chore(deps): update dependency @biomejs/biome to v2.5.1 by renovate[bot] · Pull Request #9 · bonddim/azure-devops-extensions

renovate · 2026-03-31T07:19:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@biomejs/biome (source)	devDependencies	minor	`2.4.8` → `2.5.1`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.5.1`

Compare Source

Patch Changes

#10722 f8a303d Thanks @denbezrukov! - Fixed CSS formatter output for comments between import media queries.

-@&#8203;import url("print.css") print,
-/* comment */
-screen;
+@&#8203;import url("print.css") print, /* comment */ screen;

#10738 9fdc560 Thanks @JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.
```
-    "path": "src\account\setup-passkey.tsx",
+    "path": "src\\account\\setup-passkey.tsx",
```
#10626 5f837df Thanks @tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.
#10535 c245f9d Thanks @Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.
#10668 a0f197e Thanks @Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.
#10667 d8c3e87 Thanks @Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.
#10696 ef2373f Thanks @ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.
#10705 4ccb410 Thanks @ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.
#10669 aa0a6eb Thanks @Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.
#10689 844b1be Thanks @ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.
#10695 043fbb5 Thanks @ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.
#10712 5941df2 Thanks @Conaclos! - Improved the diagnostic and the documentation of useFlatMap.
#10615 23814f1 Thanks @qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.
#10688 ec69489 Thanks @ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.
#10701 6c2e0d7 Thanks @ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.
#10681 888515b Thanks @Conaclos! - Fixed useExportType that reported useless details in some diagnostics.
#10220 3694a13 Thanks @theBGuy! - Fixed useAnchorContent false positive for <a> elements used as render prop values (e.g. render={<a href="..." />}), a pattern where the receiving component renders its children inside the anchor element.
#10702 98823fb Thanks @ematipico! - Fixed #10612. The Biome parser now correctly parses processing instructions. The following SVG doesn't throw errors anymore:
```
<?xml version="1.0" encoding="UTF-8" ?>

<svg></svg>
```

`v2.5.0`

Compare Source

Minor Changes

#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.

#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".
```

<div onclick="handleClick()">Click me</div>


<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>


<button onclick="handleClick()">Submit</button>
```
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.
```

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
```
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.
```
/* styles.css — .ghost is never used in any importing file */
.button {
  color: blue;
}
.ghost {
  color: red;
}
```
```
/* App.jsx */
import "./styles.css";
export default () => <div className="button" />;
```
#9546 6567efa Thanks @nhedger! - Added a biome upgrade command for standalone installations. It upgrades Homebrew installs with brew upgrade biome, updates manually installed binaries from the latest GitHub release, and tells npm users to upgrade with their package manager instead.

#9716 701767a Thanks @faizkhairi! - Added the HTML version of the useHeadingContent rule. The rule now enforces that heading elements (h1-h6) have content accessible to screen readers in HTML, Vue, Svelte, and Astro files.

<!-- Invalid: empty heading -->
<h1></h1>

<!-- Invalid: heading hidden from screen readers -->
<h1 aria-hidden="true">invisible content</h1>

<!-- Valid: heading with text content -->
<h1>heading</h1>

<!-- Valid: heading with accessible name -->
<h1 aria-label="Screen reader content"></h1>

#9582 f437ef8 Thanks @rahuld109! - Added the HTML version of the useKeyWithMouseEvents rule. The rule now enforces that onmouseover is accompanied by onfocus and onmouseout is accompanied by onblur in HTML, Vue, Svelte, and Astro files.
```

<div onmouseover="handleMouseOver()"></div>


<div onmouseover="handleMouseOver()" onfocus="handleFocus()"></div>
```
#9275 1fdbcee Thanks @ff1451! - Added the new assist action useSortedTypeFields, which sorts the fields of GraphQL object types, interface types and input object types alphabetically, e.g. name, age, id becomes age, id, name.
#10561 78075b7 Thanks @Conaclos! - Added a new style option to useExportType,
which enforces a style for exporting types.
This is the same option as the one provided by useImportType.
#8987 d16e32b Thanks @DerTimonius! - Ported the useValidAnchor rule to HTML. This rule enforces that all anchors are valid and that they are navigable elements.
#9533 4d251d4 Thanks @ematipico! - The init command now prints the Biome logo.
#10069 0eb9310 Thanks @Netail! - Added the HTML lint rule noStaticElementInteractions, which enforces that static, visible elements (such as <div>) that have click handlers use the valid role attribute.

Invalid:
```
<div onclick="myFunction()"></div>
```
#9134 2a43488 Thanks @ematipico! - Added the assist action useSortedPackageJson.

This action organizes package.json fields according to the same conventions as the popular sort-package-json tool.
#9309 7daa18b Thanks @Bertie690! - The allowDoubleNegation option has been added to noImplicitCoercions to allow ignoring double negations inside code.

With the option enabled, the following example is considered valid and is ignored by the rule:
```
const truthy = !!value;
```
#9700 894f3fb Thanks @ematipico! - The Biome Language server now supports the "go-to definition" feature.

When the cursor of the mouse is hovering an entity (variable, CSS class, type, etc.), and the command CTRL + click is triggered, the editor jumps to where this entity is defined, if the language server can find it.

Here's what Biome is able to resolve:
- Variables and types used in JavaScript modules, defined in the same file or imported from another module.
- JSX Components used in JavaScript modules, defined in the same file or imported from another module.
- CSS classes used in JSX and HTML-ish files (Vue, Svelte and Astro), and defined in CSS files.
- Components used in HTML-ish files and defined in other HTML-ish.
- Variables used in HTML-ish files and defined in the same file or imported from another module (JavaScript or HTML-ish).

#10070 bae0710 Thanks @Conaclos! - Added the :STYLE: group matcher for organizeImports that matches style imports.

For example, the following configuration...

{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": {
          "level": "on",
          "options": {
            "groups": ["**", "!:STYLE:"],
            "sortBareImports": true
          }
        }
      }
    }
  }
}

...places style imports last:

- import "./style.css"
  import A from "./a.js"
+ import "./style.css"

#9170 e3107de Thanks @mdrobny! - Added bundleDependencies option to NoUndeclaredDependencies rule.

This rule now supports imports of packages that are defined only in bundleDependencies and bundledDependencies arrays.
#9547 01f8473 Thanks @mujpao! - Added new assist rule useSortedAttributes for HTML, porting the existing JSX rule. This rule enforces sorted HTML attributes.

Invalid
```
<input type="text" id="name" name="name" />
```
#9366 2ca1117 Thanks @dyc3! - Added the html.parser.vue configuration option. When enabled, it adds support for the parsing of Vue in .html files. Most Vue users don't need to enable this option since Vue files typically use the .vue extension, but it can be useful for projects that embed Vue syntax in regular HTML files.
#9073 74b20ee Thanks @chocky335! - Added support for applying GritQL plugin rewrites as code actions. GritQL plugins that use the rewrite operator (=>) now produce fixable diagnostics for JavaScript, CSS, and JSON files. By default, plugin rewrites are treated as unsafe fixes and require --write --unsafe to apply. Plugin authors can pass fix_kind = "safe" to register_diagnostic() to mark a fix as safe, allowing it to be applied with just --write.

Example plugin (useConsoleInfo.grit):
```
language js

`console.log($msg)` as $call where {
    register_diagnostic(span = $call, message = "Use console.info instead of console.log.", severity = "warn", fix_kind = "safe"),
    $call => `console.info($msg)`
}
```
Running biome check --write applies safe rewrites. Unsafe rewrites (the default, or fix_kind = "unsafe") still require --write --unsafe.

#9384 f4c9edc Thanks @Conaclos! - Added the sortBareImports option to organizeImports,
which allows bare imports to be sorted within other imports when set to false.

