📦：bump all by renovate[bot] · Pull Request #1917 · OpenINF/openinf.github.io

renovate · 2026-10-12T00:37:19Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
@biomejs/biome (source)	`2.5.14` → `2.5.15`	devDependencies	patch
@shopify/prettier-plugin-liquid (source)	`1.11.1` → `1.11.2`	devDependencies	patch
@types/node (source)	`24.19.0` → `24.19.1`	devDependencies	patch	`24.19.2`
@types/sanitize-html (source)	`2.16.1` → `2.16.2`	devDependencies	patch
cssnano	`9.1.0` → `9.2.2`	devDependencies	minor	`9.6.0` (+5)
dprint	`0.57.4` → `0.60.1`	devDependencies	minor	`0.63.0` (+3)
dprint/dprint-plugin-dockerfile	`0.6.0` → `0.7.0`		minor
dprint/dprint-plugin-toml	`0.8.0` → `0.9.0`		minor
pnpm (source)	`12.7.0` → `12.9.1`	packageManager	minor	`12.11.2` (+4)
pnpm (source)	`12.7.0` → `12.9.1`	engines	minor	`12.11.2` (+4)
sanitize-html (source)	`2.17.7` → `2.18.0`	devDependencies	minor
sass	`1.105.0` → `1.105.1`	devDependencies	patch
stylelint (source)	`17.15.0` → `17.16.0`	devDependencies	minor
vnu-jar	`26.9.27` → `26.10.2`	devDependencies	minor	`26.10.11` (+3)

Release Notes

biomejs/biome (@biomejs/biome)

`v2.5.15`

Compare Source

Patch Changes

#10634 b436ba0 Thanks @subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

For example, the following snippet triggers the rule.
```
function Component({ items = [] }) {
  return items;
}
```
#11956 faa8b37 Thanks @dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.
```
<script>
  export let name;
</script>
```
#10816 1b9479e Thanks @Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative.
This is a first rule covering parts of #9034
```
{
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}
```
#11960 1fdb5c2 Thanks @dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.
```
import { page } from "$app/stores";
```
#11723 3b429d1 Thanks @m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.
#12023 874d5ae Thanks @codspeed! - Improved the performance of the HTML formatter up to 4x.
#11761 a3462fe Thanks @saberoueslati! - Fixed #11351: useSimplifiedLogicExpression no longer reports boolean literals on the right side of || and && outside boolean contexts, because removing them can change the result of the expression. For example, y = x || false is no longer reported, while if (x || false) still is.
#11732 ff4c4dd Thanks @dyc3! - Added the nursery rule noMeaninglessVoidOperator, which reports unnecessary uses of void, such as void log() when log returns void. The rule allows discarded call results, thenables, void 0, and calls returning never.
#11975 40dd3fb Thanks @ematipico! - Fixed the indentation of multiline Astro expressions, in templates and attribute values, when running biome check --write. Biome now formats Astro expressions with biome format too, and places them at the column of the surrounding markup.
```
 <div>
 	{items.map((item) => (
-	<span>{item}</span>
-))}
+		<span>{item}</span>
+	))}
 </div>
```
#12016 09d4000 Thanks @codspeed! - Improved the performance of indexing and analysis of big files up to 2x. The improvements are mostly visible in projects that make use of project and types lint rules.
#11750 089bde0 Thanks @dyc3! - Added the nursery rule useStrictBooleanExpressions, which reports ambiguous truthiness checks such as if (value) when value has type number | undefined. Non-nullable strings and numbers and nullable objects are allowed; the rule has no options.
#11494 ad5b362 Thanks @jp-knj! - Added the nursery rule noAstroConflictingSetDirectives, which reports Astro elements with multiple content sources, such as set:html, set:text, and child content.

For example, <div set:html={html}>content</div> triggers the rule.
#11878 84d1b3b Thanks @dyc3! - Fixed #11748: useExhaustiveSwitchCases now reports missing cases for values created with the mapping overload of Array.from, including arrays imported from another module.
#11802 7d1f37e Thanks @dyc3! - Tailwind classes will now be detected in Svelte, Vue, and Astro class attribute expressions that don't use a class merging function.
#11910 9e50ea2 Thanks @ematipico! - Fixed #11504, a regression where Biome would silently ignore errors in the configuration file. Now errors are correctly retained and checked before executing any command.
#11921 d568632 Thanks @hirehamir! - Fixed #10846: when plugins fail to load, Biome now prints each failing plugin's path on its own line, instead of concatenating bare messages like Cannot read file.Cannot read file..
#11930 82ea5a6 Thanks @dyc3! - Fixed #11927: The HTML formatter no longer duplicates comments around Svelte blocks. This affected a comment after a block such as {#if} or {#each} at the end of an element, and a comment on the same line as the last element inside a block, before {:else}, {/if}, or a similar tag.
#11931 0cc46d8 Thanks @dyc3! - Fixed the indentation of comments at the end of a Svelte block's contents. A comment before {:else}, {:then}, {/if}, or a similar tag is now indented with the block's contents instead of with the tag.
```
 {#if condition}
 	<span>Text</span>
-
+	
 {/if}
```
#12031 ef0edd4 Thanks @dyc3! - Fixed #12027: Biome's test rules no longer mistake regular method calls named test, it, or describe for tests. For example, useValidTestTitle used to report the following regular expression check as a test with an invalid title:
```
const isComment = /^\s*#/.test(line);
```
#11959 8477e61 Thanks @dyc3! - Fixed #11950: noUnusedVariables now reports arrow functions with expression bodies that only reference themselves, such as let h = () => h();.
#11915 3260602 Thanks @ematipico! - Fixed #11841, where suppression comments had no effect on some parts of HTML-ish files and on snippets embedded in JavaScript files.

Now the following suppression works as expected:
```

<div :title="missingValue"></div>
```
#11952 b51040e Thanks @dyc3! - Fixed #11951: the GritQL formatter no longer inserts a space after a within pattern without an until clause.
```
-$arg <: within `bar($_)` ,
+$arg <: within `bar($_)`,
```
#11794 429cf95 Thanks @dyc3! - Added the nursery rule noTailwindRawColors for JavaScript and HTML. It disallows Tailwind palette colors such as bg-pink-500 and text-white, encouraging design system color utilities such as bg-primary.
#11837 f5e249b Thanks @dyc3! - Fixed #11836: biome check --write no longer adds invalid parentheses around Svelte {@const} declarations when experimental HTML support and formatting are enabled.
#11978 8be0b9e Thanks @dyc3! - Fixed #11817: Biome no longer crashes when its output is piped to a program that exits early, such as head. Output to the closed pipe is now discarded and Biome exits normally.
#11868 3841c26 Thanks @ematipico! - Fixed #8986: Biome's language server now scopes all watched-file patterns to each workspace folder, falling back to the deprecated rootUri when no workspace folders are provided. Clients without relative-pattern support receive compatible absolute glob patterns.
#11928 0015681 Thanks @dyc3! - Restricted access to the Unix daemon socket to the user running Biome. The socket now lives in a biome-daemon directory inside Biome's cache directory that only this user can access, and the socket itself has mode 0600.
#11835 589ca1a Thanks @dyc3! - Updated useReactCompiler: Biome now reports React Compiler diagnostics regardless of the React version declared in package.json.
#11907 b7d9037 Thanks @posido! - Fixed withastro/compiler-rs#194: the HTML parser no longer treats a regex literal that starts with > as the end of a self-closing tag. Astro frontmatter such as const escaped = s.replace(/>/g, ">"); no longer swallows the closing --- fence, and the same regex inside a template expression no longer runs past its closing }. A regex literal after a keyword such as return, as in return />'/.test(s), is now recognized too.
#12021 59cc595 Thanks @dyc3! - Type inference performance has been significantly improved. Some popular libraries like Zod, Valibot, Arktype, Effect, Kysely, and Drizzle have gained a ~2-240x speedup in our benchmarks. This improvement affects all rules that use type information.
#12044 c73fb91 Thanks @dyc3! - Fixed #12042: the HTML formatter no longer removes the space between text and an inline element on the next line when it joins the lines.
```
- <p>a <em>b</em> c<u>d</u></p>
+ <p>a <em>b</em> c <u>d</u></p>
```
#11965 f90bf38 Thanks @ematipico! - Fixed module resolution in long-running workspaces so imports reflect package manifest and TypeScript path-mapping changes without requiring the importing file to be edited.
#11860 0884e29 Thanks @dyc3! - Removed the attributes and functions options from the nursery rule noTailwindArbitraryValue. The rule now uses the same Tailwind detection as useTailwindShorthandClasses.
#11969 865cd30 Thanks @AlbinoGeek! - Fixed #11962: noUnknownTypeSelector no longer reports view transition names inside view transition pseudo-elements, such as page in ::view-transition-group(page).
#11914 06ff47b Thanks @dyc3! - Fixed #11897: the safe fix for noUselessStringConcat now escapes embedded double quotes when combining literals, preserving valid JavaScript and existing escape sequences.
#11997 af7825f Thanks @github-actions! - The noRestrictedDependencies rule has been updated with new module replacement data, it should now detect for more relevant replacements.
#11827 31bb662 Thanks @dfedoryshchev! - Fixed #11566: useNamingConvention no longer reports a namespace declared inside declare global or inside an external module declaration. Both positions are documented as always ignored, and the rule offered a safe fix, so biome check --write renamed the declaration:
```
export {}
declare global {
    // no longer renamed to `Jsx`
    namespace JSX {}
}
```
#11814 23ba25f Thanks @siketyan! - Fixed type inference through generic type aliases that instantiate another generic type with a nested generic argument, such as type Nested<T> = Box<Wrapper<T>>. Type-aware rules now resolve members of such types:
```
declare const nested: Nested<number>;
// noUnnecessaryConditions now reports that `??` is unnecessary.
const inner = nested.value.inner ?? 1;
```
#11908 dd5a5ce Thanks @siketyan! - Fixed #11880: Biome no longer misparses a << expression followed by a later >>> as TypeScript type arguments. For example, const mask = 1 << bits followed by const m = mask >>> 0 on the next line now parses correctly.
#11882 28c817d Thanks @mikehasa! - Fixed a bug in noOctalEscape where the safe fix could silently change a string's value. A legacy octal escape is at most two digits when the leading digit is 4-7, so "\751" is "\75" + "1" (i.e. "=1") but was rewritten to the single character ǩ; it is now rewritten to "\x3d1".
#11861 81b0adb Thanks @Netail! - Added the new nursery rule noSelfImport, which forbids a module from importing itself.
```
// foo.js
import foo from "./foo.js";
```

#12041 5e14509 Thanks @ematipico! - Fixed a stack overflow in type-aware lint rules, such as noMisusedPromises and noFloatingPromises, when generic types in files that import each other reference one another in their type parameters.

// entity.ts
import type { Repository } from "./repository";
export interface Entity<R extends Repository<any> = Repository<any>> {}

// repository.ts
import type { Entity } from "./entity";
export interface Repository<E extends Entity<any> = Entity<any>> {}

#11838 9bbff0c Thanks @dyc3! - Added the nursery rule usePromiseRejectErrors, which requires Error objects as Promise rejection reasons.
```
Promise.reject("Request failed");
new Promise((resolve, reject) => reject(42));
```
#11917 717db8c Thanks @dyc3! - Added the nursery rule noMisplacedListElements for HTML and JSX, which requires <li> elements with an HTML element parent to be children of <ul>, <ol>, or <menu>. For example, <div><li>Item</li></div> is invalid.
#11919 8d0b990 Thanks @dyc3! - Fixed #11899: disabling a domain no longer disables rules that also belong to another enabled domain. For example, with "domains": { "react": "all", "next": "none" }, useExhaustiveDependencies and useHookAtTopLevel are now enabled.
Rules enabled explicitly in the configuration also stay enabled when one of their domains is set to "none".
#11814 23ba25f Thanks @siketyan! - Fixed #11810 and #11813: type-aware rules such as noUnnecessaryConditions and noFloatingPromises no longer take several seconds when a member is accessed on a recursive generic type alias, such as react-hook-form's FieldPathValue or zustand's Mutate.
#11983 cc39794 Thanks @AlbinoGeek! - Fixed #11939: the fix of useRegexLiterals no longer escapes a slash that is already escaped. new RegExp("\\/") is now fixed to /\// instead of the invalid /\\//.
#11869 3a21c80 Thanks @ematipico! - Fixed #9105: vcs.useIgnoreFile now evaluates parent directory patterns when matching child paths, preserving re-included directories such as !/src while ignoring their excluded siblings.
#11875 2cdd220 Thanks @dyc3! - Fixed #11867: noUndeclaredVariables incorrectly reported Vue slot props declared with v-slot or its # shorthand, including destructured props.
#12021 59cc595 Thanks @dyc3! - Type inference accuracy has been improved significantly. More global types, like Array, Map, Set, etc., are now fully defined. This should decrease false positives on all typed rules, since less types will be unknown.
#11929 aef690d Thanks @Th3S4mur41! - Fixed noUnknownProperty to recognize the frame-sizing CSS property.
#12022 6233eb2 Thanks @dyc3! - Fixed #12020: the HTML parser now reports an error for a mismatched closing tag like the </span> in <p>two</span></p>. Previously, it accepted </span> as the end of <p> because span contains the letter p, and the formatter deleted everything after it. HTML tag names are matched case-insensitively, so <DIV></div> is no longer reported as mismatched.

A closing tag with no opening tag at the top level of a file, like the second </p> in <p>a</p></p><p>b</p>, is now also reported as an error, instead of the formatter deleting it and everything after it.
#12037 48cdbb8 Thanks @ff1451! - Fixed #11898: noUselessReturn no longer offers a safe fix for a return; that is the body of an unbraced if, else, or label, because removing it produced invalid code. The safe fix now also keeps comments placed before or after the removed return;.
```
function foo() {
  // Still reported, but the return is no longer removed
  if (aborted) return;
}
```
#12030 4ff83dd Thanks @ematipico! - Fixed #9155: Biome no longer reports a parse error for typed slot props in Vue files, such as v-slot="{ value }: { value: ValueType }". Types used in slot props annotations are now correctly detected as used by noUnusedVariables.
#11955 088164f Thanks @dyc3! - Fixed #11946: noUnreachable and useGetterReturn now recognize while and do...while loops with truthy literal conditions as infinite unless control flow exits the loop.
#11958 6964bfc Thanks @erenbati! - Fixed #11924: noFocusedTests no longer reports chained method calls such as builder.image(url).fit("max") as focused tests.
#11908 dd5a5ce Thanks @siketyan! - Fixed parsing of left shifts between TypeScript instantiation expressions. Biome now parses f<T> << f<T> as a left shift of two instantiation expressions, matching TypeScript, instead of reporting a parse error.
#11877 5a53b2c Thanks @dyc3! - Fixed #11278: noUnnecessaryConditions no longer incorrectly reports optional chaining on RegExp.exec() results, including patterns created with new RegExp(). Biome now infers the nullable RegExpExecArray | null return type, preserving necessary checks such as new RegExp(pattern).exec(input)?.[1].
#11906 b87822d Thanks @dyc3! - Fixed #11900: useForOf no longer reports loops that update their index inside the body, including i += 1 and argv[++i].
#11834 f89dd4f Thanks @dyc3! - Fixed incorrect type inference when generic parameters are reused across inherited types or swapped in recursive types.

Shopify/theme-tools (@shopify/prettier-plugin-liquid)

`v1.11.2`

Patch Changes

4d7201b: Format wrapped block arguments with trailing commas and a closing delimiter on its own line, and avoid unnecessary whitespace stripping between childless Liquid tag delimiters.
Updated dependencies [9c04ccb]
- @shopify/liquid-html-parser@2.10.2

cssnano/cssnano (cssnano)

`v9.2.2`: v9.2.2

Compare Source

What's Changed

Bug Fixes

fix(postcss-merge-rules): avoid infinite loop in #2013

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.2.1...cssnano@9.2.2

`v9.2.1`: v9.2.1

Compare Source

What's Changed

fix(postcss-discard-duplicates): remove redundant sibling at-rules in #2010

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.2.0...cssnano@9.2.1

`v9.2.0`: v9.2.0

Compare Source

Features

Merge box alignment properties into the place-content, place-items and place-self shorthands, such as align-items:center;justify-items:start into place-items:center start. This only happens when every browser in your Browserslist targets supports the shorthands, because a browser that does not would ignore both alignments. The defaults query includes browsers with unknown support, such as Opera Mini and UC Browser, so it keeps the longhands. Values that use safe, unsafe or last baseline merge only when both values use the same keywords. postcss-merge-longhand now accepts the Browserslist options overrideBrowserslist, stats, path and env.

Fixes

Write numbers in scientific notation when it is shorter, such as 1e-6px for 0.000001px and 1e6px for 1000000px. This also applies when length unit conversion is disabled. Numbers written without a decimal point, such as z-index:1000000, keep their form, because an <integer> cannot use scientific notation.
Stop merging longhands across a nested rule or at-rule. The shorthand ended up after the nested rule and overrode it, so in a{margin-top:1px;&{margin-top:2px}…} the nested margin-top was lost. This applies to margin, padding, border, border-radius and columns. Declarations on each side of a nested rule are now merged separately. An at-rule without a block, such as @apply x;, also separates them, since it may add declarations. An empty rule such as &{} does not. A border-image or all declaration before a nested rule no longer prevents merging the border longhands after it.
Stop merging rules that have an invalid selector, such as b: hover, [a b], :lang(en fr) or a||b. An invalid selector makes the whole selector list invalid, so the browser also dropped the valid rule it was merged with.
Only treat a dimension as the font size in the font shorthand when it has a length unit. An invalid value such as font:bold 1s "Arial Black" is now left unchanged.
Leave the font shorthand unchanged when it contains attr(), if(), inherit() or a custom function such as --name(), as already done for var() and env(). Their result is only known when the browser computes the value.
Remove a zero color stop position only when it has the right type for the gradient. conic-gradient() now drops 0deg and keeps an invalid 0px, while linear and radial gradients still drop 0px. -webkit-linear-gradient() keeps to bottom and other to directions as written, since the prefixed syntax measures angles differently.
Stop turning a comment inside a selector into a descendant combinator. A comment is not whitespace, so .a/**/.b selects elements with both classes, including inside :is(), and is no longer rewritten as .a .b. Invalid selectors such as div/**/span are left as written instead of becoming valid.
Leave rules with an invalid selector unchanged, including an ID selector that starts with a digit, such as #1a, and a combinator after a pseudo-element, such as a::before b.
Shorten top center and bottom center to top and bottom, instead of 0 and 100%, which the browser reads as horizontal positions. center top and center bottom are now shortened the same way.

Leave a position unchanged when it cannot be safely rewritten:
- in a background layer where another value splits the position, as in left no-repeat center, which is invalid;
- when it contains a function such as attr(), if() or a custom --function(), which may return a keyword, as var() already did;
- when an invalid three-value position contains a math function, such as left abs(1px) top, as calc() already did.
Keep strings unchanged when removing a line continuation (a backslash before a newline) right after an escape. In "\31 followed by a line continuation and 2", joining the lines would turn \31 into \312, so the result is now "\31 2".

Leave @charset unchanged. Browsers only recognize it with double quotes, so rewriting single quotes would make an ignored @charset take effect.
Update postcss-calc to 11.2.2. postcss-calc() now attempts to preserve fractions if the replacement would lose too much precision

`v9.1.2`: v9.1.2

Compare Source

What's Changed

fix: collapse redundant whitespace in at-rules in #1999

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.1.1...cssnano@9.1.2

`v9.1.1`: v9.1.1

Compare Source

What's Changed

Bug Fixes

fix(postcss-convert-values): preserve unicode range in #1995

Full Changelog: https://github.com/cssnano/cssnano/compare/cssnano@9.1.0...cssnano@9.1.1

dprint/dprint (dprint)

`v0.60.1`

Compare Source

Changes

fix: show plugin display names and dim file extensions in plugin prompts (#1301)

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations.
Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact	SHA-256 Checksum
dprint-x86_64-apple-darwin.zip	551fd5b0ce32a83682f6aaa425317db54402451a0ab66b46c0e11e17900f7db8
dprint-aarch64-apple-darwin.zip	b495103be1c01ba097449d73af3d76bbcef3deb291b87e9b7db6e8d12d497ef6
dprint-x86_64-pc-windows-msvc.zip	52f0ee9742df4b56ddffdd058a066153f3a8fea5456be5a9e19f2da10bd80b8b
dprint-x86_64-pc-windows-msvc-installer.exe	98f7e0af79793e5b7f6fba0535312dd20fb0be1eea77b0d239862930a29895b0
dprint-aarch64-pc-windows-msvc.zip	499463bf77cb83a0ebbfa0e4af84ba00c58ae6ae991b4d465c41a1679ae404af
dprint-x86_64-unknown-linux-gnu.zip	5612c587a34dfbbda37162d46755f9e8c6a4efba7950920b2a308ea84ce0886a
dprint-x86_64-unknown-linux-musl.zip	c4e5e8491f52971f8e3bd0ed80995eafd9119fbe603ba626694a20d56c14a730
dprint-aarch64-unknown-linux-gnu.zip	03fd8908f9b418bdc4701347ff0527a59d1c08db2bc09a9f5d8101eb711e7fe2
dprint-aarch64-unknown-linux-musl.zip	9b537fdfb75b2402f47d15cc615f1ba31736a37e2aed65662e8d9d4b647c70f1
dprint-riscv64gc-unknown-linux-gnu.zip	bdc9ef53dde39831a47aa74ace0143d82dbb463b55bdd9bb835786d2f5027b9a
dprint-loongarch64-unknown-linux-gnu.zip	f0ab7c56d08611740c346a53185488ee237ab56ac328283b4e3b456f821b71aa
dprint-loongarch64-unknown-linux-musl.zip	022e540ad9c45e2ad8d5e95c87543316d6b19af4b6f51697d0731885c8add339
dprint-powerpc64le-unknown-linux-gnu.zip	c99f1599d78199ae51360cd79b16b80d640e81ddf9617de4f95bcbec744b6838
dprint-powerpc64le-unknown-linux-musl.zip	d937d7107862d2cd8c3e0c4a094fa3e0fcebe4b534c1a590d4af016edeba463b
dprint-aarch64-linux-android.zip	435158e6eec8868b5e5a839598cffccbaf6dc71598dc1d5991f5fee28d457f2a
dprint-x86_64-linux-android.zip	1da6c8471906b2a5eb98375e5365ca95119e4b2b84148d9cff08d76bb583edf8

`v0.60.0`

Compare Source

Changes

feat: use npm's proxy settings for npm plugins and improve download errors (#1289)
feat: use reqwest for downloading (#1291)
fix: say when the proxy is what couldn't be connected to (#1292)
fix(BREAKING/lsp): only use the global config when opted in and add global config commands (#1288)
fix: do not error for plugin config in an extended config that has no matching plugin (#1296)
fix: allow un-excluding a node_modules directory with a negated exclude (#1297)
fix: support brace expansions that span directories in file patterns (#1298)
docs: add missing plugin pages and fix Oxc sidebar label (#1293)
docs: document the global config in the vscode extension (#1285)
docs: update Oxc plugin docs for newly supported languages (#1286)

Install

Run dprint upgrade or see https://dprint.dev/install/

Verification

These artifacts have build provenance attestations.
Verify a download with the GitHub CLI:

gh attestation verify dprint-x86_64-unknown-linux-gnu.zip --repo dprint/dprint

Checksums

Artifact	SHA-256 Checksum
dprint-x86_64-apple-darwin.zip	9473b1151a872eee85b8992aaade260d71ffd8e8c2c82694804c8785a8fe99e2
dprint-aarch64-apple-darwin.zip	2fb659de79f3a297c59ab3e2a8686428ba07e8910ee2f416af615ce11f018b8c
dprint-x86_64-pc-windows-msvc.zip	9a5d46a93ea87db2bb7bf9431aff10b01e83210ad37b574eecae604199a1071a
dprint-x86_64-pc-windows-msvc-installer.exe	be61d440fec40f101a942ddd3fdf8e97b24397192f7ab9530d5f8c0ae0c9b44b
dprint-aarch64-pc-windows-msvc.zip	ed146e34d2ab6dff514114195b9c896613ac7c0b8e56f77231b1667620fb6bfd
dprint-x86_64-unknown-linux-gnu.zip	87642ff4bdb0cc33dbb2032b5cd2038d1c88a2bbb7da082c515b9c32d135b10f
dprint-x86_64-unknown-linux-musl.zip	d9fde88ef9e6793bbc1be395f9a4d6f3555ea1c6610d13e67a690cb664bd3373
dprint-aarch64-unknown-linux-gnu.zip	a357dd71e0be40421b21f4d9bf53d505cda545973e160ecc6d95dfb3cab6948c
dprint-aarch64-unknown-linux-musl.zip	46ecd756236a1fc9895dd85479933f6f82c0264b418aa789168e0b744d1fab5a
dprint-riscv64gc-unknown-linux-gnu.zip	ba3aff4dbd00a3d4762032e40fcb8d01ce832df9e8fc413572b61f41d3d14010
dprint-loongarch64-unknown-linux-gnu.zip	26a0448bb6cea0f6c3897c708d6cc6441f58ad2ab5fdd10e75529f723cac9bce
dprint-loongarch64-unknown-linux-musl.zip	6bdc2b53b0ab87d3645b06c671cb38f4c79728c46b290143a7b2e9af8bac0fe6
dprint-powerpc64le-unknown-linux-gnu.zip	204fb465779e94a8831191788e465ae9542fe7cd266b9cfc40a451a75301bc3e
dprint-powerpc64le-unknown-linux-musl.zip	5911286d2263e4f9b52fe31ef49ecc81d59ebe0910bb9122aee74fbfead86252
dprint-aarch64-linu

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

netlify · 2026-10-12T00:37:26Z

✅ Deploy Preview for gh-pages-openinf ready!

Name	Link
🔨 Latest commit	`bc2c393`
🔍 Latest deploy log	https://app.netlify.com/projects/gh-pages-openinf/deploys/6acc2bc3f2df750008abbac7
😎 Deploy Preview	https://deploy-preview-1917--gh-pages-openinf.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

coderabbitai · 2026-10-12T00:37:29Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 328614c0-9947-495f-8110-872e8defb4e8

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-10-12T00:37:52Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
@types/sanitize-html@2.16.1 ⏵ 2.16.2			⁺⁷
cssnano@9.1.0 ⏵ 9.2.2	⁺¹		⁺²
dprint@0.57.4 ⏵ 0.60.1			⁺¹
@types/node@24.19.0 ⏵ 24.19.1	⁺¹	⁺¹
vnu-jar@26.9.27 ⏵ 26.10.2			⁺¹
sanitize-html@2.17.7 ⏵ 2.18.0
@shopify/prettier-plugin-liquid@1.11.1 ⏵ 1.11.2	⁺¹		⁺²
sass@1.105.0 ⏵ 1.105.1			^-1
stylelint@17.15.0 ⏵ 17.16.0	⁺¹		⁺⁵
@biomejs/biome@2.5.14 ⏵ 2.5.15	⁺¹	⁺¹	⁺²

View full report

📦：bump all

bc2c393

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

renovate Bot added 🏗️ Category: Build Issues and PRs related to the build directory 📦 Type: Developer Dependencies PRs that modify packages only req'd for local development and testing labels Oct 12, 2026

renovate Bot enabled auto-merge (squash) October 12, 2026 00:37

renovate Bot merged commit fcfe31a into live Oct 12, 2026
18 of 19 checks passed

renovate Bot deleted the renovate/all branch October 12, 2026 00:39

Navigation Menu

Repository navigation

📦：bump all - #1917

📦：bump all#1917
renovate[bot] merged 1 commit into
livefrom
renovate/all

renovate Bot commented Oct 12, 2026

Uh oh!

netlify Bot commented Oct 12, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 12, 2026

Review skipped

Uh oh!

socket-security Bot commented Oct 12, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Oct 12, 2026

Release Notes

v2.5.15

Patch Changes

v1.11.2

Patch Changes

v9.2.2: v9.2.2

What's Changed

Bug Fixes

v9.2.1: v9.2.1

What's Changed

v9.2.0: v9.2.0

Features

Fixes

v9.1.2: v9.1.2

What's Changed

v9.1.1: v9.1.1

What's Changed

Bug Fixes

v0.60.1

Changes

Install

Verification

Checksums

v0.60.0

Changes

Install

Verification

Checksums

Configuration

Uh oh!

netlify Bot commented Oct 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for gh-pages-openinf ready!

Uh oh!

coderabbitai Bot commented Oct 12, 2026

Review skipped

Uh oh!

socket-security Bot commented Oct 12, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v2.5.15`

`v1.11.2`

`v9.2.2`: v9.2.2

`v9.2.1`: v9.2.1

`v9.2.0`: v9.2.0

`v9.1.2`: v9.1.2

`v9.1.1`: v9.1.1

`v0.60.1`

`v0.60.0`

netlify Bot commented Oct 12, 2026 •

edited

Loading