Skip to content

build(deps-dev): bump the development-dependencies group with 7 updates - #3011

Merged
github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/development-dependencies-68b9041f74
Nov 5, 2026
Merged

build(deps-dev): bump the development-dependencies group with 7 updates#3011
github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/development-dependencies-68b9041f74

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 7 updates:

Package From To
@biomejs/biome 2.6.3 2.6.4
@types/node 26.6.5 26.6.6
tslib 2.8.1 2.9.1
@microsoft/api-extractor 7.60.0 7.60.1
@vitejs/plugin-react 6.1.2 6.2.1
@rspack/core 2.2.9 2.3.0
webpack-cli 7.2.3 7.3.1

Updates @biomejs/biome from 2.6.3 to 2.6.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.4

2.6.4

Patch Changes

  • #12261 19fbfb2 Thanks @​dyc3! - Added the new nursery rule noConsoleSpaces, which reports a leading or trailing space in a console.log(), console.debug(), console.info(), console.warn(), or console.error() argument that sits next to another argument. These methods already put a space between arguments, so such a space prints twice.

    console.log("abc ", "def");

  • #12469 cd716d3 Thanks @​dyc3! - Added the new nursery rule noMagicArrayFlatDepth, which reports number literals other than 1 passed as the depth of Array.prototype.flat() unless a comment inside the parentheses explains them.

    const items = array.flat(2);

  • #12470 92c9e81 Thanks @​dyc3! - Added the nursery rule noNull, which reports uses of the null literal and suggests undefined instead. Strict comparisons such as foo === null are allowed.

    let foo = null;

  • #12483 9bd3527 Thanks @​dyc3! - Added the nursery rule noReturnArrayPush, which reports code that uses the return value of push() or unshift(). These methods return the new length of the array, not the added item or the array.

    function add(item) {
  return items.push(item);
}

  • #12477 a384892 Thanks @​dyc3! - Added the nursery rule noUnreadableIife, which reports arrow functions that are called right where they are defined and whose body is wrapped in parentheses.

    const foo = (bar => (bar ? bar.baz : baz))(getBar());

  • #12447 0a963e4 Thanks @​dyc3! - Added the nursery rule noUselessRecursion, which reports functions that return a call to themselves when a loop can do the same work. Too many nested calls can crash the program with a stack overflow error.

    function findRoot(node) {
    if (node.parent) {
        return findRoot(node.parent);
    }
    return node;
}

  • #12554 2eddda9 Thanks @​dyc3! - Added the nursery rule noVueComputedPropertiesInData, which reports computed properties used inside the data function of a Vue component. Vue runs data before it sets up computed properties, so the value read there is undefined.

... (truncated)

Commits

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates tslib from 2.8.1 to 2.9.1

Release notes

Sourced from tslib's releases.

tslib 2.9.1

What's Changed

Full Changelog: microsoft/tslib@v2.8.1...v2.9.1

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for tslib since your current version.


Updates @microsoft/api-extractor from 7.60.0 to 7.60.1

Changelog

Sourced from @​microsoft/api-extractor's changelog.

7.60.1

Fri, 30 Oct 2026 21:34:20 GMT

Version update only

Commits

Updates @vitejs/plugin-react from 6.1.2 to 6.2.1

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@6.2.1

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

plugin-react@6.2.0

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Changelog

Sourced from @​vitejs/plugin-react's changelog.

6.2.1 (2026-11-02)

Fix refreshInclude and refreshExclude options not working (#1543)

Fix mistake from #1516

6.2.0 (2026-11-02)

Add refreshInclude and refreshExclude options (#1516)

Add refreshInclude and refreshExclude options to skip fast refresh for certain files that won't run in the browser.

Expand oxc-transform-react peer dependency range (#1540)

The peer dependency version range for oxc-transform-react was expanded from ^0.152.0 to >=0.152.0 <0.157.0.

Expand @rolldown/plugin-babel peer dependency range (#1541)

The peer dependency version range for @rolldown/plugin-babel was expanded from ^0.1.7 || ^0.2.0 to ^0.1.7 || ^0.2.0 || ^0.3.0.

Commits
  • 29efd1c release: plugin-react@6.2.1 (#1544)
  • 22079fa fix(plugin-react): fix new refreshInclude option (#1543)
  • d0f7234 release: plugin-react@6.2.0 (#1542)
  • 186d1e8 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1541)
  • a554a33 feat(plugin-react): expand oxc-transform-react peer dep range (#1540)
  • ef758ba fix(deps): update all non-major dependencies (#1531)
  • 304a92a feat(plugin-react): add refreshInclude and refreshExclude options (#1516)
  • b3e9835 fix(deps): update all non-major dependencies (#1517)
  • 65a1dd5 fix(deps): update react 19.3.1 (#1509)
  • 443be64 chore(deps): update dependency typescript to v7 (#1422)
  • Additional commits viewable in compare view

Updates @rspack/core from 2.2.9 to 2.3.0

Release notes

Sourced from @​rspack/core's releases.

v2.3.0

What's Changed

🎉 See Announcing Rspack 2.3 for more details.

New Features 🎉

Performance 🚀

Bug Fixes 🐞

... (truncated)

Commits

Updates webpack-cli from 7.2.3 to 7.3.1

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.3.1

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

webpack-cli@7.3.0

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Changelog

Sourced from webpack-cli's changelog.

7.3.1

Patch Changes

  • fix: detect missing package managers and failed installations, without a lock file the CLI chose npm even when it wasn't installed instead of yarn or pnpm, and it continued after a package failed to install (by @​alexander-akait in #4889)

  • chore: replace the import-local and cross-spawn dependencies with Node.js built-ins (by @​alexander-akait in #4889)

  • chore: load configuration files with import() instead of eval (by @​alexander-akait in #4893)

7.3.0

Minor Changes

  • feat: run webpack-dev-server@6 as a compiler plugin. The CLI drives watch compilation, prints build stats and closes the compiler on shutdown. Older dev servers continue to manage their own compilation. (by @​bjohansebas in #4847)

    In multi-compiler mode, every dev server serves all compilers by default. Use the new --dev-server-per-compiler option of webpack serve to serve each compiler only by the dev server from its own configuration.

  • feat: add shell completions for zsh, bash, fish and powershell through the complete command (by @​alexander-akait in #4840)

Patch Changes

  • fix: keep multi-compiler options such as parallelism and plugins set on a configuration array when --config-name or extends rebuild it (by @​alexander-akait in #4871)

  • perf: share the compile cache with child processes and worker threads, such as minimizer workers, so they start warm too (by @​alexander-akait in #4872)

  • fix: assign distinct ports to dev servers of configurations that share the same devServer object. (by @​alexander-akait in #4886)

Commits
  • 3a695da chore(release): new release (#4891)
  • 4a88999 chore: load configuration files without eval (#4893)
  • 02a85ac chore(deps): bump the dependencies group across 1 directory with 5 updates (#...
  • 3942417 chore: replace import-local and cross-spawn with Node.js built-ins (#4889)
  • 349b660 chore(release): new release (#4841)
  • d4ee8bd fix: assign distinct ports to dev servers sharing devServer options (#4886)
  • 9bcb6d5 feat: run webpack-dev-server as a compiler plugin (#4847)
  • b32b0c9 test: make the generator and dev server tests stable (#4885)
  • 351f1c9 chore(deps): bump the dependencies group across 1 directory with 9 updates (#...
  • 701e74b chore(deps-dev): bump del-cli from 7.0.0 to 8.0.1 (#4880)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the development-dependencies group with 7 updates
9ba6a60 
Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.6.3` | `2.6.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [tslib](https://github.com/Microsoft/tslib) | `2.8.1` | `2.9.1` |
| [@microsoft/api-extractor](https://github.com/microsoft/rushstack/tree/HEAD/apps/api-extractor) | `7.60.0` | `7.60.1` |
| [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.1.2` | `6.2.1` |
| [@rspack/core](https://github.com/web-infra-dev/rspack/tree/HEAD/packages/rspack) | `2.2.9` | `2.3.0` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.2.3` | `7.3.1` |


Updates `@biomejs/biome` from 2.6.3 to 2.6.4
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.4/packages/@biomejs/biome)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `tslib` from 2.8.1 to 2.9.1
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](microsoft/tslib@v2.8.1...v2.9.1)

Updates `@microsoft/api-extractor` from 7.60.0 to 7.60.1
- [Changelog](https://github.com/microsoft/rushstack/blob/main/apps/api-extractor/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rushstack/commits/HEAD/apps/api-extractor)

Updates `@vitejs/plugin-react` from 6.1.2 to 6.2.1
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.2.1/packages/plugin-react)

Updates `@rspack/core` from 2.2.9 to 2.3.0
- [Release notes](https://github.com/web-infra-dev/rspack/releases)
- [Commits](https://github.com/web-infra-dev/rspack/commits/v2.3.0/packages/rspack)

Updates `webpack-cli` from 7.2.3 to 7.3.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.2.3...webpack-cli@7.3.1)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: tslib
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@microsoft/api-extractor"
  dependency-version: 7.60.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@rspack/core"
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: webpack-cli
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area-dependencies Pull requests that update a dependency file platform-javascript Related to the JavaScript version of alphaTab labels Nov 5, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) November 5, 2026 09:55
@github-actions
github-actions Bot merged commit 31d4613 into develop Nov 5, 2026
12 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/development-dependencies-68b9041f74 branch November 5, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area-dependencies Pull requests that update a dependency file platform-javascript Related to the JavaScript version of alphaTab

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants