build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #21 · nstandif/posthog-js-replicate

dependabot · 2026-07-28T04:24:16Z

Bumps the dev-dependencies group with 8 updates in the / directory:

Package	From	To
@biomejs/biome	`2.4.8`	`2.5.5`
@semantic-release/changelog	`6.0.3`	`7.0.0`
@semantic-release/git	`10.0.1`	`11.0.1`
@types/bun	`1.3.11`	`1.3.14`
@types/node	`20.19.37`	`20.19.43`
posthog-node	`5.28.5`	`5.46.1`
semantic-release	`25.0.3`	`25.0.8`
typescript	`6.0.2`	`7.0.2`

Updates @biomejs/biome from 2.4.8 to 2.5.5

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

412a0e9 ci: release (#10948)
b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
9a66bc7 chore: add latitude to sponsors (#10947)
bfc3f3d ci: release (#10887)
9e1999f chore: revert the revert
0b0fd8d chore: revert
0afa35a ci: release (#10817)
3447b2f feat(useDomQuerySelector): add ignore option (#10835)
e649198 ci: release (#10747)
4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
Additional commits viewable in compare view

Updates @semantic-release/changelog from 6.0.3 to 7.0.0

Release notes

Sourced from @semantic-release/changelog's releases.

v7.0.0

7.0.0 (2026-07-21)

Features

ES Module (#414) (e154214)

BREAKING CHANGES

@semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)

the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

Replaced xo with prettier with default configuration; following newly established convention

Replaced nyc with c8 for code coverage

Replaced lodash with lodash-es for proper esm support

Related Issue

semantic-release/semantic-release#2133

semantic-release/semantic-release#4032

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

ES Module (#414) (e154214)

BREAKING CHANGES

@semantic-release/changelog is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)

the minimum required version of semantic-release to use @semantic-release/changelog is now v20.1.0

Other Notable Changes

... (truncated)

Commits

b1044e1 chore(ci): update Node.js version requirements and test matrix configurations
0563e5d chore(deps): update to the latest semantic-release version (#417)
e154214 feat: ES Module (#414)
15e48e4 chore(deps): update dependency sinon to v18.0.1 (#400)
1c48000 test: remove codecov (#399)
3be34e3 ci(action): update actions/setup-node action to v4.0.3 (#395)
854ffb6 ci(action): update actions/checkout action to v4.1.7 (#393)
e7c79f8 chore(deps): update dependency nyc to v17 (#392)
171adfb ci(action): update actions/checkout action to v4.1.6 (#390)
13e3bf7 chore(deps): update dependency sinon to v18 (#389)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @semantic-release/changelog since your current version.

Updates @semantic-release/git from 10.0.1 to 11.0.1

Release notes

Sourced from @semantic-release/git's releases.

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

deps: update dependency execa to v10 (#564) (b39d5c6)

v11.0.0

11.0.0 (2026-07-21)

Features

ES Module (#544) (4d704a2), closes #491 #490

BREAKING CHANGES

@semantic-release/git is now a native ES Module. It has named exports for each plugin hook (verifyConditions, prepare)

the minimum required version of semantic-release to use @semantic-release/git is now v20.1.0

Other Notable Changes

@semantic-release/error ^3 → ^4 (ESM-only)

aggregate-error ^3 → ^5 (ESM-only, uses native AggregateError)

execa ^5 → ^9 (ESM-only, named export)

p-reduce ^2 → ^3 (ESM-only)

Removed CJS-only devDeps: clear-module, file-url, fs-extra, get-stream, nyc

Added c8 for coverage; bumped ava, sinon, tempy, semantic-release, prettier

Engine: ^22.22.2 || >= 24.15;

Scripts: nyc → c8, added pretest, removed test:ci

Related Issue

semantic-release/semantic-release#2133

semantic-release/semantic-release#4032

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

update Node.js engine version requirements in package.json and package-lock.json (ddf699e)

... (truncated)

Commits

b39d5c6 fix(deps): update dependency execa to v10 (#564)
9dd61f1 chore(deps): lock file maintenance (#470)
c5c6f06 chore(deps): update dependency lodash-es to v4.18.1 [security] (#545)
b67458c ci(action): update actions/setup-node action to v6.5.0 (#557)
d4990ff ci(action): update actions/checkout action to v6.1.0 (#556)
16d191f chore(deps): update dependency tempy to v3.2.0 (#448)
8efa7b7 chore(deps): update dependency sinon to v21.1.2 (#554)
e53dc53 chore(deps): update dependency prettier to v3.9.5 (#552)
4c2f87f chore(deps): update dependency ls-engines to v0.10.1 (#551)
7685d83 chore(deps): update dependency ava to v6.4.1 (#548)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @semantic-release/git since your current version.

Updates @types/bun from 1.3.11 to 1.3.14

Commits

See full diff in compare view

Updates @types/node from 20.19.37 to 20.19.43

Commits

See full diff in compare view

Updates posthog-node from 5.28.5 to 5.46.1

Release notes

Sourced from posthog-node's releases.

posthog-node@5.46.1

5.46.1

Patch Changes

#4234 6c8fde0 Thanks @hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)

Updated dependencies [6c8fde0]:

@posthog/core@1.45.1

posthog-node@5.46.0

5.46.0

Minor Changes

#4172 9621830 Thanks @haacked! - send minimal $feature_flag_called events when the server enables it

When the v2 /flags response carries minimalFlagCalledEvents: true (or, for posthog-node local evaluation, the flag-definitions payload carries minimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false), $feature_flag_called events are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties, $set/$set_once, the $feature/<key> enumeration, $active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags, has_experiment unknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration. before_send runs after the filter and may re-add stripped properties. (2026-07-20)

Patch Changes

Updated dependencies [9621830]:

@posthog/core@1.44.0

posthog-node@5.45.2

5.45.2

Patch Changes

#4168 06d19a2 Thanks @dustinbyrne! - Avoid Next.js Edge runtime warnings for native compression and fatal error handling. (2026-07-16)

Updated dependencies [06d19a2]:

@posthog/core@1.43.1

posthog-node@5.45.1

5.45.1

Patch Changes

#4164 9eb2b28 Thanks @dustinbyrne! - Fix the default Node.js event flush interval at 5 seconds. (2026-07-16)

posthog-node@5.45.0

5.45.0

Minor Changes

#4159 fad6d9a Thanks @haacked! - add $feature_flag_has_experiment to $feature_flag_called events

$feature_flag_called events now carry a $feature_flag_has_experiment boolean sourced from the server's has_experiment flag metadata (the /flags?v=2 response for remote evaluation, the /api/feature_flag/local_evaluation definitions for posthog-node local evaluation). The property is only sent when the server explicitly reports has_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)

... (truncated)

Changelog

Sourced from posthog-node's changelog.

5.46.1

Patch Changes

#4234 6c8fde0 Thanks @hpouillot! - Normalize V8 Promise combinator stack frames so input indexes are not treated as source filenames. (2026-07-23)

Updated dependencies [6c8fde0]:

@posthog/core@1.45.1

5.46.0

Minor Changes

#4172 9621830 Thanks @haacked! - send minimal $feature_flag_called events when the server enables it

When the v2 /flags response carries minimalFlagCalledEvents: true (or, for posthog-node local evaluation, the flag-definitions payload carries minimal_flag_called_events: true) and the evaluated flag is not linked to an experiment ($feature_flag_has_experiment === false), $feature_flag_called events are rebuilt from a strict allowlist of flag-evaluation, processing-control, and SDK-identity properties. Super properties, $set/$set_once, the $feature/<key> enumeration, $active_feature_flags, and the context envelope are stripped. Any missing signal (no gate on the response, bootstrapped or locally injected flags, has_experiment unknown) falls back to the full event, and experiment-linked flags always send the full envelope. The gate is stored alongside the cached flags (posthog-js persistence, posthog-node poller state) and is server-controlled, with no SDK-side configuration. before_send runs after the filter and may re-add stripped properties. (2026-07-20)

Patch Changes

Updated dependencies [9621830]:

@posthog/core@1.44.0

5.45.2

Patch Changes

#4168 06d19a2 Thanks @dustinbyrne! - Avoid Next.js Edge runtime warnings for native compression and fatal error handling. (2026-07-16)

Updated dependencies [06d19a2]:

@posthog/core@1.43.1

5.45.1

Patch Changes

#4164 9eb2b28 Thanks @dustinbyrne! - Fix the default Node.js event flush interval at 5 seconds. (2026-07-16)

5.45.0

Minor Changes

#4159 fad6d9a Thanks @haacked! - add $feature_flag_has_experiment to $feature_flag_called events

$feature_flag_called events now carry a $feature_flag_has_experiment boolean sourced from the server's has_experiment flag metadata (the /flags?v=2 response for remote evaluation, the /api/feature_flag/local_evaluation definitions for posthog-node local evaluation). The property is only sent when the server explicitly reports has_experiment; it is omitted entirely when the value is unknown (older servers, missing metadata, bootstrapped or locally injected flags). (2026-07-16)

Patch Changes

Updated dependencies [fad6d9a]:

@posthog/core@1.43.0

... (truncated)

Commits

7c00f92 chore: update versions and lockfile [version bump]
34a03e2 chore: update versions and lockfile [version bump]
9621830 feat(flags): minimize $feature_flag_called events for non-experiment flags (#...
8bf1b19 chore: ban object-literal type assertions in package sources (#4192)
be17ec1 chore: update versions and lockfile [version bump]
06d19a2 fix: avoid Next.js Edge runtime warnings (#4168)
60c2492 chore: update versions and lockfile [version bump]
9eb2b28 fix(node): standardize flush interval default (#4164)
be5249f fix(docs): exclude internal members and tag deprecated ones in SDK references...
422b9a4 chore: update versions and lockfile [version bump]
Additional commits viewable in compare view

Updates semantic-release from 25.0.3 to 25.0.8

Release notes

Sourced from semantic-release's releases.

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

handle potential null values in commit message and gitTags trimming (0a60004)

hide-sensitive: mask key/auth/webhook env vars (973d763)

mask sensitive environment variables and improve commit handling (#4252) (1bfdc52)

prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

argument Injection via repositoryUrl in package.json (#4245) (c46dbda)

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

ensure encoded secrets get masked (8e28dd3)

v25.0.5

25.0.5 (2026-06-09)

Bug Fixes

revert: next (#4200) (db8ffaa)

v25.0.4

25.0.4 (2026-06-09)

Bug Fixes

code-quality: add missing comma in context object for consistency (493d6cd)

Commits

1bfdc52 fix: mask sensitive environment variables and improve commit handling (#4252)
0a60004 fix: handle potential null values in commit message and gitTags trimming
f121540 fix: prevent template evaluation syntax in branch expansion and tag formatting
973d763 fix(hide-sensitive): mask key/auth/webhook env vars
474e5a3 ci(action): update github/codeql-action action to v4.37.1 (#4254)
fc9382c docs: fix issue template links (#4251)
e34c52d ci(action): update actions/setup-node action to v7 (#4250)
8020ec6 ci(action): update actions/setup-node action to v6.5.0 (#4249)
956baf4 chore(deps): update npm to v12.0.1 (#4247)
c46dbda fix: argument Injection via repositoryUrl in package.json (#4245)
Additional commits viewable in compare view

Updates typescript from 6.0.2 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 8 updates Bumps the dev-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.8` | `2.5.5` | | [@semantic-release/changelog](https://github.com/semantic-release/changelog) | `6.0.3` | `7.0.0` | | [@semantic-release/git](https://github.com/semantic-release/git) | `10.0.1` | `11.0.1` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.11` | `1.3.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `20.19.37` | `20.19.43` | | [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.28.5` | `5.46.1` | | [semantic-release](https://github.com/semantic-release/semantic-release) | `25.0.3` | `25.0.8` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.2` | `7.0.2` | Updates `@biomejs/biome` from 2.4.8 to 2.5.5 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome) Updates `@semantic-release/changelog` from 6.0.3 to 7.0.0 - [Release notes](https://github.com/semantic-release/changelog/releases) - [Commits](semantic-release/changelog@v6.0.3...v7.0.0) Updates `@semantic-release/git` from 10.0.1 to 11.0.1 - [Release notes](https://github.com/semantic-release/git/releases) - [Commits](semantic-release/git@v10.0.1...v11.0.1) Updates `@types/bun` from 1.3.11 to 1.3.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) Updates `@types/node` from 20.19.37 to 20.19.43 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `posthog-node` from 5.28.5 to 5.46.1 - [Release notes](https://github.com/PostHog/posthog-js/releases) - [Changelog](https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md) - [Commits](https://github.com/PostHog/posthog-js/commits/posthog-node@5.46.1/packages/node) Updates `semantic-release` from 25.0.3 to 25.0.8 - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v25.0.3...v25.0.8) Updates `typescript` from 6.0.2 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@semantic-release/changelog" dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@semantic-release/git" dependency-version: 11.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies - dependency-name: "@types/bun" dependency-version: 1.3.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@types/node" dependency-version: 20.19.43 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: posthog-node dependency-version: 5.46.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: semantic-release dependency-version: 25.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-28T04:24:28Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance	License
@types/bun@1.3.11 ⏵ 1.3.14			^-2
posthog-node@5.28.5 ⏵ 5.46.1	^-23	⁺²	⁺¹
@types/node@20.19.37 ⏵ 20.19.43	⁺¹	⁺¹
typescript@6.0.2 ⏵ 7.0.2		^-1	⁺¹	⁺¹⁰
@semantic-release/changelog@6.0.3 ⏵ 7.0.0		⁺²	⁺⁶
@semantic-release/git@10.0.1 ⏵ 11.0.1	⁺¹		⁺⁵
semantic-release@25.0.3 ⏵ 25.0.8
@biomejs/biome@2.4.8 ⏵ 2.5.5	⁺¹		⁺¹

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026

Navigation Menu

build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #21

build(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/dev-dependencies-7c0d300148

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jul 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.5

2.5.5

Patch Changes

2.5.5

Patch Changes

v7.0.0

7.0.0 (2026-07-21)

Features

BREAKING CHANGES

Other Notable Changes

Related Issue

v7.0.0-beta.1

7.0.0-beta.1 (2026-04-23)

Features

BREAKING CHANGES

Other Notable Changes

v11.0.1

11.0.1 (2026-07-24)

Bug Fixes

v11.0.0

11.0.0 (2026-07-21)

Features

BREAKING CHANGES

Other Notable Changes

Related Issue

v11.0.0-beta.2

11.0.0-beta.2 (2026-07-20)

Bug Fixes

posthog-node@5.46.1

5.46.1

Patch Changes

posthog-node@5.46.0

5.46.0

Minor Changes

Patch Changes

posthog-node@5.45.2

5.45.2

Patch Changes

posthog-node@5.45.1

5.45.1

Patch Changes

posthog-node@5.45.0

5.45.0

Minor Changes

5.46.1

Patch Changes

5.46.0

Minor Changes

Patch Changes

5.45.2

Patch Changes

5.45.1

Patch Changes

5.45.0

Minor Changes

Patch Changes

v25.0.8

25.0.8 (2026-07-18)

Bug Fixes

v25.0.7

25.0.7 (2026-07-13)

Bug Fixes

v25.0.6

25.0.6 (2026-07-10)

Bug Fixes

v25.0.5

25.0.5 (2026-06-09)

Bug Fixes

v25.0.4

25.0.4 (2026-06-09)

Bug Fixes

TypeScript 6.0.3

Uh oh!

socket-security Bot commented Jul 28, 2026

Uh oh!

Reviewers

Assignees

dependabot Bot commented on behalf of github Jul 28, 2026 •

edited

Loading