{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": {
          "level": "on",
          "options": { "sortBareImports": true }
        }
      }
    }
  }
}

- import "b";
  import "a";
+ import "b";
  import { A } from "a";
+ import "./file";
  import { Local } from "./file";
- import "./file";

#8731 e7872bf Thanks @siketyan! - Added the watch mode (--watch) to the CLI for check/format/lint commands. By enabling this option, Biome will re-run the check automatically when any file in the workspace has changed after the first run.
#10106 9b35f78 Thanks @ematipico! - Biome can now format and lint .svg files.
#9967 e9b6c17 Thanks @dyc3! - Added HTML support for noExcessiveLinesPerFile. Biome now reports HTML files that exceed the configured line limit, including when skipBlankLines is enabled.
#9491 b3eb63c Thanks @IxxyDev! - Added the HTML lint rule noAriaUnsupportedElements. This rule enforces that elements that do not support ARIA roles, states, and properties (meta, html, script, style) do not have role or aria-* attributes.
```

<meta charset="UTF-8" role="meta" />
```
#9306 afd57a6 Thanks @viraxslot! - Added the noNoninteractiveTabindex lint rule for HTML. This rule enforces that tabindex is not used on non-interactive elements, as it can cause usability issues for keyboard users.
```
<div tabindex="0">Invalid: non-interactive element</div>
`
```
#9276 6d041d9 Thanks @IxxyDev! - Added the HTML lint rule noRedundantRoles. This rule enforces that explicit role attributes are not the same as the implicit/default role of an HTML element. It supports HTML, Vue, Svelte, and Astro files.
```

<button role="button"></button>
```
#9813 69aadc2 Thanks @ematipico! - Added a new linter configuration called preset. With the new option, users can enable different kinds of rules at once.

The following presets are available:
- "recommended": it enables all Biome-recommended rules, or recommended rules of a group;
- "all": it enables all Biome rules, or enables all rules of a group;
- "none": it disables all Biome rules, or disable all rules of a group.
You can enable recommended rules:
```
{
  "linter": {
    "rules": {
      "preset": "recommended"
    }
  }
}
```
You can enable all rules at once:
```
{
  linter: {
    rules: {
      preset: "all", // enables all rules
    },
  },
}
```
Or enable all rules for a group:
```
{
  linter: {
    rules: {
      style: {
        preset: "all", // enables all rules in the style group
      },
    },
  },
}
```
This new option, however, doesn't affect how nursery rules work. Nursery rules must be enabled singularly, due to their nature.

This new option is meant to replace recommended, so make sure to run the migrate command.
#10022 3422d71 Thanks @Netail! - Added the HTML lint rule noNoninteractiveElementToInteractiveRole, which enforces that interactive ARIA roles are not assigned to non-interactive HTML elements.

Invalid:
```
<h1 role="checkbox"></h1>
```
#8396 13785fc Thanks @apple-yagi! - Biome now supports pnpm catalogs (default and named) when resolving dependencies for linting. This behavior is opt-in and requires setting javascript.resolver.experimentalPnpmCatalogs to true.
#10028 1009414 Thanks @Netail! - Added the HTML lint rule noInteractiveElementToNoninteractiveRole, which enforces that non-interactive ARIA roles are not assigned to interactive HTML elements.

Invalid:
```
<input role="img" />
```
#9853 816302f Thanks @Netail! - Added the new assist action useSortedSelectionSet, which sorts GraphQL selection sets alphabetically, e.g. name, age, id becomes age, id, name.

Invalid:
```
query {
  name
  age
  id
}
```

#10074 9c7c6eb Thanks @georgephillips! - Added a kind field to the ImportMatcher used by the organizeImports assist action. The new field selects imports by their syntactic kind and currently supports bare (matching side-effect imports such as import "polyfill") with optional ! negation (!bare). The matcher composes with the existing type and source fields, so users can express patterns such as "only bare imports that import a CSS file" ({ "kind": "bare", "source": "**/*.css" }).

For example, with the following configuration:

{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": {
          "level": "on",
          "options": {
            "sortBareImports": true,
            "groups": [
              { "kind": "!bare" },
              ":BLANK_LINE:",
              { "kind": "bare" }
            ]
          }
        }
      }
    }
  }
}

...the following code:

import "./register-my-component";
import { render } from "react-dom";
import "./polyfill";
import { Button } from "@&#8203;/components/Button";

...is organized as:

import { render } from "react-dom";
import { Button } from "@&#8203;/components/Button";

import "./polyfill";
import "./register-my-component";

#9171 ce65710 Thanks @chocky335! - Added includes option for plugin file scoping. Plugins can now be configured with glob patterns to restrict which files they run on. Use negated globs for exclusions.
```
{
  "plugins": [
    "global-plugin.grit",
    {
      "path": "scoped-plugin.grit",
      "includes": ["src/**/*.ts", "!**/*.test.ts"]
    }
  ]
}
```
#9617 dcb99ef Thanks @faizkhairi! - Ported useAriaActivedescendantWithTabindex a11y rule to HTML.
#9496 1dfb829 Thanks @aviraldua93! - Added HTML support for the noAriaHiddenOnFocusable accessibility lint rule, which enforces that aria-hidden="true" is not set on focusable elements. Focusable elements include native interactive elements (<button>, <input>, <select>, <textarea>), elements with href (<a>, <area>), elements with tabindex >= 0, and editing hosts (contenteditable). Includes an unsafe fix to remove the aria-hidden attribute.
```

<button aria-hidden="true">Submit</button>


<div aria-hidden="true">decorative content</div>
```
#9792 f516854 Thanks @Maximiliano-Zeballos! - Added the useSemanticElements lint rule for HTML. The rule now detects the use of role attributes in HTML elements and suggests using semantic elements instead.

For example, the following code is now flagged:
```
<div role="navigation"></div>
```
The rule suggests using <nav> instead.
#9761 cbbb7d5 Thanks @Maximiliano-Zeballos! - Ported the useValidAriaProps lint rule to HTML. This rule checks that all aria-* attributes used in HTML elements are valid ARIA attributes as defined by the WAI-ARIA specification.
#9928 aa82576 Thanks @aviraldua93! - Ported useValidAriaValues to HTML. Biome now validates static aria-* attribute values in HTML elements against WAI-ARIA types, catching invalid values such as aria-hidden="yes".
#10562 6642895 Thanks @ematipico! - Promoted 73 nursery rules to stable groups.

Four rules were renamed as part of the promotion:
- noFloatingClasses is now noUnusedInstantiation, because the rule checks any discarded new expression, not only classes.
- noMultiStr is now noMultilineString.
- useFind is now useArrayFind.
- useSpread is now useSpreadOverApply, because the rule enforces spread call arguments over Function.apply(), not array or object spread.

Correctness

Promoted the following rules to the correctness group:

noBeforeInteractiveScriptOutsideDocument
noUnusedInstantiation
useInlineScriptId (recommended, Next.js domain)
noVueVIfWithVFor (recommended, Vue domain)
useVueValidVBind (recommended, Vue domain)
useVueValidVElse (recommended, Vue domain)
useVueValidVElseIf (recommended, Vue domain)
useVueValidVHtml (recommended, Vue domain)
useVueValidVIf (recommended, Vue domain)
useVueValidVOn (recommended, Vue domain)
useVueValidVText (recommended, Vue domain)
useVueValidTemplateRoot (recommended, Vue domain)
useVueValidVCloak (recommended, Vue domain)
useVueValidVOnce (recommended, Vue domain)
useVueValidVPre (recommended, Vue domain)
useVueVForKey (recommended, Vue domain)
noDuplicateAttributes (recommended)
noDuplicateArgumentNames (recommended)
noDuplicateInputFieldNames (recommended)
noDuplicateVariableNames (recommended)
noDuplicateEnumValueNames (recommended)
useLoneAnonymousOperation (recommended)

Suspicious

Promoted the following rules to the suspicious group:

noShadow
noUnnecessaryConditions
noParametersOnlyUsedInRecursion
noUnknownAttribute
useArraySortCompare
noForIn
noDuplicatedSpreadProps
noEqualsToNull
noProto (recommended)
noUndeclaredEnvVars (recommended, Turborepo domain)
noReturnAssign (default severity: error)
noDuplicateEnumValues (recommended)
noVueArrowFuncInWatch (recommended, Vue domain)
noNestedPromises
noLeakedRender
noDeprecatedMediaType (recommended)
noDuplicateGraphqlOperationName
useRequiredScripts

