Skip to content

chore(deps-dev): bump the dev-dependencies group with 9 updates - #934

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-485f33e06a
Open

chore(deps-dev): bump the dev-dependencies group with 9 updates#934
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-485f33e06a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 9 updates:

Package From To
@biomejs/biome 2.5.3 2.5.8
@changesets/cli 2.31.0 2.31.1
turbo 2.10.4 2.10.9
@neon-rs/cli 0.1.82 0.2.6
@clerk/backend 3.11.3 3.16.5
@supabase/postgrest-js 2.110.2 2.112.3
@supabase/supabase-js 2.110.2 2.112.3
fta-cli 3.0.0 3.0.1
@types/semver 7.7.1 7.8.0

Updates @biomejs/biome from 2.5.3 to 2.5.8

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.8

2.5.8

Patch Changes

  • #10710 0a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

  • #11251 ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

  • #11247 52b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

    Invalid:

    {#each boxes as box}
  {@const area = box.width * box.height}
  <p>{area}</p>
{/each}

    Valid:

    {#each boxes as box}
  {const area = $derived(box.width * box.height)}
  <p>{area}</p>
{/each}

  • #11252 d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

  • #11143 6be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

  • #11234 caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

     :root {
   --font-stack:
-/* comment */
+    /* comment */
     system-ui;
 }

  • #11285 bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

    -:/* comment */ where(div) {}
+:where(/* comment */ div) {}

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.8

Patch Changes

  • #10710 0a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

  • #11251 ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

  • #11247 52b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

    Invalid:

    {#each boxes as box}
  {@const area = box.width * box.height}
  <p>{area}</p>
{/each}

    Valid:

    {#each boxes as box}
  {const area = $derived(box.width * box.height)}
  <p>{area}</p>
{/each}

  • #11252 d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

  • #11143 6be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

  • #11234 caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

     :root {
   --font-stack:
-/* comment */
+    /* comment */
     system-ui;
 }

  • #11285 bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

    -:/* comment */ where(div) {}
+:where(/* comment */ div) {}

... (truncated)

Commits

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Changelog

Sourced from @​changesets/cli's changelog.

2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits

Updates turbo from 2.10.4 to 2.10.9

Release notes

Sourced from turbo's releases.

Turborepo v2.10.9

What's Changed

Changelog

... (truncated)

Commits

Updates @neon-rs/cli from 0.1.82 to 0.2.6

Commits
  • 8043a58 v0.2.6
  • 0213f55 Fix prepack script to not overwrite package.json
  • 5d8a3fb Clean up @​neon-rs/cli dependencies and build scripts
  • 78e1825 v0.2.5
  • 06871b2 Add cargo-messages to verdaccio proxy isolated packages
  • 5e63fde Add missing repository field to @​neon-rs/manifest package.json
  • d571d23 v0.2.4
  • 936c08c Fix repository URLs to match GitHub org for npm provenance
  • 817a885 v0.2.3
  • 7803686 Switch to npm OIDC trusted publishing and revert versions to 0.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​neon-rs/cli since your current version.


Updates @clerk/backend from 3.11.3 to 3.16.5

Release notes

Sourced from @​clerk/backend's releases.

@​clerk/backend@​3.16.5

Patch Changes

  • Billing applied-discount snapshots now include optional durationInCycles. Payment attempt and statement UIs use the original discount length instead of cycles remaining, and omit the duration copy when it is unavailable. (#9401) by @​mauricioabreu

  • Updated dependencies [81840b3, b7fb564, 44edcc9]:

    • @​clerk/shared@​4.29.0
Changelog

Sourced from @​clerk/backend's changelog.

3.16.5

Patch Changes

  • Billing applied-discount snapshots now include optional durationInCycles. Payment attempt and statement UIs use the original discount length instead of cycles remaining, and omit the duration copy when it is unavailable. (#9401) by @​mauricioabreu

  • Updated dependencies [81840b3, b7fb564, 44edcc9]:

    • @​clerk/shared@​4.29.0

3.16.4

Patch Changes

  • Update the lockUser() documentation to link to the current Rules page in the Clerk Dashboard. (#9372) by @​SarahSoutoul

3.16.3

Patch Changes

  • Updated dependencies [131edec]:
    • @​clerk/shared@​4.28.1

3.16.2

Patch Changes

3.16.1

Patch Changes

  • Use a root-relative link (/contact/support) for the passwordHasher "contact support" reference so the generated API reference renders it as an internal same-tab link instead of an external one. (#9347) by @​manovotny

  • Updated dependencies [34d278b]:

    • @​clerk/shared@​4.27.1

3.16.0

Minor Changes

  • Add clerkClient.users.removePassword(userId, params?) to remove a user's password through the Backend API. Password removal is allowed even when the user has no alternate sign-in method configured. Existing sessions remain active by default; pass { signOutOfOtherSessions: true } to revoke them. (#9326) by @​joshrowley

Patch Changes

  • Improve generated API reference links, expose BillingSubscriptionItemStatus, and clarify the createUser() identification status documentation. (#9340) by @​SarahSoutoul

  • Updated dependencies [1ef84c3, d639048, a66cbbf]:

    • @​clerk/shared@​4.27.0

... (truncated)

Commits
  • 45514ca ci(repo): Version packages (#9402)
  • 81840b3 fix(shared,clerk-js,backend,ui): use duration in cycles in payments and state...
  • 4edfb53 ci(repo): Version packages (#9387)
  • 167204b docs(backend): fix Dashboard links and method reference layout (#9372)
  • 195a09a ci(repo): Version packages (#9382)
  • d435282 ci(repo): Version packages (#9368)
  • aa86d9f feat(clerk-js,localizations,shared,ui): Add support for discounts/promo codes...
  • 6100719 ci(repo): Version packages (#9353)
  • 63d25ba docs(backend): Use root-relative link for passwordHasher contact support refe...
  • a53c672 ci(repo): Version packages (#9334)
  • Additional commits viewable in compare view

Updates @supabase/postgrest-js from 2.110.2 to 2.112.3

Release notes

Sourced from @​supabase/postgrest-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

... (truncated)

Changelog

Sourced from @​supabase/postgrest-js's changelog.

2.112.3 (2026-08-11)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.0 (2026-08-03)

🩹 Fixes

  • postgrest: honour throwOnError when maybeSingle finds multiple rows (#2580)

❤️ Thank You

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.7 (2026-07-16)

🩹 Fixes

  • postgrest: correct self-reference inference (#2525)

❤️ Thank You

2.110.6 (2026-07-15)

🩹 Fixes

  • postgrest: type hinted self-referencing embeds as arrays (#2520)

... (truncated)

Commits
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 4c13bf0 fix(postgrest): honour throwOnError when maybeSingle finds multiple rows (#2580)
  • 6331898 docs(postgrest): document that statusText may be empty over HTTP/2 (#2574)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • 18b5bb2 chore(release): version 2.110.9 changelogs (#2567)
  • 22050de chore(release): version 2.110.8 changelogs (#2546)
  • 150b00c chore(release): version 2.110.7 changelogs (#2533)
  • 5c18b62 fix(postgrest): correct self-reference inference (#2525)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.110.2 to 2.112.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

... (truncated)

Commits
  • e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
  • 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • Additional commits viewable in compare view

Updates fta-cli from 3.0.0 to 3.0.1

Release notes

Sourced from fta-cli's releases.

v3.0.1

Release v3.0.1

See CHANGELOG.md for details.

Changelog

Sourced from fta-cli's changelog.

v3.0.1

  • Upgraded various internal Rust dependencies
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fta-cli since your current version.


Updates @types/semver from 7.7.1 to 7.8.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the dev-dependencies group with 9 updates
60aeee7 
Bumps the dev-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.8` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.0` | `2.31.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.4` | `2.10.9` |
| [@neon-rs/cli](https://github.com/neon-bindings/neon-rs) | `0.1.82` | `0.2.6` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.11.3` | `3.16.5` |
| [@supabase/postgrest-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/postgrest-js) | `2.110.2` | `2.112.3` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.2` | `2.112.3` |
| [fta-cli](https://github.com/sgb-io/fta) | `3.0.0` | `3.0.1` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` |


Updates `@biomejs/biome` from 2.5.3 to 2.5.8
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.8/packages/@biomejs/biome)

Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/@changesets/cli@2.31.1/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.1/packages/cli)

Updates `turbo` from 2.10.4 to 2.10.9
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.4...v2.10.9)

Updates `@neon-rs/cli` from 0.1.82 to 0.2.6
- [Release notes](https://github.com/neon-bindings/neon-rs/releases)
- [Commits](neon-bindings/neon-rs@v0.1.82...v0.2.6)

Updates `@clerk/backend` from 3.11.3 to 3.16.5
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.16.5/packages/backend)

Updates `@supabase/postgrest-js` from 2.110.2 to 2.112.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/postgrest-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/postgrest-js)

Updates `@supabase/supabase-js` from 2.110.2 to 2.112.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js)

Updates `fta-cli` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/sgb-io/fta/releases)
- [Changelog](https://github.com/sgb-io/fta/blob/main/CHANGELOG.md)
- [Commits](sgb-io/fta@v3.0.0...v3.0.1)

Updates `@types/semver` from 7.7.1 to 7.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.10.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@neon-rs/cli"
  dependency-version: 0.2.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@clerk/backend"
  dependency-version: 3.16.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@supabase/postgrest-js"
  dependency-version: 2.112.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: fta-cli
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/semver"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 21, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 21, 2026 03:18
@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 21, 2026
@changeset-bot

changeset-bot Bot commented Aug 21, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 60aeee7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants