chore(deps): update frontend non-major by renovate[bot] · Pull Request #67 · Climate-REF/ref-app

renovate · 2026-08-26T00:03:40Z

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`2.5.10` → `2.5.11`
@sentry/react (source)	`10.70.0` → `10.71.0`
@tanstack/react-query (source)	`5.102.0` → `5.102.8`
@tanstack/react-query-devtools (source)	`5.102.0` → `5.102.8`
@tanstack/react-router (source)	`1.170.31` → `1.170.32`
@tanstack/router-plugin (source)	`1.168.34` → `1.168.35`
@testing-library/react	`16.3.2` → `16.3.3`
@types/react-dom (source)	`19.2.4` → `19.2.5`
js-yaml	`4.3.1` → `4.3.2`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.5.11`

Compare Source

Patch Changes

#11499 9743d0c Thanks @scs0209! - Fixed #11496: useValidAnchor now treats Astro JSX shorthand attributes like <a {href}> as a valid href.
#11437 88f805e Thanks @Princesseuh! - Fixed #9944: adjacent elements inside an Astro expression now parse as an implicit fragment instead of raising an error.
```
{options.map(() =>
  <div />
  <div />
)}
```
#11437 88f805e Thanks @Princesseuh! - Fixed Astro templates rejecting unclosed HTML void elements, such as {cond && <br>}.
#11507 e2fc036 Thanks @dyc3! - Fixed #11157: noUnusedVariables no longer reports Vue <script setup> bindings used by CSS v-bind() as unused.
#11398 afc4615 Thanks @dyc3! - Fixed #11389: Files passed through --stdin-file-path now use full HTML support for Astro, Svelte, and Vue when it is enabled.
#11526 372cd68 Thanks @dyc3! - Fixed noVueRefAsOperand to track Vue refs through declaration aliases and toRefs() properties, and to recognize useTemplateRef() results. The rule no longer reports false positives such as plain ref transfers, plain toRefs() property access, defineModel() modifiers, or the supported .effect member as operands.

The refactor enabling these fixes also improves the performance of the rule.
#11458 a7cd286 Thanks @dyc3! - Fixed #11436: GritQL snippets such as export { $specifiers } from $source now match named re-exports with aliases, inline type modifiers, and multiple specifiers.
#11515 382b15d Thanks @dyc3! - Fixed #11390, where noFloatingPromises performed expensive full type inference for calls to non-Promise methods declared on third-party TypeScript classes. The rule now classifies those calls using targeted type information.
#11516 6f40e82 Thanks @levrik! - Fixed noVueRefAsOperand so it no longer reports a callback parameter (e.g. from .find(), .map()) as an unwrapped ref value just because it's nested inside a ref(), computed(), or similar call.
```
const result = computed(() => list.find((item) => item.label === "a"));
```
Previously, item here was incorrectly treated as a ref value because the rule attributed it to the outer computed() call.
#11495 496268d Thanks @Netail! - Fixed useGraphqlNamingConvention so it no longer reports GraphQL enum value definitions with comments & descriptions and now displays a more accurate diagnostic range.
#11407 6ef52b0 Thanks @1678092075! - Fixed #11214: noUnusedVariables no longer reports type parameters declared by non-default function overload signatures that have an implementation.
#11322 5c353e6 Thanks @jp-knj! - Added a new nursery rule noAstroSetHtmlDirective, which disallows Astro's set:html directive because untrusted content can introduce cross-site scripting vulnerabilities.

For example, the following snippet triggers the rule:
```
<div set:html={content} />
```
#11462 18883b7 Thanks @dyc3! - Fixed #10776: useVueHyphenatedAttributes no longer reports lowercase attribute names containing punctuation, such as pt:header:data-test-id and some_attr.
#11476 3270ca4 Thanks @dyc3! - Fixed #10330: Vue interpolation delimiters now stay attached to whitespace-sensitive element boundaries and adjacent inline siblings, wrapping their expression when needed to fit the configured line width. Interpolations followed by text now also converge after one formatting pass.
```
-<v-btn v-if="store.state.user" variant="text" to="/my-rooms"
-  >{{ $t("nav.my-rooms") }}</v-btn
->
+<v-btn v-if="store.state.user" variant="text" to="/my-rooms">{{
+  $t("nav.my-rooms")
+}}</v-btn>
```
#11191 3e5367f Thanks @ematipico! - Added the nursery rule noUndeclaredCustomProperties, which reports references to custom properties that are not defined in available CSS, static HTML-like style attributes, or JSX string style attributes.

For example, the following snippet triggers the rule:
```
a { color: var(--undefined-color); }
```

#11435 7754894 Thanks @levrik! - Fixed: Variables and imports used as custom Vue directives are no longer reported as unused.

For example:

<script setup>
const vHighlight = {
  mounted: (element) => {
    element.style.color = "red";
  },
};
</script>

<template>
  <p v-highlight>Hello</p>
</template>

#11501 e6acded Thanks @aminya! - Improved the performance of useArraySortCompare by skipping type inference for calls to unrelated methods.
#11467 66b282c Thanks @dyc3! - Fixed #11464: Biome now parses parenthesized object literals returned from arrow functions when they contain a conditional expression and a nested arrow function.
#11456 db9aa2a Thanks @dyc3! - Fixed #10278: Marked the fix for noThisInStatic as unsafe by default.
#11502 652aedb Thanks @levrik! - noGlobalAssign no longer reports assignments to a Vue <script setup> binding from a template expression, when the binding's name happens to match a built-in global (e.g. open, parent, top).

For example, this no longer triggers a diagnostic:
```
<script setup>
const open = defineModel();
</script>

<template>
  <button @click="open = !open">Toggle</button>
</template>
```

getsentry/sentry-javascript (@sentry/react)

`v10.71.0`

Compare Source

Important Changes

feat(v10/core)!: Enable logs by default (#23311)

The enableLogs client option now defaults to true, so Sentry Logs work without any manual opt-in. Nothing is captured unless you call the Sentry.logger.* APIs or add a log-forwarding integration (such as consoleLoggingIntegration, pinoIntegration, or the winston transport), and you can set enableLogs: false to opt out. Although a default change like this would normally land in a major release, we are shipping it in a minor after careful consideration, since it sends no data on its own and only takes effect once you actively use the logging APIs or a logging integration.

Other Changes

feat(v10/core): Deprecate scope.clear() method (#23231)
fix(v10/core): Bound child span tracking on long-lived spans (#23406)
fix(v10/core): Read Supabase PostgREST headers from Headers instances (#23241)
fix(v10/hono): Use captureException from scope, not from Client (#23280)
fix(v10/nuxt): Delete source maps after Nitro finishes building (#23508)
fix(v10/react-router): Carry multi-byte UTF-8 across SSR stream chunk boundaries (#23421)
fix(v10/react): Match TanStack Router pageload against the router location (#23494)

Internal Changes

test(v10/nextjs): Add e2e app for a user-owned OpenTelemetry setup (#23278)

Bundle size 📦

Path	Size
@sentry/browser	27.1 KB
@sentry/browser - with treeshaking flags	25.58 KB
@sentry/browser (incl. Tracing)	45.51 KB
@sentry/browser (incl. Tracing + Span Streaming)	47.25 KB
@sentry/browser (incl. Tracing, Profiling)	50.15 KB
@sentry/browser (incl. Tracing, Replay)	83.83 KB
@sentry/browser (incl. Tracing, Replay) - with treeshaking flags	73.71 KB
@sentry/browser (incl. Tracing, Replay with Canvas)	88.45 KB
@sentry/browser (incl. Tracing, Replay, Feedback)	100.79 KB
@sentry/browser (incl. Feedback)	43.87 KB
@sentry/browser (incl. sendFeedback)	31.78 KB
@sentry/browser (incl. FeedbackAsync)	36.79 KB
@sentry/browser (incl. Metrics)	28.16 KB
@sentry/browser (incl. Logs)	28.38 KB
@sentry/browser (incl. Metrics & Logs)	29.06 KB
@sentry/react	28.86 KB
@sentry/react (incl. Tracing)	47.72 KB
@sentry/vue	32.4 KB
@sentry/vue (incl. Tracing)	47.43 KB
@sentry/svelte	27.12 KB
CDN Bundle	29.43 KB
CDN Bundle (incl. Tracing)	47.43 KB
CDN Bundle (incl. Logs, Metrics)	30.98 KB
CDN Bundle (incl. Tracing, Logs, Metrics)	48.7 KB
CDN Bundle (incl. Replay, Logs, Metrics)	69.32 KB
CDN Bundle (incl. Tracing, Replay)	84.05 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics)	85.33 KB
CDN Bundle (incl. Tracing, Replay, Feedback)	89.72 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics)	90.96 KB
CDN Bundle - uncompressed	87.76 KB
CDN Bundle (incl. Tracing) - uncompressed	143.35 KB
CDN Bundle (incl. Logs, Metrics) - uncompressed	92.36 KB
CDN Bundle (incl. Tracing, Logs, Metrics) - uncompressed	147.24 KB
CDN Bundle (incl. Replay, Logs, Metrics) - uncompressed	214.2 KB
CDN Bundle (incl. Tracing, Replay) - uncompressed	259.79 KB
CDN Bundle (incl. Tracing, Replay, Logs, Metrics) - uncompressed	263.67 KB
CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed	273.17 KB
CDN Bundle (incl. Tracing, Replay, Feedback, Logs, Metrics) - uncompressed	277.04 KB
@sentry/nextjs (client)	50.2 KB
@sentry/sveltekit (client)	45.92 KB
@sentry/core/server	78.73 KB
@sentry/core/browser	65.27 KB
@sentry/node-core	61.77 KB
@sentry/node	122.94 KB
@sentry/node (incl. diagnostics channel injection)	147.78 KB
@sentry/node/import (ESM hook with diagnostics-channel injection)	68.39 KB
@sentry/node/light	50.21 KB
@sentry/node - without tracing	73.19 KB
@sentry/aws-serverless	82.24 KB
@sentry/cloudflare (withSentry) - minified	197.31 KB
@sentry/cloudflare (withSentry)	485.11 KB

TanStack/query (@tanstack/react-query)

`v5.102.8`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.102.8

`v5.102.7`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.102.7

`v5.102.6`

Compare Source

Patch Changes

#11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary
Updated dependencies []:
- @tanstack/query-core@5.102.6

`v5.102.5`

Compare Source

Patch Changes

Updated dependencies [578e5c2]:
- @tanstack/query-core@5.102.5

`v5.102.4`

Compare Source

Patch Changes

Updated dependencies [a05df6a]:
- @tanstack/query-core@5.102.4

`v5.102.3`

Compare Source

Patch Changes

Updated dependencies []:
- @tanstack/query-core@5.102.3

`v5.102.2`

Compare Source

Patch Changes

Updated dependencies [80fbf73]:
- @tanstack/query-core@5.102.2

`v5.102.1`

Compare Source

Patch Changes

Updated dependencies [134890d]:
- @tanstack/query-core@5.102.1

TanStack/query (@tanstack/react-query-devtools)

TanStack/router (@tanstack/react-router)

`v1.170.32`

Compare Source

Patch Changes

#8130 cb281d7 - preserve context during reloads
Updated dependencies [fa65287, cb281d7]:
- @tanstack/router-core@1.171.27

TanStack/router (@tanstack/router-plugin)

`v1.168.35`

Compare Source

Patch Changes

Updated dependencies [fa65287, cb281d7]:
- @tanstack/router-core@1.171.27
- @tanstack/react-router@1.170.32
- @tanstack/router-generator@1.167.33

testing-library/react-testing-library (@testing-library/react)

`v16.3.3`

Compare Source

Bug Fixes

Avoid act() re-entrant when dispatching events (#1468) (20ce75f)

nodeca/js-yaml (js-yaml)

`v4.3.2`

Compare Source

Configuration

📅 Schedule: (in timezone Australia/Melbourne)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2026-08-26T00:03:47Z

✅ Deploy Preview for climate-ref ready!

Name	Link
🔨 Latest commit	`56b059e`
🔍 Latest deploy log	https://app.netlify.com/projects/climate-ref/deploys/6a92a21e4adcfb0008741896
😎 Deploy Preview	https://deploy-preview-67--climate-ref.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

renovate · 2026-08-29T22:26:07Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: frontend/package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm. See `npm help npmrc` for supported config options.
npm error code EOVERRIDE
npm error Override for js-yaml@4.3.2 conflicts with direct dependency
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-08-30T20_52_07_173Z-debug-0.log

renovate Bot added dependencies frontend labels Aug 26, 2026

renovate Bot force-pushed the renovate/frontend-non-major branch from 171306f to 140bcd3 Compare August 26, 2026 15:49

renovate Bot changed the title ~~chore(deps): update frontend non-major to v1.170.32~~ chore(deps): update frontend non-major Aug 26, 2026

renovate Bot force-pushed the renovate/frontend-non-major branch 4 times, most recently from 439f4ee to c322130 Compare August 28, 2026 23:09

chore(deps): update frontend non-major

56b059e

renovate Bot force-pushed the renovate/frontend-non-major branch from c322130 to 56b059e Compare August 29, 2026 09:10

Navigation Menu

Uh oh!

chore(deps): update frontend non-major - #67

chore(deps): update frontend non-major#67
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/frontend-non-major

renovate Bot commented Aug 26, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Aug 26, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Aug 29, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Important Changes

Other Changes

Bundle size 📦

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Patch Changes

Bug Fixes

Configuration

Uh oh!

netlify Bot commented Aug 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for climate-ref ready!

Uh oh!

renovate Bot commented Aug 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: frontend/package-lock.json

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Aug 26, 2026 •

edited

Loading

netlify Bot commented Aug 26, 2026 •

edited

Loading

renovate Bot commented Aug 29, 2026 •

edited

Loading