Style

Promoted the following rules to the style group:

useVueMultiWordComponentNames (recommended, Vue domain)
useVueDefineMacrosOrder
noIncrementDecrement
noContinue
useSpreadOverApply
noTernary
noMultilineString
noMultiAssign
noExcessiveClassesPerFile
noExcessiveLinesPerFile
noVueOptionsApi
useErrorCause
useConsistentEnumValueType
useConsistentMethodSignatures
useGlobalThis (default severity: warn)
useDestructuring
useVueHyphenatedAttributes (recommended, Vue domain)
useVueConsistentVBindStyle (recommended, Vue domain)
useVueConsistentVOnStyle (recommended, Vue domain)
noHexColors
useConsistentGraphqlDescriptions
noRootType
useLoneExecutableDefinition
useInputName

Complexity

Promoted the following rules to the complexity group:

useArrayFind
noRedundantDefaultExport (default severity: warn)
noUselessReturn
noDivRegex

Performance

Promoted the following rules to the performance group:

Security

Promoted the following rules to the security group:

noScriptUrl (recommended)

A11y

Promoted the following rules to the a11y group:

noAmbiguousAnchorText (recommended)
#10121 450f8e1 Thanks @jongwan56! - Biome now applies Git's local exclude file when VCS ignore files are enabled. Files listed in .git/info/exclude are skipped the same way as files listed in .gitignore, including in linked worktrees.
#9397 d5913c9 Thanks @mvarendorff! - Added ignore option to the noUnusedVariables rule. The option allows excluding identifiers by providing a list of ignored names. It also allows excluding kinds of identifiers from this rule entirely, which may be useful when loading classes dynamically.

For example, unused classes as well as all unused variables, functions, etc. called "unused" may be ignored entirely with the following configuration:
```
{
  "ignore": {
    "*": ["unused"],
    "class": ["*"]
  }
}
```
#10089 71a21f0 Thanks @Netail! - Added the lint rule noLabelWithoutControl to HTML, which enforces that a label element or component has a text label and an associated input.
```
<label></label>
```
#10015 1828261 Thanks @Netail! - Added the HTML lint rule useAriaPropsSupportedByRole, which enforces that ARIA properties are valid for the roles that are supported by the element.
```
<a href="#" aria-checked></a>
```
#10234 1a51569 Thanks @ematipico! - Added the delimiterSpacing formatter option. This option inserts spaces inside delimiters (after the opening delimiter and before the closing delimiter) when the content fits on a single line. Empty delimiters are not affected, and no space is added before the opening delimiter. The specific delimiters affected depend on the language. It can be configured globally via formatter.delimiterSpacing or per-language via javascript.formatter.delimiterSpacing, json.formatter.delimiterSpacing, and css.formatter.delimiterSpacing. Defaults to false.
```
- callFn(foo)
+ callFn( foo )
```
```
- const arr = [1, 2, 3];
+ const arr = [ 1, 2, 3 ];
```
JavaScript

When enabled, Biome inserts spaces inside parentheses (e.g., foo( a, b )), square brackets (e.g., [ a, b ]), template literal interpolations (e.g., ${ expr }), and the logical NOT operator (e.g., ! x, but in chains only after the last one: !! x). Only applies when the content fits on a single line. Empty delimiters and the space before the opening delimiter are not affected.
```
- if (condition) {}
+ if ( condition ) {}
```
```
- `Hello ${name}!`
+ `Hello ${ name }!`
```
JSX

When enabled, Biome inserts spaces inside JSX expression braces (e.g., attr={ value }) and spread attributes (e.g., { ...props }). Only applies when the content fits on a single line. Empty delimiters are not affected.
```
- <Foo bar={value} />
+ <Foo bar={ value } />
```
TypeScript

When enabled, Biome inserts spaces inside TypeScript angle brackets (e.g., foo< T >()), indexed access types (e.g., T[ K ]), mapped types, tuple types, type parameters, and index signatures. Only applies when the content fits on a single line. Empty delimiters are not affected.
```
- type Result = Map<string, number>;
+ type Result = Map< string, number >;
```
JSON

When enabled, Biome inserts spaces inside square brackets when the content fits on a single line. Empty brackets are not affected.
```
- [1, 2, 3]
+ [ 1, 2, 3 ]
```
CSS

When enabled, Biome inserts spaces inside parentheses and square brackets when the content fits on a single line. Empty delimiters are not affected.
```
- rgba(0, 0, 0, 1)
+ rgba( 0, 0, 0, 1 )
```
```
- [data-attr]
+ [ data-attr ]
```
#10461 6bac1c3 Thanks @TXWSLYF! - Implements #9445. Added the allowImplicit option to useIterableCallbackReturn. When enabled, callbacks can use return; to implicitly return undefined, matching ESLint's array-callback-return rule.

#9571 5a8eb75 Thanks @dyc3! - Added configurable options to the useNumericSeparators rule. Users can now customize the minimum number of digits required before adding separators and the group length for each type of numeric literal (binary, octal, decimal, hexadecimal).

{
  "linter": {
    "rules": {
      "style": {
        "useNumericSeparators": {
          "level": "error",
          "options": {
            "decimal": {
              "minimumDigits": 7,
              "groupLength": 3
            },
            "hexadecimal": {
              "minimumDigits": 4,
              "groupLength": 2
            }
          }
        }
      }
    }
  }
}

#10067 6064312 Thanks @Netail! - Added the lint rule useFocusableInteractive to HTML, which enforces elements with an interactive role and interaction handler to be focusable.

Invalid:
```
<div role="button"></div>
```
#10026 fb42ac4 Thanks @Netail! - Added the HTML lint rule noNoninteractiveElementInteractions, which disallows use event handlers on non-interactive elements.

Invalid:
```
<div onclick="myFunction()">button</div>
```
#10000 2093e3e Thanks @Netail! - Added the new assist action useSortedEnumMembers, which sorts TypeScript & GraphQL enum members.

Invalid:
```
enum Role {
  SUPER_ADMIN
  ADMIN
  USER
  GOD
}
```
#10013 ad01d3d Thanks @Netail! - Added the HTML lint rule useValidAutocomplete, which enforces using valid values for the autocomplete attribute on input elements.
```
<input autocomplete="incorrect" />
```

Patch Changes

#10498 995c1ff Thanks @citadelgrad! - Added the nursery rule useReactFunctionComponentDefinition, which enforces a consistent function type for named React function components.

For example, the following snippet triggers the rule by default.
```
const MyComponent = (props) => {
  return <div>{props.name}</div>;
};
```
#9974 ff635a9 Thanks @pkallos! - Added ignoreMixedLogicalExpressions to useNullishCoalescing, partially addressing #9232. When enabled, Biome ignores || and ||= mixed with && in the same expression tree.
#10503 c656679 Thanks @Mokto! - Added the new nursery rule useSvelteRequireEachKey, a Svelte lint rule that reports {#each} blocks with item bindings that are missing a key.
#10516 0f29b83 Thanks @Dotify71! - Added useIncludes to the nursery group. This rule flags comparisons of String.prototype.indexOf() or Array.prototype.indexOf() against -1 and suggests replacing them with the clearer includes() / !includes() form.
#10487 0c03ee3 Thanks @Mokto! - Fixed a Svelte parser error that incorrectly required a binding variable after {:then} and {:catch}. Biome now correctly accepts {:then} and {:catch} without a binding, as well as the {#await expr then} and {#await expr catch} shorthand forms.
#10566 a4a294c Thanks @dyc3! - Fixed useVueHyphenatedAttributes: The rule now only reports diagnostics in Vue files and ignores SVG elements.
#10565 72ccf3b Thanks @dyc3! - Fixed useVueConsistentVBindStyle: The rule no longer reports argument-less v-bind directives because they cannot be converted to shorthand syntax.
#10591 6e8557b Thanks @xsourabhsharma! - Fixed #10563: Biome now parses comma-separated CSS Modules composes values, such as composes: classA from "./a.css", classB from "./b.css";.
#10603 174b21b Thanks @denbezrukov! - Fixed CSS formatting for grid-template-areas declarations with comments before multiline values. Biome now keeps grid area rows aligned instead of adding an extra declaration-boundary indent.
```
 .grid {
   grid-template-areas:
 /* row */
-      "header header"
-      "footer footer";
+    "header header"
+    "footer footer";
 }
```
#10542 [c3f07f7](https://redirect.github.com/biomejs/biome/commit

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "after 4am on tuesday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-03-31T07:19:24Z

⚠️ No Changeset found

Latest commit: 8c79e2d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

sonarqubecloud · 2026-04-30T02:16:17Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2026-05-05T08:07:09Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2026-06-05T07:47:28Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

sonarqubecloud · 2026-06-27T03:13:23Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from e0dd7d0 to ea808be Compare March 31, 2026 07:20

renovate Bot added the auto-update label Mar 31, 2026

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.10~~ chore(deps): update dependency @biomejs/biome to v2.4.9 Mar 31, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from ea808be to b7d4719 Compare April 15, 2026 20:12

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.9~~ chore(deps): update dependency @biomejs/biome to v2.4.11 Apr 15, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from b7d4719 to 10fe6d1 Compare April 19, 2026 06:16

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.11~~ chore(deps): update dependency @biomejs/biome to v2.4.12 Apr 19, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from 10fe6d1 to 7183b86 Compare April 30, 2026 02:15

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.12~~ chore(deps): update dependency @biomejs/biome to v2.4.13 Apr 30, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from 7183b86 to 5638995 Compare May 5, 2026 08:05

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.13~~ chore(deps): update dependency @biomejs/biome to v2.4.14 May 5, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from 5638995 to 46e99f4 Compare May 13, 2026 06:52

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.14~~ chore(deps): update dependency @biomejs/biome to v2.4.15 May 13, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from 46e99f4 to e4a9338 Compare May 21, 2026 23:57

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from e4a9338 to eb9f82e Compare June 5, 2026 07:44

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.15~~ chore(deps): update dependency @biomejs/biome to v2.4.16 Jun 5, 2026

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from eb9f82e to a94a080 Compare June 20, 2026 08:15

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.4.16~~ chore(deps): update dependency @biomejs/biome to v2.5.0 Jun 20, 2026

chore(deps): update dependency @biomejs/biome to v2.5.1

8c79e2d

renovate Bot force-pushed the renovate/biomejs-biome-2.x-lockfile branch from a94a080 to 8c79e2d Compare June 27, 2026 03:12

renovate Bot changed the title ~~chore(deps): update dependency @biomejs/biome to v2.5.0~~ chore(deps): update dependency @biomejs/biome to v2.5.1 Jun 27, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update dependency @biomejs/biome to v2.5.1#9

chore(deps): update dependency @biomejs/biome to v2.5.1#9
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/biomejs-biome-2.x-lockfile

renovate Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Mar 31, 2026 •

edited

Loading

Uh oh!

sonarqubecloud Bot commented Apr 30, 2026

Uh oh!

sonarqubecloud Bot commented May 5, 2026

Uh oh!

sonarqubecloud Bot commented Jun 5, 2026

Uh oh!

sonarqubecloud Bot commented Jun 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v2.5.1

Patch Changes

v2.5.0

Minor Changes

Correctness

Suspicious

Style

Complexity

Performance

Security

A11y

JavaScript

JSX

TypeScript

JSON

CSS

Patch Changes

Configuration

Uh oh!

changeset-bot Bot commented Mar 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

sonarqubecloud Bot commented Apr 30, 2026

Quality Gate passed

Uh oh!

sonarqubecloud Bot commented May 5, 2026

Quality Gate passed

Uh oh!

sonarqubecloud Bot commented Jun 5, 2026

Quality Gate passed

Uh oh!

sonarqubecloud Bot commented Jun 27, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 31, 2026 •

edited

Loading

`v2.5.1`

`v2.5.0`

changeset-bot Bot commented Mar 31, 2026 •

edited

Loading