Skip to content

chore(deps-dev)(deps-dev): bump the dev-deps group across 1 directory with 8 updates - #30117

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/dev-deps-1dc9aa0300
Open

chore(deps-dev)(deps-dev): bump the dev-deps group across 1 directory with 8 updates#30117
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/dev-deps-1dc9aa0300

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-deps group with 8 updates in the / directory:

Package From To
@biomejs/biome 2.5.8 2.5.9
@cursor/sdk 1.0.27 1.0.28
es-module-lexer 2.3.1 2.3.2
pkg-pr-new 0.0.87 0.0.88
skills 1.5.22 1.5.23
turbo 2.10.10 2.10.11
@electric-sql/pglite 0.5.4 0.5.5
@electric-sql/pglite-socket 0.2.7 0.2.8

Updates @biomejs/biome from 2.5.8 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
      a {
        color: red;
      }
    }
  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
       <!-- first group -->
    +
       <!-- second group -->
     </div>
  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
      div {
        background: red;
      }
    }
  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
      a {
        color: red;
      }
    }
  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
       <!-- first group -->
    +
       <!-- second group -->
     </div>
  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
      div {
        background: red;
      }
    }
  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>
      export function greet() {
        console.log("Hello!");

... (truncated)

Commits

Updates @cursor/sdk from 1.0.27 to 1.0.28

Commits

Updates es-module-lexer from 2.3.1 to 2.3.2

Release notes

Sourced from es-module-lexer's releases.

2.3.2

What's Changed

New Contributors

Full Changelog: guybedford/es-module-lexer@2.3.1...2.3.2

Commits

Updates pkg-pr-new from 0.0.87 to 0.0.88

Commits

Updates skills from 1.5.22 to 1.5.23

Release notes

Sourced from skills's releases.

v1.5.23

Changelog

  • Add Select All control to skill picker (#1999)
  • fix: fail scoped well-known installs instead of falling back to the root index (#1990)
  • fix: refuse remove --all when specific skills are named (#1964)
  • fix: don't delete a skill from the same repo pinned to a different ref (#1953)
  • fix: bypass blob snapshots for explicit refs (#1934)
  • Fix internal skill filtering for well-known sources (#1921)
  • fix: exclude internal skills from --skill '*' wildcard (#1909)
  • feat: add Posit Assistant agent support (#1885)
  • fix: remove obsolete OpenClaw use warning (#1858)
  • fix: secure private repository authentication (#1857)

Contributors

@​GeorgijGrigoriev,@​Osamaali313 @​Patrick-Erichsen,@​dylanpulver @​fenfenxu,@​hcjmartin @​initred,@​quuu @​statik

Commits
  • 435076e v1.5.23
  • 99b56aa feat: add select-all control to skill picker (#1999)
  • 58886b7 fix internal well-known skill filtering (#1921)
  • 0cbb644 fix: exclude internal skills from --skill '*' wildcard (#1909)
  • b1cb3ea fix: fail scoped well-known installs instead of falling back to the root inde...
  • dd3ca3c feat: add Posit Assistant agent support (#1885)
  • 8bed7b3 fix: don't delete a skill from the same repo pinned to a different ref (#1953)
  • 1687113 fix: bypass blob snapshots for explicit refs (#1934)
  • cd0115e fix: refuse remove --all when specific skills are named (#1964)
  • c6f69c6 fix: remove obsolete OpenClaw use warning (#1858)
  • Additional commits viewable in compare view

Updates turbo from 2.10.10 to 2.10.11

Release notes

Sourced from turbo's releases.

Turborepo v2.10.11

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.10...v2.10.11

Turborepo v2.10.11-canary.4

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.11-canary.3...v2.10.11-canary.4

Turborepo v2.10.11-canary.3

What's Changed

Changelog

Full Changelog: vercel/turborepo@v2.10.11-canary.2...v2.10.11-canary.3

Turborepo v2.10.11-canary.2

... (truncated)

Commits

Updates @electric-sql/pglite from 0.5.4 to 0.5.5

Release notes

Sourced from @​electric-sql/pglite's releases.

@​electric-sql/pglite-prepopulatedfs@​0.5.5

Patch Changes

  • Updated dependencies [a290741]
  • Updated dependencies [6b6f28d]
  • Updated dependencies [354f4ae]
  • Updated dependencies [219af1e]
  • Updated dependencies [20839a7]
  • Updated dependencies [7e784a4]
    • @​electric-sql/pglite@​0.5.5

@​electric-sql/pglite@​0.5.5

Patch Changes

  • a290741: Reset retained protocol parser state after a malformed backend message so later queries can recover.
  • 6b6f28d: Fix PGlite.create({ fs }) on a fresh database calling the provided filesystem's init() twice: the inner initdb instance no longer inherits the user-provided fs and always runs on its own scratch filesystem. Previously any VFS holding exclusive resources (e.g. OPFS sync access handles) failed with a contention error on first create.
  • 354f4ae: Fix formatQuery (used by live.query/live.incrementalQuery to inline parameters) emitting %NL instead of the positional %N$L format specifier. A bare %NL is "min width N" and consumes format() arguments sequentially, so placeholders that are out of textual order silently bound the wrong values, and repeated placeholders failed with too few arguments for format().
  • 219af1e: Expose the fields node-postgres derives from the CommandComplete command tag on Results: command (e.g. SELECT, INSERT, CREATE), and rowCount (the per-statement count from the tag). The tag was already received and parsed internally to compute affectedRows, but these values were not surfaced. Matching node-postgres' command/rowCount result fields lets pg-compatible adapters report them without re-parsing SQL.
  • 20839a7: Preserve the host process.exitCode when closing a PGlite instance. close() calls _emscripten_force_exit(0), whose Emscripten runtime sets process.exitCode = 0, clobbering any exit code the host process had already set. This mirrors the existing save/restore guards in #init() and execProtocolRaw(), so closing a database no longer silently resets the host process's exit code.
  • 7e784a4: Reject operations performed through transaction handles after the transaction has closed.
Changelog

Sourced from @​electric-sql/pglite's changelog.

0.5.5

Patch Changes

  • a290741: Reset retained protocol parser state after a malformed backend message so later queries can recover.
  • 6b6f28d: Fix PGlite.create({ fs }) on a fresh database calling the provided filesystem's init() twice: the inner initdb instance no longer inherits the user-provided fs and always runs on its own scratch filesystem. Previously any VFS holding exclusive resources (e.g. OPFS sync access handles) failed with a contention error on first create.
  • 354f4ae: Fix formatQuery (used by live.query/live.incrementalQuery to inline parameters) emitting %NL instead of the positional %N$L format specifier. A bare %NL is "min width N" and consumes format() arguments sequentially, so placeholders that are out of textual order silently bound the wrong values, and repeated placeholders failed with too few arguments for format().
  • 219af1e: Expose the fields node-postgres derives from the CommandComplete command tag on Results: command (e.g. SELECT, INSERT, CREATE), and rowCount (the per-statement count from the tag). The tag was already received and parsed internally to compute affectedRows, but these values were not surfaced. Matching node-postgres' command/rowCount result fields lets pg-compatible adapters report them without re-parsing SQL.
  • 20839a7: Preserve the host process.exitCode when closing a PGlite instance. close() calls _emscripten_force_exit(0), whose Emscripten runtime sets process.exitCode = 0, clobbering any exit code the host process had already set. This mirrors the existing save/restore guards in #init() and execProtocolRaw(), so closing a database no longer silently resets the host process's exit code.
  • 7e784a4: Reject operations performed through transaction handles after the transaction has closed.
Commits
  • 0ad2901 Version Packages (#1069)
  • 219af1e node-postgres compat: add rowCount and command (#1067)
  • 354f4ae fix: bind formatQuery params by position, not textual order (#1056)
  • 6b6f28d fix: don't leak a user-provided fs into the inner initdb instance (#1060)
  • 7e784a4 fix: reject operations on closed transaction handles (#1062)
  • 20839a7 fix: preserve host process.exitCode when closing PGlite (#1059)
  • 8b33b92 fix(live): resolve variable shadowing in unsubscribe callback filtering (#1051)
  • 9dac42c Add moddatetime extension support (#1061)
  • See full diff in compare view

Updates @electric-sql/pglite-socket from 0.2.7 to 0.2.8

Release notes

Sourced from @​electric-sql/pglite-socket's releases.

@​electric-sql/pglite-socket@​0.2.8

Patch Changes

  • Updated dependencies [a290741]
  • Updated dependencies [6b6f28d]
  • Updated dependencies [354f4ae]
  • Updated dependencies [219af1e]
  • Updated dependencies [20839a7]
  • Updated dependencies [7e784a4]
    • @​electric-sql/pglite@​0.5.5
    • @​electric-sql/pglite-age@​0.0.6
    • @​electric-sql/pglite-pg_hashids@0.0.6
    • @​electric-sql/pglite-pg_ivm@0.0.6
    • @​electric-sql/pglite-pg_textsearch@0.0.7
    • @​electric-sql/pglite-pg_uuidv7@0.0.6
    • @​electric-sql/pglite-pgtap@​0.0.6
    • @​electric-sql/pglite-pgvector@​0.0.6
Changelog

Sourced from @​electric-sql/pglite-socket's changelog.

0.2.8

Patch Changes

  • Updated dependencies [a290741]
  • Updated dependencies [6b6f28d]
  • Updated dependencies [354f4ae]
  • Updated dependencies [219af1e]
  • Updated dependencies [20839a7]
  • Updated dependencies [7e784a4]
    • @​electric-sql/pglite@​0.5.5
    • @​electric-sql/pglite-age@​0.0.6
    • @​electric-sql/pglite-pg_hashids@0.0.6
    • @​electric-sql/pglite-pg_ivm@0.0.6
    • @​electric-sql/pglite-pg_textsearch@0.0.7
    • @​electric-sql/pglite-pg_uuidv7@0.0.6
    • @​electric-sql/pglite-pgtap@​0.0.6
    • @​electric-sql/pglite-pgvector@​0.0.6
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 25, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 25, 2026 07:10
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 25, 2026
@pkg-pr-new

pkg-pr-new Bot commented Aug 25, 2026

Copy link
Copy Markdown

Open in StackBlitz

@prisma/orm-extension-arktype-json

npm i https://pkg.pr.new/@prisma/orm-extension-arktype-json@30117

@prisma/orm-extension-middleware-cache

npm i https://pkg.pr.new/@prisma/orm-extension-middleware-cache@30117

@prisma/orm-extension-paradedb

npm i https://pkg.pr.new/@prisma/orm-extension-paradedb@30117

@prisma/orm-extension-pgvector

npm i https://pkg.pr.new/@prisma/orm-extension-pgvector@30117

@prisma/orm-extension-postgis

npm i https://pkg.pr.new/@prisma/orm-extension-postgis@30117

@prisma/orm-extension-supabase

npm i https://pkg.pr.new/@prisma/orm-extension-supabase@30117

@prisma/orm-family-mongo

npm i https://pkg.pr.new/@prisma/orm-family-mongo@30117

@prisma/orm-family-sql

npm i https://pkg.pr.new/@prisma/orm-family-sql@30117

@prisma/orm-framework

npm i https://pkg.pr.new/@prisma/orm-framework@30117

@prisma/orm-mongo

npm i https://pkg.pr.new/@prisma/orm-mongo@30117

@prisma/orm-postgres

npm i https://pkg.pr.new/@prisma/orm-postgres@30117

@prisma/orm-sqlite

npm i https://pkg.pr.new/@prisma/orm-sqlite@30117

@prisma/orm-target-mongo

npm i https://pkg.pr.new/@prisma/orm-target-mongo@30117

@prisma/orm-target-postgres

npm i https://pkg.pr.new/@prisma/orm-target-postgres@30117

@prisma/orm-target-sqlite

npm i https://pkg.pr.new/@prisma/orm-target-sqlite@30117

@prisma/orm-toolchain

npm i https://pkg.pr.new/@prisma/orm-toolchain@30117

commit: 601ca5f

@github-actions

github-actions Bot commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size
postgres / no-emit 174.86 KB (0%)
postgres / emit 152.08 KB (0%)
mongo / no-emit 101.09 KB (0%)
mongo / emit 90.95 KB (0%)
cf-worker / no-emit 198.74 KB (0%)
cf-worker / emit 173.36 KB (0%)

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/dev-deps-1dc9aa0300 branch 2 times, most recently from eeca8be to bc408d4 Compare August 26, 2026 08:21
… with 8 updates

Bumps the dev-deps group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.8` | `2.5.9` |
| [@cursor/sdk](https://github.com/cursor/cursor) | `1.0.27` | `1.0.28` |
| [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.3.1` | `2.3.2` |
| [pkg-pr-new](https://github.com/stackblitz-labs/pkg.pr.new/tree/HEAD/packages/cli) | `0.0.87` | `0.0.88` |
| [skills](https://github.com/vercel-labs/skills) | `1.5.22` | `1.5.23` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.10` | `2.10.11` |
| [@electric-sql/pglite](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite) | `0.5.4` | `0.5.5` |
| [@electric-sql/pglite-socket](https://github.com/electric-sql/pglite/tree/HEAD/packages/pglite-socket) | `0.2.7` | `0.2.8` |



Updates `@biomejs/biome` from 2.5.8 to 2.5.9
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome)

Updates `@cursor/sdk` from 1.0.27 to 1.0.28
- [Commits](https://github.com/cursor/cursor/commits)

Updates `es-module-lexer` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/guybedford/es-module-lexer/releases)
- [Commits](guybedford/es-module-lexer@2.3.1...2.3.2)

Updates `pkg-pr-new` from 0.0.87 to 0.0.88
- [Commits](https://github.com/stackblitz-labs/pkg.pr.new/commits/v0.0.88/packages/cli)

Updates `skills` from 1.5.22 to 1.5.23
- [Release notes](https://github.com/vercel-labs/skills/releases)
- [Commits](vercel-labs/skills@v1.5.22...v1.5.23)

Updates `turbo` from 2.10.10 to 2.10.11
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.10...v2.10.11)

Updates `@electric-sql/pglite` from 0.5.4 to 0.5.5
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite@0.5.5/packages/pglite)

Updates `@electric-sql/pglite-socket` from 0.2.7 to 0.2.8
- [Release notes](https://github.com/electric-sql/pglite/releases)
- [Changelog](https://github.com/electric-sql/pglite/blob/main/packages/pglite-socket/CHANGELOG.md)
- [Commits](https://github.com/electric-sql/pglite/commits/@electric-sql/pglite-socket@0.2.8/packages/pglite-socket)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@cursor/sdk"
  dependency-version: 1.0.28
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@electric-sql/pglite"
  dependency-version: 0.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: "@electric-sql/pglite-socket"
  dependency-version: 0.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: es-module-lexer
  dependency-version: 2.3.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: pkg-pr-new
  dependency-version: 0.0.88
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: skills
  dependency-version: 1.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
- dependency-name: turbo
  dependency-version: 2.10.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/dev-deps-1dc9aa0300 branch from bc408d4 to 601ca5f Compare August 26, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants