Skip to content

Bump @biomejs/wasm-nodejs from 2.4.16 to 2.5.0#376

Open
dependabot[bot] wants to merge 1 commit into
Currentfrom
dependabot/npm_and_yarn/biomejs/wasm-nodejs-2.5.0
Open

Bump @biomejs/wasm-nodejs from 2.4.16 to 2.5.0#376
dependabot[bot] wants to merge 1 commit into
Currentfrom
dependabot/npm_and_yarn/biomejs/wasm-nodejs-2.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 12, 2026

Copy link
Copy Markdown
Contributor

Bumps @biomejs/wasm-nodejs from 2.4.16 to 2.5.0.

Release notes

Sourced from @​biomejs/wasm-nodejs's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes

  • #9539 f0615fd Thanks @​ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:

    ! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.

  • #9495 2056b23 Thanks @​aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

    Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

    <!-- Invalid: no keyboard handler -->
<div onclick="handleClick()">Click me</div>
<!-- Valid: has keyboard handler -->
<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>
<!-- Valid: inherently keyboard-accessible -->
<button onclick="handleClick()">Submit</button>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

    <!-- .typo is used but never defined -->
<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>

  • #9152 9ec8500 Thanks @​ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Commits
  • c0b9832 ci: release (#10499)
  • 995c1ff feat(lint): add useFunctionComponentDefinition rule (#10498)
  • 2be0264 refactor(formatter): introduce the SourcePosition element and remove source p...
  • 174b21b fix(css_formatter): align grid-template-areas rows after comments (#10603)
  • c8cf440 feat(css_parser): parse interpolated SCSS supports conditions (#10602)
  • ac6615c refactor: removes mutex from salsa db (#10608)
  • 263c7cc feat(html_parser): parse Svelte interpolations in quoted attribute values (#1...
  • ac4944f feat(fmt/md): improve formatting of list against prettier (#10383)
  • 84b43c5 fix(lint): detect imported process env usage (#10470)
  • 311c2b2 fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
Bump @biomejs/wasm-nodejs from 2.4.16 to 2.5.0
c8529df 
Bumps [@biomejs/wasm-nodejs](https://github.com/biomejs/biome) from 2.4.16 to 2.5.0.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/compare/@biomejs/biome@2.4.16...@biomejs/biome@2.5.0)

---
updated-dependencies:
- dependency-name: "@biomejs/wasm-nodejs"
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 12, 2026
@github-actions github-actions Bot requested a review from NikolaRHristov June 12, 2026 18:23
@socket-security

socket-security Bot commented Jun 12, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​biomejs/​wasm-nodejs@​2.4.16 ⏵ 2.5.0100 +110074 +199 +2100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@NikolaRHristov NikolaRHristov Awaiting requested review from NikolaRHristov

Assignees

@NikolaRHristov NikolaRHristov

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@NikolaRHristov