chore(deps): update all non-major dev dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.3.12 → 2.3.14
@tauri-apps/cli	2.9.6 → 2.10.0
@types/react (source)	19.2.9 → 19.2.13
@vitejs/plugin-react (source)	5.1.2 → 5.1.3

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.3.14

Compare Source

Patch Changes

• #​8921 29e2435 Thanks @​siketyan! - Fixed #​8759: The useConsistentTypeDefinitions rule no longer converts empty object type declarations into interfaces, as it will conflict with the noEmptyInterface rule and can cause an infinite loop when both rules are enabled.

• #​8928 ccaeac4 Thanks @​taga3s! - Added the nursery rule useGlobalThis. This rule enforces using globalThis over window, self and global.

• #​8602 9a18daa Thanks @​dyc3! - Added the new nursery rule noVueArrowFuncInWatch. This rule forbids using arrow functions in watchers in Vue components, because arrow functions do not give access to the component instance (via this), while regular functions do.

• #​8905 9b1eea8 Thanks @​ryan-m-walker! - Fixed #​8428: Improved parsing recovery when encountering qualified rules inside CSS @page at-rule blocks.

• #​8900 f788cff Thanks @​mdevils! - Fixed #​8802: useExhaustiveDependencies now correctly suggests dependencies without including callback-scoped variables or method names.

  When accessing object properties with a callback-scoped variable, only the object path is suggested:

  // Now correctly suggests `props.value` instead of `props.value[day]`
  useMemo(() => {
    return WeekdayValues.filter((day) => props.value[day]);
  }, [props.value]);

  When calling methods on objects, only the object is suggested as a dependency:

  // Now correctly suggests `props.data` instead of `props.data.forEach`
  useMemo(() => {
    props.data.forEach((item) => console.log(item));
  }, [props.data]);

• #​8913 e1e20ea Thanks @​dyc3! - Fixed #​8363: HTML parser no longer crashes when encountering a < character followed by a digit in text content (e.g., <12 months). The parser now correctly emits an "Unescaped < bracket character" error instead of treating <12 as a tag name and crashing.

• #​8910 2fb63a4 Thanks @​dyc3! - Fixed #​8774: Type aliases with generic parameters that have extends constraints now properly indent comments after the equals sign.

  Previously, comments after the = in type aliases with extends constraints were not indented:

  -type A<B, C extends D> = // Some comment
  -undefined;
  +type A<B, C extends D> =
  +    // Some comment
  +    undefined;

• #​8916 ea4bd04 Thanks @​ryan-m-walker! - Fixed #​4013, where comments in member chains caused unnecessary line breaks.

  // Before
  aFunction.b().c.d();
  
  // After
  aFunction.b().c.d();

• #​8945 fa66fe3 Thanks @​fireairforce! - Fixed #​8354: Don't remove quotes when type memeber is new.

  // Input:
  type X = {
    "new"(): string;
    "foo"(): string;
  };
  
  // Format Output:
  type X = {
    "new()": string;
    foo(): string;
  };

• #​8927 0ef3da5 Thanks @​littleKitchen! - Fixed #​8907: useExhaustiveDependencies now correctly recognizes stable hook results (like useState setters and useRef values) when declared with let.

• #​8931 4561751 Thanks @​koshin01! - Added the new nursery rule noRedundantDefaultExport, which flags redundant default exports where the default export references the same identifier as a named export.

• #​8900 f788cff Thanks @​mdevils! - Fixed #​8883: useExhaustiveDependencies no longer produces false positives when props are destructured in the function body of arrow function components without parentheses around the parameter.

  type Props = { msg: string };
  
  // Arrow function without parentheses around `props`
  const Component: React.FC<Props> = (props) => {
    const { msg } = props;
    // Previously, this incorrectly reported `msg` as unnecessary
    useEffect(() => console.log(msg), [msg]);
  };

• #​8861 3531687 Thanks @​dyc3! - Added the noDeprecatedMediaType CSS rule to flag deprecated media types like tv and handheld.

• #​8775 7ea71cd Thanks @​igas! - Fixed the noUnnecessararyConditions rule to prevent trigger for optional fallback patterns.

• #​8860 95f1eea Thanks @​dyc3! - Added the nursery rule noHexColors, which flags the use of hexadecimal color codes in CSS and suggests using named colors or RGB/RGBA/HSL/HSLA formats instead.

• #​8786 d876a38 Thanks @​Bertie690! - Added the nursery rule useConsistentMethodSignatures.
  Inspired by the similarly named version from typescript-eslint, this rule aims to enforce a consistent style for methods used inside object types and interfaces.

Examples

Invalid code with style set to "property" (the default):

interface Foo {
  method(a: string): void;
}

Invalid code with style set to "method":

type Bar = {
  prop: (a: string) => void;
}

• #​8864 5e97119 Thanks @​dyc3! - Improved the summary provided by biome migrate eslint to be clearer on why rules were not migrated. Biome now specifies a reason when a rule is not migrated, such as being incompatible with the formatter or not implemented yet. This helps users make more informed decisions when migrating their ESLint configurations to Biome.

• #​8924 99b4cd1 Thanks @​tmohammad78! - Fixed #​8920: noUnknownFunction now knows about sibling-count, and sibling-index css functions

• #​8900 f788cff Thanks @​mdevils! - Fixed #​8885: useExhaustiveDependencies no longer incorrectly reports variables as unnecessary dependencies when they are derived from expressions containing post/pre-increment operators (++/--) or compound assignment operators (+=, -=, etc.).

  let renderCount = 0;
  
  export const MyComponent = () => {
    // `count` is now correctly recognized as a required dependency
    // because `renderCount++` can produce different values between renders
    const count = renderCount++;
  
    useEffect(() => {
      console.log(count);
    }, [count]); // no longer reports `count` as unnecessary
  };

• #​8619 d78e01d Thanks @​Netail! - Added the nursery rule useInputName. Require mutation arguments to be called “input”, and the input type to be called Mutation name + “Input”.

  Invalid:

  type Mutation {
    SetMessage(message: String): String
  }

• #​8922 871b45e Thanks @​siketyan! - Fixed #​8829: Revamped the noGlobalDirnameFilename rule to catch many false negatives that have not been reported.

v2.3.13

Compare Source

Patch Changes

• #​8815 f924f23 Thanks @​dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

  Now treated valid:

  <div @&#8203;keydown.arrow-down="handler"></div>
  <div @&#8203;keydown.a="handler"></div>
  <div @&#8203;keydown.b="handler"></div>
  <div @&#8203;keydown.27="foo"></div>

• #​8856 85f81f9 Thanks @​dyc3! - Fixed #​8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].

• #​8850 2a190e0 Thanks @​dyc3! - Fixed #​8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.

• #​8863 79386e0 Thanks @​dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.

• #​8771 6f56b6e Thanks @​lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #​8730

• #​8714 ac3a71f Thanks @​Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

tauri-apps/tauri (@​tauri-apps/cli)

v2.10.0: @​tauri-apps/cli v2.10.0

Compare Source

[2.10.0]

Enhancements

• f82594410 (#​13253 by @​Armaldio) Allow electron to run the CLI directly

• a2abe2e6b (#​14607 by @​sftse) Simplified internal representation of features: Option<Vec<String>> with Vec<String>, no user facing changes

• 84b04c4a8 (#​14759 by @​amrbashir) Added new environment variables for tauri signer sign command, to align with existing environment variables used in tauri build, tauri bundle and tauri signer generate

  • TAURI_SIGNING_PRIVATE_KEY
  • TAURI_SIGNING_PRIVATE_KEY_PATH
  • TAURI_SIGNING_PRIVATE_KEY_PASSWORD

  The old environment variables are deprecated and will be removed in a future release.

  • TAURI_PRIVATE_KEY
  • TAURI_PRIVATE_KEY_PATH
  • TAURI_PRIVATE_KEY_PASSWORD

Bug Fixes

• 62aa13a12 (#​14629 by @​lucasfernog) Fix android build's --aab and --apk flags requiring a value to be provided.

• eccff9758 (#​14779 by @​lucasfernog) Fix empty associated-domains entitlements when domains are not configured for deep links.

• ea31b07f1 (#​14789 by @​Legend-Master) Fixed the command description for tauri inspect

• 7fca58230 (#​14830 by @​Legend-Master) Updated nsis_tauri_utils to 0.5.3:

  • Use an alternative method CreateProcessWithTokenW to run programs as user, this fixed a problem that the program launched with the previous method can't query its own handle

• 53611c4d7 (#​14747 by @​Legend-Master) Only watch dependent workspace members when running tauri dev instead of watching on all members

• 1b0e335d3 (#​14713 by @​wasuaje) tauri signer sign doesn't work for files without an extension

What's Changed

• e3fdcb500 (#​14836 by @​sftse) Continued refactors of tauri-cli, fix too weak atomics.
• 0575dd287 (#​14521 by @​kandrelczyk) Change the way bundle type information is added to binary files. Instead of looking up the value of a variable we simply look for the default value.
• 7f7d9aac2 (#​14668 by @​sftse) Refactored internal use of static on config and directory resolvings, no user facing changes, please report any regressions if you encounter any

Dependencies

• Upgraded to tauri-cli@2.10.0

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v5.1.3

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.