Skip to content

build: bump the dependencies group with 4 updates#48

Merged
sutne merged 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-f4df1e445c
Jan 18, 2026
Merged

build: bump the dependencies group with 4 updates#48
sutne merged 1 commit intomainfrom
dependabot/npm_and_yarn/dependencies-f4df1e445c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the dependencies group with 4 updates: @biomejs/biome, @types/node, @vercel/node and vercel.

Updates @biomejs/biome from 2.3.8 to 2.3.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.10

2.3.10

Patch Changes

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.3.10

Patch Changes

2.3.9

Patch Changes

  • #8232 84c9e08 Thanks @​ruidosujeira! - Added the nursery rule noScriptUrl.

    This rule disallows the use of javascript: URLs, which are considered a form of eval and can pose security risks such as XSS vulnerabilities.

    <a href="javascript:alert('XSS')">Click me</a>
  • #8341 343dc4d Thanks @​arendjr! - Added the nursery rule useAwaitThenable, which enforces that await is only used on Promise values.

    Invalid

    await "value";
    const createValue = () => "value";
    await createValue();

... (truncated)

Commits

Updates @types/node from 24.10.1 to 25.0.3

Commits

Updates @vercel/node from 5.5.13 to 5.5.16

Release notes

Sourced from @​vercel/node's releases.

@​vercel/node@​5.5.16

Patch Changes

@​vercel/node@​5.5.15

Patch Changes

@​vercel/node@​5.5.14

Patch Changes

Changelog

Sourced from @​vercel/node's changelog.

5.5.16

Patch Changes

5.5.15

Patch Changes

5.5.14

Patch Changes

Commits

Updates vercel from 48.12.0 to 50.1.3

Release notes

Sourced from vercel's releases.

vercel@50.1.3

Patch Changes

vercel@50.1.2

Patch Changes

  • Remove content-encoding response header for CLI extensions proxy (#14489)

vercel@50.1.1

Patch Changes

  • Revert env pull conditional quoting changes (#14485)

vercel@50.1.0

Minor Changes

  • Bugfix: handle json values with newlines when pulling environment variables (#14479)

  • Add out to deploy command for aliasing production domains (#14458)

Patch Changes

  • Add support for customErrorPage configuration in vercel.json to customize pages for platform errors. (#14466)

... (truncated)

Changelog

Sourced from vercel's changelog.

50.1.3

Patch Changes

50.1.2

Patch Changes

  • Remove content-encoding response header for CLI extensions proxy (#14489)

50.1.1

Patch Changes

  • Revert env pull conditional quoting changes (#14485)

50.1.0

Minor Changes

  • Bugfix: handle json values with newlines when pulling environment variables (#14479)

  • Add out to deploy command for aliasing production domains (#14458)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
@dependabot dependabot bot requested a review from sutne as a code owner January 1, 2026 16:03
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
@vercel
Copy link

vercel bot commented Jan 1, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Review Updated (UTC)
personal-api Ready Ready Preview, Comment Jan 18, 2026 1:41pm

Bumps the dependencies group with 4 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node) and [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli).

Updates `@biomejs/biome` from 2.3.8 to 2.3.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.10/packages/@biomejs/biome)

Updates `@types/node` from 24.10.1 to 25.0.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vercel/node` from 5.5.13 to 5.5.16
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/node@5.5.16/packages/node)

Updates `vercel` from 48.12.0 to 50.1.3
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@50.1.3/packages/cli)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 25.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@vercel/node"
  dependency-version: 5.5.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: vercel
  dependency-version: 50.1.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@sutne sutne force-pushed the dependabot/npm_and_yarn/dependencies-f4df1e445c branch from 60a5ced to a9dfba9 Compare January 18, 2026 13:41
@sutne sutne merged commit 9fa1111 into main Jan 18, 2026
3 checks passed
@sutne sutne deleted the dependabot/npm_and_yarn/dependencies-f4df1e445c branch January 18, 2026 13:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant