Skip to content

Bump @biomejs/biome from 1.9.4 to 2.4.9#382

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/biomejs/biome-2.4.9
Closed

Bump @biomejs/biome from 1.9.4 to 2.4.9#382
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/biomejs/biome-2.4.9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps @biomejs/biome from 1.9.4 to 2.4.9.

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.9

2.4.9

Patch Changes

  • #9315 085d324 Thanks @​ematipico! - Added a new nursery CSS rule noDuplicateSelectors, that disallows duplicate selector lists within the same at-rule context.

    For example, the following snippet triggers the rule because the second selector and the first selector are the same:

    /* First selector */
    .x .y .z {
    }
    /* Second selector */
    .x {
    .y {
    .z {
    }
    }
    }

  • #9567 b7ab931 Thanks @​ematipico! - Fixed #7211: useOptionalChain now detects negated logical OR chains. The following code is now considered invalid:

    !foo || !foo.bar;
  • #8670 607ebf9 Thanks @​tt-a1i! - Fixed #8345: useAdjacentOverloadSignatures no longer reports false positives for static and instance methods with the same name. Static methods and instance methods are now treated as separate overload groups.

    class Kek {
      static kek(): number {
        return 0;
      }
      another(): string {
        return "";
      }
      kek(): number {
        return 1;
      } // no longer reported as non-adjacent
    }
  • #9476 97b80a8 Thanks @​masterkain! - Fixed [#9475](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9475): Fixed a panic when Biome analyzed ambient TypeScript modules containing class constructor, getter, or setter signatures that reference local type aliases. Biome now handles these declarations without crashing during semantic analysis.

  • #9553 0cd5298 Thanks @​dyc3! - Fixed a bug where enabling the rules of a whole group, would enable rules that belonged to a domain under the same group.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.9

Patch Changes

  • #9315 085d324 Thanks @​ematipico! - Added a new nursery CSS rule noDuplicateSelectors, that disallows duplicate selector lists within the same at-rule context.

    For example, the following snippet triggers the rule because the second selector and the first selector are the same:

    /* First selector */
    .x .y .z {
    }
    /* Second selector */
    .x {
    .y {
    .z {
    }
    }
    }

  • #9567 b7ab931 Thanks @​ematipico! - Fixed #7211: useOptionalChain now detects negated logical OR chains. The following code is now considered invalid:

    !foo || !foo.bar;
  • #8670 607ebf9 Thanks @​tt-a1i! - Fixed #8345: useAdjacentOverloadSignatures no longer reports false positives for static and instance methods with the same name. Static methods and instance methods are now treated as separate overload groups.

    class Kek {
      static kek(): number {
        return 0;
      }
      another(): string {
        return "";
      }
      kek(): number {
        return 1;
      } // no longer reported as non-adjacent
    }
  • #9476 97b80a8 Thanks @​masterkain! - Fixed [#9475](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9475): Fixed a panic when Biome analyzed ambient TypeScript modules containing class constructor, getter, or setter signatures that reference local type aliases. Biome now handles these declarations without crashing during semantic analysis.

  • #9553 0cd5298 Thanks @​dyc3! - Fixed a bug where enabling the rules of a whole group, would enable rules that belonged to a domain under the same group.

    For example, linter.rules.correctness = "error" no longer enables React- or Qwik-specific correctness rules unless linter.domains.react, linter.domains.qwik, or an explicit rule config also enables them, or their relative dependencies are installed.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​biomejs/biome since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 1.9.4 to 2.4.9.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.9/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.9
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 30, 2026
@dependabot dependabot bot requested review from a team, CarlosGamero, drdaemos and kibertoad as code owners March 30, 2026 12:30
@dependabot dependabot bot added major skip-release Do not publish new release labels Mar 30, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 30, 2026

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated development tooling dependencies to latest versions.

Walkthrough

The @biomejs/biome development dependency in package.json was updated from version ^1.9.4 to ^2.4.9. This changes the version of Biome used for linting and code formatting through the existing lint and lint:fix npm scripts. No other dependencies, scripts, or configurations were modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The PR description is mostly complete with release notes and changelog details, but is missing the required template sections (Changes summary and Checklist with labels). Add a brief summary under a 'Changes' section and complete the checklist, including applying a release label (major/minor/patch/skip-release) and confirming documentation and test updates.
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately and directly describes the main change: a dependency version bump of @biomejs/biome from 1.9.4 to 2.4.9.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/biomejs/biome-2.4.9

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Line 65: Update the Biome suppression comments to the v2.4.9 format by
replacing any occurrences of the old pattern "// biome-ignore lint/<rule>:
<explanation>" with the new pattern "// biome-ignore lint: <reason>" in the
specified files: change the suppression in lib/errors/errorHandler.ts (around
the handleError symbol) to use a concise reason, update both suppressions in
lib/jwt-utils/tokenUtils.ts (near generateToken and verifyToken) to use brief
reasons, and adjust the suppression in
lib/plugins/bull-mq-metrics/queueDiscoverers.ts (near discoverQueues) likewise;
ensure each replacement provides a short justification string and then run npm
run lint to verify all suppression errors are resolved before merging.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: lokalise/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: f07e9fae-3481-4d76-b8b0-59652dacdea0

📥 Commits

Reviewing files that changed from the base of the PR and between fd67520 and 0d0b22b.

📒 Files selected for processing (1)
  • package.json

"devDependencies": {
"@amplitude/analytics-types": "^2.10.0",
"@biomejs/biome": "^1.9.4",
"@biomejs/biome": "^2.4.9",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Description: Verify Biome v2.4.9 works correctly with existing configuration and codebase.

echo "=== Checking if biome.json exists and is v2-compatible ==="
if [ -f "biome.json" ]; then
  echo "Found biome.json"
  # Check schema version
  cat biome.json | jq -r '."$schema"'
else
  echo "ERROR: biome.json not found"
fi

echo ""
echo "=== Running lint script (dry-run to check for violations) ==="
npm run lint 2>&1 | head -100

echo ""
echo "=== Checking Biome CLI version after update ==="
npx biome --version

Repository: lokalise/fastify-extras

Length of output: 6720


Update suppression comments to Biome v2.4.9 format—lint script currently fails.

The major version upgrade to Biome v2.4.9 introduces stricter validation of suppression comments. The existing codebase contains suppression comments with <explanation> placeholders, which Biome v2.4.9 rejects as invalid. The npm run lint script fails with multiple suppression errors.

Affected files require the following fix:

  • Replace: // biome-ignore lint/<rule>: <explanation>
  • With: // biome-ignore lint: <reason> (where <reason> is a brief justification)

Files requiring updates:

  • lib/errors/errorHandler.ts:18
  • lib/jwt-utils/tokenUtils.ts:29, :32
  • lib/plugins/bull-mq-metrics/queueDiscoverers.ts:56

Ensure npm run lint completes successfully before merging.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@package.json` at line 65, Update the Biome suppression comments to the v2.4.9
format by replacing any occurrences of the old pattern "// biome-ignore
lint/<rule>: <explanation>" with the new pattern "// biome-ignore lint:
<reason>" in the specified files: change the suppression in
lib/errors/errorHandler.ts (around the handleError symbol) to use a concise
reason, update both suppressions in lib/jwt-utils/tokenUtils.ts (near
generateToken and verifyToken) to use brief reasons, and adjust the suppression
in lib/plugins/bull-mq-metrics/queueDiscoverers.ts (near discoverQueues)
likewise; ensure each replacement provides a short justification string and then
run npm run lint to verify all suppression errors are resolved before merging.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 6, 2026

Superseded by #385.

@dependabot dependabot bot closed this Apr 6, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/biomejs/biome-2.4.9 branch April 6, 2026 11:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

major skip-release Do not publish new release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants