fix(deps): update all dependencies - #429

v2.6.6

Compare Source

Patch Changes

• #​12887 da0422e Thanks @​dyc3! - Added the new nursery rule noArrayMethodsOnArguments. It reports calls to array methods on the arguments object, which isn't an array, so these calls throw a TypeError when the code runs.

  function sum() {
    return arguments.reduce((total, value) => total + value, 0);
  }

• #​12877 cd9e10f Thanks @​dyc3! - Added the nursery rule noConstantComparisons, which reports && and || conditions that can never be true, are always true, or contain a check with no effect.

  if (statusCode <= 400 && statusCode > 500) {}

• #​12876 a7c9586 Thanks @​dyc3! - Added the nursery rule noErasingOperation, which disallows operations with 0 that always result in zero: multiplying by 0, a bitwise AND with 0, and dividing 0 by a number. The other value in these operations has no effect on the result, which usually means the code has a mistake.

  const total = price * 0;

• #​12841 e954f55 Thanks @​dyc3! - Added the nursery rule noNegatedArrayPredicate, which reports negated calls to Array#some() and Array#every() and suggests moving the negation into the callback function.

  // Invalid: use `array.every((item) => !isUnicorn(item))` instead.
  const isMissing = !array.some((item) => isUnicorn(item));

• #​12888 15039f7 Thanks @​dyc3! - Added the new nursery rule noNumberArgumentOutOfRange, which reports number literal arguments of toString(), toFixed(), toExponential() and toPrecision() that are outside the range the method accepts. These calls throw a RangeError at runtime.

  value.toString(64);

• #​12889 1cd7520 Thanks @​dyc3! - Added the nursery rule noSharedBranchCode, which reports code that is repeated at the start or end of every branch of an if statement. That code runs no matter which branch is taken, so it can be moved before or after the if statement.

  if (condition) {
    doSomething();
    cleanup();
  } else {
    doSomethingElse();
    cleanup();
  }

• #​12842 d47fcfd Thanks @​dyc3! - Added the new nursery rule noSubtractionComparison, which reports subtracting two values only to compare the difference with 0, and suggests comparing the values directly.

  if (a - b > 0) {}

• #​12866 7c1cd5f Thanks @​dyc3! - Added the nursery rule noSvelteIgnoredUnsubscribe, which reports calls to a store's subscribe() method when the returned function is ignored. Without that function, the subscription can never be stopped, which causes a memory leak.

  <script>
    import { count } from "./stores.js";
  
    count.subscribe((value) => console.log(value));
  </script>

• #​12890 6b73fcf Thanks @​dyc3! - Added the new nursery rule noUninvokedArrayCallback, which reports array methods such as map() and forEach() called with a callback on an array that only has empty slots. The callback never runs in this case.

  const list = new Array(5).map(() => createElement());

• #​12886 3bb18d8 Thanks @​dyc3! - Added the nursery rule useNextScriptForGoogleAnalytics, which reports <script> elements that load Google Analytics or Google Tag Manager. Use the GoogleAnalytics and GoogleTagManager components from @next/third-parties/google instead, which load these scripts after the page becomes interactive.

  <script async src="https://www.googletagmanager.com/gtag/js?id=G-XYZ" />

  The rule belongs to the next domain.

• #​12309 0538e30 Thanks @​dyc3! - Added the new nursery rule usePackageJsonCpu, which reports package.json files that have no cpu field. The cpu field lists the processor types that the package supports.

  The following package.json file satisfies the rule:

  {
    "name": "my-package",
    "version": "1.0.0",
    "cpu": ["x64", "arm64"]
  }

• #​12310 191111d Thanks @​dyc3! - Added the nursery rule usePackageJsonEngines, which reports package.json files that have no engines field.

  A package.json passes the rule once it declares the field:

  {
    "name": "my-package",
    "engines": {
      "node": ">=20"
    }
  }

• #​12986 cc929af Thanks @​dyc3! - Fixed #​12954, where configuring rules in groups with more than 256 rules could enable or disable the wrong rule.

• #​12931 fe9248e Thanks @​dyc3! - Improved the performance of linting. Each lint pass now spends less time stepping over syntax nodes that no enabled rule looks at.

• #​12969 22d27e8 Thanks @​vibbix! - Improved the performance of CSS linting. Rules that compare selectors, such as noDescendingSpecificity and noDuplicateSelectors, now make fewer memory allocations.

• #​12973 5a06df5 Thanks @​vibbix! - Fixed useGenericFontNames reporting font-family inside @font-palette-values. There, font-family names the font families the palette applies to, so it doesn't take a generic family.

  @font-palette-values --palette {
    font-family: Bixa;
    override-colors: 0 red;
  }

• #​12930 ce71284 Thanks @​dyc3! - Fixed #​12073: useExhaustiveSwitchCases now reports non-exhaustive switches over values read from for...of loops over Array.prototype.entries(), Map, and Set, and over properties of array elements indexed by a number variable.

  noMisusedPromises now also reports Promise-returning callbacks passed to array methods such as find and every.

• #​12983 2987b54 Thanks @​ashokram-si! - Fixed #​12957: Biome now correctly parses SCSS negative interpolation list items as separate values instead of an invalid subtraction operator.

  -margin: -#{$s} - #{$s} - #{$s} auto;
  +margin: -#{$s} -#{$s} -#{$s} auto;

v2.6.5

Compare Source

Patch Changes

• #​12755 bbc4887 Thanks @​dyc3! - Added the new nursery rule noArrayForEach, which reports forEach() calls that can be written as for...of loops. Values known not to be arrays, such as a Map or a Set, are ignored.

  array.forEach((element) => {
  	bar(element);
  });

• #​12777 ba692e4 Thanks @​dyc3! - Added the new nursery rule noAwaitInPromiseMethods, which reports await inside the array passed to Promise.all(), Promise.allSettled(), Promise.any(), or Promise.race(). The await pauses the code before the method is called, so the promises no longer run at the same time.

  Promise.all([await promise, anotherPromise]);

• #​12765 af84fb4 Thanks @​dyc3! - Added the new nursery rule noChainedComparison, which reports comparisons chained like a < b < c or a === b === c. JavaScript compares a with b first, and then compares the resulting true or false with c, so 3 > 2 > 1 is false.

  if (a < b < c) {}

• #​12547 0a2073d Thanks @​dyc3! - Added the nursery rule noDynamicDelete, which disallows using delete with a property name that is computed at runtime. Fixed property names written as string or number literals are allowed.

  delete container[name];

• #​12481 ed7adc2 Thanks @​dyc3! - Added the nursery rule noLateEventControl, which reports calls to preventDefault(), stopPropagation(), and stopImmediatePropagation() that run after the browser has finished handling the event, where they have no effect.

  element.addEventListener("click", async (event) => {
    await save();
    event.preventDefault();
  });

• #​12795 179666d Thanks @​dyc3! - Added the nursery rule noMapSpread, which disallows spreading objects or arrays in the values returned by map() and flatMap() callbacks. Each spread copies a whole object or array for every item, which is slow for large arrays. Its unsafe fix replaces an object that starts with a spread with Object.assign().

  const users = getUsers();
  const rows = users.map((user) => ({ ...user, role: getRole(user) }));

• #​12793 d9a99fd Thanks @​dyc3! - Added the nursery rule noMismatchedMapKey, which reports get() and set() calls that use a different key than the has() check before them. Checking one key and then using another is usually a copy-paste mistake.

  if (map.has(key)) {
    map.get(otherKey); // reported
  }

• #​12342 1db7c0d Thanks @​vibbix! - Added the nursery rule noMissingScssInterpolation, which disallows Sass variables and function calls in custom property values without #{} interpolation. Sass copies these values into the CSS unchanged, so the browser receives $gap or math.div(8px, 2) instead of their results. Its unsafe fix wraps variables in #{}.

  :root {
    --gap: $gap;
    --half: math.div(8px, 2);
  }

• #​12792 de86b37 Thanks @​dyc3! - Added the nursery rule noMissingThrow, which reports errors that are created with new but never thrown. Its unsafe fix adds the missing throw keyword.

  function check(value) {
    if (!value) {
      new Error("Missing value");
    }
  }

• #​12790 c23e4c3 Thanks @​dyc3! - Added the new nursery rule noObjectLiteralComparison, which reports comparisons with an empty object {} or an empty array []. These comparisons never check whether a value is empty, because objects and arrays are compared by reference.

  if (value === {}) {}

• #​12450 793f07d Thanks @​dyc3! - Added the new nursery rule noPlaywrightUnsafeReferences, which reports functions passed to page.evaluate() or page.addInitScript() that use variables declared outside of them. Playwright runs these functions in the browser page, where those variables don't exist.

  const x = 7;
  await page.evaluate(() => x * 2); // reported: `x` must be passed as an argument

• #​12388 a0160a4 Thanks @​vibbix! - Added the nursery rule noPseudoElementInFunctionalPseudoClass, which disallows pseudo-elements inside :is(), :where(), :not() and :has(). Browsers drop these selectors, so the styles never apply to the pseudo-element.

