build(deps): bump the monorepo-dependencies group with 3 updates by dependabot[bot] · Pull Request #2 · webllm/renderify

dependabot · 2026-02-18T20:09:51Z

Bumps the monorepo-dependencies group with 3 updates: @biomejs/biome, turbo and es-module-lexer.

Updates @biomejs/biome from 2.3.14 to 2.4.2

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.2

2.4.2

Patch Changes
#9103 fc9850c Thanks @dyc3! - Fixed #9098: useImportType no longer incorrectly flags imports used in Svelte control flow blocks ({#if}, {#each}, {#await}, {#key}) as type-only imports.

#9106 f4b7296 Thanks @dyc3! - Updated rule source metadata for rules from html-eslint.
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noConditionalExpect. This rule disallows conditional expect() calls inside tests, which can lead to tests that silently pass when assertions never run.
// Invalid - conditional expect may not run
test("conditional", async ({ page }) => {
  if (someCondition) {
    await expect(page).toHaveTitle("Title");
  }
});
// Valid - unconditional expect
test("unconditional", async ({ page }) => {
await expect(page).toHaveTitle("Title");
});
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightElementHandle. Prefers locators to element handles.
const el = await page.$(".btn");
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightEval. Disallows page.$eval() and page.$$eval() methods.
await page.$eval(".btn", (el) => el.textContent);
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightForceOption. Disallows the force option on user interactions.
await locator.click({ force: true });
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightMissingAwait. Enforces awaiting async Playwright APIs.
const el = page.locator(".btn");
el.click(); // Missing await

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.2

Patch Changes
#9103 fc9850c Thanks @dyc3! - Fixed #9098: useImportType no longer incorrectly flags imports used in Svelte control flow blocks ({#if}, {#each}, {#await}, {#key}) as type-only imports.

#9106 f4b7296 Thanks @dyc3! - Updated rule source metadata for rules from html-eslint.
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noConditionalExpect. This rule disallows conditional expect() calls inside tests, which can lead to tests that silently pass when assertions never run.
// Invalid - conditional expect may not run
test("conditional", async ({ page }) => {
  if (someCondition) {
    await expect(page).toHaveTitle("Title");
  }
});
// Valid - unconditional expect
test("unconditional", async ({ page }) => {
await expect(page).toHaveTitle("Title");
});
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightElementHandle. Prefers locators to element handles.
const el = await page.$(".btn");
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightEval. Disallows page.$eval() and page.$$eval() methods.
await page.$eval(".btn", (el) => el.textContent);
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightForceOption. Disallows the force option on user interactions.
await locator.click({ force: true });
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightMissingAwait. Enforces awaiting async Playwright APIs.
const el = page.locator(".btn");
el.click(); // Missing await
#8960 4a5ff40 Thanks @abossenbroek! - Added the nursery rule noPlaywrightNetworkidle. Disallows deprecated networkidle wait option.

... (truncated)

Commits

b99e7db ci: release (#9104)
4a5ff40 feat(lint): add Playwright ESLint rules (#8960)
5153f2f ci: release (#9094)
4cc531c chore: docs that break website (#9077)
bf6e5f9 ci: release (#9045)
e014336 feat: promote rules for v2.4 (#9011)
7e33fd5 Merge remote-tracking branch 'origin/main' into next
df21006 ci: release (#8973)
6ebf6c6 feat(lint): add nursery rule noUselessReturn (#9029)
043b67c feat(lint/js): add noNestedPromises (#9019)
Additional commits viewable in compare view

Updates turbo from 2.8.6 to 2.8.10

Release notes

Sourced from turbo's releases.

Turborepo v2.8.10

What's Changed

create-turbo

fix: Sanitize git command inputs in create-turbo by @anthonyshew in vercel/turborepo#11876

Changelog

fix: Move node-plop to dependencies so PlopTypes resolves for consumers by @anthonyshew in vercel/turborepo#11862

chore: Use 2024 edition in more packages, do not ignore some clippy l… by @ognevny in vercel/turborepo#11860

perf: Optimize hot-path hash computation by avoiding clones and using unstable sorts by @anthonyshew in vercel/turborepo#11872

perf: Replace twox-hash with xxhash-rust and optimize file hashing by @anthonyshew in vercel/turborepo#11874

fix: Restrict credential file permissions to owner-only by @anthonyshew in vercel/turborepo#11870

perf: Reduce allocations in globwalk by @anthonyshew in vercel/turborepo#11528

perf: Replace O(V³) Floyd-Warshall with O(V+E) DFS in watch mode subgraph creation by @anthonyshew in vercel/turborepo#11878

feat: Generate LLM-friendly markdown alongside --profile trace output by @anthonyshew in vercel/turborepo#11880

feat: Make --profile and --anon-profile filename optional by @anthonyshew in vercel/turborepo#11883

perf: Batch per-package git subprocess calls into repo-wide index by @anthonyshew in vercel/turborepo#11887

perf: Parallelize and pre-build RepoGitIndex by @anthonyshew in vercel/turborepo#11889

perf: Pre-compile glob exclusion filter and cache path prefix in file hashing by @anthonyshew in vercel/turborepo#11891

Full Changelog: vercel/turborepo@v2.8.9...v2.8.10

Turborepo v2.8.10-canary.9

What's Changed

Changelog

perf: Pre-compile glob exclusion filter and cache path prefix in file hashing by @anthonyshew in vercel/turborepo#11891

Full Changelog: vercel/turborepo@v2.8.10-canary.8...v2.8.10-canary.9

Turborepo v2.8.10-canary.8

What's Changed

Changelog

perf: Parallelize and pre-build RepoGitIndex by @anthonyshew in vercel/turborepo#11889

Full Changelog: vercel/turborepo@v2.8.10-canary.7...v2.8.10-canary.8

Turborepo v2.8.10-canary.7

What's Changed

Changelog

perf: Batch per-package git subprocess calls into repo-wide index by @anthonyshew in vercel/turborepo#11887

... (truncated)

Commits

1e0e1ae publish 2.8.10 to registry
7cb9f0c release(turborepo): 2.8.10-canary.9 (#11892)
2af1c0d perf: Pre-compile glob exclusion filter and cache path prefix in file hashing...
31e29c9 release(turborepo): 2.8.10-canary.8 (#11890)
5cbeef3 perf: Parallelize and pre-build RepoGitIndex (#11889)
a4213a1 release(turborepo): 2.8.10-canary.7 (#11888)
42ab7fc perf: Batch per-package git subprocess calls into repo-wide index (#11887)
48f5a2b release(turborepo): 2.8.10-canary.6 (#11885)
8e3395e feat: Make --profile and --anon-profile filename optional (#11883)
5febe7f release(turborepo): 2.8.10-canary.5 (#11884)
Additional commits viewable in compare view

Updates es-module-lexer from 1.7.0 to 2.0.0

Release notes

Sourced from es-module-lexer's releases.

2.0.0

What's Changed

feat: support import attribute item parsing by @guybedford in guybedford/es-module-lexer#194

breaking: remove import assertions by @guybedford in guybedford/es-module-lexer#191

fix: global reference by @guybedford in guybedford/es-module-lexer#193

Full Changelog: guybedford/es-module-lexer@1.7.0...2.0.0

Commits

0603c6f 2.0.0
066ce56 feat: support import attribute item parsing (#194)
fd6f6ab breaking: remove import assertions (#191)
e21f663 fix: global reference (#193)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the monorepo-dependencies group with 3 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [turbo](https://github.com/vercel/turborepo) and [es-module-lexer](https://github.com/guybedford/es-module-lexer). Updates `@biomejs/biome` from 2.3.14 to 2.4.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.2/packages/@biomejs/biome) Updates `turbo` from 2.8.6 to 2.8.10 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.8.6...v2.8.10) Updates `es-module-lexer` from 1.7.0 to 2.0.0 - [Release notes](https://github.com/guybedford/es-module-lexer/releases) - [Commits](guybedford/es-module-lexer@1.7.0...2.0.0) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: turbo dependency-version: 2.8.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monorepo-dependencies - dependency-name: es-module-lexer dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: monorepo-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

build(deps): bump the monorepo-dependencies group with 3 updates#2

build(deps): bump the monorepo-dependencies group with 3 updates#2
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/monorepo-dependencies-59f627ccde

dependabot bot commented on behalf of github Feb 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 18, 2026

Biome CLI v2.4.2

2.4.2

Patch Changes

2.4.2

Patch Changes

Turborepo v2.8.10

What's Changed

create-turbo

Changelog

Turborepo v2.8.10-canary.9

What's Changed

Changelog

Turborepo v2.8.10-canary.8

What's Changed

Changelog

Turborepo v2.8.10-canary.7

What's Changed

Changelog

2.0.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants