Skip to content

Bump the minor-and-patch group with 9 updates - #35

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-43fc3199a4
Sep 4, 2026
Merged

Bump the minor-and-patch group with 9 updates#35
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-43fc3199a4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 9 updates:

Package From To
@bomb.sh/tab 0.0.15 0.0.22
@clack/prompts 1.2.0 1.7.0
@cloudcannon/configuration-loader 0.0.10 0.0.12
@cloudcannon/configuration-types 0.0.60 0.0.61
@cloudcannon/gadget 0.0.33 0.0.34
ignore 7.0.5 7.0.8
yaml 2.8.3 2.9.0
@biomejs/biome 2.4.11 2.5.11
toolproof 0.18.0 0.20.0

Updates @bomb.sh/tab from 0.0.15 to 0.0.22

Release notes

Sourced from @​bomb.sh/tab's releases.

v0.0.22

Patch Changes

  • 913900e: widen cac version to allow v7

v0.0.21

Patch Changes

  • 7462e1a: fix(fish): pass multi-segment CLI paths as separate arguments

    In fish, completing a package-manager-delegated CLI with more than one path segment (e.g. pnpm <cli> <subcommand> --<TAB>) returned nothing and fell back to the package manager's own flags. The generated fish script built the request with string join ' ' + eval, and because fish does not expand bare (...) command substitution inside double quotes, the whole path collapsed into a single token on re-parse. The template now invokes the backend directly with fish list expansion, so every segment reaches the completion backend as its own argument. zsh and bash already quoted each argument individually; PowerShell was audited and quotes each token before Invoke-Expression, so it is unaffected.

  • 2005004: perf: make package-manager-delegated completions much faster

v0.0.20

Patch Changes

  • e01ce05: fix: invoke the cli by its program name in generated completion scripts

v0.0.19

Patch Changes

  • 0f2d0f3: Widen Commander peer dependency support to include Commander 14 and 15.

v0.0.18

Patch Changes

  • 998ab6f: prevent duplicate empty args in generated completions

v0.0.17

Patch Changes

  • 53ea5e1: feat(commander): support completions for positional arguments
  • 314d836: feat(commander): use commander for determining integration details (#131)

v0.0.16

Patch Changes

  • 04153b8: refactor: commander adapter - remove parse/parseAsync and add optional completionCommandName config
  • e784d62: fix: parseasync() commander's adapter
Changelog

Sourced from @​bomb.sh/tab's changelog.

0.0.22

Patch Changes

  • 913900e: widen cac version to allow v7

0.0.21

Patch Changes

  • 7462e1a: fix(fish): pass multi-segment CLI paths as separate arguments

    In fish, completing a package-manager-delegated CLI with more than one path segment (e.g. pnpm <cli> <subcommand> --<TAB>) returned nothing and fell back to the package manager's own flags. The generated fish script built the request with string join ' ' + eval, and because fish does not expand bare (...) command substitution inside double quotes, the whole path collapsed into a single token on re-parse. The template now invokes the backend directly with fish list expansion, so every segment reaches the completion backend as its own argument. zsh and bash already quoted each argument individually; PowerShell was audited and quotes each token before Invoke-Expression, so it is unaffected.

  • 2005004: perf: make package-manager-delegated completions much faster

0.0.20

Patch Changes

  • e01ce05: fix: invoke the cli by its program name in generated completion scripts

0.0.19

Patch Changes

  • 0f2d0f3: Widen Commander peer dependency support to include Commander 14 and 15.

0.0.18

Patch Changes

  • 998ab6f: prevent duplicate empty args in generated completions

0.0.17

Patch Changes

  • 53ea5e1: feat(commander): support completions for positional arguments
  • 314d836: feat(commander): use commander for determining integration details (#131)

0.0.16

Patch Changes

  • 04153b8: refactor: commander adapter - remove parse/parseAsync and add optional completionCommandName config
  • e784d62: fix: parseasync() commander's adapter
Commits

Updates @clack/prompts from 1.2.0 to 1.7.0

Release notes

Sourced from @​clack/prompts's releases.

@​clack/prompts@​1.7.0

Minor Changes

  • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

Patch Changes

@​clack/prompts@​1.6.0

Minor Changes

  • #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

    If you want the old behavior, provide a format() function:

    import { note } from '@clack/prompts';
+import { styleText } from 'node:util';
note(
'You can edit the file src/index.jsx',
'Next steps.'

{ format: (text) => styleText('dim', text) }
);

  • #567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

    • Patch Changes

    @​clack/prompts@​1.5.1

    Patch Changes

    @​clack/prompts@​1.5.0

    Minor Changes

    ... (truncated)

    Changelog

    Sourced from @​clack/prompts's changelog.

    1.7.0

    Minor Changes

    • #574 8f1c380 Thanks @​dreyfus92! - Add showInstructions option to select, multiselect, and groupMultiselect. Keyboard hints remain shown by default; pass showInstructions: false to hide them.

    Patch Changes

    1.6.0

    Minor Changes

    • #568 f87933f Thanks @​florian-lefebvre! - Updates default formatter of note() to note dim lines anymore

      If you want the old behavior, provide a format() function:

      import { note } from '@clack/prompts';
+import { styleText } from 'node:util';
note(
'You can edit the file src/index.jsx',
'Next steps.'

{ format: (text) => styleText('dim', text) }
);

  • #567 cc6aab5 Thanks @​dreyfus92! - Add keyboard instruction footers to select, multiselect, and groupMultiselect in the active state, matching autocomplete. No option — always shown.

    • Patch Changes

    1.5.1

    Patch Changes

    ... (truncated)

    Commits

    Updates @cloudcannon/configuration-loader from 0.0.10 to 0.0.12

    Release notes

    Sourced from @​cloudcannon/configuration-loader's releases.

    v0.0.12

    What's Changed

    Full Changelog: CloudCannon/configuration-loader@v0.0.11...v0.0.12

    v0.0.11

    What's Changed

    Full Changelog: CloudCannon/configuration-loader@v0.0.10...v0.0.11

    Commits
    • 4cf6fa2 Merge pull request #25 from CloudCannon/chore/types-60
    • 30ba2c7 Update configuration-types
    • 2f36eee Merge pull request #24 from CloudCannon/dependabot/npm_and_yarn/minor-and-pat...
    • 251e207 Bump @​biomejs/biome from 2.5.3 to 2.5.5 in the minor-and-patch group
    • 8940f30 Merge pull request #23 from CloudCannon/dependabot/npm_and_yarn/major-b7ceb5d816
    • 41d6b52 Bump typescript from 6.0.3 to 7.0.2 in the major group
    • 3d5c19f Merge pull request #22 from CloudCannon/dependabot/npm_and_yarn/minor-and-pat...
    • 8febcc5 Bump the minor-and-patch group with 2 updates
    • 9a1f230 Merge pull request #21 from CloudCannon/dependabot/npm_and_yarn/minor-and-pat...
    • ba119c2 Bump the minor-and-patch group with 2 updates
    • Additional commits viewable in compare view

    Updates @cloudcannon/configuration-types from 0.0.60 to 0.0.61

    Release notes

    Sourced from @​cloudcannon/configuration-types's releases.

    v0.0.61

    What's Changed

    Full Changelog: CloudCannon/configuration-types@v0.0.60...v0.0.61

    Commits
    • 828ce8b Merge pull request #115 from CloudCannon/fix/code-block-fences-backticks
    • a324dfd Fix: backticks not escaping correctly
    • f7601a0 Merge pull request #114 from CloudCannon/dependabot/npm_and_yarn/minor-and-pa...
    • 301b4d7 Bump @​biomejs/biome from 2.5.9 to 2.5.10 in the minor-and-patch group
    • 731f9dc Merge pull request #113 from CloudCannon/dependabot/npm_and_yarn/minor-and-pa...
    • d0ffdcd Bump @​biomejs/biome from 2.5.8 to 2.5.9 in the minor-and-patch group
    • 257f020 Merge pull request #112 from CloudCannon/dependabot/npm_and_yarn/minor-and-pa...
    • 9ccf4c5 Bump js-yaml from 5.2.3 to 5.3.0 in the minor-and-patch group
    • c3335f8 Merge pull request #111 from CloudCannon/dependabot/npm_and_yarn/minor-and-pa...
    • 46a2817 Bump @​biomejs/biome from 2.5.7 to 2.5.8 in the minor-and-patch group
    • Additional commits viewable in compare view

    Updates @cloudcannon/gadget from 0.0.33 to 0.0.34

    Release notes

    Sourced from @​cloudcannon/gadget's releases.

    v0.0.34

    What's Changed

    Full Changelog: CloudCannon/gadget@v0.0.33...v0.0.34

    Commits
    • b0510f8 Merge pull request #167 from CloudCannon/chore/types-60
    • 53c2cd8 Lint fix
    • 7b1bdaa Update configuration-types
    • b673add Merge pull request #166 from CloudCannon/dependabot/npm_and_yarn/toolproof-te...
    • 2a7bfaa build(deps): bump the npm_and_yarn group across 1 directory with 2 updates
    • See full diff in compare view

    Updates ignore from 7.0.5 to 7.0.8

    Release notes

    Sourced from ignore's releases.

    7.0.8

    PATCH Brings pattern matching closer to git:

    • PATCH A backslash now makes the next character a literal, exactly as git does: \* matches a literal * rather than acting as a wildcard, \? matches a literal ?, and \d, \b, \/ and the like are the plain characters instead of regular-expression escapes.
    • PATCH Only a trailing run of spaces is stripped from a pattern — never tabs or other whitespace — and a line of only tabs is treated as a pattern rather than a blank line, matching git.

    An upgrade is recommended for all dependents.

    Commits
    • 20b802a bump version 7.0.8
    • 0414358 build: require 100% coverage of index.js as an explicit gate
    • 968aee6 compat: check compatibility by running old versions' test suites
    • 8e46220 build: run the compatibility gate as part of npm test
    • 6e81fb2 tidy up how wildcards compile
    • ea3d5eb fix: a backslash quotes the next character, and only spaces are trimmed
    • 01cfbbb docs: document the known, deliberate differences from git
    • 994237c test: four RED cases, one per confirmed incompatibility with git
    • d69a727 compat: restore the promise to 7.0.7, the release actually covered
    • 042a387 compat: declare compat target 7.0.6
    • Additional commits viewable in compare view

    Updates yaml from 2.8.3 to 2.9.0

    Release notes

    Sourced from yaml's releases.

    v2.9.0

    The changes here are really only patches, but I'm releasing this as a minor version to note a small change to the documentation of parseDocument() and parseAllDocuments(): I've removed the claim that they'll "never throw".

    It remains the case that practically all non-malicious inputs will be handled without emitting an error, but there is a decent chance that code paths remain where e.g. a RangeError due to call stack exhaustion can be triggered by malicious inputs. Up to now, I've considered these as security vulnerabilities, and in fact it's the only category of error for which yaml CVEs have been issued so far.

    Starting from this release, I'll be considering such errors as bugs, but not vulnerabilities. I do welcome people and/or LLMs looking for them, but please report them as normal issues rather than suspected security vulnerabilities. This also applies to previously undiscovered bugs in earlier releases.

    • fix: Avoid calling Array.prototype.push.apply() with large source array
    • fix(lexer): Avoid recursive calls that may exhaust the call stack

    v2.8.4

    • Disable alias resolution with maxAliasCount:0 (#677)
    • Handle invalid unicode escapes (e1a1a77)
    • Apply minFractionDigits only to decimal strings (#676)
    Commits
    • ddb21b0 2.9.0
    • 167365b docs: Clarify that not all errors can be avoided
    • 6eca2a7 fix: Avoid calling Array.prototype.push.apply() with large source array
    • 0543cd5 fix(lexer): Avoid recursive calls that may exhaust the call stack
    • ccdf743 2.8.4
    • f625789 fix: Disable alias resolution with maxAliasCount:0 (#677)
    • e1a1a77 fix: Handle invalid unicode escapes
    • a163ea0 style: Satify Prettier
    • b2a5a6c fix: Apply minFractionDigits only to decimal strings (#676)
    • 93c951b chore: Bump JSR version to v2.8.3 (#673)
    • Additional commits viewable in compare view

    Updates @biomejs/biome from 2.4.11 to 2.5.11

    Release notes

    Sourced from @​biomejs/biome's releases.

    Biome CLI v2.5.11

    2.5.11

    Patch Changes

    • #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

    • #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

      {options.map(() =>
  <div />
  <div />
)}

    • #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

    • #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

    • #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

    • #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

      The refactor enabling these fixes also improves the performance of the rule.

    • #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

    • #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

    • #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

      const result = computed(() => list.find((item) => item.label === "a"));

      Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

    • #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

    • #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

    • #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

      For example, the following snippet triggers the rule:

      <div set:html={content} />

    ... (truncated)

    Changelog

    Sourced from @​biomejs/biome's changelog.

    2.5.11

    Patch Changes

    • #11499 9743d0c Thanks @​scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.

    • #11437 88f805e Thanks @​Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.

      {options.map(() =>
  <div />
  <div />
)}

    • #11437 88f805e Thanks @​Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.

    • #11507 e2fc036 Thanks @​dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.

    • #11398 afc4615 Thanks @​dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.

    • #11526 372cd68 Thanks @​dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

      The refactor enabling these fixes also improves the performance of the rule.

    • #11458 a7cd286 Thanks @​dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.

    • #11515 382b15d Thanks @​dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.

    • #11516 6f40e82 Thanks @​levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.

      const result = computed(() => list.find((item) => item.label === "a"));

      Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.

    • #11495 496268d Thanks @​Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.

    • #11407 6ef52b0 Thanks @​1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.

    • #11322 5c353e6 Thanks @​jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

      For example, the following snippet triggers the rule:

      <div set:html={content} />

    • #11462 18883b7 Thanks @​dyc3! - Fixed #10776: useVueHyphenatedAttributes no longer reports lowercase attribute names containing punctuation, such as pt:header:data-test-id and some_attr.

    ... (truncated)

    Commits

    Updates toolproof from 0.18.0 to 0.20.0

    Release notes

    Sourced from toolproof's releases.

    v0.20.0

    • Added a summary for changed snapshots and failing tests in test outputs

    v0.19.1

    • The hosting server now serves hidden files (dotfiles).

    v0.19.0

    • Fixed a browser context leak that could crash Chrome and cause errant test failures. Chrome windows now shut down more reliably.
    • Test tasks that panic are now counted as failures.
    • Added a --update (-u) flag that automatically accepts all snapshot changes. It can also be set via the TOOLPROOF_UPDATE environment variable.
    Changelog

    Sourced from toolproof's changelog.

    v0.20.0 (July 7, 2026)

    • Added a summary for changed snapshots and failing tests in test outputs

    v0.19.1 (June 24, 2026)

    • The hosting server now serves hidden files (dotfiles).

    v0.19.0 (June 7, 2026)

    • Fixed a browser context leak that could crash Chrome and cause errant test failures. Chrome windows now shut down more reliably.
    • Test tasks that panic are now counted as failures.
    • Added a --update (-u) flag that automatically accepts all snapshot changes. It can also be set via the TOOLPROOF_UPDATE environment variable.
    Commits
    • 5286598 Changelog for 0.20.0
    • e598d19 Merge pull request #62 from Pagefind/bglw-patch-1
    • c17266a Changelog
    • e14ceb8 Merge pull request #61 from Pagefind/clearer-summeries
    • 24bf094 Update platforms snapshots
    • 2844491 Add summary for changed snapshots and failing tests in test outputs
    • cb77e1c Changelog for 0.19.1
    • 7f81fc3 Merge pull request #60 from Pagefind/hidden-files
    • 0a61c33 Enable hosting server to serve hidden files (dotfiles)
    • 2ea3f8e Changelog for 0.19.0
    • Additional commits viewable in compare view

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
    • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more ...

    Description has been truncated

    @dependabot
    Bump the minor-and-patch group with 9 updates
    034b5d0 
    Bumps the minor-and-patch group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@bomb.sh/tab](https://github.com/bombshell-dev/tab) | `0.0.15` | `0.0.22` |
| [@clack/prompts](https://github.com/bombshell-dev/clack/tree/HEAD/packages/prompts) | `1.2.0` | `1.7.0` |
| [@cloudcannon/configuration-loader](https://github.com/CloudCannon/configuration-loader) | `0.0.10` | `0.0.12` |
| [@cloudcannon/configuration-types](https://github.com/CloudCannon/configuration-types) | `0.0.60` | `0.0.61` |
| [@cloudcannon/gadget](https://github.com/CloudCannon/gadget) | `0.0.33` | `0.0.34` |
| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.5` | `7.0.8` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.11` | `2.5.11` |
| [toolproof](https://github.com/Pagefind/toolproof) | `0.18.0` | `0.20.0` |


Updates `@bomb.sh/tab` from 0.0.15 to 0.0.22
- [Release notes](https://github.com/bombshell-dev/tab/releases)
- [Changelog](https://github.com/bombshell-dev/tab/blob/main/CHANGELOG.md)
- [Commits](bombshell-dev/tab@v0.0.15...v0.0.22)

Updates `@clack/prompts` from 1.2.0 to 1.7.0
- [Release notes](https://github.com/bombshell-dev/clack/releases)
- [Changelog](https://github.com/bombshell-dev/clack/blob/main/packages/prompts/CHANGELOG.md)
- [Commits](https://github.com/bombshell-dev/clack/commits/@clack/prompts@1.7.0/packages/prompts)

Updates `@cloudcannon/configuration-loader` from 0.0.10 to 0.0.12
- [Release notes](https://github.com/CloudCannon/configuration-loader/releases)
- [Changelog](https://github.com/CloudCannon/configuration-loader/blob/main/CHANGELOG.md)
- [Commits](CloudCannon/configuration-loader@v0.0.10...v0.0.12)

Updates `@cloudcannon/configuration-types` from 0.0.60 to 0.0.61
- [Release notes](https://github.com/CloudCannon/configuration-types/releases)
- [Commits](CloudCannon/configuration-types@v0.0.60...v0.0.61)

Updates `@cloudcannon/gadget` from 0.0.33 to 0.0.34
- [Release notes](https://github.com/CloudCannon/gadget/releases)
- [Commits](CloudCannon/gadget@v0.0.33...v0.0.34)

Updates `ignore` from 7.0.5 to 7.0.8
- [Release notes](https://github.com/kaelzhang/node-ignore/releases)
- [Commits](kaelzhang/node-ignore@7.0.5...7.0.8)

Updates `yaml` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.3...v2.9.0)

Updates `@biomejs/biome` from 2.4.11 to 2.5.11
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.11/packages/@biomejs/biome)

Updates `toolproof` from 0.18.0 to 0.20.0
- [Release notes](https://github.com/Pagefind/toolproof/releases)
- [Changelog](https://github.com/Pagefind/toolproof/blob/main/CHANGELOG.md)
- [Commits](Pagefind/toolproof@v0.18.0...v0.20.0)

---
updated-dependencies:
- dependency-name: "@bomb.sh/tab"
  dependency-version: 0.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@clack/prompts"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@cloudcannon/configuration-loader"
  dependency-version: 0.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudcannon/configuration-types"
  dependency-version: 0.0.61
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@cloudcannon/gadget"
  dependency-version: 0.0.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: ignore
  dependency-version: 7.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: toolproof
  dependency-version: 0.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
    @github-actions
    github-actions Bot enabled auto-merge September 4, 2026 06:24
    @github-actions
    github-actions Bot merged commit 94bb438 into main Sep 4, 2026
    2 checks passed
    @dependabot
    dependabot Bot deleted the dependabot/npm_and_yarn/minor-and-patch-43fc3199a4 branch September 4, 2026 06:30
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    @github-actions github-actions[bot] github-actions[bot] approved these changes

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    0 participants