[dependabot]

Bumps the minor-updates group with 67 updates in the / directory:

Package	From	To
tsdown	0.20.1	0.23.1
react-native	0.83.1	0.88.0
@animo-id/expo-digital-credentials-api	0.4.0	0.5.1
@owf/mdoc	0.6.0	0.8.3
@biomejs/biome	2.5.12	2.6.2
@types/react	19.2.18	19.3.0
@babel/helper-create-regexp-features-plugin	7.29.7	7.29.10
@babel/helpers	7.29.7	7.29.10
@babel/parser	7.29.8	7.29.9
@babel/plugin-transform-typescript	7.29.7	7.29.9
@babel/runtime	7.29.7	7.29.10
@babel/traverse	7.29.8	7.29.10
@biomejs/cli-darwin-arm64	2.5.12	2.6.2
@biomejs/cli-darwin-x64	2.5.12	2.6.2
@biomejs/cli-linux-arm64-musl	2.5.12	2.6.2
@biomejs/cli-linux-arm64	2.5.12	2.6.2
@biomejs/cli-linux-x64-musl	2.5.12	2.6.2
@biomejs/cli-linux-x64	2.5.12	2.6.2
@biomejs/cli-win32-arm64	2.5.12	2.6.2
@biomejs/cli-win32-x64	2.5.12	2.6.2
@expo/devcert	1.2.1	1.2.2
@expo/osascript	2.7.1	2.8.1
@expo/package-manager	1.13.1	1.14.2
@expo/xcpretty	4.4.5	4.4.7
@napi-rs/wasm-runtime	1.1.1	1.2.5
@nodable/entities	3.0.0	3.1.0
@quansync/fs	1.0.0	1.1.0
@react-native/community-cli-plugin	0.83.1	0.88.0
@react-native/debugger-shell	0.83.1	0.88.0
@react-native/gradle-plugin	0.83.1	0.88.0
@react-native/virtualized-lists	0.83.1	0.88.0
@sinclair/typebox	0.27.8	0.27.12
@tybys/wasm-util	0.10.1	0.10.4
acorn	8.18.0	8.19.0
baseline-browser-mapping	2.11.21	2.11.31
browserslist	4.28.9	4.29.4
bser	2.1.1	2.1.2
cac	6.7.14	7.0.0
caniuse-lite	1.0.30001810	1.0.30001819
compression	1.8.1	1.8.2
core-js-compat	3.50.0	3.51.0
dts-resolver	2.1.3	3.0.0
electron-to-chromium	1.5.424	1.5.463
empathic	2.0.0	2.1.0
exponential-backoff	3.1.2	3.1.3
fb-watchman	2.0.2	2.0.4
get-tsconfig	4.13.0	5.0.0-beta.6
hermes-compiler	0.14.0	260318099.0.4
hookable	6.0.1	6.1.2
import-without-cache	0.2.5	0.4.1
is-core-module	2.16.2	2.17.0
joi	17.13.7	17.13.8
node-releases	2.0.54	2.0.60
obug	2.1.1	3.0.0
regenerate-unicode-properties	10.2.2	10.3.0
regenerate	1.4.2	1.5.0
regexpu-core	6.4.0	6.5.3
regjsparser	0.13.2	0.13.4
resolve.exports	2.0.3	2.0.4
rolldown-plugin-dts	0.21.8	0.28.8
scheduler	0.27.0	0.28.0
source-map-js	1.2.1	1.2.2
strnum	2.4.2	2.5.1
tinyexec	1.0.2	1.3.1
tinyglobby	0.2.15	0.2.17
unconfig-core	7.4.2	7.5.0
update-browserslist-db	1.3.2	1.3.4

Updates tsdown from 0.20.1 to 0.23.1

Release notes

Sourced from tsdown's releases.

v0.23.1

   🐞 Bug Fixes

• Preserve false tsconfig option  -  by @​Masutayunikon in rolldown/tsdown#1065 (407f8)
• entry: Honor custom root for object entry  -  by @​giaBaoJS in rolldown/tsdown#1072 (17452)
• pkg: Pack tarball inside npm publish --dry-run  -  by @​giaBaoJS in rolldown/tsdown#1076 (83f0c)

    View changes on GitHub

v0.23.0

   🧭 Migration Guide

Most users can upgrade directly. Before upgrading, run one final build with tsdown@0.22.14 and resolve all deprecation warnings.

• config:
  • bundle: false → unbundle: true; bundle: true can be removed
  • outExtension → outExtensions
  • publicDir / --public-dir → copy / --copy
  • removeNodeProtocol: true → nodeProtocol: 'strip'
  • injectStyle → css.inject
• deps:
  • inlineOnly / deps.onlyAllowBundle → deps.onlyBundle
  • skipNodeModulesBundle: true → deps.neverBundle: true
  • resolveDepSubpath now defaults to false; set it to true to preserve the previous behavior
• dts:
  • rolldown-plugin-dts was upgraded from 0.27.13 to 0.28.5
  • dts.oxc: true → dts.generator: 'oxc'
  • dts.tsgo: true → dts.generator: 'tsgo'; oxc and tsgo objects now only configure their respective generators
  • dts.volarPlugins → dts.customLanguages; rename each language's create hook to createVolarPlugins
  • Custom languages, including vue, now throw when combined with an incompatible generator
  • dts.cjsReexport was removed; dual-format builds now generate CJS declarations in a separate pass
• attw:
  • The default profile changed from strict to esm-only; set profile: 'strict' to preserve the previous checks
• programmatic API:
  • build() now returns { bundles, watch }; replace const bundles = await build() with const { bundles } = await build()
• requirements:
  • Node.js 25 is no longer supported; use ^22.18.0, ^24.11.0, or >=26.0.0
  • rolldown-plugin-dts now requires Rolldown 1.2.x
  • Legacy types and typesVersions fallbacks were removed; use TypeScript's bundler, node16, or nodenext module resolution

   🚨 Breaking Changes

• Drop support for Node.js 25  -  by @​sxzz (26950)
• Remove deprecated tsup compatibility options  -  by @​sxzz (50766)
• Drop types and typesVersionsfields  -  by @​sxzz (be3ea)
• attw:
  • Change default profile to esm-only  -  by @​sxzz (9b3cf)
• deps:
  • Remove deprecated deps.onlyAllowBundle  -  by @​sxzz (30c55)
  • Disable resolveDepSubpath by default  -  by @​sxzz (d300f)

... (truncated)

Commits

• 6493257 chore: release v0.23.1
• ba6acb9 chore: upgrade deps
• 6cbfec7 chore(deps): update dependency unplugin-vue to v8 (#1090)
• eb40c95 chore: declare package side effects
• f9c95d0 chore: align pnpm workspace settings
• e64bde4 chore: configure pnpm via devEngines
• 83f0c57 fix(pkg): pack tarball inside npm publish --dry-run (#1076)
• 1745223 fix(entry): honor custom root for object entry (#1072)
• 9655dcb chore: upgrade deps
• 30da631 docs: correct default value of minify
• Additional commits viewable in compare view

Updates react-native from 0.83.1 to 0.88.0

Release notes

Sourced from react-native's releases.

0.88.0

Added

• C++: Add <React/FeatureFlags.h> umbrella header as the public entry point for react/featureflags (f970054a8a by @​j-piasecki)
• C++: Add <React/RendererBridging.h> umbrella header as the public entry point for react/renderer/bridging (5b680c5f9f by @​j-piasecki)
• C++: Add <React/Timing.h> umbrella header as the public entry point for react/timing (70f172d29f by @​j-piasecki)
• C++: Added missing mutex include in HostTarget.h (3f8f5c216a by @​etodanik)
• EventTarget: Enable the imperative EventTarget API (addEventListener, removeEventListener, dispatchEvent) on native view refs in canary (8480b86820 by @​rubennorte)
• Feature Flags: Add enableImageTransparentTintColor feature flag (c5bd054983 by @​coado)
• JavaScript API: Deprecate 'react-native/Libraries/Core/InitializeCore'. Use 'react-native/setup-env' instead. (554baba159 by @​huntie)
• PlatformColor: Support a lazy raw color fallback for PlatformColor when native tokens fail to resolve (65008fcdd0 by @​Abbondanzo)
• React Native DevTools: Experimental performance screenshots support and Page.captureScreenshot is added to the EXPERIMENTAL channel (4be68ef785 by @​huntie)
• React Native DevTools: Support for inspecting WebSocket events in the Network panel is added to the CANARY channel (713ae6b1b9 by @​huntie)
• React Native DevTools: Users and agents can now capture app screenshots via the Page.captureScreenshot command (00efc0a440 by @​huntie)
• Text: Add object syntax for fontVariationSettings (376b99ff14 by @​evankatz14)
• TypeScript: Add isInstalled() and clearAllLogs() to the LogBox TypeScript declarations (a69badd468 by @​Abbondanzo)
• TypeScript: Add missing strictMode prop to FlatList TypeScript types (3e2403327c by @​drhops)
• TypeScript: Add TypeScript declarations for requestIdleCallback and cancelIdleCallback (c086431a4b by @​Critteros)
• VirtualizedList: Add missing ListItemComponent type to VirtualizedList props (5306e9229c by @​aravi365)

Android specific

• Feature Flags: Add enableMountingCoordinatorPullModelAndroid feature flag (ece0efe837 by @​coado)
• Network Inspection: Expose network event reporting to third-party networking stacks as an unstable API (83d0be8958 by @​huntie)
• Networking: Send app name and version as the default User-Agent header for network requests, matching iOS (04e50d540d by Calvin Liu)
• Renderer: Add inert Java plumbing (PullTransactionMountItem, FabricUIManager.onTransactionAvailable) for the pull model (6515647d94 by @​coado)
• Renderer: Wire the pull-model mounting path in C++ behind enableMountingCoordinatorPullModelAndroid (9da1a01153 by @​coado)
• Text: Add fontVariationSettings support for <Text> (19f7d144b9 by @​evankatz14)
• TextInput: Add fontVariationSettings support for TextInput (a688608090 by @​evankatz14)
• TurboModules: Add ArrayBuffer, the Java representation of a JS ArrayBuffer for TurboModules, with an explicit byte-ownership contract (5bb9639594 by Kamil Paradowski)
• TurboModules: Add ArrayBuffer support to Java TurboModules (5fb3ebce1a by Kamil Paradowski)
• TurboModules: Borrowed ArrayBuffer bytes are scoped to the synchronous call that received them. ArrayBuffer.bytes and ArrayBuffer.size throw IllegalStateException afterwards, and a ByteBuffer already obtained from bytes is unchecked and reads freed memory, so copy with ArrayBuffer.arrayBufferWithCopiedBytes to keep them (d84c13d511 by @​christophpurrer)

iOS specific

• Text: Add fontVariationSettings support on iOS (8415753e21 by @​evankatz14)
• Assets: Use asset catalog for ios images (26769a00b2 by @​janicduplessis)
• CocoaPods: Add a React-cxxstableapi dependency to third-party New Architecture pods so they can resolve React Native's C++ API guard headers (d3daf111e0 by @​coado)
• Legacy Architecture: Allow consumers to opt into RCT_REMOVE_LEGACY_MODULE_INTEROP and RCT_REMOVE_LEGACY_COMPONENT_INTEROP from CocoaPods and SwiftPM. Both default to off and will become the default in a future release (b933d18177 by @​christophpurrer)
• SceneDelegate: Add SceneDelegate lifecycle support (7bfe32fd33 by @​artus9033)
• Styles: Print warning advice when using shadow* styles without providing a solid background color (eb4d3892ab by @​hannojg)

Changed

• Babel: Platform.OS and Platform.select(...) inlining in react-native/babel-preset now requires the inlinePlatform option in addition to platform (f63b2a1cb5 by @​robhogan)
• Babel: Inline Platform.OS and Platform.select(...) for React Native Platform imports during the Babel preset, covering some cases that were previously left un-inlined. (40c06121a1 by @​robhogan)
• Build: Add React Native Maven pull-through cache fallback for prebuilt artifacts. (3bfb277fec by @​coado)
• Events: Enabled Web-based event dispatching refactor (31d33ce91b by @​rubennorte)
• Hermes: Bump Hermes to 260318099.0.3 (79024f7c59 by @​fabriziocucci)
• Hermes: Bump Hermes to 260318099.0.4 (993be7d6c6 by @​fabriziocucci)
• Hermes: Bump hermes-v1 to 260318099.0.1 (b113cf5864 by @​fabriziocucci)
• Legacy Architecture: Core components (ActivityIndicatorView, ModalHostView, PullToRefreshView, SafeAreaView, Switch) no longer report legacy RCT-prefixed names in their view configs (904812016f by @​christophpurrer)
• Metro: Bump Metro to 0.87.0 (fe511aba7c by @​robhogan)
• Metro: Bump the minimum Metro version to 0.87.1, so upgrading projects resolve the same Metro as freshly created ones (f2439a83cf by @​robhogan)

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.88.0

Added

• C++: Add <React/FeatureFlags.h> umbrella header as the public entry point for react/featureflags (f970054a8a by @​j-piasecki)
• C++: Add <React/RendererBridging.h> umbrella header as the public entry point for react/renderer/bridging (5b680c5f9f by @​j-piasecki)
• C++: Add <React/Timing.h> umbrella header as the public entry point for react/timing (70f172d29f by @​j-piasecki)
• C++: Added missing mutex include in HostTarget.h (3f8f5c216a by @​etodanik)
• EventTarget: Enable the imperative EventTarget API (addEventListener, removeEventListener, dispatchEvent) on native view refs in canary (8480b86820 by @​rubennorte)
• Feature Flags: Add enableImageTransparentTintColor feature flag (c5bd054983 by @​coado)
• JavaScript API: Deprecate 'react-native/Libraries/Core/InitializeCore'. Use 'react-native/setup-env' instead. (554baba159 by @​huntie)
• PlatformColor: Support a lazy raw color fallback for PlatformColor when native tokens fail to resolve (65008fcdd0 by @​Abbondanzo)
• React Native DevTools: Experimental performance screenshots support and Page.captureScreenshot is added to the EXPERIMENTAL channel (4be68ef785 by @​huntie)
• React Native DevTools: Support for inspecting WebSocket events in the Network panel is added to the CANARY channel (713ae6b1b9 by @​huntie)
• React Native DevTools: Users and agents can now capture app screenshots via the Page.captureScreenshot command (00efc0a440 by @​huntie)
• Text: Add object syntax for fontVariationSettings (376b99ff14 by @​evankatz14)
• TypeScript: Add isInstalled() and clearAllLogs() to the LogBox TypeScript declarations (a69badd468 by @​Abbondanzo)
• TypeScript: Add missing strictMode prop to FlatList TypeScript types (3e2403327c by @​drhops)
• TypeScript: Add TypeScript declarations for requestIdleCallback and cancelIdleCallback (c086431a4b by @​Critteros)
• VirtualizedList: Add missing ListItemComponent type to VirtualizedList props (5306e9229c by @​aravi365)

Android specific

• Feature Flags: Add enableMountingCoordinatorPullModelAndroid feature flag (ece0efe837 by @​coado)
• Network Inspection: Expose network event reporting to third-party networking stacks as an unstable API (83d0be8958 by @​huntie)
• Networking: Send app name and version as the default User-Agent header for network requests, matching iOS (04e50d540d by Calvin Liu)
• Renderer: Add inert Java plumbing (PullTransactionMountItem, FabricUIManager.onTransactionAvailable) for the pull model (6515647d94 by @​coado)
• Renderer: Wire the pull-model mounting path in C++ behind enableMountingCoordinatorPullModelAndroid (9da1a01153 by @​coado)
• Text: Add fontVariationSettings support for <Text> (19f7d144b9 by @​evankatz14)
• TextInput: Add fontVariationSettings support for TextInput (a688608090 by @​evankatz14)
• TurboModules: Add ArrayBuffer, the Java representation of a JS ArrayBuffer for TurboModules, with an explicit byte-ownership contract (5bb9639594 by Kamil Paradowski)
• TurboModules: Add ArrayBuffer support to Java TurboModules (5fb3ebce1a by Kamil Paradowski)
• TurboModules: Borrowed ArrayBuffer bytes are scoped to the synchronous call that received them. ArrayBuffer.bytes and ArrayBuffer.size throw IllegalStateException afterwards, and a ByteBuffer already obtained from bytes is unchecked and reads freed memory, so copy with ArrayBuffer.arrayBufferWithCopiedBytes to keep them (d84c13d511 by @​christophpurrer)

iOS specific

• Text: Add fontVariationSettings support on iOS (8415753e21 by @​evankatz14)
• Assets: Use asset catalog for ios images (26769a00b2 by @​janicduplessis)
• CocoaPods: Add a React-cxxstableapi dependency to third-party New Architecture pods so they can resolve React Native's C++ API guard headers (d3daf111e0 by @​coado)
• Legacy Architecture: Allow consumers to opt into RCT_REMOVE_LEGACY_MODULE_INTEROP and RCT_REMOVE_LEGACY_COMPONENT_INTEROP from CocoaPods and SwiftPM. Both default to off and will become the default in a future release (b933d18177 by @​christophpurrer)
• SceneDelegate: Add SceneDelegate lifecycle support (7bfe32fd33 by @​artus9033)
• Styles: Print warning advice when using shadow* styles without providing a solid background color (eb4d3892ab by @​hannojg)

Changed

• Babel: Platform.OS and Platform.select(...) inlining in react-native/babel-preset now requires the inlinePlatform option in addition to platform (f63b2a1cb5 by @​robhogan)
• Babel: Inline Platform.OS and Platform.select(...) for React Native Platform imports during the Babel preset, covering some cases that were previously left un-inlined. (40c06121a1 by @​robhogan)
• Build: Add React Native Maven pull-through cache fallback for prebuilt artifacts. (3bfb277fec by @​coado)
• Events: Enabled Web-based event dispatching refactor (31d33ce91b by @​rubennorte)
• Hermes: Bump Hermes to 260318099.0.3 (79024f7c59 by @​fabriziocucci)
• Hermes: Bump Hermes to 260318099.0.4 (993be7d6c6 by @​fabriziocucci)
• Hermes: Bump hermes-v1 to 260318099.0.1 (b113cf5864 by @​fabriziocucci)
• Legacy Architecture: Core components (ActivityIndicatorView, ModalHostView, PullToRefreshView, SafeAreaView, Switch) no longer report legacy RCT-prefixed names in their view configs (904812016f by @​christophpurrer)
• Metro: Bump Metro to 0.87.0 (fe511aba7c by @​robhogan)

... (truncated)

Commits

• 5c35c82 Release 0.88.0
• 1a72139 Release 0.88.0-rc.6
• 536c008 fix(react-native): add missing AssetRegistry TypeScript types (#58964)
• a3249a2 Release 0.88.0-rc.5
• 62e60c3 Release 0.88.0-rc.4
• ee4bd40 Make generated props and style types augmentable (#58168)
• 7822b9c Properly enable Pressable after disabled prop reset (#58799)
• 0782c61 Release 0.88.0-rc.3
• 993be7d Bump Hermes to 260318099.0.4
• 7fdfc4e Repair stale staged headers in the iOS prebuild (#58596)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native since your current version.

Updates @animo-id/expo-digital-credentials-api from 0.4.0 to 0.5.1

Release notes

Sourced from @​animo-id/expo-digital-credentials-api's releases.

Release 0.5.1

• fix(ios): add CFBundleDisplayName (a112c53)

Release 0.5.0

• chore: set up for trusted publishing (0c89e41)
• chore: address feedback, suppot multi-entry requests (bf0f38c)
• chore: some updatesg (a12a9f5)
• fix: only register doctypes in entitlement (fede214)
• feat: iOS and org-iso-mdoc protocol support (1ac1b94)
• Merge pull request #5 from animo/docs/fix-broken-link (4d6312a)
• docs: fix broken link (0e64c85)

Commits

• a112c53 fix(ios): add CFBundleDisplayName
• 0c89e41 chore: set up for trusted publishing
• bf0f38c chore: address feedback, suppot multi-entry requests
• a12a9f5 chore: some updatesg
• fede214 fix: only register doctypes in entitlement
• 1ac1b94 feat: iOS and org-iso-mdoc protocol support
• 4d6312a Merge pull request #5 from animo/docs/fix-broken-link
• 0e64c85 docs: fix broken link
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​animo-id/expo-digital-credentials-api since your current version.

Updates @owf/mdoc from 0.6.0 to 0.8.3

Changelog

Sourced from @​owf/mdoc's changelog.

0.8.3

Patch Changes

• 93f6eff: Read a status of null in the MSO as absent. ISO/IEC 18013-5 does not allow null there, but Apple Wallet's developer mDLs send it, which failed with Error decoding Status: Expected map, received null.
• 6d8e998: Report a status list entry that is not Valid as StatusListEntryNotValidError with its uri, idx and status, so it can be told apart from a status list that fails verification. It extends InvalidRevocationListError. IssuerAuth.verify adds it, or a revoked identifier, to the failed check as a VerificationAssessmentResult.
• b7002dd: Accept a status list whose x5chain is in the unprotected header when a protected x5t matches its leaf certificate. ISO/IEC 18013-5 § 12.3.6.3 requires the chain in the protected header, but RFC 9360 allows it with that binding. The context of IssuerAuth.verify, IssuerAuth.verifyStatus and verifyStatusListToken now requires crypto to check the x5t.
• Updated dependencies [b7002dd]
• Updated dependencies [b4105be]
• Updated dependencies [dacb544]
  • @​owf/cose@​0.5.0
  • @​owf/identity-common@​0.5.0
  • @​owf/token-status-list@​0.5.0

0.8.2

Patch Changes

• 3b15c07: Expose the values behind failed time and status checks on the thrown exceptions, so callers can tell clock drift apart from an expired or stale token without parsing messages.

  • @sd-jwt/core: a failed iat, nbf, exp or maximum age check throws a JwtTimeClaimException (a subclass of SDJWTException). Its details (JwtTimeClaimErrorDetails) hold the claim, its value, the current time, the allowed clock skew and, for the maximum age check, the maximum age. SDJWTException has a new optional code, here JWT_EXPIRED, JWT_NOT_YET_VALID or JWT_TOO_OLD; safeVerify uses it before falling back to message matching.
  • @sd-jwt/core: time check failures of the Key Binding JWT say Key Binding JWT instead of JWT and carry the new codes KEY_BINDING_JWT_EXPIRED, KEY_BINDING_JWT_NOT_YET_VALID and KEY_BINDING_JWT_TOO_OLD. safeVerify reports these codes instead of KEY_BINDING_SIGNATURE_INVALID.
  • @sd-jwt/sd-jwt-vc: when the status list token fails verification, the SLException has the status list URI in details and the original exception as cause. A credential whose status is not valid fails with code STATUS_INVALID and details { uri, idx, status }. A custom statusValidator receives the URI and index as a second argument.
  • @owf/mdoc: the reason of the MSO validity check includes the MSO's validity period and the allowed clock skew.

• Updated dependencies [f599719]

• Updated dependencies [f2aaf3e]

  • @​owf/token-status-list@​0.4.2
  • @​owf/cose@​0.4.2
  • @​owf/identity-common@​0.4.2

0.8.1

Patch Changes

• 89bd296: add the EngagementToApp handover of ISO/IEC TS 18013-7 Annex A, so a session transcript for device retrieval to a website can be built and decoded
• @​owf/cose@​0.4.1
  • @​owf/identity-common@​0.4.1
  • @​owf/token-status-list@​0.4.1

0.8.0

Minor Changes

• 83900b6: Enforce the age_over_NN limit of ISO/IEC 18013-5 7.2.5, "an mDL reader shall not request more than two age_over_NN data elements", counted per namespace:

  • ItemsRequest.create, and therefore IsoMdocDcApi.createRequest, throws an AgeOverLimitExceededError when more than two are requested in a namespace. A decoded request is not checked, so that a holder can report it.
  • Holder.verifyDeviceRequest and IsoMdocDcApi.parseRequest report the limit through the verification callback, so with the default callback a request for more than two throws a VerificationError.
  • Holder.matchDeviceRequest does not match any credential against a doc request for more than two. The doc request fails with invalidDocRequest: { failure: 'ageOverLimitExceeded', reason } and empty failedCredentials.
  • DeviceResponse.createWithDeviceRequest throws an AgeOverLimitExceededError when a document would disclose more than two distinct age attestations in a namespace. Only what is disclosed counts, so a holder can still answer such a request by selecting at most two of them through elements.

• 83900b6: Add ISO/IEC TS 18013-7:2025 Annex C (org-iso-mdoc) DC API support: EncryptionInfo,

... (truncated)

Commits

• See full diff in compare view

Updates @biomejs/biome from 2.5.12 to 2.6.2

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.2

2.6.2

Minor Changes

• #11479 5c60ba8 Thanks @​nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

• #11742 3a1356d Thanks @​Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.

• #12318 774b5b5 Thanks @​Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

  Invalid:

  type User {
    id: ID!
  }
  enum Role {
  ADMIN
  USER
  }
  directive @​auth on FIELD_DEFINITION

• #6886 3479d15 Thanks @​christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

• #11102 0874b7f Thanks @​gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.

• #10711 40de5a0 Thanks @​soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

  This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.

  {
    "plugins": [
      { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
      { "path": "local-plugin.grit", "resolutionKind": "project" },
      { "path": "local-plugin.grit" }
    ]
  }

  Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.

• #11432 4befd08 Thanks @​ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

  Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.6.2

Patch Changes

• #12494 3f40430 Thanks @​ematipico! - Fix another patch

2.6.1

Patch Changes

• #12492 edaa1db Thanks @​ematipico! - Fixes a problem with npm publishing

2.6.0

Minor Changes

• #11479 5c60ba8 Thanks @​nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

• #11742 3a1356d Thanks @​Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.

• #12318 774b5b5 Thanks @​Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

  Invalid:

  type User {
    id: ID!
  }
  enum Role {
  ADMIN
  USER
  }
  directive @​auth on FIELD_DEFINITION

• #6886 3479d15 Thanks @​christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

• #11102 0874b7f Thanks @​gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.

• #10711 40de5a0 Thanks @​soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

  This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.

  {
    "plugins": [
      { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
      { "path": "local-plugin.grit", "resolutionKind": "project" },

... (truncated)

Commits

• 0d9aef6 ci: release (#12495)
• 30ffad1 ci: release (#12493)
• 8c814e1 ci: release (#12065)
• e51cec2 chore: update sponsors (#12428)
• cb88f07 feat(lint): add noSvelteClassDirective (

[dependabot]

Labels

The following labels could not be found: pnpm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 91155c8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.