chore(deps): bump the npm-dependencies group with 6 updates by dependabot[bot] · Pull Request #49 · michellepace/devflow

dependabot · 2026-04-12T18:53:53Z

Bumps the npm-dependencies group with 6 updates:

Package	From	To
lucide-react	`1.7.0`	`1.8.0`
@biomejs/biome	`2.4.10`	`2.4.11`
@types/node	`25.5.2`	`25.6.0`
baseline-browser-mapping	`2.10.16`	`2.10.18`
dotenv	`17.4.1`	`17.4.2`
vitest	`4.1.3`	`4.1.4`

Updates lucide-react from 1.7.0 to 1.8.0

Release notes

Sourced from lucide-react's releases.

Version 1.8.0

What's Changed

docs(packages/angular): add packageDirname for @lucide/angular by @rhutchison in lucide-icons/lucide#4211

chore(icons): Username change knarlix to RajnishKMehta by @RajnishKMehta in lucide-icons/lucide#4208

ci(@lucide/angular): Fix publishing problem by @ericfennis in lucide-icons/lucide#4213

docs: fix broken links in pull_request_template.md (got 404 page) by @whoisBugsbunny in lucide-icons/lucide#4224

fix(lucide-static): add viewBox to sprite symbol elements by @TomaTV in lucide-icons/lucide#4223

docs: Fix link to icon design principles in statement by @whoisBugsbunny in lucide-icons/lucide#4225

feat(docs): add Zephyr Cloud to Hero Backers tier by @karsa-mistmere in lucide-icons/lucide#4226

fix(icons): fixes gap issues in radio-off.svg by @karsa-mistmere in lucide-icons/lucide#4227

fix(icons): renamed text-select to square-dashed-text by @jguddas in lucide-icons/lucide#3943

fix(docs): improve mobile layout of v1 banner by @karsa-mistmere in lucide-icons/lucide#4254

fix(@lucide/svelte): aria-hidden="true" was never set by @blt-r in lucide-icons/lucide#4234

fix(icons): remove ui/ux tag from heart-minus, add delete instead by @karsa-mistmere in lucide-icons/lucide#4266

chore(deps-dev): bump vite from 7.3.1 to 7.3.2 by @dependabot[bot] in lucide-icons/lucide#4276

chore(deps): bump lodash-es from 4.17.23 to 4.18.1 by @dependabot[bot] in lucide-icons/lucide#4251

chore(deps): bump vite from 5.4.21 to 6.4.2 by @dependabot[bot] in lucide-icons/lucide#4286

feat(docs): use initOnMounted: true for useSessionStorage in CarbonAdOverlay by @karsa-mistmere in lucide-icons/lucide#4275

feat(icons): added bookmark-off icon by @ZeenatLawal in lucide-icons/lucide#4283

New Contributors

@rhutchison made their first contribution in lucide-icons/lucide#4211

@whoisBugsbunny made their first contribution in lucide-icons/lucide#4224

@TomaTV made their first contribution in lucide-icons/lucide#4223

@blt-r made their first contribution in lucide-icons/lucide#4234

@ZeenatLawal made their first contribution in lucide-icons/lucide#4283

Full Changelog: lucide-icons/lucide@1.7.0...1.8.0

Commits

7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
See full diff in compare view

Updates @biomejs/biome from 2.4.10 to 2.4.11

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.11

2.4.11

Patch Changes
#9350 4af4a3a Thanks @dyc3! - Added the new nursery rule useConsistentTestIt in the test domain. The rule enforces consistent use of either it or test for test functions in Jest/Vitest suites, with separate control for top-level tests and tests inside describe blocks.

Invalid:
test("should fly", () => {}); // Top-level test using 'test' flagged, convert to 'it'
describe("pig", () => {
test("should fly", () => {}); // Test inside 'describe' using 'test' flagged, convert to 'it'
});
#9429 a2f3f7e Thanks @ematipico! - Added the new nursery lint rule useExplicitReturnType. It reports TypeScript functions and methods that omit an explicit return type.
function toString(x: any) {
  // rule triggered, it doesn't declare a return type
  return x.toString();
}
#9828 9e40844 Thanks @ematipico! - Fixed #9484: the formatter no longer panics when formatting files that contain graphql tagged template literals combined with parenthesized expressions.

#9886 e7c681e Thanks @ematipico! - Fixed an issue where, occasionally, some bindings and references were not properly tracked, causing false positives from noUnusedVariables and noUndeclaredVariables in Svelte, Vue, and Astro files.

#9760 5b16d18 Thanks @myx0m0p! - Fixed #4093: the noDelete rule no longer triggers for delete process.env.FOO, since delete is the documented way to remove environment variables in Node.js.
#9799 2af8efd Thanks @minseong0324! - Added the rule noMisleadingReturnType. The rule detects when a function's return type annotation is wider than what the implementation actually returns.
// Flagged: `: string` is wider than `"loading" | "idle"`
function getStatus(b: boolean): string {
  if (b) return "loading";
  return "idle";
}
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useFind to better explain the problem, why it matters, and how to fix it.

#9755 bff7bdb Thanks @ematipico! - Improved performance of fix-all operations (--write). Biome is now smarter when it runs lint rules and assist actions. First, it runs only rules that have code fixes, and then runs the rest of the rules.

#8651 aafca2d Thanks @siketyan! - Add a new lint rule useDisposables for JavaScript, which detects disposable objects assigned to variables without using or await using syntax. Disposable objects that implement the Disposable or AsyncDisposable interface are intended to be disposed of after use. Not disposing them can lead to resource or memory leaks, depending on the implementation.

Invalid:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.11

Patch Changes
#9350 4af4a3a Thanks @dyc3! - Added the new nursery rule useConsistentTestIt in the test domain. The rule enforces consistent use of either it or test for test functions in Jest/Vitest suites, with separate control for top-level tests and tests inside describe blocks.

Invalid:
test("should fly", () => {}); // Top-level test using 'test' flagged, convert to 'it'
describe("pig", () => {
test("should fly", () => {}); // Test inside 'describe' using 'test' flagged, convert to 'it'
});
#9429 a2f3f7e Thanks @ematipico! - Added the new nursery lint rule useExplicitReturnType. It reports TypeScript functions and methods that omit an explicit return type.
function toString(x: any) {
  // rule triggered, it doesn't declare a return type
  return x.toString();
}
#9828 9e40844 Thanks @ematipico! - Fixed #9484: the formatter no longer panics when formatting files that contain graphql tagged template literals combined with parenthesized expressions.

#9886 e7c681e Thanks @ematipico! - Fixed an issue where, occasionally, some bindings and references were not properly tracked, causing false positives from noUnusedVariables and noUndeclaredVariables in Svelte, Vue, and Astro files.

#9760 5b16d18 Thanks @myx0m0p! - Fixed #4093: the noDelete rule no longer triggers for delete process.env.FOO, since delete is the documented way to remove environment variables in Node.js.
#9799 2af8efd Thanks @minseong0324! - Added the rule noMisleadingReturnType. The rule detects when a function's return type annotation is wider than what the implementation actually returns.
// Flagged: `: string` is wider than `"loading" | "idle"`
function getStatus(b: boolean): string {
  if (b) return "loading";
  return "idle";
}
#9880 7f67749 Thanks @dyc3! - Improved the diagnostics for useFind to better explain the problem, why it matters, and how to fix it.

#9755 bff7bdb Thanks @ematipico! - Improved performance of fix-all operations (--write). Biome is now smarter when it runs lint rules and assist actions. First, it runs only rules that have code fixes, and then runs the rest of the rules.
#8651 aafca2d Thanks @siketyan! - Add a new lint rule useDisposables for JavaScript, which detects disposable objects assigned to variables without using or await using syntax. Disposable objects that implement the Disposable or AsyncDisposable interface are intended to be disposed of after use. Not disposing them can lead to resource or memory leaks, depending on the implementation.

Invalid:

... (truncated)

Commits

a2933bf ci: release (#9733)
e8cad58 feat(js_analyze): implement useQwikLoaderLocation (#9809)
2af8efd feat(lint): add nursery rule noMisleadingReturnType (#9799)
a2f3f7e feat(lint): rule useExplicitReturnType (#9429)
aafca2d feat(js/lint): implement rule useDisposables (#8651)
49f00a3 feat(lint): add ternary expression detection to useNullishCoalescing (#9248)
4af4a3a feat(lint/js): add useConsistentTestIt (#9350)
1417c3b feat(lint/js): add noUselessTypeConversion (#9701)
See full diff in compare view

Updates @types/node from 25.5.2 to 25.6.0

Commits

See full diff in compare view

Updates baseline-browser-mapping from 2.10.16 to 2.10.18

Release notes

Sourced from baseline-browser-mapping's releases.

v2.9.3 - remove process.loadEnvFile()

What's Changed

Remove process.loadEnfFile() from main script by @tonypconway in web-platform-dx/baseline-browser-mapping#112

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits

71803d0 Patch to 2.10.18 because browser or feature data changed
91e38d0 Browser or feature data changed
c5c778c Patch to 2.10.17 because browser or feature data changed
c3ab98d Browser or feature data changed
2fd5696 Updating static site
See full diff in compare view

Updates dotenv from 17.4.1 to 17.4.2

Changelog

Sourced from dotenv's changelog.

17.4.2 (2026-04-12)

Changed

Improved skill files - tightened up details (#1009)

Commits

f116f70 17.4.2
3a81612 fix visual order of faq
13f55a8 Merge branch 'skill'
4bbbf73 reorganize faq
c3da64b Merge pull request #1009 from motdotla/skill
6f743b1 update source
fc2c624 update skill
972315b Tighten up skill
2795fce reorganize faq
d5495d4 adjust skill
Additional commits viewable in compare view

Updates vitest from 4.1.3 to 4.1.4

Release notes

Sourced from vitest's releases.

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

reporter:

Add filterMeta option to json reporter - by @nami8824 and @sheremet-va in vitest-dev/vitest#10078 (b77de)

   🐞 Bug Fixes

Use "black" foreground for labeled terminal message to ensure contrast - by @hi-ogawa in vitest-dev/vitest#10076 (203f0)

Make expect(..., message) consistent as error message prefix - by @hi-ogawa and Codex in vitest-dev/vitest#10068 (a1b5f)

Do not hoist imports whose names match class properties . - by @SunsetFi in vitest-dev/vitest#10093 and vitest-dev/vitest#10094 (0fc4b)

browser: Spread user server options into browser Vite server in project - by @GoldStrikeArch in vitest-dev/vitest#10049 (65c9d)

    View changes on GitHub

Commits

ac04bac chore: release v4.1.4
82c858d chore: Remove no-op function in plugin config logic (#8501)
d4fbb5c feat(experimental): support aria snapshot (#9668)
b77de96 feat(reporter): add filterMeta option to json reporter (#10078)
a120e3a feat(experimental): expose assertion as a public field (#10095)
5375780 feat(coverage): default to text reporter skipFull if agent detected (#10018)
a1b5f0f fix: make expect(..., message) consistent as error message prefix (#10068)
203f07a fix: use "black" foreground for labeled terminal message to ensure contrast (...
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.7.0` | `1.8.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.10` | `2.4.11` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` | | [baseline-browser-mapping](https://github.com/web-platform-dx/baseline-browser-mapping) | `2.10.16` | `2.10.18` | | [dotenv](https://github.com/motdotla/dotenv) | `17.4.1` | `17.4.2` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.3` | `4.1.4` | Updates `lucide-react` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.8.0/packages/lucide-react) Updates `@biomejs/biome` from 2.4.10 to 2.4.11 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.11/packages/@biomejs/biome) Updates `@types/node` from 25.5.2 to 25.6.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `baseline-browser-mapping` from 2.10.16 to 2.10.18 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.10.16...v2.10.18) Updates `dotenv` from 17.4.1 to 17.4.2 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v17.4.1...v17.4.2) Updates `vitest` from 4.1.3 to 4.1.4 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest) --- updated-dependencies: - dependency-name: lucide-react dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: "@biomejs/biome" dependency-version: 2.4.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@types/node" dependency-version: 25.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-dependencies - dependency-name: baseline-browser-mapping dependency-version: 2.10.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: dotenv dependency-version: 17.4.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: vitest dependency-version: 4.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-04-12T18:53:56Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
devflow	Ready	Preview, Comment	Apr 12, 2026 6:54pm

dependabot · 2026-04-19T18:54:13Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 12, 2026

vercel Bot deployed to Preview April 12, 2026 18:54 View deployment

dependabot Bot closed this Apr 19, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/npm-dependencies-8e0b7d228f branch April 19, 2026 18:54

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the npm-dependencies group with 6 updates#49

chore(deps): bump the npm-dependencies group with 6 updates#49
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-8e0b7d228f

dependabot Bot commented on behalf of github Apr 12, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Apr 12, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 1.8.0

What's Changed

New Contributors

Biome CLI v2.4.11

2.4.11

Patch Changes

2.4.11

Patch Changes

v2.9.3 - remove process.loadEnvFile()

What's Changed

17.4.2 (2026-04-12)

Changed

v4.1.4

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

Uh oh!

vercel Bot commented Apr 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Apr 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 12, 2026 •

edited

Loading

v2.9.3 - remove `process.loadEnvFile()`

vercel Bot commented Apr 12, 2026 •

edited

Loading