  .card:is(::before, ::after) {
    content: "";
  }

• #​12779 bc1befb Thanks @​dyc3! - Added the new nursery rule noSinglePromiseInPromiseMethods, which reports an array with a single element passed to Promise.all(), Promise.any(), or Promise.race(). The rule offers a fix that awaits the value directly or uses Promise.resolve().

  const result = await Promise.all([promise]);

• #​12241 d96de1d Thanks @​dyc3! - Added the nursery rule noSvelteBindValueOnCheckableInputs, which reports bind:value on checkbox and radio inputs in Svelte files. Users change whether these inputs are checked, not their value, so bind:value does not track their choice.

  <input type="checkbox" bind:value={accepted} />

• #​12764 e166d08 Thanks @​dyc3! - Added the new nursery rule noSyncMethods, which reports calls to functions whose names end with Sync, such as fs.readFileSync(). These calls block the program until they finish. The allowAtRootLevel option allows them outside of functions, and the ignore option allows specific function names.

  const contents = fs.readFileSync("data.txt");

• #​12515 c0a4174 Thanks @​dyc3! - Added the nursery rule noTanstackQueryVoidQueryFn, which disallows TanStack Query functions that don't return any data. TanStack Query doesn't accept undefined as the data of a query, so the query fails with an error.

  import { useQuery } from "@tanstack/react-query";
  
  useQuery({
      queryKey: ["todos"],
      queryFn: async () => {
          await fetch("/api/todos");
      },
  });

  The rule belongs to the tanstackQuery and types domains.

• #​12482 1e6e407 Thanks @​dyc3! - Added the nursery rule noUnnecessaryStringTrim, which reports trim() calls before startsWith() or endsWith() when only one side of the string matters. Use trimStart() or trimEnd() instead.

  value.trim().startsWith("-");

• #​12772 a108773 Thanks @​dyc3! - Added the nursery rule noUselessAwait, which reports await on values that are never promises, such as literals, arrays, and the results of comparisons.

  await [fetchUser(), fetchPosts()];

• #​12783 d0931b0 Thanks @​dyc3! - Added the new nursery rule noUselessLengthCheck, which reports array length checks that don't change the result: a check that the array is empty next to every(), a check that it isn't empty next to some(), or a check that it isn't empty around a for...of loop over the same array.

  if (array.length > 0 && array.some(Boolean)) {}

• #​12488 93e0e73 Thanks @​dyc3! - Added the new nursery rule noUselessTypeAssertion, which reports type assertions that don't change the type of an expression, such as a non-null assertion on a value that can't be null or undefined.

  function double(value: number): number {
    return value! * 2;
  }

• #​12632 0e197b4 Thanks @​dyc3! - Added the nursery rule noVueChildContent, which disallows content inside elements that use v-html or v-text. These directives replace the content of their element, so Vue discards anything written there.

  <template>
    <div v-html="html">Loading...</div>
  </template>

• #​12616 cb7b888 Thanks @​dyc3! - Added the new nursery rule noVueDeprecatedConfigKeyCodes, which reports uses of Vue.config.keyCodes. Vue 3 removed this option, so custom key names defined with it no longer work.

  Vue.config.keyCodes = { f1: 112 };

• #​12568 59f3a42 Thanks @​dyc3! - Added the nursery rule noVueDeprecatedDestroyedLifecycle, which reports the beforeDestroy and destroyed lifecycle hooks in Vue components. Vue 3 renamed them to beforeUnmount and unmounted, and no longer calls hooks with the old names.

  <script>
  export default {
    destroyed() {},
  };
  </script>

• #​12654 [bcb1e0f](https://redirect.github.com/biomejs/biome/commit/bcb1e0f08fa337ccefcacc1293b2478aec61

[!IMPORTANT]
✂ PR body was truncated to here.