Commits](radashi-org/radashi@v12.6.0...v12.7.0) Updates `ts-pattern` from 5.7.1 to 5.9.0 - [Release notes](https://github.com/gvergnaud/ts-pattern/releases) - [Commits](gvergnaud/ts-pattern@v5.7.1...v5.9.0) Updates `@biomejs/biome` from 2.1.1 to 2.3.3 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.3/packages/@biomejs/biome) Updates `@types/node` from 24.0.10 to 24.10.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `chalk` from 5.4.1 to 5.6.2 - [Release notes](https://github.com/chalk/chalk/releases) - [Commits](chalk/chalk@v5.4.1...v5.6.2) Updates `prisma` from 6.11.1 to 6.18.0 - [Release notes](https://github.com/prisma/prisma/releases) - [Commits](https://github.com/prisma/prisma/commits/6.18.0/packages/cli) Updates `rimraf` from 6.0.1 to 6.1.0 - [Changelog](https://github.com/isaacs/rimraf/blob/main/CHANGELOG.md) - [Commits](isaacs/rimraf@v6.0.1...v6.1.0) Updates `tsx` from 4.20.3 to 4.20.6 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.20.3...v4.20.6) Updates `typescript` from 5.8.3 to 5.9.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release-publish.yml) - [Commits](microsoft/TypeScript@v5.8.3...v5.9.3) --- updated-dependencies: - dependency-name: "@dotenvx/dotenvx" dependency-version: 1.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: "@hono/node-server" dependency-version: 1.19.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: "@prisma/client" dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: "@scalar/hono-api-reference" dependency-version: 0.9.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pnpm - dependency-name: "@scalar/openapi-to-markdown" dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: argon2 dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: hono dependency-version: 4.10.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: jose dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: radashi dependency-version: 12.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: ts-pattern dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: "@biomejs/biome" dependency-version: 2.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: "@types/node" dependency-version: 24.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: chalk dependency-version: 5.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: prisma dependency-version: 6.18.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: rimraf dependency-version: 6.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm - dependency-name: tsx dependency-version: 4.20.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pnpm - dependency-name: typescript dependency-version: 5.9.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pnpm ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2025-11-03T20:01:34Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 3, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the pnpm group across 1 directory with 17 updates #8

Bump the pnpm group across 1 directory with 17 updates #8

Uh oh!

dependabot bot commented on behalf of github Nov 3, 2025

Uh oh!

coderabbitai bot commented Nov 3, 2025

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the pnpm group across 1 directory with 17 updates #8

Are you sure you want to change the base?

Bump the pnpm group across 1 directory with 17 updates #8

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 3, 2025

v1.51.0

v1.50.1

v1.50.0

v1.49.1

v1.49.0

v1.48.4

v1.48.3

v1.48.2

v1.48.1

v1.48.0

v1.47.7

v1.47.6

v1.47.5

v1.47.4

v1.47.3

v1.47.2

v1.47.1

1.51.0 (2025-09-23)

Added

1.50.1 (2025-09-18)

Removed

1.50.0 (2025-09-18)

Added

1.49.1 (2025-09-15)

Changed

1.49.0 (2025-08-18)

Added

v1.19.6

What's Changed

v1.19.5

What's Changed

v1.19.4

What's Changed

New Contributors

v1.19.3

What's Changed

New Contributors

v1.19.2

What's Changed

New Contributors

v1.19.1

What's Changed

v1.19.0

6.18.0

Prisma ORM

Preparing for Prisma v7

Prisma Postgres

Database Metric in Console

0.9.23

Patch Changes

0.9.22

Patch Changes

0.9.21

Patch Changes

0.9.20

Patch Changes

0.9.19

Patch Changes

0.9.18

Patch Changes

0.9.17

Patch Changes

0.9.16

Patch Changes

0.3.0

Minor Changes

Patch Changes

0.2.45

Patch Changes

0.2.44

Patch Changes

v0.44.0

What's Changed

v0.43.1

Add `getOrInsert` and `getOrInsertComputed` functions [→ PR #444](radashi-org/radashi#444)

Add `isArrayEqual` function [→ PR #417](radashi-org/radashi#417)

Add `isMapEqual` and `isSetEqual` functions [→ PR #437](radashi-org/radashi#437)

`P.record` patterns