[renovate]

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.2.7 → 2.6.8

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.6.8

Compare Source

Patch Changes

• #​13080 a68137d Thanks @​dyc3! - Added the nursery rule noBufferConstructor, which disallows the deprecated Node.js Buffer() and new Buffer() constructors. Use Buffer.from(), Buffer.alloc(), or Buffer.allocUnsafe() instead.

  new Buffer(5);

• #​12966 82651f5 Thanks @​dyc3! - Added the nursery rule noConfusingArraySplice, which reports splice() and toSpliced() calls that replace a single element or insert at index -1.

  array.splice(index, 1, element); // use `array[index] = element` instead

• #​12924 0a9d204 Thanks @​dyc3! - Added the nursery rule noDynamicRequire, which disallows require() calls whose module name is built at runtime. When the checkDynamicImports option is enabled, the rule also checks import() calls.

  require("./locales/" + language);

• #​12907 6f2635a Thanks @​dyc3! - Added the nursery rule noLateCurrentTargetAccess, which reports reads of event.currentTarget that run after the browser has finished handling the event, when currentTarget is null.

  element.addEventListener("click", async (event) => {
    await save();
    event.currentTarget.disabled = false;
  });

• #​12904 04f30c4 Thanks @​dyc3! - Added the nursery rule noMisusedSpread, which uses type information to report spreads that produce unexpected results: strings spread into arrays or arguments, and promises, functions, maps, arrays, iterables, class instances, and classes spread into objects or JSX attributes.

  declare function getUser(): Promise<{ name: string }>;
  const user = { ...getUser() };

• #​12893 5d7ca32 Thanks @​dyc3! - Added the nursery rule noTripleSlashReference, which reports /// <reference path="..." /> comments and /// <reference types="..." /> comments for packages that the file also imports. The lib, path, and types options control which kinds of references are allowed.

  /// <reference path="./globals.d.ts" />

• #​12561 746c421 Thanks @​dyc3! - Added the nursery rule noVueAsyncComputed, which reports asynchronous code in Vue computed properties, such as async functions, await, promises, setTimeout(), and nextTick().

  <script>
  export default {
    computed: {
      async user() {
        return fetchUser(this.userId);
      },
    },
  };
  </script>

• #​12964 149d729 Thanks @​dyc3! - Added the nursery rule noVueDefineModelDefault, which disallows the default option in Vue's defineModel(). When a parent component passes undefined with v-model, the child component uses the default value while the parent keeps undefined, so the two components show different values.

  <script setup>
  const model = defineModel({ type: String, default: "" });
  </script>

• #​13060 67bc9d5 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedFilter, which reports the filter syntax that Vue 3 removed.

  For example, the following template uses the currency filter:

  <template>
    <p>{{ price | currency }}</p>
  </template>

• #​12545 0bbe4f1 Thanks @​dyc3! - Added the new nursery rule noVueDeprecatedVIs, which reports the deprecated Vue v-is directive. Use the is attribute with a vue: prefix instead.

  <template>
    <div v-is="'MyComponent'"></div>
  </template>

• #​12580 3fdc987 Thanks @​dyc3! - Added the nursery rule noVueExportInScriptSetup, which disallows export in Vue <script setup> blocks. Vue fails to compile a component when its <script setup> block exports a value. TypeScript type exports are allowed.

  <script setup>
  export const message = "Hello";
  </script>

• #​13063 d4e90c8 Thanks @​dyc3! - Added the nursery rule noYamlEmptyMapKeys, which reports YAML map entries whose key is missing, or has only a tag or an anchor. The rule is recommended.

  : value

• #​13061 97aa183 Thanks @​dyc3! - Added the nursery rule noYamlEmptyMapValues, which reports keys in YAML maps that have no value.

  name:

• #​13062 6aad75f Thanks @​dyc3! - Added the new nursery rule noYamlEmptySequenceEntries, which reports empty items in YAML lists.

  fruits:
    - apple
    -
    - banana

• #​13082 c1c8c85 Thanks @​dyc3! - Added the nursery rule useCalledWith, which reports toHaveBeenCalled(), toBeCalled(), and toHaveBeenCalledOnce() assertions, because they don't check the arguments that the function was called with. The rule belongs to the test domain.

  expect(sendEmail).toHaveBeenCalled();

• #​13075 acfeaf9 Thanks @​dyc3! - Added the nursery rule useExpectToHaveBeenCalled, which reports tests that compare the number of calls of a mock function to zero, and suggests using toHaveBeenCalled() instead.

  expect(sendEmail).toHaveBeenCalledTimes(0);

• #​13076 cf5b1a6 Thanks @​dyc3! - Added the nursery rule useExpectToHaveBeenCalledTimes, which reports tests that check the length of mock.calls with toHaveLength(), and suggests using toHaveBeenCalledTimes() instead.

  expect(onSave.mock.calls).toHaveLength(1);

• #​13020 5d28641 Thanks @​dyc3! - Added the new nursery rule usePackageJsonValidLicense, which reports a license field in package.json that isn't a valid license. The rule accepts SPDX license identifiers and expressions, UNLICENSED, and references to a license file such as SEE LICENSE IN LICENSE.md.

  For example, the rule reports the following package.json file because GPL3 isn't an SPDX license identifier:

  {
    "name": "my-package",
    "license": "GPL3"
  }

• #​13079 058d7a1 Thanks @​dyc3! - Added the nursery rule useSpyOn, which reports properties that are overwritten with jest.fn() or vi.fn(). Overwriting a property loses its original value, while jest.spyOn() and vi.spyOn() keep it so it can be restored after the test.

  Date.now = jest.fn(() => 10);

• #​13081 be58f67 Thanks @​dyc3! - Added the nursery rule useTopLevelRequire, which reports require() calls that aren't at the top level of the module, such as calls inside functions, blocks, or try statements.

  function readFile(filename, callback) {
      const fs = require("fs");
      fs.readFile(filename, callback);
  }

• #​13054 4d81f0d Thanks @​dyc3! - Added the nursery rule useValidNamespaceImports, which reports names read from a namespace import that the imported module doesn't export. It also reports assignments to members of a namespace import, and namespace imports of modules that have no exports.

  import * as utils from "./utils.js";
  
  utils.subtract(2, 1); // `./utils.js` doesn't export `subtract`

• #​13058 ae251e4 Thanks @​dyc3! - Added the new nursery rule useVueConsistentVOnHandlerStyle, which enforces one style of event handler in Vue v-on directives. By default, it prefers the name of a method, and an inline function where a method name can't be used.

  <template>
    <button @click="save()">Save</button>
  </template>

• #​12965 c33c03d Thanks @​dyc3! - Added the nursery rule useVueRegisteredComponentNameCasing, which requires the names of components registered in the components option of a Vue component to use one casing style. By default, names must be in PascalCase. The casing option switches the rule to camelCase or kebab-case.

  <script>
  export default {
    components: {
      "todo-item": TodoItem,
    },
  };
  </script>

• #​12145 596a2b1 Thanks @​ematipico! - Added type narrowing for unwritten local let/const variables and parameters after typeof, equality, nullish, and truthiness checks. Type-aware rules now use these refinements in branches, short-circuit expressions, and after early returns, including noUnnecessaryConditions and noFloatingPromises. Types such as {} no longer imply that a value is always truthy.

• #​12935 e506ff1 Thanks @​dyc3! - Improved the performance of the rules noRedeclare and noUnsafeDeclarationMerging. biome lint with Biome's default rules is now about 3% to 5% faster on large projects, and up to 11% faster on some TypeScript projects.

• #​13181 e1556ae Thanks @​dyc3! - Fixed the HTML formatter printing a comment twice when it ends the line of an element's opening tag. For example, <div><!-- comment --> followed by <i>x</i></div> on the next line is now formatted as:

  - <div><!-- comment -->
  + <div>
    	<!-- comment -->
    	<i>x</i>
    </div>

• #​13130 1b350ed Thanks @​dyc3! - Fixed #​13107: the unsafe fix of noDistractingElements now removes the whole element, including its closing tag and children, instead of only the opening tag. The fix is no longer offered when removing the element would produce invalid code, such as const Ticker = () => <marquee>News</marquee>;.

