build(deps-dev): bump the development-dependencies group with 5 updates by dependabot[bot] · Pull Request #2890 · CoderLine/alphaTab

dependabot · 2026-09-24T09:53:34Z

Bumps the development-dependencies group with 5 updates:

Package	From	To
@biomejs/biome	`2.5.13`	`2.5.14`
@types/node	`26.5.1`	`26.6.2`
tsx	`4.23.13`	`4.23.15`
vitest	`5.0.0`	`5.0.1`
webpack	`5.111.0`	`5.111.1`

Updates @biomejs/biome from 2.5.13 to 2.5.14

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.14

Patch Changes
#9022 0d49e24 Thanks @dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.
// Invalid: return in finally callback
Promise.resolve(1).finally(() => { return 2 })
// Valid: no return in finally callback
Promise.resolve(1).finally(() => { console.log(2) })
Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.
#11754 71eaa0d Thanks @griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

{@debug user}
The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.
#11725 5eb5f09 Thanks @m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

#11735 9bd70c7 Thanks @ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

#11715 f05a3c3 Thanks @ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

#11766 c2542c6 Thanks @dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.
#11461 22e9966 Thanks @FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.
 const value = `
      ${
        condition
          ? "yes"
          : "no"
-}
+     }
 `;
#11766 c2542c6 Thanks @dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

#11790 17d0ff0 Thanks @ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

af4365d ci: release (#11711)
7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
1fc17e3 feat: expand useIncludes (#11739)
71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
9bd70c7 fix: various bug fixes (#11735)
c7c4e2b fix(analyzer): various bugs (#11720)
5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
Additional commits viewable in compare view

Updates @types/node from 26.5.1 to 26.6.2

Commits

See full diff in compare view

Updates tsx from 4.23.13 to 4.23.15

Release notes

Sourced from tsx's releases.

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

exclude bare builtins from namespace inheritance (38e1588)

expose require.cache and require.extensions to tsImport CommonJS modules (2da3407)

make namespaced register() overloads portable for declaration emit (562c434)

This release is also available on:

npm package (@latest dist-tag)

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

restore the CJS bridge namespace for Node 24 require(esm) under tsImport() (#802) (6e5236b)

This release is also available on:

npm package (@latest dist-tag)

Commits

ca66105 test: fix drive-less file URLs in ESM resolver fixtures
2da3407 fix: expose require.cache and require.extensions to tsImport CommonJS modules
38e1588 fix: exclude bare builtins from namespace inheritance
562c434 fix: make namespaced register() overloads portable for declaration emit
edfb1f0 build: upgrade pkgroll and externalize CJS loader reference
70e7828 test: upgrade tinyspy for disposable API
9ed2022 ci: avoid duplicate release notifications
872e77f refactor: use disposables for cleanup
6e5236b fix: restore the CJS bridge namespace for Node 24 require(esm) under tsImport...
See full diff in compare view

Updates vitest from 5.0.0 to 5.0.1

Release notes

Sourced from vitest's releases.

v5.0.1

   🚀 Features

ui:

Move trace attempts selector to viewer header - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11189 (5dc4b)

Add focused trace view layout mode - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11190 (376dc)

   🐞 Bug Fixes

Exit 1 when vitest list fails collection - by @hamed-bavar in vitest-dev/vitest#11145 and vitest-dev/vitest#11146 (6108b)

Keep parse error details in static collection - by @hamed-bavar in vitest-dev/vitest#11150 and vitest-dev/vitest#11151 (7c818)

Avoid recursive prototype in automocking - by @sheremet-va in vitest-dev/vitest#11195 (99fc5)

Prevent false Vitest import resolution - by @sheremet-va in vitest-dev/vitest#11196 (b426c)

Keep metadata file when clearing the cache - by @sheremet-va in vitest-dev/vitest#11199 (73614)

Correct typos in error message and comments - by @shinji00222 and Shinji in vitest-dev/vitest#11187 (115c3)

Resolve ResolvedConfig exactOptionalPropertyTypes errors - by @LukeAbby in vitest-dev/vitest#11175 (498fb)

Share the server on self-referencing extends - by @sheremet-va in vitest-dev/vitest#11034 (23dda)

Warn when deprecated deps.optimizer.web is used - by @im10furry in vitest-dev/vitest#11214 (2ce29)

browser:

Avoid double quotes in config.define - by @sheremet-va in vitest-dev/vitest#11198 (972e2)

doctor:

Measure vm pools for custom environments - by @sheremet-va in vitest-dev/vitest#11212 (91ab1)

expect:

Correct return value in toMatchAriaSnapshot - by @sheremet-va in vitest-dev/vitest#11208 (c119b)

fakeTimers:

Force queueMicrotask and nextTick in toNotFake - by @kingmakeruix, kingmakeruix, Hiroshi Ogawa, Codex and @hi-ogawa in vitest-dev/vitest#11261 (a47d7)

snapshot:

Report obsolete keys next to skipped tests - by @hamed-bavar, Hiroshi Ogawa and OpenCode (gpt-5.6-sol) in vitest-dev/vitest#11157 and vitest-dev/vitest#11158 (17e2b)

types:

Make public declarations self-contained - by @ZoeySigel in vitest-dev/vitest#11141 (45546)

ui:

Fix collapse/expand suite with file name search - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11260 (0a712)

Fix explorer file summary count - by @hi-ogawa, Hiroshi Ogawa, OpenCode (gpt-5.6-sol) and Codex in vitest-dev/vitest#11125 (05982)

utils:

Fix deepMerge to handle prototype - by @hi-ogawa, Hiroshi Ogawa and Codex in vitest-dev/vitest#11215 (4944c)

    View changes on GitHub

Commits

03630a5 chore: release v5.0.1 (#11275)
a47d790 fix(fakeTimers): force queueMicrotask and nextTick in toNotFake (#11261)
2ce29d5 fix: warn when deprecated deps.optimizer.web is used (#11214)
ccd6d05 docs: fix typecheck exclude default in documentation (#11223)
91ab158 fix(doctor): measure vm pools for custom environments (#11212)
23dda73 fix: share the server on self-referencing extends (#11034)
498fbe9 fix: resolve ResolvedConfig exactOptionalPropertyTypes errors (#11175)
115c3f6 fix: correct typos in error message and comments (#11187)
7361465 fix: keep metadata file when clearing the cache (#11199)
972e24b fix(browser): avoid double quotes in config.define (#11198)
Additional commits viewable in compare view

Updates webpack from 5.111.0 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

Record hoisted, module and block declarations while parsing, not by re-walking. (by @alexander-akait in #22147)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.111.1

Patch Changes

Throw on a write to an imported binding without losing concatenation. (by @alexander-akait in #22141)

Keep the </html> a page was written with, whatever opened the element. (by @aryanraj45 in #22103)

Look an attribute up by what its value decodes to, not how it was spelled. (by @aryanraj45 in #22107)

Minify HTML by what a value says rather than how it was spelled. (by @alexander-akait in #22154)

Follow HTML template form and frameset rules during tree construction. (by @dependabot in #22129)

Keep the whitespace calc() needs around + and - in a custom property. (by @alexander-akait in #22150)

Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @alexander-akait in #22119)

Rewrite an attribute value the source spelled with character references. (by @aryanraj45 in #22110)

Unquote an HTML attribute value carrying a vertical tab. (by @alexander-akait in #22162)

Keep a shadow's spread and canonicalize a merged selector list. (by @alexander-akait in #22101)

Leave out an implied tag and merge adjacent runs on the first pass. (by @aryanraj45 in #22121)

Minify in one pass what a second pass of the CSS minifier used to find. (by @alexander-akait in #22106)

Cover the CSS lookup tables no stylesheet in the corpus reaches. (by @aryanraj45 in #22126)

Keep initial where an engine reads the property's initial keyword apart. (by @aryanraj45 in #22128)

Join the CSS rules a cut leaves adjacent, and keep a value an escape ate. (by @alexander-akait in #22108)

Drop the dead CSS a cut leaves, and join more of the blocks that print alike. (by @alexander-akait in #22111)

Run the printer equivalence suite against Firefox as well as Chrome. (by @aryanraj45 in #22151)

Finish in one CSS pass the joins, drops and collapses left to a second. (by @alexander-akait in #22117)

Move the context module sources into lib/context/. (by @alexander-akait in #22115)

Declare loader context types in JSDoc instead of hand-written .d.ts files. (by @alexander-akait in #22116)

Emit a failing module's stack relative, and name what a tap failed with. (by @alexander-akait in #22122)

Finish in one CSS pass the drops, layer gathers and joins left to a second. (by @alexander-akait in #22120)

Speed up CSS parsing by stepping over dropped selector preludes in bytes. (by @alexander-akait in #22142)

... (truncated)

Commits

5a10675 chore(release): new release (#22105)
9c448c4 test: consolidate loose harness files under test/harness (#22163)
a947604 fix(html): unquote an attribute value carrying a vertical tab (#22162)
db556f3 test: run the printer equivalence suite against Gecko in CI (#22155)
d174cdf perf(css): drop a fallback every browserslist target reads past (#22158)
39f14f2 refactor(javascript): declare block bindings from the parse (#22161)
0835411 test: move suite drivers into test/templates (#22159)
b48cd77 fix(html): minify by what a value says rather than how it was spelled (#22154)
a774f10 test: define the webpack major instead of bundling package.json (#22160)
4b2eed0 docs: report only what needs a decision while watching a PR (#22156)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.13` | `2.5.14` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.1` | `26.6.2` | | [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.0` | `5.0.1` | | [webpack](https://github.com/webpack/webpack) | `5.111.0` | `5.111.1` | Updates `@biomejs/biome` from 2.5.13 to 2.5.14 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.14/packages/@biomejs/biome) Updates `@types/node` from 26.5.1 to 26.6.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tsx` from 4.23.13 to 4.23.15 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.13...v4.23.15) Updates `vitest` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest) Updates `webpack` from 5.111.0 to 5.111.1 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.111.0...v5.111.1) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.14 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: "@types/node" dependency-version: 26.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: tsx dependency-version: 4.23.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: vitest dependency-version: 5.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: webpack dependency-version: 5.111.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added area-dependencies Pull requests that update a dependency file platform-javascript Related to the JavaScript version of alphaTab labels Sep 24, 2026

github-actions Bot enabled auto-merge (squash) September 24, 2026 09:53

github-actions Bot merged commit ab305e4 into develop Sep 24, 2026
6 checks passed

github-actions Bot deleted the dependabot/npm_and_yarn/development-dependencies-12b5040555 branch September 24, 2026 09:58

Navigation Menu

build(deps-dev): bump the development-dependencies group with 5 updates - #2890

build(deps-dev): bump the development-dependencies group with 5 updates#2890
github-actions[bot] merged 1 commit into
developfrom
dependabot/npm_and_yarn/development-dependencies-12b5040555

dependabot Bot commented on behalf of github Sep 24, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 24, 2026

Biome CLI v2.5.14

2.5.14

Patch Changes

2.5.14

Patch Changes

v4.23.15

4.23.15 (2026-09-20)

Bug Fixes

v4.23.14

4.23.14 (2026-09-20)

Bug Fixes

v5.0.1

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v5.111.1

Patch Changes

5.111.1

Patch Changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants