Bump the development-minor-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #34 · Shopify/ucp-cli

dependabot · 2026-07-27T05:37:39Z

Bumps the development-minor-patch group with 7 updates in the / directory:

Package	From	To
@apidevtools/json-schema-ref-parser	`15.4.0`	`15.5.0`
@biomejs/biome	`2.5.2`	`2.5.4`
@changesets/cli	`2.31.0`	`2.31.1`
@types/node	`26.1.0`	`26.1.1`
lint-staged	`17.0.8`	`17.1.0`
vite	`8.1.2`	`8.1.5`
vitest	`4.1.9`	`4.1.10`

Updates @apidevtools/json-schema-ref-parser from 15.4.0 to 15.5.0

Release notes

Sourced from @apidevtools/json-schema-ref-parser's releases.

v15.5.0

15.5.0 (2026-07-09)

Bug Fixes

stabilize cross-platform CI (8bfeec2)

Features

handle cyclic reference chains safely (09959ba)

Commits

a8e6b4d test: allow time for deep reference chain
8bfeec2 fix: stabilize cross-platform CI
09959ba feat: handle cyclic reference chains safely
See full diff in compare view

Updates @biomejs/biome from 2.5.2 to 2.5.4

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.4

2.5.4

Patch Changes
#10665 55ff995 Thanks @dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

#10894 f4fb10e Thanks @ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

#10939 f2799db Thanks @Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

#10945 ae15d98 Thanks @Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

#10842 5e1abfe Thanks @JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

#10891 ecca79e Thanks @ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.
#10886 60c8043 Thanks @dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.
- test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
-   expect(a).toBe(b);
- });
+ test.each([[1, 2]])(
+   "a description that is long enough to push the hugged opening line beyond the print width",
+   (a, b) => {
+     expect(a).toBe(b);
+   },
+ );
#10895 01a85f0 Thanks @ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.
What's Changed

feat(yml/fmt): basic block properties by @ematipico in biomejs/biome#10873

feat(useSortedClasses): sort important-suffix classes in sort_v4 by @johncarmack1984 in biomejs/biome#10880

fix(format/js): wrap curried test each calls by @dyc3 in biomejs/biome#10886

fix(markdown): parse whitespace after list markers by @tidefield in biomejs/biome#10869

fix(inference): use correct function when cloning data by @ematipico in biomejs/biome#10891

docs(noDuplicateProperties): note that @keyframes declarations are ignored by @dfedoryshchev in biomejs/biome#10893

fix(lint): prevent noCommentText fix from looping forever by @JamBalaya56562 in biomejs/biome#10842

fix(core): cleanup old sockets in Unix by @ematipico in biomejs/biome#10895

feat(inference): inference engine via salsa by @ematipico in biomejs/biome#10888

chore(deps): update dependency @types/node to v24.13.3 by @renovate[bot] in biomejs/biome#10920

chore(deps): update github-actions by @renovate[bot] in biomejs/biome#10921

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.4

Patch Changes
#10665 55ff995 Thanks @dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

#10894 f4fb10e Thanks @ematipico! - Fixed #6392: On-type formatting no longer moves comments before an if statement into its body.

#10939 f2799db Thanks @Netail! - Fixed #10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

#10945 ae15d98 Thanks @Netail! - Fixed #10942: Svelte directives don't throw an accidental debug log anymore.

#10842 5e1abfe Thanks @JamBalaya56562! - Fixed #9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

#10891 ecca79e Thanks @ematipico! - Fixed [#10885](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/10885): prevented a module-inference regression introduced by a housekeeping change.
#10886 60c8043 Thanks @dyc3! - Fixed #10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.
- test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
-   expect(a).toBe(b);
- });
+ test.each([[1, 2]])(
+   "a description that is long enough to push the hugged opening line beyond the print width",
+   (a, b) => {
+     expect(a).toBe(b);
+   },
+ );
#10895 01a85f0 Thanks @ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.
2.5.3

Patch Changes

#10815 86613d5 Thanks @WaterWhisperer! - Fixed a parser panic reported in #10708: Biome now recovers when unsupported CSS Modules @value rules or scoped @keyframes names end at EOF.

#10534 da9b403 Thanks @Mokto! - Fixed noUnusedVariables false positives in Svelte files: Svelte store subscriptions ($store references in templates now keep the underlying store binding from being flagged), and $bindable() props that are only written to in the script block (write-only is intentional for bindable props) are no longer reported as unused.

#10827 098ba41 Thanks @Aqu1bp! - Fixed #10698: The noUnsafeOptionalChaining rule now reports unsafe optional chains wrapped in TypeScript as, satisfies, type assertion, and instantiation expressions, such as new (value?.constructor as Constructor)().

#10773 3c6513d Thanks @otkrickey! - Fixed #10772: useVueValidVOn no longer reports a missing handler for v-on directives using a verb modifier (.stop / .prevent) without an expression, e.g. <div @click.stop></div>. The rule also accepts the arg-less object syntax <div v-on="$listeners"></div> instead of reporting a missing event name.

#10721 d83c66b Thanks @minseong0324! - Improved type-aware lint rule inference for built-in globals and indexed function calls. Biome now resolves Error(...), new Error(...), optional Error#stack, and calls through indexed function values such as handlers[0](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/0) more accurately.

#10865 6450276 Thanks @ematipico! - Fixed #10845. Biome Language Server no longer goes in deadlock when the scanner is enabled.

... (truncated)

Commits

bfc3f3d ci: release (#10887)
9e1999f chore: revert the revert
0b0fd8d chore: revert
0afa35a ci: release (#10817)
3447b2f feat(useDomQuerySelector): add ignore option (#10835)
See full diff in compare view

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @changesets/cli's releases.

@changesets/cli@2.31.1

Patch Changes

#2159 15cf592 Thanks @ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.

Commits

a897bb8 Use a different publish tag for maintenance/v2 branch (#2162)
e8650b9 Version Packages (#2161)
15cf592 Fixed handling of the npm 12 info output (#2159)
9f2cb2a Configure Changesets for maintenance/v2 line (#2076)
97247cb Change allowed publish pattern to maintenance/v* given rulesets behavior (#...
13286a8 Build(deps): Bump the github-actions group across 1 directory with 3 updates ...
8f6acd6 Update dependabot group to exclude major (#2067)
c70c675 Setup backport workflow and sync next setup (#2057)
9672019 Remove SECURITY.md to defer to .github (#2055)
18e1661 Use internal bot for versioning (#2039)
Additional commits viewable in compare view

Updates @types/node from 26.1.0 to 26.1.1

Commits

See full diff in compare view

Updates lint-staged from 17.0.8 to 17.1.0

Release notes

Sourced from lint-staged's releases.

v17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

#1818 26112a1 - Failed JS function tasks now properly kill other tasks, unless --continue-on-error is used. Previously their failure didn't affect other tasks.

Changelog

Sourced from lint-staged's changelog.

17.1.0

Minor Changes
#1816 7568d4f - The console output of lint-staged has been simplified so that there's less interactive spinners and more explicit messages like "Started…" -> "Done!". The primary purpose of this was to remove Listr2, a very large dependency.

Before:

Size of node_modules/ after installing: 1561.7 kB with 29 packages.

Fancy interactive spinners, but output dynamically changes:
✔ Backed up original state in git stash (0b191303)
✔ Running tasks for staged files...
✔ Staging changes from tasks...
✔ Cleaning up temporary files...
After:

Size of node_modules/ after installing: 974.0 kB with 5 packages (37.6 % smaller, 82.7 % less transitive dependencies).

Simpler but more explicit output:
⋯ Backing up original state…
✔ Done backing up original state (35b38ed1)!
⋯ Running tasks for staged files…
    *.js — 1 file
      ⋯ oxlint --fix
    *.{json,md} — 1 file
      ⋯ oxfmt --write
✔ oxfmt --write
✔ oxlint --fix
✔ Done running tasks for staged files!
⋯ Staging changes from tasks…
✔ Done staging changes from tasks!
⋯ Cleaning up temporary files…
✔ Done cleaning up temporary files!
Patch Changes

#1816 c19079d - Try to restore hidden unstaged changes when using --no-revert.

#1818 efb23a2 - Console output colors are enabled/disabled more consistently.

... (truncated)

Commits

dd5a95f Merge pull request #1817 from lint-staged/changeset-release/main
aad7f3b chore(changeset): release
11b1d5c Merge pull request #1818 from lint-staged/fixes
efb23a2 fix: enable colors globally based on option
26112a1 fix: function task failure kills other tasks, unless --continue-on-error wa...
9b98b7f fix: handle error when calculating hash of unstaged changes
d43432b fix: do not allow NaN concurrency
bd4dcbf fix: do not drop backup stash when restoring unstaged changes fails and using...
9153a77 Merge pull request #1816 from lint-staged/replace-listr2
290e618 refactor: use common identity function
Additional commits viewable in compare view

Updates vite from 8.1.2 to 8.1.5

Release notes

Sourced from vite's releases.

v8.1.5

Please refer to CHANGELOG.md for details.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.5 (2026-07-16)

Bug Fixes

bundled-dev: avoid duplicated buildEnd (#22931) (8100320)

client: overlay error message format align rolldown (#22869) (5a72b87)

deps: update all non-major dependencies (#22921) (fef682d)

deps: update rolldown-related dependencies (#22922) (3c345e4)

module-runner: don't crash stack-trace source mapping when globalThis.Buffer is absent (#22945) (f8b38e3)

optimizer: respect importer module format for dynamic import interop with CJS deps (#22951) (6c08c39)

ssr: scope switch-case declarations to the switch, not the function (#22893) (b59a73f)

Documentation

build: fix incorrect @default for build.cssMinify (#22948) (c88c236)

build: fix incorrect @default for build.lib.formats (#22911) (369ed60)

Tests

avoid scanner scanning all files under __tests__ (#22912) (c961cae)

8.1.4 (2026-07-09)

Features

legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

build: add workaround for building on stackblitz (#22840) (575c32c)

build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)

deps: update all non-major dependencies (#22865) (d4295a9)

deps: update rolldown-related dependencies (#22866) (7cf07e4)

html: avoid backtracking in import-only check (#22848) (b5868c0)

optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)

ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)

strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

... (truncated)

Commits

5e7fe12 release: v8.1.5
6c08c39 fix(optimizer): respect importer module format for dynamic import interop wit...
5a72b87 fix(client): overlay error message format align rolldown (#22869)
f8b38e3 fix(module-runner): don't crash stack-trace source mapping when globalThis.Bu...
8100320 fix(bundled-dev): avoid duplicated buildEnd (#22931)
c88c236 docs(build): fix incorrect @default for build.cssMinify (#22948)
b59a73f fix(ssr): scope switch-case declarations to the switch, not the function (#22...
fef682d fix(deps): update all non-major dependencies (#22921)
3c345e4 fix(deps): update rolldown-related dependencies (#22922)
369ed60 docs(build): fix incorrect @default for build.lib.formats (#22911)
Additional commits viewable in compare view

Updates vitest from 4.1.9 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@apidevtools/json-schema-ref-parser](https://github.com/APIDevTools/json-schema-ref-parser) | `15.4.0` | `15.5.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.2` | `2.5.4` | | [@changesets/cli](https://github.com/changesets/changesets) | `2.31.0` | `2.31.1` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.8` | `17.1.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.2` | `8.1.5` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `@apidevtools/json-schema-ref-parser` from 15.4.0 to 15.5.0 - [Release notes](https://github.com/APIDevTools/json-schema-ref-parser/releases) - [Commits](APIDevTools/json-schema-ref-parser@v15.4.0...v15.5.0) Updates `@biomejs/biome` from 2.5.2 to 2.5.4 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.4/packages/@biomejs/biome) Updates `@changesets/cli` from 2.31.0 to 2.31.1 - [Release notes](https://github.com/changesets/changesets/releases) - [Commits](https://github.com/changesets/changesets/compare/@changesets/cli@2.31.0...@changesets/cli@2.31.1) Updates `@types/node` from 26.1.0 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `lint-staged` from 17.0.8 to 17.1.0 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.8...v17.1.0) Updates `vite` from 8.1.2 to 8.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@apidevtools/json-schema-ref-parser" dependency-version: 15.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: "@biomejs/biome" dependency-version: 2.5.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@changesets/cli" dependency-version: 2.31.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: lint-staged dependency-version: 17.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-minor-patch - dependency-name: vite dependency-version: 8.1.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026

Navigation Menu

Uh oh!

Bump the development-minor-patch group across 1 directory with 7 updates - #34

Bump the development-minor-patch group across 1 directory with 7 updates#34
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-minor-patch-3d3aa367a7

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v15.5.0

15.5.0 (2026-07-09)

Bug Fixes

Features

Biome CLI v2.5.4

2.5.4

Patch Changes

What's Changed

2.5.4

Patch Changes

2.5.3

Patch Changes

@​changesets/cli@​2.31.1

Patch Changes

v17.1.0

Minor Changes

Patch Changes

17.1.0

Minor Changes

Patch Changes

v8.1.5

v8.1.4

v8.1.3

8.1.5 (2026-07-16)

Bug Fixes

Documentation

Tests

8.1.4 (2026-07-09)

Features

Bug Fixes

Documentation

Miscellaneous Chores

Code Refactoring

Tests

v4.1.10

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 27, 2026 •

edited

Loading

`@changesets/cli@2`.31.1