chore(deps): update patch npm dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@biomejs/biome (source)	^2.3.7 -> ^2.3.8
mermaid	^11.12.1 -> ^11.12.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.3.8

Compare Source

Patch Changes

• #​8188 4ca088c Thanks @​ematipico! - Fixed #​7390, where Biome couldn't apply the correct configuration passed via --config-path.

  If you have multiple root configuration files, running any command with --config-path will now apply the chosen configuration file.

• #​8171 79adaea Thanks @​dibashthapa! - Added the new rule noLeakedRender. This rule helps prevent potential leaks when rendering components that use binary expressions or ternaries.

  For example, the following code triggers the rule because the component would render 0:

  const Component = () => {
    const count = 0;
    return <div>{count && <span>Count: {count}</span>}</div>;
  };

• #​8116 b537918 Thanks @​Netail! - Added the nursery rule noDuplicatedSpreadProps. Disallow JSX prop spreading the same identifier multiple times.

  Invalid:

  <div {...props} something="else" {...props} />

• #​8256 f1e4696 Thanks @​cormacrelf! - Fixed a bug where logs were discarded (the kind from --log-level=info etc.). This is a regression introduced after an internal refactor that wasn't adequately tested.

• #​8226 3f19b52 Thanks @​dyc3! - Fixed #​8222: The HTML parser, with Vue directives enabled, can now parse v-slot shorthand syntax, e.g. <template #foo>.

• #​8007 182ecdc Thanks @​brandonmcconnell! - Added support for dollar-sign-prefixed filenames in the useFilenamingConvention rule.

  Biome now allows filenames starting with the dollar-sign (e.g. $postId.tsx) by default to support naming conventions used by frameworks such as TanStack Start for file-based-routing.

• #​8218 91484d1 Thanks @​hirokiokada77! - Added the noMultiStr rule, which disallows creating multiline strings by escaping newlines.

  Invalid:

  const foo =
    "Line 1\n\
  Line 2";

  Valid:

  const foo = "Line 1\nLine 2";
  const bar = `Line 1
  Line 2`;

• #​8225 98ca2ae Thanks @​ongyuxing! - Fixed #​7806: Prefer breaking after the assignment operator for conditional types with generic parameters to match Prettier.

  -type True = unknown extends Type<
  -  "many",
  -  "generic",
  -  "parameters",
  -  "one",
  -  "two",
  -  "three"
  ->
  -  ? true
  -  : false;
  +type True =
  +  unknown extends Type<"many", "generic", "parameters", "one", "two", "three">
  +    ? true
  +    : false;

• #​6765 23f7855 Thanks @​emilyinure! - Fixed #​6569: Allow files to export from themselves with noImportCycles.

  This means the following is now allowed:

  // example.js
  export function example() {
    return 1;
  }
  
  // Re-exports all named exports from the current module under a single namespace
  // and then imports the namespace from the current module.
  // Allows for encapsulating functions/variables into a namespace instead
  // of using a static class.
  export * as Example from "./example.js";
  
  import { Example } from "./example.js";

• #​8214 68c052e Thanks @​hirokiokada77! - Added the noEqualsToNull rule, which enforces the use of === and !== for comparison with null instead of == or !=.

  Invalid:

  foo == null;
  foo != null;

  Valid:

  foo === null;
  foo !== null;

• #​8219 793bb9a Thanks @​dyc3! - Fixed #​8190: The HTML parser will now parse Vue event handlers that contain : correctly, e.g. @update:modelValue="onUpdate".

• #​8259 4a9139b Thanks @​hirokiokada77! - Fixed #​8254: The noParameterAssign rule with propertyAssignment: "deny" was incorrectly reporting an error when a function parameter was used on the right-hand side of an assignment to a local variable's property.

  The rule should only flag assignments that modify the parameter binding or its properties (L-value), not the use of its value.

  Valid:

  (input) => {
    const local = { property: 0 };
    local.property = input;
  };

• #​8201 cd2edd7 Thanks @​Netail! - Added the nursery rule noTernary. Disallow ternary operators.

  Invalid:

  const foo = isBar ? baz : qux;

• #​8172 de98933 Thanks @​JeremyMoeglich! - Fixed #​8145: handling of large hex literals, which previously caused both false positives and false negatives.

  This affects noPrecisionLoss and noConstantMathMinMaxClamp.

• #​8210 7b44e9e Thanks @​Netail! - Corrected rule source reference. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

• #​8213 e430555 Thanks @​ruidosujeira! - Fixed #​8209: Recognized formatting capability when either range or on-type formatting is supported, not only full-file formatting. This ensures editors and the language server correctly detect formatting support in files like JSONC.

• #​8202 6f49d95 Thanks @​hirokiokada77! - Fixed #​8079: Properly handle name and value metavariables for JsxAttribute GritQL queries.

  The following biome search command no longer throws an error:

  biome search 'JsxAttribute($name, $value) as $attr where { $name <: "style" }'
  

• #​8276 f7e836f Thanks @​hirokiokada77! - Added the noProto rule, which disallows the use of the __proto__ property for getting or setting the prototype of an object.

  Invalid:

  obj.__proto__ = a;
  const b = obj.__proto__;

  Valid:

  const a = Object.getPrototypeOf(obj);
  Object.setPrototypeOf(obj, b);

mermaid-js/mermaid (mermaid)

v11.12.2

Compare Source

Patch Changes

• #​7200 de7ed10 Thanks @​shubhamparikh2704! - fix: validate dates and tick interval to prevent UI freeze/crash in gantt diagramtype

---

Configuration

📅 Schedule: Branch creation - "before 8am on wednesday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for rspack ready!

Name	Link
🔨 Latest commit	daa64a7
🔍 Latest deploy log	https://app.netlify.com/projects/rspack/deploys/692f2a7c09bd02000870612c
😎 Deploy Preview	https://deploy-preview-12355--rspack.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[github-actions]

Rsdoctor Bundle Diff Analysis

Found 5 project(s) in monorepo.

📁 react-10k

Path: ../build-tools-performance/cases/react-10k/dist/rsdoctor-data.json

📌 Baseline Commit: 5dc9c8976b | PR: #12352

Metric	Current	Baseline	Change
📊 Total Size	5.7 MB	5.7 MB	0 B (0.0%)
📄 JavaScript	5.7 MB	5.7 MB	0 B (0.0%)
🎨 CSS	21.0 B	21.0 B	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-10k Bundle Diff

📁 react-1k

Path: ../build-tools-performance/cases/react-1k/dist/rsdoctor-data.json

📌 Baseline Commit: 5dc9c8976b | PR: #12352

Metric	Current	Baseline	Change
📊 Total Size	822.6 KB	822.6 KB	0 B (0.0%)
📄 JavaScript	822.6 KB	822.6 KB	0 B (0.0%)
🎨 CSS	0 B	0 B	N/A
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-1k Bundle Diff

📁 react-5k

Path: ../build-tools-performance/cases/react-5k/dist/rsdoctor-data.json

📌 Baseline Commit: 5dc9c8976b | PR: #12352

Metric	Current	Baseline	Change
📊 Total Size	2.7 MB	2.7 MB	0 B (0.0%)
📄 JavaScript	2.7 MB	2.7 MB	0 B (0.0%)
🎨 CSS	21.0 B	21.0 B	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: react-5k Bundle Diff

📁 rome

Path: ../build-tools-performance/cases/rome/dist/rsdoctor-data.json

📌 Baseline Commit: 5dc9c8976b | PR: #12352

Metric	Current	Baseline	Change
📊 Total Size	984.3 KB	984.3 KB	0 B (0.0%)
📄 JavaScript	984.3 KB	984.3 KB	0 B (0.0%)
🎨 CSS	0 B	0 B	N/A
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: rome Bundle Diff

📁 ui-components

Path: ../build-tools-performance/cases/ui-components/dist/rsdoctor-data.json

📌 Baseline Commit: 5dc9c8976b | PR: #12352

Metric	Current	Baseline	Change
📊 Total Size	2.1 MB	2.1 MB	0 B (0.0%)
📄 JavaScript	2.0 MB	2.0 MB	0 B (0.0%)
🎨 CSS	83.0 KB	83.0 KB	0 B (0.0%)
🌐 HTML	0 B	0 B	N/A
📁 Other Assets	0 B	0 B	N/A

📦 Download Diff Report: ui-components Bundle Diff

Generated by Rsdoctor GitHub Action

[github-actions]

📦 Binary Size-limit

Comparing daa64a7 to ci: remove legacy ecosystem CI yaml (#12352) by Wei

🙈 Size remains the same at 47.70MB

[codspeed-hq]

CodSpeed Performance Report

Merging #12355 will not alter performance

_{Comparing renovate/patch-npm-dependencies (daa64a7) with main (5dc9c89)}

Summary

✅ 17 untouched