build(deps-dev): bump all

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
@biomejs/biome (source)	2.5.7 → 2.5.8					devDependencies	patch	2.5.10 (+1)
@tsconfig/node-lts (source)	24.0.0 → 24.0.1					devDependencies	patch
cssnano	8.0.5 → 8.0.6					devDependencies	patch	8.0.8 (+1)
github/codeql-action	v4.37.6 → v4.37.7					action	patch	v4.37.8
js-yaml	5.2.3 → 5.3.0					devDependencies	minor
pnpm (source)	11.21.0 → 11.22.0					packageManager	minor	11.23.0
pnpm (source)	11.21.0 → 11.22.0					engines	minor	11.23.0
stylelint-config-recess-order	7.7.0 → 7.8.0					devDependencies	minor
vnu-jar	26.8.6 → 26.8.15					devDependencies	patch	26.8.21 (+2)

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.8

Compare Source

Patch Changes

• #​10710 0a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

• #​11251 ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

• #​11247 52b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

  Invalid:

  {#each boxes as box}
    {@const area = box.width * box.height}
    <p>{area}</p>
  {/each}

  Valid:

  {#each boxes as box}
    {const area = $derived(box.width * box.height)}
    <p>{area}</p>
  {/each}

• #​11252 d5f5704 Thanks @​Turtle-Hwan! - Fixed #​11250: useAwait no longer reports async functions that contain an await using declaration.

• #​11143 6be7be1 Thanks @​vznh! - Fixed #​11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

• #​11234 caefe39 Thanks @​subotac! - Fixed #​11228: CSS block comments between a declaration colon and value now preserve their source indentation.

   :root {
     --font-stack:
  -/* comment */
  +    /* comment */
       system-ui;
   }

• #​11285 bca1f73 Thanks @​denbezrukov! - Fixed #​11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

  -:/* comment */ where(div) {}
  +:where(/* comment */ div) {}

• #​11080 af16a0b Thanks @​dyc3! - HTML style attribute values are now parsed as CSS. All Biome CSS lint rules are applied to the style attributes.

• #​11195 6a85588 Thanks @​dyc3! - Fixed Svelte files failing to parse when an expression begins with an object literal.

  Now the following snippet is correctly parsed:

  <p>{{ a: true }}</p>
  <div class={{ active: isActive }}></div>

• #​11173 481d008 Thanks @​Austin1serb! - Fixed #​10242: JavaScript GritQL patterns with multiple metavariables now match snippets consistently in WebAssembly.

• #​11187 23c0369 Thanks @​ematipico! - Added the nursery rule noInvalidPropertyInitValue, which reports an @property whose initial-value does not match its syntax descriptor. For example, the following declaration triggers the rule because red is not a <length>:

  @property --size {
    syntax: "<length>";
    inherits: false;
    initial-value: red;
  }

• #​11272 73896e6 Thanks @​ematipico! - Improved the diagnostic emitted by noRootType.

• #​11240 bd0b68d Thanks @​ematipico! - Fixed #​11223: Improved the
  performance of noMisusedPromises
  when analyzing async class methods that call other methods through this.

• #​11172 4a0bc5c Thanks @​saberoueslati! - Fixed #​10806: noUselessFragments no longer causes Biome to panic when its unsafe fix removes a fragment used as a JSX attribute value.

• #​11227 4d603b0 Thanks @​saberoueslati! - Fixed #​11178: noUndeclaredVariables no longer reports Vue's built-in instance properties, such as $slots and $attrs, in template expressions or $event in inline event-handler expressions. The instance properties are still reported inside <script setup>, where they are not defined.

• #​11187 23c0369 Thanks @​ematipico! - Fixed CSS parsing of registered custom properties: Biome now correctly validates the syntax descriptor of @property rules.

tsconfig/bases (@​tsconfig/node-lts)

v24.0.1

Compare Source

cssnano/cssnano (cssnano)

v8.0.6: v8.0.6

Compare Source

What's Changed

Bug Fixes

• fix(postcss-merge-rules): fix invalid merging in #​1893

• fix(postcss-merge-rules): use webref data to perform a merge #​1897

• fix(postcss-reduce-idents): do not break grid-template-areas in #​1898

• fix: ensure correct repository URL in published packages in #​1900

• fix(postcss-merge-longhand): improve longhand merging correctness in #​1907

• fix(postcss-merge-longhand): add a fuzzer and fix the cases it found in #​1914

• fix: improve selector minification in #​1915

Other Changes

• Small performance fix in #​1911

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@8.0.5...cssnano@8.0.6

github/codeql-action (github/codeql-action)

v4.37.7

Compare Source

• Update default CodeQL bundle version to 2.26.3. #​4085

nodeca/js-yaml (js-yaml)

v5.3.0

Compare Source

This release focuses on reworking the documentation and making small
architectural improvements before moving forward.

Added

• Added completely new documentation.
• Exported DUMP_SCHEMA, the default schema used by the dumper.
• Added YAMLException.throwAt() for throwing an error at a source position.

Changed

• Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE,
  COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old
  exports are still preserved, but deprecated.
• Made identify mandatory for custom tag definitions. Use
  identify: () => false for load-only tags.

Deprecated

• Deprecated flat constant exports. Use grouped ones instead.

Removed

• Removed the MERGE_KEY export (not used anymore after last fixes).

Fixed

• Validate << sequence items at merge time, so aliased merge sources are
  checked too.
• Resolve << outside of a mapping key as the plain string '<<', matching
  v4, instead of leaking an internal symbol into the result.

pnpm/pnpm (pnpm)

v11.22.0

Compare Source

validator/validator (vnu-jar)

v26.8.15

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for gh-pages-openinf ready!

Name	Link
🔨 Latest commit	ff3fdc8
🔍 Latest deploy log	https://app.netlify.com/projects/gh-pages-openinf/deploys/6a8b9cfd1eecab000899edb7
😎 Deploy Preview	https://deploy-preview-1847--gh-pages-openinf.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cssnano@​8.0.6
	@​tsconfig/​node-lts@​24.0.1
	vnu-jar@​26.8.15
	js-yaml@​5.3.0
	stylelint-config-recess-order@​7.8.0
	@​biomejs/​biome@​2.5.8

View full report