fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.5.3 → 2.5.4
@effect/opentelemetry (source)	^0.63.0 → ^0.64.0
@tailwindcss/postcss (source)	^4.3.2 → ^4.3.3
convex (source)	^1.42.1 → ^1.42.3
effect (source)	^3.21.4 → ^3.22.0
jotai	^2.20.1 → ^2.20.2
lucide-react (source)	^1.24.0 → ^1.25.0
react-dropzone	^15.0.0 → ^17.0.0
semantic-release	^25.0.6 → ^25.0.8
tailwindcss (source)	^4.3.2 → ^4.3.3
typescript (source)	^6.0.3 → ^7.0.2
ultracite (source)	7.9.3 → 7.9.4

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.4

Compare Source

Patch Changes

• #​10665 55ff995 Thanks @​dyc3! - Improved the performance of the HTML parser slightly in our synthetic benchmarks.

• #​10894 f4fb10e Thanks @​ematipico! - Fixed #​6392: On-type formatting no longer moves comments before an if statement into its body.

• #​10939 f2799db Thanks @​Netail! - Fixed #​10930: noLabelWithoutControl now correctly detects text interpolation in Astro, Svelte & Vue as valid accessible content.

• #​10945 ae15d98 Thanks @​Netail! - Fixed #​10942: Svelte directives don't throw an accidental debug log anymore.

• #​10842 5e1abfe Thanks @​JamBalaya56562! - Fixed #​9196: biome check --write --unsafe no longer hangs forever when applying the noCommentText code fix.

  The rule's fix now wraps the comment in a real JSX expression container ({/* comment */}) instead of re-inserting the braces as plain JSX text, so the fixed code is no longer reported again by the same rule.

• #​10891 ecca79e Thanks @​ematipico! - Fixed #10885: prevented a module-inference regression introduced by a housekeeping change.

• #​10886 60c8043 Thanks @​dyc3! - Fixed #​10727: Biome now breaks the arguments of curried test.each, it.each, describe.each, and test.for calls when they exceed the configured line width.

  - test.each([[1, 2]])("a description that is long enough to push the hugged opening line beyond the print width", (a, b) => {
  -   expect(a).toBe(b);
  - });
  + test.each([[1, 2]])(
  +   "a description that is long enough to push the hugged opening line beyond the print width",
  +   (a, b) => {
  +     expect(a).toBe(b);
  +   },
  + );

• #​10895 01a85f0 Thanks @​ematipico! - Biome will now remove stale Unix daemon sockets from older Biome versions when starting a newer daemon.

Effect-TS/effect (@​effect/opentelemetry)

v0.64.0

Compare Source

Patch Changes

• Updated dependencies [fffdee0]:
  • effect@​3.22.0
  • @​effect/platform@​0.97.0

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.3.3

Compare Source

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

get-convex/convex-backend (convex)

v1.42.3

• Fixed a bug where the codegen would not sort module paths in
  an order consistent with other platforms when running
  on Windows. This completes a fix that was only partially
  applied in 1.42.2.

v1.42.2

• Mutations and actions can now read the raw authentication
  token used in the request by accessing authToken in
  ctx.meta.getRequestMetadata().
• Fixed a circular import in convex/browser that caused issues
  when using the ConvexHttpClient in some JavaScript
  environments.
• Fixed a bug in ConvexProviderWithClerk that caused
  the Convex client to ignore session changes in some situations.
• Fixed a bug where the codegen would not sort module paths in
  an order consistent with other platforms when running
  on Windows.
• When running npx convex dev outside a Convex project,
  the CLI now returns an error message immediately instead of
  first asking the user to select a project and then failing
  later.

pmndrs/jotai (jotai)

v2.20.2

Compare Source

This release fixes a regression in some edge case introduced in v2.18.1.

What's Changed

• fix(vanilla): subscriber not notified after nested store.set and sub/unsub inside a write by @​dai-shi in #​3354

Full Changelog: pmndrs/jotai@v2.20.1...v2.20.2

lucide-icons/lucide (lucide-react)

v1.25.0

Compare Source

react-dropzone/react-dropzone (react-dropzone)

v17.0.0

Compare Source

• refactor!: migrate source to TypeScript, drop prop-types & defaultProps (db262aa)

BREAKING CHANGES

• Requires React >= 18. prop-types and defaultProps are
  removed in favor of TypeScript types and default parameter values; the
  hand-written typings are replaced by declarations generated from source.

v16.0.0

Compare Source

• chore!: adopt oxc toolchain (tsdown/oxlint/oxfmt/vitest) + Vocs docs (ac5c085)

BREAKING CHANGES

• drops the UMD build and dist/es/; the package is now ESM + CJS (dist/index.js / dist/index.cjs) with "type": "module" and an exports map. CDN/script-tag consumers and deep imports of the old paths must migrate. Requires Node >= 20 to build.

semantic-release/semantic-release (semantic-release)

v25.0.8

Compare Source

v25.0.7

Compare Source

Bug Fixes

• argument Injection via repositoryUrl in package.json (#​4245) (c46dbda)

tailwindlabs/tailwindcss (tailwindcss)

v4.3.3

Compare Source

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#​20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#​20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#​20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#​20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#​20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#​20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#​20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#​20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#​20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#​20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#​20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#​20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#​20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#​20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#​20336)

microsoft/TypeScript (typescript)

v7.0.2

Compare Source

haydenbleasel/ultracite (ultracite)

v7.9.4

Compare Source

Patch Changes

• f480c12: Upgrade Biome to 2.5.3 to fix the LSP scanner deadlock (#​10845) where editors get stuck on "Biome is scanning the project".
• 1d70c40: Fail fast with an actionable message when Biome can't resolve ultracite/biome/core. Biome resolves that config out of the project's node_modules, so it errors with an opaque "module not found" whenever Ultracite isn't installed there — a state npx ultracite check / bunx ultracite check hide, because they run the CLI from a temp cache regardless. check and fix now detect it before invoking Biome and say what's actually wrong, and doctor verifies that Ultracite resolves rather than just appearing in package.json (#​750).
• 38d10bc: Move Biome's noUnknownAttribute rule out of the core preset and into the react preset. The rule only recognises React's JSX attribute names, so projects using Solid, Svelte, Vue, or Qwik were incorrectly flagged for framework-standard attributes such as class.
• cf723bd: Add interactive and non-interactive selection for optional Oxlint JS plugins during init.

---

Configuration

📅 Schedule: (in timezone Europe/Rome)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Saturday (* 0-3 * * 6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
blueprint	Error		Jul 18, 2026 1:38am