• #​13054 4d81f0d Thanks @​dyc3! - Fixed noUnresolvedImports reporting names that a module re-exports from a CommonJS module or from a file that isn't JavaScript, such as export { foo } from "./legacy.cjs". The rule now also reports default imports from a module that only re-exports another module with export * from, because export * from doesn't forward the default export.

• #​12602 d5da394 Thanks @​dyc3! - Fixed #​12600: biome lint --suppress now adds suppression comments for diagnostics emitted by plugins, such as // biome-ignore lint/plugin/noFoo: ignored using `--suppress` .

• #​13097 3be9e3d Thanks @​ashokram-si! - Fixed #​13064: The noUnknownTypeSelector rule now correctly accepts the valid <selectedcontent> HTML element used in customizable select controls.

• #​13181 e1556ae Thanks @​dyc3! - Fixed #​13167: The HTML formatter no longer deletes comments that follow a Svelte block delimiter on the same line, such as {#if}, {:else}, or {#each}. For example, {#if a}<!-- comment --><i>x</i>{/if} is now formatted as:

    {#if a}
  - 	<i>x</i>
  + 	<!-- comment --><i>x</i>
    {/if}

• #​12845 e3ab04d Thanks @​dyc3! - Fixed the location of Tailwind CSS diagnostics reported on unquoted object keys. In clsx({ shadow: active }), diagnostics now highlight shadow instead of starting one character later at hadow:.

• #​13098 d3be626 Thanks @​ashokram-si! - Fixed #​13084: The useThisInClassMethods rule now correctly recognizes this when used inside parameter default values for methods, setters, and class fields.

• #​13131 a788cac Thanks @​dyc3! - Fixed #​13129: the fix of useArrowFunction no longer produces invalid code when the function is in the initializer of a for statement and returns an in expression. The arrow function body is now wrapped in parentheses.

  // Before
  for (let has = function (k) { return k in cache; }; ;) {}
  // After the fix
  for (let has = (k) => (k in cache); ;) {}

• #​12840 8908627 Thanks @​dyc3! - Fixed #​12796: useMathMinMax no longer reports comparisons with a bigint written as an expression, such as -1n or 2n ** 62n - 1n, or with a const variable initialized with one. Its unsafe fix turned these comparisons into Math.min() or Math.max() calls, which throw a TypeError when given a bigint.

  const MAX = 2n ** 62n - 1n;
  const clamp = (x) => (x > MAX ? MAX : x);

• #​13152 61924f6 Thanks @​dyc3! - Fixed noVueWatchAfterAwait, noVueLifecycleAfterAwait and noVueRestrictedCallAfterAwait, which now also check the setup() function passed as the first argument of defineComponent(). The following code is now reported:

  import { defineComponent, onMounted } from "vue";
  
  defineComponent(async (props) => {
    await load();
    onMounted(() => {});
  }, { props: ["id"] });

  When defineComponent() receives both a function and an options object, these rules now ignore the setup option, because Vue runs the function instead.

• #​13152 61924f6 Thanks @​dyc3! - noVueDuplicateKeys now checks the properties returned by a setup() method of an options object, so return { foo } conflicts with a prop, data property, method or computed property named foo.

• #​13152 61924f6 Thanks @​dyc3! - The Vue emit rules now read events declared with a function type, as in defineEmits<(e: "change", value: string) => void>(), and event names written as template literals without substitutions, as in emit(`change`). noVueUndeclaredEmits, noVueUnusedEmitDeclarations, useVueSingleEventPayload and useVueEmitValidator previously skipped events declared in these forms.

  noVueShadowNativeEvents now checks this.$emit() only where this is the component, and no longer reports $emit() called through a variable that holds this, as in const vm = this; vm.$emit("click").

• #​12947 a54965d Thanks @​machadinhos! - Added the nursery rule noDrizzleDbObjectInsideTransaction, which reports a Drizzle ORM instance used inside its own transaction callback instead of the transaction object.

  await db.transaction(async (tx) => {
    await db.insert(users).values({ name: "John" });
  });

• #​13123 e7c8297 Thanks @​ematipico! - Fixed #​12176: type-aware rules now select the matching overload of a method declared several times in an interface or object type. For example, useAwaitThenable no longer reports await app.listen({ port: 0 }) on a Fastify server, and still reports await app.listen({ port: 0 }, callback).

• #​12059 87784c7 Thanks @​dyc3! - Fixed noUnsafePlusOperands treating the negation of a bigint value as a number. Code such as -value + 1n, where value is declared as bigint, is no longer reported for mixing number and bigint.

• #​13151 be372b5 Thanks @​dyc3! - Fixed Vue lint rules such as useVueVModel and useVueVOnExact treating MathML elements like <math> and <mi> as components. Biome now recognizes the MathML Core elements as native elements, and in Vue, Svelte, and Astro files it treats known hyphenated elements such as <annotation-xml> and the SVG <font-face> as native elements instead of components.

• #​12059 87784c7 Thanks @​dyc3! - Type inference now evaluates conditional types such as T extends U ? X : Y, including infer and distribution over unions, instead of treating them as a union of both branches. This also applies to built-in types such as Exclude, Extract, ReturnType, Parameters, and Awaited, which improves the accuracy of type-aware rules such as noFloatingPromises.

  type Unwrap<T> = T extends Promise<infer U> ? U : T;
  // Previously inferred as `unknown | Promise<number>`, now as `number`.
  type Value = Unwrap<Promise<number>>;

• #​12602 d5da394 Thanks @​dyc3! - Biome now reports an error when a GritQL plugin file name contains invalid characters that could conflict with Biome suppressions.

• #​12838 81d8d28 Thanks @​dyc3! - Added the nursery rule noTailwindRestrictedClasses for JavaScript and HTML. It reports the Tailwind CSS classes and variants listed in its options with a custom message, and can replace them with a configured class or variant.

  {
    "linter": {
      "rules": {
        "nursery": {
          "noTailwindRestrictedClasses": {
            "level": "error",
            "options": {
              "classes": {
                "bg-green-500": { "message": "Use the success color.", "use": "bg-success" },
                "float-*": "Use flexbox or grid for layout."
              }
            }
          }
        }
      }
    }
  }

  <div className="hover:bg-green-500 float-left" />; // both classes are reported

• #​12932 68e6887 Thanks @​dyc3! - Improved the performance of linting files that have no suppression comments by up to 61%.

• #​13136 dcb1eab Thanks @​dyc3! - Improved the performance of linting JavaScript and HTML files when Tailwind rules are enabled.

• #​13094 ae66383 Thanks @​dyc3! - Fixed #​12994: the HTML formatter no longer moves a word onto its own line when it follows an inline element or {expression} that starts a line. Formatting such text is now stable after one pass.

   <span>
   	Showing the first {shown} of
  -	{total}
  -	references
  +	{total} references
   </span>

• #​13162 854ff15 Thanks @​Punisheroot! - Fixed #​13125: noUselessThisAlias no longer reports aliases used in instance and static class field initializers, where replacing the alias with this changes which object is accessed.

• #​12059 87784c7 Thanks @​dyc3! - Fixed type inference for the intersection of a primitive type and one of its literal types, such as string & "a", which Biome inferred as never instead of "a". Type-aware rules such as useExhaustiveSwitchCases and noFloatingPromises now see the literal, so the following switch is reported for missing the "a" case.

  type Kind = ("a" & string) | "b";
  
  function handle(kind: Kind) {
    switch (kind) {
      case "b":
        break;
    }
  }

• #​12551 ca039a1 Thanks @​pkallos! - Fixed #​9842: useNullishCoalescing no longer skips || and ||= inside a call to a locally declared Boolean when ignoreBooleanCoercion is enabled.

v2.6.7

Compare Source

Patch Changes

• #​12906 b3375d2 Thanks @​dyc3! - Added the nursery rule noAsyncPromiseFinally, which reports async functions passed to a promise's .finally() method. If such a function fails, its error replaces the original result or error of the promise.

  promise.finally(async () => {
      await cleanup();
  });

• #​12894 e24da6f Thanks @​dyc3! - Added the nursery rule noDuplicateTypeConstituents, which reports types listed more than once in a union or intersection type, and undefined in the type of an optional parameter.

  type T = string | number | string;
  function f(a?: string | undefined) {}

• #​12899 6c15027 Thanks @​dyc3! - Added the nursery rule noExcessiveSelectorComplexity, which limits how many IDs, type selectors, attribute selectors, pseudo-classes, universal selectors, compound selectors, and combinators a CSS selector can contain. It can also disallow chosen combinators, pseudo-classes, pseudo-elements, attributes, and attribute operators. The rule does nothing until an option is set.

  For example, with "maxIds": 1, the following selector is reported:

  #main #sidebar {}

• #​12897 0b8f429 Thanks @​dyc3! - Added the new nursery rule noInvalidFetchOptions, which reports a body in the options of fetch() and new Request() when the method is GET or HEAD. These calls throw a TypeError at runtime. When no method is given, the request uses GET.

  await fetch("/", { method: "GET", body: "foo=bar" });

• #​12926 9b6b9f4 Thanks @​dyc3! - Added the nursery rule noNewArray, which reports new Array() calls with a single argument. Such a call creates an empty array of the given length when the argument is a number, and an array that holds the argument otherwise.

  const array = new Array(length);

• #​12895 739440f Thanks @​dyc3! - Added the new nursery rule noRedundantTypeConstituents, which reports members of union and intersection types that have no effect, such as a literal type next to its primitive type, or never in a union.

  type Status = "active" | string;

• #​12810 71ab61b Thanks @​dyc3! - Added the nursery rule noSvelteAsyncStore, which disallows passing async functions to the writable(), readable(), and derived() stores from svelte/store.

  import { writable } from "svelte/store";
  const user = writable(null, async (set) => {
      set(await fetchUser());
  });

• #​12917 37d9f41 Thanks @​dyc3! - Added the new nursery rule noUnresolvedDefaultImport, which reports default imports from modules that have no default export. The rule is part of the project domain.

  // foo.js only contains `export function foo() {}`
  import foo from "./foo.js";

• #​12892 f16842e Thanks @​dyc3! - Added the nursery rule noUselessFallbackInSpread, which reports empty object fallbacks when spreading a value into an object. Spreading null, undefined, or another falsy value into an object adds no properties, so the fallback has no effect.

  const object = { ...(options || {}) };

• #​12785 c198be2 Thanks @​dyc3! - Added the new nursery rule noUselessParameterPropertyAssignment, which reports constructor assignments such as this.name = name when name is a parameter property. TypeScript already sets the property to the parameter's value, so the assignment does nothing.

  class User {
    constructor(public name: string) {
      this.name = name;
    }
  }

• #​12900 a4d1b0f Thanks @​dyc3! - Added the nursery rule noUselessSpread, which reports spread syntax that has no effect. For example, [first, ...[second]] can be written as [first, second], and new Set([...items]) can be written as new Set(items).

• #​12902 d7d755b Thanks @​dyc3! - Added the nursery rule noVueExposeAfterAwait, which reports expose() and defineExpose() calls that come after an await in a Vue component's setup code. These calls run too late, so a parent component might not receive the exposed properties.

  <script setup>
  await fetchUser();
  defineExpose({ reload });
  </script>

• #​12596 d33e56e Thanks @​dyc3! - Added the nursery rule useAtomicUpdates, which reports assignments in async functions and generators that can be based on an outdated value because the function paused at an await or yield after reading it.

  let total = 0;
  async function addToTotal(getAmount) {
      total += await getAmount(); // reported
  }

• #​12901 48e3572 Thanks @​dyc3! - Added the new nursery rule useConsistentBooleanName. It requires variables, parameters, and functions that hold or return a boolean to start with a prefix such as is or has, and reports names with those prefixes that don't hold or return a boolean.

  const completed = progress === 100;
  const hasName = "Sindre";

• #​12905 5b00387 Thanks @​dyc3! - Added the nursery rule useConsistentFontWeightNotation, which enforces writing font weights either as numbers or as the keywords normal and bold where possible. It checks the font-weight and font properties, and its safe fix converts between normal/bold and 400/700.

  a { font-weight: bold; }

• #​12922 8d33c85 Thanks @​dyc3! - Added the nursery rule useConsistentTupleLabels, which reports tuple type elements without a label when other elements of the same tuple have one.

  type Point = [x: number, number];

• #​12925 7252cbd Thanks @​dyc3! - Added the new nursery rule useGlobalRegexInMatchAll, which reports calls to matchAll() with a regular expression that doesn't have the g flag. These calls throw a TypeError at runtime.

  text.matchAll(/pattern/);

• #​12891 e781bc3 Thanks @​dyc3! - Added the nursery rule useGlobalRegexInReplaceAll, which reports regular expressions without the g flag passed to replaceAll(). These calls throw a TypeError instead of replacing text.

  withSpaces.replaceAll(/\s+/, ",");

• #​12896 a968e1a Thanks @​dyc3! - Added the new nursery rule useValidCharacterComparison, which reports comparisons between a single character and a string that has more than one character. Such comparisons are always false, or always true with !== and !=.

  text.charAt(0) === "ab";

• #​13085 7a795d0 Thanks @​ematipico! - Fixed withastro/compiler-rs#221 so Astro template expressions containing comment-only JSX expression children, such as <span>{<!-- x -->}</span>, parse without diagnostics.

• #​12621 79ce388 Thanks @​latin-1! - Fixed #​12413 and #​12414: useSortedProperties now sorts consecutive groups of properties independently, preserving the positions of nested rules, at-rules, and SCSS variable declarations.

• #​13065 bd9faae Thanks @​ematipico! - Fixed #​5848: running useSortedKeys or useSortedSelectionSet as an editor source action no longer corrupts nested objects or selection sets.

• #​13056 98f4d53 Thanks @​ematipico! - Fixed #​10607: noUndeclaredDependencies no longer reports imports resolved through TypeScript's compilerOptions.paths mappings.

• #​13033 7638393 Thanks @​GBra-4-669! - Fixed #​12980: the CSS parser no longer panics on a composes declaration whose value contains a non-identifier token, such as composes: 1px;. It reports a diagnostic instead.

• #​12917 37d9f41 Thanks @​dyc3! - Fixed noUnresolvedImports: it now reports default imports from modules that only forward exports with export * from "...". export * never re-exports a default export, so import foo from "./barrel.js" fails when ./barrel.js contains only export * from "./foo.js".

• #​12596 d33e56e Thanks @​dyc3! - Fixed noUnreachableSuper ignoring the default values of constructor parameters. Using this in a default value is now reported, because it runs before super(), and calling super() in a default value is now recognized.

  class Child extends Parent {
  	constructor(options = this.defaults()) { // reported
  		super(options);
  	}
  }

• #​12596 d33e56e Thanks @​dyc3! - Fixed noUselessAssignment ignoring variables that are used in the iterated value of a for...of or for...in loop, in the default values of a destructuring declaration or of parameters, or in the body of an arrow function written as a single expression. These variables are now checked too.

  function process(first, second) {
  	let list = first; // reported: this value is never read
  	list = second;
  	for (const item of list) {
  		handle(item);
  	}
  }

• #​12805 2468384 Thanks @​vibbix! - Fixed #​12332: noUnknownUnit no longer reports

[!IMPORTANT]
✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.