chore(deps): bump the patch-and-minor group across 1 directory with 6 updates

[dependabot]

Bumps the patch-and-minor group with 6 updates in the / directory:

Package	From	To
@stripe/stripe-js	9.12.0	9.12.1
express-rate-limit	8.6.1	8.6.2
nodemailer	9.0.3	9.0.5
stripe	22.3.2	22.4.0
ws	8.21.1	8.21.3
@biomejs/biome	2.5.6	2.5.7

Updates @stripe/stripe-js from 9.12.0 to 9.12.1

Release notes

Sourced from @​stripe/stripe-js's releases.

v9.12.1

Changed

• Bump brace-expansion from 1.1.11 to 1.1.16 in /examples/parcel (#953)

Commits

• 43d35b1 v9.12.1
• f501947 Bump brace-expansion from 1.1.11 to 1.1.16 in /examples/parcel (#953)
• See full diff in compare view

Updates express-rate-limit from 8.6.1 to 8.6.2

Release notes

Sourced from express-rate-limit's releases.

v8.6.2

You can view the changelog here.

Commits

• c416f78 8.6.2
• defb334 v8.6.2 changelog
• 7dd82cf fix: key IPv4-in-IPv6 addresses by range, not notation (#667)
• 4e23dbb chore(deps): bump ip-address from 10.3.1 to 10.4.0 (#666)
• 607ef1f chore(deps): bump ip-address from 10.2.0 to 10.3.1 (#664)
• d2370f6 chore(deps-dev): bump the development-dependencies group with 5 updates (#663)
• See full diff in compare view

Updates nodemailer from 9.0.3 to 9.0.5

Release notes

Sourced from nodemailer's releases.

v9.0.5

9.0.5 (2026-08-07)

Bug Fixes

• ci: retrigger the workflows dropped during the Actions outage (85d16c1)
• mailer: escape specials in List-* header comments (#1842) (75913bb)
• mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
• mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
• mime: encode DEL in header parameters and List-* comments (cf69430)
• mime: keep control chars out of the remaining header positions (5ed9d26)
• mime: normalize an address parsed out of a string as well (63685f7)
• mime: normalize an address so header and envelope agree (a9343b4)
• mime: stop a header key callback and the dkim tags from injecting (b7d772e)

v9.0.4

9.0.4 (2026-08-04)

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
• mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
• mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
• mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
• mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

Changelog

Sourced from nodemailer's changelog.

9.0.5 (2026-08-07)

Bug Fixes

• ci: retrigger the workflows dropped during the Actions outage (85d16c1)
• mailer: escape specials in List-* header comments (#1842) (75913bb)
• mime-funcs: star the continuation key of a restarted parameter line (36bcf1a)
• mime-node: keep control chars out of header values and msg-id headers (15cf6d1)
• mime: encode DEL in header parameters and List-* comments (cf69430)
• mime: keep control chars out of the remaining header positions (5ed9d26)
• mime: normalize an address parsed out of a string as well (63685f7)
• mime: normalize an address so header and envelope agree (a9343b4)
• mime: stop a header key callback and the dkim tags from injecting (b7d772e)

9.0.4 (2026-08-04)

Bug Fixes

• mime-funcs: do not let an unpaired surrogate consume the next character (9797f7f)
• mime-funcs: keep any surrogate pair intact when chunking base64 mime words (#1838) (5bd3a65)
• mime-funcs: percent encode unpaired surrogates in header parameter values (78f4aa2)
• mime-node: escape backslash and quote in the Content-Type name parameter (#1837) (adcfc4f)
• mime: encode HT/CR/LF in header parameter values instead of quoting them (#1840) (5bc9cab)

Commits

• 742cff9 chore(master): release 9.0.5 (#1843)
• 524f0af chore: apply prettier to the punycode decode loop
• 63685f7 fix(mime): normalize an address parsed out of a string as well
• d899213 test: cover the custom envelope path of every transport
• c4daee0 chore(ci): trigger the workflows now that the Actions outage is over
• 85d16c1 fix(ci): retrigger the workflows dropped during the Actions outage
• 76d0d92 chore(deps): update devDependencies
• a9343b4 fix(mime): normalize an address so header and envelope agree
• b7d772e fix(mime): stop a header key callback and the dkim tags from injecting
• 5ed9d26 fix(mime): keep control chars out of the remaining header positions
• Additional commits viewable in compare view

Updates stripe from 22.3.2 to 22.4.0

Release notes

Sourced from stripe's releases.

v22.4.0

This release changes the pinned API version to 2026-07-29.dahlia.

• #2795 Update generated code
  • Add support for new resource FinancialConnections.Authorization
  • Add support for unreject method on resource Account
  • Add support for list method on resource PaymentRecord
  • Add support for administrative_address and principal_place_of_business on Account.company, AccountCreateParams.company, AccountUpdateParams.company, and TokenCreateParams.account.company
  • Add support for sepa_debit_payments on AccountUpdateParams.settings
  • Remove support for proof_of_registration on AccountCreateParams.documents. This field was limited-use and is being deprecated.
  • Add support for payouts_action on AccountRejectParams
  • Add support for new values mass_transit_parking_tax and parking_tax on enums Tax.Calculation.shipping_cost.tax_breakdown[].tax_rate_details.tax_type, Tax.Calculation.tax_breakdown[].tax_rate_details.tax_type, Tax.CalculationLineItem.tax_breakdown[].tax_rate_details.tax_type, and Tax.Transaction.shipping_cost.tax_breakdown[].tax_rate_details.tax_type
  • Add support for new value chaps on enums FundingInstructions.bank_transfer.financial_addresses[].supported_networks and PaymentIntent.next_action.display_bank_transfer_instructions.financial_addresses[].supported_networks
  • Add support for smart_disputes_management on AccountSession.components.disputes_list.features, AccountSession.components.payment_details.features, AccountSession.components.payment_disputes.features, AccountSession.components.payments.features, AccountSessionCreateParams.components.disputes_list.features, AccountSessionCreateParams.components.payment_details.features, AccountSessionCreateParams.components.payment_disputes.features, and AccountSessionCreateParams.components.payments.features
  • Add support for new value data_share_only on enums Charge.payment_method_details.card.three_d_secure.result, PaymentAttemptRecord.payment_method_details.card.three_d_secure.result, PaymentRecord.payment_method_details.card.three_d_secure.result, and SetupAttempt.payment_method_details.card.three_d_secure.result
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums Charge.payment_method_details.fpx.bank, ConfirmationToken.payment_method_preview.fpx.bank, PaymentAttemptRecord.payment_method_details.fpx.bank, PaymentMethod.fpx.bank, and PaymentRecord.payment_method_details.fpx.bank
  • Remove support for dynamic_tax_rates on Checkout.SessionCreateParams.line_items[]. This field was limited-use and is being deprecated.
  • Add support for setup_future_usage on Checkout.Session.payment_method_options.payco, Checkout.Session.payment_method_options.samsung_pay, Checkout.SessionCreateParams.payment_method_options.payco, Checkout.SessionCreateParams.payment_method_options.samsung_pay, PaymentIntent.payment_method_options.payco, PaymentIntent.payment_method_options.samsung_pay, PaymentIntentConfirmParams.payment_method_options.payco, PaymentIntentConfirmParams.payment_method_options.samsung_pay, PaymentIntentCreateParams.payment_method_options.payco, PaymentIntentCreateParams.payment_method_options.samsung_pay, PaymentIntentUpdateParams.payment_method_options.payco, PaymentIntentUpdateParams.payment_method_options.samsung_pay, and PaymentLinkUpdateParams.payment_intent_data
  • Add support for new value ic_nif on enums Checkout.Session.customer_details.tax_ids[].type, Invoice.customer_tax_ids[].type, Tax.Calculation.customer_details.tax_ids[].type, Tax.Transaction.customer_details.tax_ids[].type, and TaxId.type
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.fpx.bank, PaymentIntentConfirmParams.payment_method_data.fpx.bank, PaymentIntentCreateParams.payment_method_data.fpx.bank, PaymentIntentUpdateParams.payment_method_data.fpx.bank, PaymentMethodCreateParams.fpx.bank, SetupIntentConfirmParams.payment_method_data.fpx.bank, SetupIntentCreateParams.payment_method_data.fpx.bank, and SetupIntentUpdateParams.payment_method_data.fpx.bank
  • Add support for new value ic_nif on enums CustomerCreateParams.tax_id_data[].type, CustomerCreateTaxIdParams.type, InvoiceCreatePreviewParams.customer_details.tax_ids[].type, Tax.CalculationCreateParams.customer_details.tax_ids[].type, and TaxIdCreateParams.type
  • Add support for network on Dispute.payment_method_details.card
  • Add support for new values financial_connections.account.expected_deactivation_date_updated, financial_connections.account.supported_payment_method_types_updated, financial_connections.account.upcoming_deactivation, financial_connections.authorization.expected_deactivation_date_updated, and financial_connections.authorization.upcoming_deactivation on enum Event.type
  • Add support for limits and manual_entry on FinancialConnections.SessionCreateParams and FinancialConnections.Session
  • Add support for require_payment_method_support on FinancialConnections.Session.filters and FinancialConnections.SessionCreateParams.filters
  • Add support for bank_account_token on FinancialConnections.Session
  • Add support for new values alipay and mb_way on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
  • Add support for new values mass_transit_parking_tax and parking_tax on enums InvoiceAddLinesParams.lines[].tax_amounts[].tax_rate_data.tax_type, InvoiceLineItemUpdateParams.tax_amounts[].tax_rate_data.tax_type, InvoiceUpdateLinesParams.lines[].tax_amounts[].tax_rate_data.tax_type, TaxRate.tax_type, TaxRateCreateParams.tax_type, and TaxRateUpdateParams.tax_type
  • Add support for metadata on InvoiceCreatePreviewParams.subscription_details
  • Add support for new value stripe_internal_error on enum Issuing.Authorization.request_history[].reason
  • Add support for business_name on Issuing.Card.shipping, Issuing.CardCreateParams.shipping, and Issuing.CardUpdateParams.shipping
  • Add support for new value correos on enum Issuing.Card.shipping.carrier
  • Add support for allowed_payment_method_types on PaymentIntentConfirmParams, PaymentIntentCreateParams, PaymentIntentUpdateParams, PaymentIntent, SetupIntentConfirmParams, SetupIntentCreateParams, SetupIntentUpdateParams, and SetupIntent
  • Add support for referrer on PaymentIntentConfirmParams.radar_options and PaymentIntentCreateParams.radar_options
  • Add support for consent_collection and shipping_options on PaymentLinkUpdateParams
  • Add support for custom_fields, description, and footer on Quote.invoice_settings, QuoteCreateParams.invoice_settings, QuoteUpdateParams.invoice_settings, SubscriptionSchedule.default_settings.invoice_settings, SubscriptionSchedule.phases[].invoice_settings, SubscriptionScheduleCreateParams.default_settings.invoice_settings, SubscriptionScheduleCreateParams.phases[].invoice_settings, SubscriptionScheduleUpdateParams.default_settings.invoice_settings, and SubscriptionScheduleUpdateParams.phases[].invoice_settings
  • Add support for customer_account and customer on Refund
  • Add support for payment_method on Refund and Topup
  • Add support for trial on SubscriptionSchedule.phases[]
  • Add support for mass_transit_parking_tax and parking_tax on Tax.Registration.country_options.us and Tax.RegistrationCreateParams.country_options.us
  • Add support for new values mass_transit_parking_tax and parking_tax on enum Tax.RegistrationCreateParams.country_options.us.type
  • Add support for new values mass_transit_parking_tax and parking_tax on enum Tax.Registration.country_options.us.type
  • Add support for initiated_by and payment_method_options on Topup
  • Add support for new values financial_connections.account.expected_deactivation_date_updated, financial_connections.account.supported_payment_method_types_updated, financial_connections.account.upcoming_deactivation, financial_connections.authorization.expected_deactivation_date_updated, and financial_connections.authorization.upcoming_deactivation on enums WebhookEndpointCreateParams.enabled_events and WebhookEndpointUpdateParams.enabled_events
  • Add support for new value 2026-07-29.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for additional_addresses on V2.Core.Account.identity.business_details, V2.Core.AccountCreateParams.identity.business_details, V2.Core.AccountTokenCreateParams.identity.business_details, and V2.Core.AccountUpdateParams.identity.business_details
  • Add support for snapshot events FinancialConnectionsAccountExpectedDeactivationDateUpdatedEvent, FinancialConnectionsAccountSupportedPaymentMethodTypesUpdatedEvent, and FinancialConnectionsAccountUpcomingDeactivationEvent with resource FinancialConnections.Account
  • Add support for snapshot events FinancialConnectionsAuthorizationExpectedDeactivationDateUpdatedEvent and FinancialConnectionsAuthorizationUpcomingDeactivationEvent with resource FinancialConnections.Authorization
• #2790 Bump brace-expansion from 1.1.11 to 1.1.16
• #2786 Adds shared OtherString type to better annotate non-exhaustive enums

... (truncated)

Changelog

Sourced from stripe's changelog.

22.4.0 - 2026-07-29

This release changes the pinned API version to 2026-07-29.dahlia.

• #2795 Update generated code
  • Add support for new resource FinancialConnections.Authorization
  • Add support for unreject method on resource Account
  • Add support for list method on resource PaymentRecord
  • Add support for administrative_address and principal_place_of_business on Account.company, AccountCreateParams.company, AccountUpdateParams.company, and TokenCreateParams.account.company
  • Add support for sepa_debit_payments on AccountUpdateParams.settings
  • Remove support for proof_of_registration on AccountCreateParams.documents. This field was limited-use and is being deprecated.
  • Add support for payouts_action on AccountRejectParams
  • Add support for new values mass_transit_parking_tax and parking_tax on enums Tax.Calculation.shipping_cost.tax_breakdown[].tax_rate_details.tax_type, Tax.Calculation.tax_breakdown[].tax_rate_details.tax_type, Tax.CalculationLineItem.tax_breakdown[].tax_rate_details.tax_type, and Tax.Transaction.shipping_cost.tax_breakdown[].tax_rate_details.tax_type
  • Add support for new value chaps on enums FundingInstructions.bank_transfer.financial_addresses[].supported_networks and PaymentIntent.next_action.display_bank_transfer_instructions.financial_addresses[].supported_networks
  • Add support for smart_disputes_management on AccountSession.components.disputes_list.features, AccountSession.components.payment_details.features, AccountSession.components.payment_disputes.features, AccountSession.components.payments.features, AccountSessionCreateParams.components.disputes_list.features, AccountSessionCreateParams.components.payment_details.features, AccountSessionCreateParams.components.payment_disputes.features, and AccountSessionCreateParams.components.payments.features
  • Add support for new value data_share_only on enums Charge.payment_method_details.card.three_d_secure.result, PaymentAttemptRecord.payment_method_details.card.three_d_secure.result, PaymentRecord.payment_method_details.card.three_d_secure.result, and SetupAttempt.payment_method_details.card.three_d_secure.result
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums Charge.payment_method_details.fpx.bank, ConfirmationToken.payment_method_preview.fpx.bank, PaymentAttemptRecord.payment_method_details.fpx.bank, PaymentMethod.fpx.bank, and PaymentRecord.payment_method_details.fpx.bank
  • Remove support for dynamic_tax_rates on Checkout.SessionCreateParams.line_items[]. This field was limited-use and is being deprecated.
  • Add support for setup_future_usage on Checkout.Session.payment_method_options.payco, Checkout.Session.payment_method_options.samsung_pay, Checkout.SessionCreateParams.payment_method_options.payco, Checkout.SessionCreateParams.payment_method_options.samsung_pay, PaymentIntent.payment_method_options.payco, PaymentIntent.payment_method_options.samsung_pay, PaymentIntentConfirmParams.payment_method_options.payco, PaymentIntentConfirmParams.payment_method_options.samsung_pay, PaymentIntentCreateParams.payment_method_options.payco, PaymentIntentCreateParams.payment_method_options.samsung_pay, PaymentIntentUpdateParams.payment_method_options.payco, PaymentIntentUpdateParams.payment_method_options.samsung_pay, and PaymentLinkUpdateParams.payment_intent_data
  • Add support for new value ic_nif on enums Checkout.Session.customer_details.tax_ids[].type, Invoice.customer_tax_ids[].type, Tax.Calculation.customer_details.tax_ids[].type, Tax.Transaction.customer_details.tax_ids[].type, and TaxId.type
  • Add support for new values bnp_paribas, citibank, and mbsb_bank on enums ConfirmationTokenCreateParams.testHelpers.payment_method_data.fpx.bank, PaymentIntentConfirmParams.payment_method_data.fpx.bank, PaymentIntentCreateParams.payment_method_data.fpx.bank, PaymentIntentUpdateParams.payment_method_data.fpx.bank, PaymentMethodCreateParams.fpx.bank, SetupIntentConfirmParams.payment_method_data.fpx.bank, SetupIntentCreateParams.payment_method_data.fpx.bank, and SetupIntentUpdateParams.payment_method_data.fpx.bank
  • Add support for new value ic_nif on enums CustomerCreateParams.tax_id_data[].type, CustomerCreateTaxIdParams.type, InvoiceCreatePreviewParams.customer_details.tax_ids[].type, Tax.CalculationCreateParams.customer_details.tax_ids[].type, and TaxIdCreateParams.type
  • Add support for network on Dispute.payment_method_details.card
  • Add support for new values financial_connections.account.expected_deactivation_date_updated, financial_connections.account.supported_payment_method_types_updated, financial_connections.account.upcoming_deactivation, financial_connections.authorization.expected_deactivation_date_updated, and financial_connections.authorization.upcoming_deactivation on enum Event.type
  • Add support for limits and manual_entry on FinancialConnections.SessionCreateParams and FinancialConnections.Session
  • Add support for require_payment_method_support on FinancialConnections.Session.filters and FinancialConnections.SessionCreateParams.filters
  • Add support for bank_account_token on FinancialConnections.Session
  • Add support for new values alipay and mb_way on enums Invoice.payment_settings.payment_method_types, InvoiceCreateParams.payment_settings.payment_method_types, InvoiceUpdateParams.payment_settings.payment_method_types, Subscription.payment_settings.payment_method_types, SubscriptionCreateParams.payment_settings.payment_method_types, and SubscriptionUpdateParams.payment_settings.payment_method_types
  • Add support for new values mass_transit_parking_tax and parking_tax on enums InvoiceAddLinesParams.lines[].tax_amounts[].tax_rate_data.tax_type, InvoiceLineItemUpdateParams.tax_amounts[].tax_rate_data.tax_type, InvoiceUpdateLinesParams.lines[].tax_amounts[].tax_rate_data.tax_type, TaxRate.tax_type, TaxRateCreateParams.tax_type, and TaxRateUpdateParams.tax_type
  • Add support for metadata on InvoiceCreatePreviewParams.subscription_details
  • Add support for new value stripe_internal_error on enum Issuing.Authorization.request_history[].reason
  • Add support for business_name on Issuing.Card.shipping, Issuing.CardCreateParams.shipping, and Issuing.CardUpdateParams.shipping
  • Add support for new value correos on enum Issuing.Card.shipping.carrier
  • Add support for allowed_payment_method_types on PaymentIntentConfirmParams, PaymentIntentCreateParams, PaymentIntentUpdateParams, PaymentIntent, SetupIntentConfirmParams, SetupIntentCreateParams, SetupIntentUpdateParams, and SetupIntent
  • Add support for referrer on PaymentIntentConfirmParams.radar_options and PaymentIntentCreateParams.radar_options
  • Add support for consent_collection and shipping_options on PaymentLinkUpdateParams
  • Add support for custom_fields, description, and footer on Quote.invoice_settings, QuoteCreateParams.invoice_settings, QuoteUpdateParams.invoice_settings, SubscriptionSchedule.default_settings.invoice_settings, SubscriptionSchedule.phases[].invoice_settings, SubscriptionScheduleCreateParams.default_settings.invoice_settings, SubscriptionScheduleCreateParams.phases[].invoice_settings, SubscriptionScheduleUpdateParams.default_settings.invoice_settings, and SubscriptionScheduleUpdateParams.phases[].invoice_settings
  • Add support for customer_account and customer on Refund
  • Add support for payment_method on Refund and Topup
  • Add support for trial on SubscriptionSchedule.phases[]
  • Add support for mass_transit_parking_tax and parking_tax on Tax.Registration.country_options.us and Tax.RegistrationCreateParams.country_options.us
  • Add support for new values mass_transit_parking_tax and parking_tax on enum Tax.RegistrationCreateParams.country_options.us.type
  • Add support for new values mass_transit_parking_tax and parking_tax on enum Tax.Registration.country_options.us.type
  • Add support for initiated_by and payment_method_options on Topup
  • Add support for new values financial_connections.account.expected_deactivation_date_updated, financial_connections.account.supported_payment_method_types_updated, financial_connections.account.upcoming_deactivation, financial_connections.authorization.expected_deactivation_date_updated, and financial_connections.authorization.upcoming_deactivation on enums WebhookEndpointCreateParams.enabled_events and WebhookEndpointUpdateParams.enabled_events
  • Add support for new value 2026-07-29.dahlia on enum WebhookEndpointCreateParams.api_version
  • Add support for additional_addresses on V2.Core.Account.identity.business_details, V2.Core.AccountCreateParams.identity.business_details, V2.Core.AccountTokenCreateParams.identity.business_details, and V2.Core.AccountUpdateParams.identity.business_details
  • Add support for snapshot events FinancialConnectionsAccountExpectedDeactivationDateUpdatedEvent, FinancialConnectionsAccountSupportedPaymentMethodTypesUpdatedEvent, and FinancialConnectionsAccountUpcomingDeactivationEvent with resource FinancialConnections.Account
  • Add support for snapshot events FinancialConnectionsAuthorizationExpectedDeactivationDateUpdatedEvent and FinancialConnectionsAuthorizationUpcomingDeactivationEvent with resource FinancialConnections.Authorization
• #2790 Bump brace-expansion from 1.1.11 to 1.1.16
• #2786 Enum type annotations for non-exhaustive ("open") enums now include a shared OtherString type in their unions. Many Stripe enums are open, meaning new values may appear even on older API versions. This change ensures these fields have the correct type for both the values known at SDK release time and other values that may be added later. Refer to the API Reference for the latest set of allowed values.

Commits

• 57626dc Bump version to 22.4.0
• f9f4223 Update generated code (#2795)
• dea3ce7 Bump brace-expansion from 1.1.11 to 1.1.16 (#2790)
• 1bb09ad Adds shared OtherString type alias to better annotate non-exhaustive enums (#...
• See full diff in compare view

Updates ws from 8.21.1 to 8.21.3

Release notes

Sourced from ws's releases.

8.21.3

Bug fixes

• The server now correctly rejects permessage-deflate offers if the incoming client_max_window_bits parameter value is smaller than its configured clientMaxWindowBits (e97a20ea).

8.21.2

Bug fixes

• Fixed a test for CITGM (2eb3be0b).

Commits

• c791e70 [dist] 8.21.3
• e97a20e [fix] Reject offers with client_max_window_bits below config
• 787ebf2 [dist] 8.21.2
• b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
• e4bb883 [security] Use GitHub PVR as main reporting channel
• 2eb3be0 [test] Skip test on Node.js versions where it does not apply
• See full diff in compare view

Updates @biomejs/biome from 2.5.6 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

• #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

• #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

• #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

• #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

• #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

  ├── biome.json
  └── subdirectory
      ├── biome.json
      └── lib.js
  

  biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

  Now, the nested configuration is correctly picked up and applied.

  In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

• #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

  The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

  declare function schedule(handler: () => void): string;
  declare function schedule(handler: () => Promise<void>): string | undefined;
  schedule(async () => {}) ?? "fallback";

  The following code is also now invalid, because map(() => 42) returns 42:

  type Mapper<T> = () => T;
  declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

• 191d051 ci: release (#11119)
• 9847e68 feat(lint): add noNonScalableViewport rule (#11168)
• e63354c feat(lint): add noExtendNative nursery rule (#11136)
• 2fa0a62 docs: rework CLI (#11134)
• e007143 feat(lint): add nursery rule noTailwindArbitraryValue (#10094)
• c171b3b feat(lint): add ignoreIfStatements option to useNullishCoalescing (#10822)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions