Commit e87dcf0

authored

fix(deps): update all dependencies (#52)

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@biomejs/biome](https://biomejs.dev) ([source](https://redirect.github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome)) | [`2.4.15` → `2.4.16`](https://renovatebot.com/diffs/npm/@biomejs%2fbiome/2.4.15/2.4.16) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@biomejs%2fbiome/2.4.16?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@biomejs%2fbiome/2.4.15/2.4.16?slim=true) | | [@convex-dev/workos-authkit](https://redirect.github.com/get-convex/workos-authkit) | [`^0.2.5` → `^0.2.6`](https://renovatebot.com/diffs/npm/@convex-dev%2fworkos-authkit/0.2.5/0.2.6) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@convex-dev%2fworkos-authkit/0.2.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@convex-dev%2fworkos-authkit/0.2.5/0.2.6?slim=true) | | [@workos-inc/authkit-nextjs](https://redirect.github.com/workos/authkit-nextjs) | [`^4.1.0` → `^4.1.1`](https://renovatebot.com/diffs/npm/@workos-inc%2fauthkit-nextjs/4.1.0/4.1.1) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@workos-inc%2fauthkit-nextjs/4.1.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@workos-inc%2fauthkit-nextjs/4.1.0/4.1.1?slim=true) | | [concurrently](https://redirect.github.com/open-cli-tools/concurrently) | [`^9.2.1` → `^10.0.0`](https://renovatebot.com/diffs/npm/concurrently/9.2.1/10.0.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/concurrently/10.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/concurrently/9.2.1/10.0.0?slim=true) | | [lucide-react](https://lucide.dev) ([source](https://redirect.github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react)) | [`^1.16.0` → `^1.17.0`](https://renovatebot.com/diffs/npm/lucide-react/1.16.0/1.17.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/lucide-react/1.17.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/lucide-react/1.16.0/1.17.0?slim=true) | | [next-intl](https://next-intl.dev) ([source](https://redirect.github.com/amannn/next-intl)) | [`^4.12.0` → `^4.13.0`](https://renovatebot.com/diffs/npm/next-intl/4.12.0/4.13.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/next-intl/4.13.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/next-intl/4.12.0/4.13.0?slim=true) | | [ultracite](https://www.ultracite.ai/) ([source](https://redirect.github.com/haydenbleasel/ultracite)) | [`7.7.0` → `7.8.0`](https://renovatebot.com/diffs/npm/ultracite/7.7.0/7.8.0) | ![age](https://developer.mend.io/api/mc/badges/age/npm/ultracite/7.8.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ultracite/7.7.0/7.8.0?slim=true) | --- ### Release Notes <details> <summary>biomejs/biome (@biomejs/biome)</summary> ### [`v2.4.16`](https://redirect.github.com/biomejs/biome/blob/HEAD/packages/@biomejs/biome/CHANGELOG.md#2416) [Compare Source](https://redirect.github.com/biomejs/biome/compare/@biomejs/biome@2.4.15...@biomejs/biome@2.4.16) ##### Patch Changes - [#10329](https://redirect.github.com/biomejs/biome/pull/10329) [`ef764d5`](https://redirect.github.com/biomejs/biome/commit/ef764d51b9f5be18ec5a4f9b4dce732512e5d805) Thanks [@Conaclos](https://redirect.github.com/Conaclos)! - Fixed an issue where diagnostics showed an incorrect location in Astro files. - [#10363](https://redirect.github.com/biomejs/biome/pull/10363) [`50aa415`](https://redirect.github.com/biomejs/biome/commit/50aa4157599a1ac5c77c13bce81f5c87240beff0) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid. Input: ```html <span ><span>a</span ><span>b</span ></span> ``` Output: ```diff <span > <span>a</span ><span>b</span><span>a</span><span>b</span></span > ``` - [#10465](https://redirect.github.com/biomejs/biome/pull/10465) [`0c718da`](https://redirect.github.com/biomejs/biome/commit/0c718da81770f47d65845bc1a006f99512d9359b) Thanks [@dfedoryshchev](https://redirect.github.com/dfedoryshchev)! - Fixed diagnostics emitted by the `noUntrustedLicenses` rule. - [#10358](https://redirect.github.com/biomejs/biome/pull/10358) [`05c2617`](https://redirect.github.com/biomejs/biome/commit/05c26176573534a0abfa92d454d244f9569bc77d) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Fixed [#10356](https://redirect.github.com/biomejs/biome/issues/10356): `biome rage --linter` now displays rules enabled through linter domains in the enabled rules list. - [#10300](https://redirect.github.com/biomejs/biome/pull/10300) [`950247c`](https://redirect.github.com/biomejs/biome/commit/950247c389e693c16b47d61d8ef0f1b85d1a1b02) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Fixed [#10265](https://redirect.github.com/biomejs/biome/issues/10265): Svelte function bindings such as `bind:value={get, set}` are now parsed more precisely, so [`noCommaOperator`](https://biomejs.dev/linter/rules/no-comma-operator/) won't emit false positives for that syntax anymore. - [#9786](https://redirect.github.com/biomejs/biome/pull/9786) [`e71f584`](https://redirect.github.com/biomejs/biome/commit/e71f58490f3121432d1bc24ae5330ecf96391a40) Thanks [@MeGaNeKoS](https://redirect.github.com/MeGaNeKoS)! - Fixed [#8480](https://redirect.github.com/biomejs/biome/issues/8480): [`useDestructuring`](https://biomejs.dev/linter/rules/use-destructuring/) now provides `variableDeclarator` and `assignmentExpression` options to control which contexts enforce destructuring, matching ESLint's `prefer-destructuring` configuration. Both default to `{array: true, object: true}`. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses. - [#10425](https://redirect.github.com/biomejs/biome/pull/10425) [`1948b72`](https://redirect.github.com/biomejs/biome/commit/1948b7242e092ed0cfcf501ef6f119202b8ea93b) Thanks [@sjh9714](https://redirect.github.com/sjh9714)! - Fixed [#10244](https://redirect.github.com/biomejs/biome/issues/10244): The `useOptionalChain` rule now detects negated guard inequality chains like `!foo || foo.bar !== "x"`. - [#10442](https://redirect.github.com/biomejs/biome/pull/10442) [`001f94f`](https://redirect.github.com/biomejs/biome/commit/001f94f696d9baca3c231d39895a01d4dd528d52) Thanks [@ematipico](https://redirect.github.com/ematipico)! - Fixed [#10411](https://redirect.github.com/biomejs/biome/issues/10411): [`noMisusedPromises`](https://biomejs.dev/linter/rules/no-misused-promises/) no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope. - [#10318](https://redirect.github.com/biomejs/biome/pull/10318) [`9b1577f`](https://redirect.github.com/biomejs/biome/commit/9b1577fa400279d9b0222cbc920cfa9ddcf1c9d6) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Added support for `formatter.trailingCommas` in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides. - [#10319](https://redirect.github.com/biomejs/biome/pull/10319) [`2e37709`](https://redirect.github.com/biomejs/biome/commit/2e3770923f9fb4e33606113e726014f7b63730d0) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like: ```diff - <span> {{ value }} </span> + <span> + {{ value }} + </span> ``` - [#10365](https://redirect.github.com/biomejs/biome/pull/10365) [`0a58eb0`](https://redirect.github.com/biomejs/biome/commit/0a58eb0982460b757a26f94d958a7e40c0686227) Thanks [@Netail](https://redirect.github.com/Netail)! - Fixed [#10361](https://redirect.github.com/biomejs/biome/issues/10361): [`noUnusedFunctionParameters`](https://biomejs.dev/linter/rules/no-unused-function-parameters/) now mentions the parameter name in the diagnostic. - [#10439](https://redirect.github.com/biomejs/biome/pull/10439) [`df6b867`](https://redirect.github.com/biomejs/biome/commit/df6b867bb6fd210cc75ac03d832e7281eced5b61) Thanks [@denbezrukov](https://redirect.github.com/denbezrukov)! - Fixed CSS and SCSS formatting for comments around declaration colons so comments between property names, colons, and values stay at the same boundary as Prettier. ```diff .selector { - color: /* red, */ - blue; + color: /* red, */ blue; } ``` - [#10344](https://redirect.github.com/biomejs/biome/pull/10344) [`b30208c`](https://redirect.github.com/biomejs/biome/commit/b30208c06365907d6fb376f030bc75bbf5e3dea9) Thanks [@siketyan](https://redirect.github.com/siketyan)! - Fixed [`#10123`](https://redirect.github.com/biomejs/biome/issues/10123): Corrected the [`noReactNativeDeepImports`](https://biomejs.dev/linter/rules/no-react-native-deep-imports/) source rule to point to the proper upstream rule, so users can migrate from the original rule correctly. - [#10328](https://redirect.github.com/biomejs/biome/pull/10328) [`b59133f`](https://redirect.github.com/biomejs/biome/commit/b59133fd2a8afa33564914df531f7f752b48ecee) Thanks [@dyc3](https://redirect.github.com/dyc3)! - Fixed [#10309](https://redirect.github.com/biomejs/biome/issues/10309): Biome no longer adds newlines to Astro frontmatter when linter or assist `--write` mode is enabled. </details> <details> <summary>get-convex/workos-authkit (@convex-dev/workos-authkit)</summary> ### [`v0.2.6`](https://redirect.github.com/get-convex/workos-authkit/blob/HEAD/CHANGELOG.md#026) [Compare Source](https://redirect.github.com/get-convex/workos-authkit/compare/v0.2.5...v0.2.6) - feat: Add public query to get user by `externalId` ([#60](https://redirect.github.com/get-convex/workos-authkit/issues/60)) </details> <details> <summary>workos/authkit-nextjs (@workos-inc/authkit-nextjs)</summary> ### [`v4.1.1`](https://redirect.github.com/workos/authkit-nextjs/blob/HEAD/CHANGELOG.md#411-2026-05-27) [Compare Source](https://redirect.github.com/workos/authkit-nextjs/compare/v4.1.0...v4.1.1) ##### Bug Fixes - defer PKCE cookie write until AuthKit redirect ([#432](https://redirect.github.com/workos/authkit-nextjs/issues/432)) ([4f63d2f](https://redirect.github.com/workos/authkit-nextjs/commit/4f63d2f35f0ef1a07888a34e8872278881d0405a)) </details> <details> <summary>open-cli-tools/concurrently (concurrently)</summary> ### [`v10.0.0`](https://redirect.github.com/open-cli-tools/concurrently/releases/tag/v10.0.0) [Compare Source](https://redirect.github.com/open-cli-tools/concurrently/compare/v9.2.1...v10.0.0) #### What's Changed - Rename killOthers to killOthersOn in README example by [@philfreo](https://redirect.github.com/philfreo) in [#566](https://redirect.github.com/open-cli-tools/concurrently/pull/566) - Clarify usage of `makeTests()` by [@gustavohenke](https://redirect.github.com/gustavohenke) in [#567](https://redirect.github.com/open-cli-tools/concurrently/pull/567) - Support hex prefix colors with modifiers by [@garretmh](https://redirect.github.com/garretmh) in [#450](https://redirect.github.com/open-cli-tools/concurrently/pull/450) - Drop support for Node.js 18, add support for Node.js 24 by [@paescuj](https://redirect.github.com/paescuj) in [#565](https://redirect.github.com/open-cli-tools/concurrently/pull/565) - ESM only by [@gustavohenke](https://redirect.github.com/gustavohenke) in [#568](https://redirect.github.com/open-cli-tools/concurrently/pull/568) - Cleanups by [@paescuj](https://redirect.github.com/paescuj) in [#570](https://redirect.github.com/open-cli-tools/concurrently/pull/570) - Update deps by [@paescuj](https://redirect.github.com/paescuj) in [#571](https://redirect.github.com/open-cli-tools/concurrently/pull/571) - Rename `src` to `lib` by [@paescuj](https://redirect.github.com/paescuj) in [#572](https://redirect.github.com/open-cli-tools/concurrently/pull/572) - Correct modifier application description in prefixing.md by [@CodeF53](https://redirect.github.com/CodeF53) in [#574](https://redirect.github.com/open-cli-tools/concurrently/pull/574) - \[Readme] add note about windows only supporting double quotes by [@nkappler](https://redirect.github.com/nkappler) in [#577](https://redirect.github.com/open-cli-tools/concurrently/pull/577) - feat: add support for Chalk color functions in prefix colors by [@stephanschubert](https://redirect.github.com/stephanschubert) in [#578](https://redirect.github.com/open-cli-tools/concurrently/pull/578) - feat: enable automatic prefix colors by default by [@GermanJablo](https://redirect.github.com/GermanJablo) in [#581](https://redirect.github.com/open-cli-tools/concurrently/pull/581) - Allow shell overrides by [@gustavohenke](https://redirect.github.com/gustavohenke) in [#589](https://redirect.github.com/open-cli-tools/concurrently/pull/589) - feat: coloring prefixes by [@y-nk](https://redirect.github.com/y-nk) in [#587](https://redirect.github.com/open-cli-tools/concurrently/pull/587) - deps: Upgrade shell-quote to 1.8.4 by [@samchungy](https://redirect.github.com/samchungy) in [#591](https://redirect.github.com/open-cli-tools/concurrently/pull/591) - docs: update outdated Node.js doc links and fix null code formatting by [@saito-netartz](https://redirect.github.com/saito-netartz) in [#590](https://redirect.github.com/open-cli-tools/concurrently/pull/590) - fix: scope quote normalization to CLI input by [@jeffrey-takuma](https://redirect.github.com/jeffrey-takuma) in [#585](https://redirect.github.com/open-cli-tools/concurrently/pull/585) - deps: upgrade yargs to v18 by [@gustavohenke](https://redirect.github.com/gustavohenke) in [#593](https://redirect.github.com/open-cli-tools/concurrently/pull/593) #### New Contributors - [@philfreo](https://redirect.github.com/philfreo) made their first contribution in [#566](https://redirect.github.com/open-cli-tools/concurrently/pull/566) - [@garretmh](https://redirect.github.com/garretmh) made their first contribution in [#450](https://redirect.github.com/open-cli-tools/concurrently/pull/450) - [@CodeF53](https://redirect.github.com/CodeF53) made their first contribution in [#574](https://redirect.github.com/open-cli-tools/concurrently/pull/574) - [@nkappler](https://redirect.github.com/nkappler) made their first contribution in [#577](https://redirect.github.com/open-cli-tools/concurrently/pull/577) - [@stephanschubert](https://redirect.github.com/stephanschubert) made their first contribution in [#578](https://redirect.github.com/open-cli-tools/concurrently/pull/578) - [@GermanJablo](https://redirect.github.com/GermanJablo) made their first contribution in [#581](https://redirect.github.com/open-cli-tools/concurrently/pull/581) - [@y-nk](https://redirect.github.com/y-nk) made their first contribution in [#587](https://redirect.github.com/open-cli-tools/concurrently/pull/587) - [@samchungy](https://redirect.github.com/samchungy) made their first contribution in [#591](https://redirect.github.com/open-cli-tools/concurrently/pull/591) - [@saito-netartz](https://redirect.github.com/saito-netartz) made their first contribution in [#590](https://redirect.github.com/open-cli-tools/concurrently/pull/590) - [@jeffrey-takuma](https://redirect.github.com/jeffrey-takuma) made their first contribution in [#585](https://redirect.github.com/open-cli-tools/concurrently/pull/585) **Full Changelog**: <open-cli-tools/concurrently@v9.2.1...v10.0.0> </details> <details> <summary>lucide-icons/lucide (lucide-react)</summary> ### [`v1.17.0`](https://redirect.github.com/lucide-icons/lucide/releases/tag/1.17.0): Version 1.17.0 [Compare Source](https://redirect.github.com/lucide-icons/lucide/compare/1.16.0...1.17.0) ##### What's Changed - chore(lucide-vue-next|lucide-svelte|lucide-angular): Remove deprecated packages by [@ericfennis](https://redirect.github.com/ericfennis) in [#4376](https://redirect.github.com/lucide-icons/lucide/pull/4376) - chore(repo): Update issue templates and documentation for package ren… by [@ericfennis](https://redirect.github.com/ericfennis) in [#4379](https://redirect.github.com/lucide-icons/lucide/pull/4379) - feat(site): Adds survey overlay to website by [@ericfennis](https://redirect.github.com/ericfennis) in [#4380](https://redirect.github.com/lucide-icons/lucide/pull/4380) - feat(site): Certificate dev links by [@ericfennis](https://redirect.github.com/ericfennis) in [#4390](https://redirect.github.com/lucide-icons/lucide/pull/4390) - fix(icons): changed `martini` icon by [@jamiemlaw](https://redirect.github.com/jamiemlaw) in [#4335](https://redirect.github.com/lucide-icons/lucide/pull/4335) - chore(deps): bump brace-expansion from 1.1.11 to 5.0.6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4386](https://redirect.github.com/lucide-icons/lucide/pull/4386) - chore(deps): bump [@tootallnate/once](https://redirect.github.com/tootallnate/once) from 2.0.0 to 2.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4404](https://redirect.github.com/lucide-icons/lucide/pull/4404) - chore(deps): bump devalue from 5.8.0 to 5.8.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4391](https://redirect.github.com/lucide-icons/lucide/pull/4391) - chore(deps): bump ws from 8.18.0 to 8.20.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#4392](https://redirect.github.com/lucide-icons/lucide/pull/4392) - fix(gh-icon): limit icon size to a maximum of 256 pixels by [@jguddas](https://redirect.github.com/jguddas) in [#4398](https://redirect.github.com/lucide-icons/lucide/pull/4398) - chore(dependencies): Update dependencies by [@ericfennis](https://redirect.github.com/ericfennis) in [#4377](https://redirect.github.com/lucide-icons/lucide/pull/4377) - feat(copilot): Adding copilot instructions by [@ericfennis](https://redirect.github.com/ericfennis) in [#4407](https://redirect.github.com/lucide-icons/lucide/pull/4407) - feat(icons): add `globe-check` by [@Barakudum](https://redirect.github.com/Barakudum) in [#4342](https://redirect.github.com/lucide-icons/lucide/pull/4342) - feat(metadata): Require use-cases in meta json by [@ericfennis](https://redirect.github.com/ericfennis) in [#4321](https://redirect.github.com/lucide-icons/lucide/pull/4321) - feat(icons): added `parasol` icon by [@karsa-mistmere](https://redirect.github.com/karsa-mistmere) in [#4347](https://redirect.github.com/lucide-icons/lucide/pull/4347) **Full Changelog**: <lucide-icons/lucide@1.16.0...1.17.0> </details> <details> <summary>amannn/next-intl (next-intl)</summary> ### [`v4.13.0`](https://redirect.github.com/amannn/next-intl/blob/HEAD/CHANGELOG.md#4130-2026-05-28) [Compare Source](https://redirect.github.com/amannn/next-intl/compare/v4.12.0...v4.13.0) ##### Features - Use URL-safe base64 for auto-generated message keys of `useExtracted` ([#2330](https://redirect.github.com/amannn/next-intl/issues/2330)) ([a003d3a](https://redirect.github.com/amannn/next-intl/commit/a003d3ae81819a5ba646daed0f45f3106e1eee1b)) – by [@spokodev](https://redirect.github.com/spokodev) </details> <details> <summary>haydenbleasel/ultracite (ultracite)</summary> ### [`v7.8.0`](https://redirect.github.com/haydenbleasel/ultracite/releases/tag/ultracite%407.8.0) [Compare Source](https://redirect.github.com/haydenbleasel/ultracite/compare/ultracite@7.7.0...ultracite@7.8.0) ##### Minor Changes - [`4e2fea0`](https://redirect.github.com/haydenbleasel/ultracite/commit/4e2fea0): Add a dedicated `tanstack` framework preset for Biome, ESLint, and Oxlint. The ESLint preset layers `@tanstack/eslint-plugin-query`, `@tanstack/eslint-plugin-router`, and `@tanstack/eslint-plugin-start`, while the Biome and Oxlint presets relax file-naming conventions for `routes/` directories and the generated `routeTree.gen.ts`. Framework detection now maps `@tanstack/react-query`, `@tanstack/react-router`, and `@tanstack/react-start` to the new `tanstack` preset. Two behavior changes for existing consumers: TanStack Query rules now live in the `tanstack` preset instead of `react`, so projects that relied on Query rules must opt into `tanstack`; and TanStack Router projects now resolve to the `tanstack` preset rather than `remix`. ##### Patch Changes - [`51a2af0`](https://redirect.github.com/haydenbleasel/ultracite/commit/51a2af0): Recognize `.biome.json` and `.biome.jsonc` as valid Biome config files across the CLI. `detectLinter`, the `doctor` command, and the Biome config resolver now match the dot-prefixed names alongside `biome.json`/`biome.jsonc`, following Biome's [documented configuration file resolution order](https://biomejs.dev/guides/configure-biome/#configuration-file-resolution). Closes [#700](https://redirect.github.com/haydenbleasel/ultracite/issues/700). - [`14b557c`](https://redirect.github.com/haydenbleasel/ultracite/commit/14b557c): Harden the generated standalone Husky hook by using `git add -- "$file"` when restaging formatted files. This prevents option-shaped filenames from being interpreted as Git options during the hook. - [`baa3dd0`](https://redirect.github.com/haydenbleasel/ultracite/commit/baa3dd0): Add `ignorePatterns` to the generated oxlint config at the root level so they are actually applied. Oxlint does not merge `ignorePatterns` through `extends` (see [oxc-project/oxc#10223](https://redirect.github.com/oxc-project/oxc/issues/10223)), so patterns set in the core preset were silently ignored. The generated config now sets `ignorePatterns: core.ignorePatterns` at the top level, reusing the patterns from the imported core preset. - [`bd27fd4`](https://redirect.github.com/haydenbleasel/ultracite/commit/bd27fd4): Add newly supported Oxlint rules from the latest release to the core, React, and Vitest presets: - Core: `id-match`, `no-implicit-globals`, `no-implied-eval`, `prefer-arrow-callback`, `prefer-regex-literals`, `import/newline-after-import`, `jsdoc/require-throws-description`, `jsdoc/require-throws-type`, and `jsdoc/require-yields-type` - React: `jsx-a11y/control-has-associated-label`, `jsx-a11y/no-interactive-element-to-noninteractive-role`, `jsx-a11y/no-noninteractive-element-interactions`, `jsx-a11y/no-noninteractive-element-to-interactive-role`, `react/no-object-type-as-default-prop`, and `react/no-unstable-nested-components` - Vitest: `vitest/padding-around-after-all-blocks` - [`14b557c`](https://redirect.github.com/haydenbleasel/ultracite/commit/14b557c): Reject symlinked generated config targets before writing project files. CLI config writers now route through a shared project-file write guard that checks for symlinks and project-root escapes before mutating files. - [`14b557c`](https://redirect.github.com/haydenbleasel/ultracite/commit/14b557c): Validate package-manager names before generating agent and editor hook commands. Hook configuration now only uses supported package-manager prefixes, preventing unsafe values from being persisted into later-executed hook commands. - [`14b557c`](https://redirect.github.com/haydenbleasel/ultracite/commit/14b557c): Reject unsupported package-manager names during `ultracite init`. Explicit `--pm` values and detected `packageManager` metadata are now runtime-validated against the supported package managers before dependency installation, preventing malicious project metadata from selecting an arbitrary executable. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Only on Sunday and Saturday (`* * * * 0,6`) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/giacomoguidotto/blueprint).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

1 parent e69cb02 commit e87dcf0Copy full SHA for e87dcf0

2 files changed

bun.lock
package.json

Comments

(0)