Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @biomejs/biome from 1.9.2 to 1.9.4 #159

Merged
merged 1 commit into from
Nov 9, 2024

Conversation

WomB0ComB0
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade @biomejs/biome from 1.9.2 to 1.9.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 3 versions ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
315 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-ROLLUP-8073097
315 Proof of Concept
Release notes
Package name: @biomejs/biome
  • 1.9.4 - 2024-10-17

    Analyzer

    Bug fixes

    • Improved the message for unused suppression comments. Contributed by @ dyc3

    • Fix #4228, where the rule a11y/noInteractiveElementToNoninteractiveRole incorrectly reports a role for non-interactive elements. Contributed by @ eryue0220

    • noSuspiciousSemicolonInJsx now catches suspicious semicolons in React fragments. Contributed by @ vasucp1207

    CLI

    Enhancements

    • The --summary reporter now reports parsing diagnostics too. Contributed by @ ematipico

    • Improved performance of GritQL queries by roughly 25-30%. Contributed by @ arendjr

    Configuration

    Bug fixes

    • Fix an issue where the JSON schema marked lint rules options as mandatory. Contributed by @ ematipico

    Formatter

    Bug fixes

    • Fix #4121. Respect line width when printing multiline strings. Contributed by @ ah-yu

    Linter

    New features

    Bug Fixes

    • Biome no longer crashes when it encounters a string that contains a multibyte character (#4181).

      This fixes a regression introduced in Biome 1.9.3
      The regression affected the following linter rules:

      • nursery/useSortedClasses
      • nursery/useTrimStartEnd
      • style/useTemplate
      • suspicious/noMisleadingCharacterClass

      Contributed by @ Conaclos

    • Fix #4190, where the rule noMissingVarFunction wrongly reported a variable as missing when used inside a var() function that was a newline. Contributed by @ ematipico

    • Fix #4041. Now the rule useSortedClasses won't be triggered if className is composed only by inlined variables. Contributed by @ ematipico

    • useImportType and useExportType now report useless inline type qualifiers (#4178).

      The following fix is now proposed:

      - import type { type A, B } from "";
      + import type { A, B } from "";

    - export type { type C, D };
    + export type { C, D };

    Contributed by @ Conaclos

  • useExportType now reports ungrouped export from.

    The following fix is now proposed:

    - export { type A, type B } from "";
    + export type { A, B } from "";

    Contributed by @ Conaclos

  • noVoidTypeReturn now accepts void expressions in return position (#4173).

    The following code is now accepted:

    function f(): void {
      return void 0;
    }

    Contributed by @ Conaclos

  • noUselessFragments now correctly handles fragments containing HTML escapes (e.g.  ) inside expression escapes { ... } (#4059).

    The following code is no longer reported:

    function Component() {
      return (
        <div key={index}>{line || <>&nbsp;</>}</div>
      )
    }

    Contributed by @ fireairforce

  • noUnusedFunctionParameters and noUnusedVariables no longer reports a parameter as unused when another parameter has a constructor type with the same parameter name (#4227).

    In the following code, the name parameter is no longer reported as unused.

    export class Foo {
      bar(name: string, _class: new (name: string) => any) {
        return name
      }
    }

    Contributed by @ Conaclos

  • noUndeclaredDependencies now accepts dependency names with dots. Contributed by @ Conaclos

  • useFilenamingConvention now correctly handles renamed exports (#4254).

    The rule allows the filename to be named as one of the exports of the module.
    For instance, the file containing the following export can be named Button.

    class Button {}
    export { Button }

    The rule now correctly handles the renaming of an export.
    For example, the file containing the following export can only be named Button.
    Previously the rule expected the file to be named A.

    class A {}
    export { A as Button }

    Contributed by @ Conaclos

  • useConsistentMemberAccessibility now ignores private class members such as #property (#4276). Contributed by @ Conaclos

  • noUnknownFunction correctly handles calc-size function (#4212).

    The following code calc-size is no longer reported as unknown:

    .a { height: calc-size(0px); }

    Contributed by @ fireairforce

  • useNamingConvention now allows configuring conventions for readonly index signatures. Contributed by @ sepruko

  • noDuplicateCustomProperties now correctly handles custom properties and ignores non-custom properties.
    Previously, the rule incorrectly reported duplicates for all properties, including non-custom ones. Contributed by @ togami2864

Parser

Bug Fixes

  • The CSS parser now accepts more emoji in identifiers (#3627).

    Browsers accept more emoji than the standard allows.
    Biome now accepts these additional emojis.

    The following code is now correctly parsed:

    p {
      ---color: red;
      color: var(--✨-color);
    }

    Contributed by @ Conaclos

  • Add support for parsing typescript's resolution-mode in Import Types(#2115)

    export type Fs = typeof import('fs', { with: { 'resolution-mode': 'import' } });
    export type TypeFromRequire =
      import("pkg", { with: { "resolution-mode": "require" } }).TypeFromRequire;
    export type TypeFromImport =
      import("pkg", { with: { "resolution-mode": "import" } }).TypeFromImport;

    Contributed by @ fireairforce

What's Changed

Other changes

New Contributors

Full Changelog: js-api/v0.7.1...cli/v1.9.4

  • 1.9.3 - 2024-10-01

    CLI

    New features

    • GritQL queries that match functions or methods will now match async functions or methods as well.

      If this is not what you want, you can capture the async keyword (or its absence) in a metavariable and assert its emptiness:

      $async function foo() {} where $async <: .
      

      Contributed by @ arendjr

    Bug fixes

    • Fix #4077: Grit queries no longer need to match the statement's trailing semicolon. Contributed by @ arendjr

    • Fix #4102. Now the CLI command lint doesn't exit with an error code when using --write/--fix. Contributed by @ ematipico

    Configuration

    Bug fixes

    • Fix #4125, where noLabelWithoutControl options where incorrectly marked as mandatory. Contributed by @ ematipico

    Editors

    • Fix a case where CSS files weren't correctly linted using the default configuration. Contributed by @ ematipico

    Formatter

    Bug fixes

    • Fix #3924 where GraphQL formatter panics in block comments with empty line. Contributed by @ vohoanglong0107

    • Fix a case where raw values inside url() functions weren't properly trimmed.

      .value {
      -  background: url(
      -   whitespace-around-string
      -  );
      + background: url(whitespace-around-string);
      }

      Contributed by @ ematipico

    • Fixed #4076, where a media query wasn't correctly formatted:

      .class {
      -  @ media (1024px <= width <=1280px) {
      +  @ media (1024px <= width <= 1280px) {
         color: red;
         }
      }

      Contributed by @ blaze-d83

    JavaScript API

    Bug fixes

    • Fix #3881, by updating the APIs to use the latest WASM changes. Contributed by @ ematipico

    Linter

    New features

    Bug fixes

    Parser

    Bug fixes

    • Forbid undefined as type name for typescript parser. Contributed by @ fireairforce

    What's Changed

    Other changes

    • fix(bench): typo in .prettierignore by @ Jayllyz in #4134
    • feat(formatter): implement formatting for GritQL root node by @ arendjr in #4128
    • feat(useExhaustiveDependencies): add option to disable errors for unecessary dependencies by
  • Snyk has created this PR to upgrade @biomejs/biome from 1.9.2 to 1.9.4.
    
    See this package in npm:
    @biomejs/biome
    
    See this project in Snyk:
    https://app.snyk.io/org/womb0comb0/project/50c3f21a-4385-405f-99d6-387977cfff55?utm_source=github&utm_medium=referral&page=upgrade-pr
    Copy link

    vercel bot commented Nov 8, 2024

    The latest updates on your projects. Learn more about Vercel for Git ↗︎

    Name Status Preview Comments Updated (UTC)
    portfolio ❌ Failed (Inspect) Nov 8, 2024 1:25am

    @WomB0ComB0 WomB0ComB0 merged commit e4d6fd8 into master Nov 9, 2024
    7 of 11 checks passed
    @WomB0ComB0
    Copy link
    Owner Author

    🎉 This PR is included in version 1.0.1 🎉

    The release is available on GitHub release

    Your semantic-release bot 📦🚀

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment