chore(deps): bump the minor-updates group across 1 directory with 10 updates by dependabot[bot] · Pull Request #1345 · yearn/yearn.fi

dependabot · 2026-08-07T10:34:51Z

Bumps the minor-updates group with 10 updates in the / directory:

Package	From	To
@tanstack/react-query	`5.90.21`	`5.101.4`
@tanstack/react-virtual	`3.13.26`	`3.14.9`
@upstash/redis	`1.37.0`	`1.38.0`
framer-motion	`12.34.0`	`12.43.0`
viem	`2.46.1`	`2.55.10`
zod	`4.3.6`	`4.4.3`
@biomejs/biome	`2.4.16`	`2.5.6`
@tailwindcss/postcss	`4.1.18`	`4.3.3`
playwright	`1.61.0`	`1.62.1`
tailwindcss	`4.1.18`	`4.3.3`

Updates @tanstack/react-query from 5.90.21 to 5.101.4

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.101.4

@tanstack/react-query@5.101.4

@tanstack/react-query-next-experimental@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.4

@tanstack/react-query-persist-client@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.4

@tanstack/react-query@5.101.4

@tanstack/react-query@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.4

@tanstack/react-query-devtools@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.101.3

@tanstack/react-query@5.101.3

@tanstack/react-query-next-experimental@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.3

@tanstack/react-query-persist-client@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.3

@tanstack/react-query@5.101.3

@tanstack/react-query@5.101.3

Patch Changes

Updated dependencies [7e3c822]:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.4

5.101.3

Patch Changes

Updated dependencies [7e3c822]:

@tanstack/query-core@5.101.3

5.101.2

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.2

5.101.1

Patch Changes

Updated dependencies [9eff92e]:

@tanstack/query-core@5.101.1

5.101.0

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.0

5.100.14

Patch Changes

fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

Updated dependencies []:

@tanstack/query-core@5.100.14

5.100.13

Patch Changes

Updated dependencies [d423168]:

@tanstack/query-core@5.100.13

... (truncated)

Commits

86bb8a6 ci: Version Packages (#11094)
181ea82 ci: Version Packages (#11089)
6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.13.26 to 3.14.9

Release notes

Sourced from @tanstack/react-virtual's releases.

@tanstack/react-virtual@3.14.9

Patch Changes

Updated dependencies [a5417b4]:

@tanstack/virtual-core@3.17.7

@tanstack/react-virtual@3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

@tanstack/react-virtual@3.14.7

Patch Changes

Updated dependencies [1e3b908, 7dcfc07]:

@tanstack/virtual-core@3.17.5

@tanstack/react-virtual@3.14.6

Patch Changes

Updated dependencies [6cbecd8, d49cc52, cf7834d]:

@tanstack/virtual-core@3.17.4

@tanstack/react-virtual@3.14.5

Patch Changes

Updated dependencies [767ead4, bc8643b]:

@tanstack/virtual-core@3.17.3

@tanstack/react-virtual@3.14.4

Patch Changes

Updated dependencies [b04f9ee, 37be284]:

@tanstack/virtual-core@3.17.2

@tanstack/react-virtual@3.14.3

Patch Changes

#1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

Updated dependencies [ef69ea3]:

@tanstack/virtual-core@3.17.1

@tanstack/react-virtual@3.14.2

Patch Changes

Updated dependencies [c0b84c8, fbf3bdb]:

... (truncated)

Changelog

Sourced from @tanstack/react-virtual's changelog.

3.14.9

Patch Changes

Updated dependencies [a5417b4]:

@tanstack/virtual-core@3.17.7

3.14.8

Patch Changes

#1237 aa536e7 - Fix a gap at the top of the list after an end-anchored prepend in directDomUpdates mode. The prepend grows the total size and bumps scrollOffset to the new bottom in the same pass, but the size container's height was written after _willUpdate synced the scroll position — so the browser clamped the scrollTop write to the stale (shorter) scrollHeight, leaving whitespace at the top until the next scroll. The container is now grown before the scroll sync. Only affected directDomUpdates mode (React-rendered sizers receive their height during render).

Updated dependencies [7ae32b5]:

@tanstack/virtual-core@3.17.6

3.14.7

Patch Changes

Updated dependencies [1e3b908, 7dcfc07]:

@tanstack/virtual-core@3.17.5

3.14.6

Patch Changes

Updated dependencies [6cbecd8, d49cc52, cf7834d]:

@tanstack/virtual-core@3.17.4

3.14.5

Patch Changes

Updated dependencies [767ead4, bc8643b]:

@tanstack/virtual-core@3.17.3

3.14.4

Patch Changes

Updated dependencies [b04f9ee, 37be284]:

@tanstack/virtual-core@3.17.2

3.14.3

Patch Changes

#1201 2ba5eb6 - Make directDomUpdates a no-op for direct DOM writes when containerRef is omitted. Previously the virtualizer still wrote item positions while never sizing the container (a broken half-state). Now omitting containerRef skips all direct writes while still skipping re-renders, letting consumers own the DOM updates themselves (e.g. in onChange).

... (truncated)

Commits

b4a76ca fix(marko-virtual): consolidate Marko e2e into one in-package app, fix test (...
deca524 ci: Version Packages (#1240)
32b2f2b ci: Version Packages (#1238)
aa536e7 fix(react-virtual): grow size container before scroll sync on end-anchored pr...
87f689a ci: Version Packages (#1231)
ba5c47a feat(angular-virtual): add chat example and require Angular 20 (#1228)
e2cb096 ci: Version Packages (#1225)
d49cc52 fix(virtual-core): invalidate measurements when gap option changes (#1223)
151e9f4 ci: Version Packages (#1213)
d73a538 ci: Version Packages (#1210)
Additional commits viewable in compare view

Updates @upstash/redis from 1.37.0 to 1.38.0

Release notes

Sourced from @upstash/redis's releases.

@upstash/redis@1.38.0

Minor Changes

c71f581: Separate read/write commands into separate pipelines in auto pipeline. As a result, mixed read/write Promise.all batches may now be split across multiple pipeline HTTP requests instead of a single request, and read-after-write ordering may no longer be preserved within those mixed batches.

@upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

What's Changed

DX-2506: add redis search into skills by @CahidArda in upstash/redis-js#1427

fix: rename redis search analytics demo by @CahidArda in upstash/redis-js#1428

DX-2555: add supply chain security settings by @CahidArda in upstash/redis-js#1429

fix: add version sync to ci by @alitariksahin in upstash/redis-js#1430

Full Changelog: https://github.com/upstash/redis-js/compare/@upstash/redis@1.37.0...@upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

Commits

7607549 chore: version packages (#1433)
c71f581 DX-2577: Seperate read/write commands into seperate pipelines in auto pipelin...
e3a23ab fix: add version sync to ci (#1430)
12e9a9e DX-2555: add supply chain security settings (#1429)
f59fa75 fix: docs link
c88b8e5 fix: rename redis search analytics demo (#1428)
5d8abc1 feat: add redis search into skills (#1427)
See full diff in compare view

Updates framer-motion from 12.34.0 to 12.43.0

Changelog

Sourced from framer-motion's changelog.

[12.43.0] 2026-07-27

Added

Hardware acceleration for backgroundColor in supported browsers.

Hardware acceleration for SVG elements.

Fixed

AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.

motion: Throw error when passing a custom motion component an incorrect ref type.

[12.42.2] 2026-07-01

Fixed

animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

animateView: Old layer fade out now cancelled when defining .new().

[12.42.0] 2026-06-24

Changed

animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.

animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

animateView: Moves from Motion+ Early Access and alpha to main library.

animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.

animateView: .new() and .old() configures values to animate on new and old layers.

animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.

animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.

animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

AnimatePresence: Prevent stuck exit animations when children interrupt.

drag: Child e.stopPropagation() no longer break drag end.

... (truncated)

Commits

a4ef40a v12.43.0
14f2d28 adding svg acceleration
1f5a27b Fixing merge
79f0353 Updating changelog
57f179b Updating changelog
695cb39 Merge pull request #3755 from motiondivision/fix-issue-2777
33a1820 Drop the production fallback for non-DOM refs
ebe35f2 Throw an actionable invariant for non-DOM custom component refs
a6ed094 Merge pull request #3754 from motiondivision/fix-3745-popchild-ref-warning
9f251f3 Merge pull request #3763 from motiondivision/advisor/003-color-waapi
Additional commits viewable in compare view

Updates viem from 2.46.1 to 2.55.10

Release notes

Sourced from viem's releases.

viem@2.55.10

Patch Changes

#4873 ccdf9a02c14d569bfde9cd1840bea59548f798cf Thanks @decofe! - Added Addresses.validatorV2 for the Tempo Validator Config V2 precompile.

#4856 109ef0f8af627131dfb055e99bf43ec06625199a Thanks @ibruno! - Updated Polygon Amoy's deprecated default RPC URL.

#4900 3b78e9b78f8052da0ed20be6264c35e39e7f62f9 Thanks @cristianizzo! - Fixed formatUserOperationRequest encoding an EIP-7702 authorization yParity of 0 as a 32-byte zero value instead of 0x00.

#4846 0e6c671284aa9530142ccb3b17f697807b423890 Thanks @m4ttw4n! - Updated EDU Chain and EDU Chain Testnet RPC URLs, block explorer URLs, and added multicall3 contract to EDU Chain mainnet

#4861 31f47493a18f9699d0c2d3d78ad09204a870c8fd Thanks @wriches! - Updated 0G Testnet native currency to 0G and 0G explorer names, per ethereum-lists/chains.

#4862 e5a4ac4e96859f3aaad1eab8dde67ef584917b22 Thanks @Kropiunig! - Fixed estimateFeesPerGas (and fillTransaction) rounding the base fee multiplier up via Math.ceil, which overshot the intended value for multipliers such as 1.09 (applied as 1.1) due to floating-point error. The multiplier is now recovered with Math.round.

#4903 a20fc674487d32640c1ea5b1422e2fddc53f7723 Thanks @nishant-uxs! - Fixed missing {"type":"module"} marker in the emitted _types/ folder so declaration files resolve correctly under TypeScript nodenext.

viem@2.55.8

Patch Changes

#4890 3078687aabea3064fc868f395114f41815895685 Thanks @parvahuja! - viem/tempo: Fixed gas estimation for sponsored access key transactions prepared without gas.

#4891 c067f1a0c540afb54e27864b601064fb1c6e5249 Thanks @jxom! - viem/tempo: Added Zone E metadata, address registries, and Portal and Messenger contracts.

#4891 c067f1a0c540afb54e27864b601064fb1c6e5249 Thanks @jxom! - Breaking(viem/tempo): Removed portalAddresses.

viem@2.55.7

Patch Changes

#4881 34c30a01012e326682a1ef365ee6599b2510e9da Thanks @jxom! - tempo/viem: Added earn actions

#4888 944a011e2edabfc4aa5ed59b8ee201486e0dc74b Thanks @jxom! - Fixed fromBlobs misreading a 0x80 data byte at a blob boundary as the terminator.

#4887 b693174dde06dd322b6f88508fb37231d38b620b Thanks @jxom! - Fixed bytesToBigInt and bytesToNumber (and fromBytes with to: "bigint" | "number") scaling the decoded value when a size larger than the input byte length was provided.

#4880 0095510ba5051931eb89d05c8a9b33b3a65ff356 Thanks @tmm! - Fixed Tempo access key transactions failing by preserving the gas limit covered by fee payer signatures returned from eth_fillTransaction.

#4884 14a2537066f353092d4b6cc77941c018fde8f6c8 Thanks @jxom! - Replaced zone.getZoneInfo.sequencer with sequencers.

viem@2.55.5

Patch Changes

#4865 d993c2c331f4bedb76ecb78250c7858603bbdd62 Thanks @jxom! - Batched compatible concurrent multicall actions into one aggregate call.

#4863 b6f7349221d4d3b51e4094634fa2839b5a448c24 Thanks @jxom! - viem/tempo: Updated multisig implementation.

#4868 cb7d66f966e9eea501b075eeb0f14a7ddd0c35fc Thanks @jsutaria! - Ensured prepareTransactionRequest fetched Tempo fee payer signatures when the caller's parameters option omitted fees/gas.

#4866 5ee7eb12b248a1e72f37196d1fbb25d38283723f Thanks @jsutaria! - Ensured prepareTransactionRequest fetched Tempo fee payer signatures for fully specified transactions.

... (truncated)

Commits

bc95f56 chore: version package (#4906)
109ef0f fix: Replace deprecated Polygon Amoy RPC endpoint (#4856)
a20fc67 fix: emit type module marker in _types package.json (#4903)
e5a4ac4 fix: round base fee multiplier instead of ceiling it in fee estimation (#4862)
0e6c671 Update EDU Chain mainnet and testnet (#4846)
3b78e9b Fix EIP-7702 authorization yParity of 0 serialization (#4900)
ccdf9a0 feat(tempo): export validator V2 address (#4873)
22a68a4 fix: update vulnerable transitive dependencies (#4905)
31f4749 fix: update 0G chain metadata (#4861)
715cead chore(deps): bump actions/setup-node from 4 to 7 (#4842)
Additional commits viewable in compare view

Updates zod from 4.3.6 to 4.4.3

Release notes

Sourced from zod's releases.

v4.4.3

Commits:

4c2fa95ce3f3390fbc522324e406b4e9e89b88f9 docs: use Zernio primary wordmark for gold sponsor logo

2aeec83eb135e3a83756e973ef44845fc5a455d2 docs: prune lapsed gold sponsors and rebalance logo sizing

7391be88ac1ee5cd02057f5ccc012a1f5df4efd0 docs: prune lapsed silver/bronze sponsors and add active ones

2c703322a21b4e2b12f33f49ea8430c451a68b4f docs: normalize bronze sponsor logos to github avatar pattern

9195250cab0e7950efe39c3926d6c203b4b0a170 docs: remove Mintlify from bronze sponsors (churned)

b8dffe9e62f17e6571e6249d05cc5102b54d94e4 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)

1cab69383fcdeae2a366d5e2a2fc4d8fc765d168 fix(v4): restore catch handling for absent object keys (#5937) (#5939)

c2be4f819064eed62c7c350a2d399b5faecd15f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent keys (#5941)

f3c9ec03ba7a28ae72d25cc295f38674bee0f559 4.4.3

1fb56a5c18c27102dbc92260a4007c7732a0ccca docs: document release procedure in AGENTS.md

v4.4.2

Commits:

0c62df0ea19fd05abdf90473e9eef7eea530fab2 Clean up docs navigation and stale labels (#5901)

20cc794895cc8604fe0c87d83a5d1c3f89fad0ac chore: add security policy and refresh tooling deps

6fbe07b0177efdd1bf1c0b05160e70d7a0702337 fix(docs): heading anchor links now include the hash so it doesnt scoll all the way up, follows navbar logic (#5791)

4bbed1b1c73eca4ce9e59b1189ed236aa6c8b5bd Tighten discriminated union option typing

bbac3e567e7fccfaaf7cdc97f1ce30c295e2c908 Update PR guidance for agents

cf0dc942a32805c292fff59ade20a7ace980735a Merge remote-tracking branch 'origin/main' into fix-discriminated-union-key-constraint

292c894a5fd2aa42e527900b83d8d7a3009a709c docs: add Zernio gold sponsor

1fc9f311c28dcf80d0bb5a36b177086cbc3d8eca docs: document codec inversion

1373c85da9aeff704a9762d27bc58699618aefb7 docs: remove AI disclosure guidance

e20d02b473c08e3a4e557bc610b1b5fac079b649 chore: ignore triage notes

e58ea4d91b1dfe8194b73508203213cbc7e9c936 docs: test Zod Mini tab code heights

905761a5d127e8d5dd2ebb3bc88c75cb0b8149ff docs: document preprocess input type narrowing

bf64bac850d4dee2b7dde7e64909d5d796d32043 chore: tighten test guidance in AGENTS.md

8ec4e73f4c4693b6361ad591be40fb41eb8a9f95 chore: update play.ts scratch

02c2baf7d0d615872fa4528a8020603b71211702 Make z.preprocess defer optionality to inner schema (#5929)

88015df8e25c44fb5385eb3ef28935119cd5edea fix(docs): drop deprecated baseUrl from tsconfig

c59d4474e3b4cad1b323462186cf607178ce8267 4.4.2

v4.4.1

Commits:

481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow

95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations

cede2c63739a5823d6aa5093d291e9a111da943d fix(v4): reject tuple holes before required defaults (#5900)

edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7 release: 4.4.1

180d83d1dbe6a59260710cc8637a3dea2281ee56 docs: remove Jazz featured sponsor

v4.4.0

4.4.0

This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.

Potentially breaking bug fixes

... (truncated)

Commits

1fb56a5 docs: document release procedure in AGENTS.md
f3c9ec0 4.4.3
c2be4f8 fix(v4): generalize optin/fallback to transform; restore preprocess on absent...
1cab693 fix(v4): restore catch handling for absent object keys (#5937) (#5939)
b8dffe9 docs: remove Numeric and Speakeasy (2+ missed monthly cycles)
9195250 docs: remove Mintlify from bronze sponsors (churned)
2c70332 docs: normalize bronze sponsor logos to github avatar pattern
7391be8 docs: prune lapsed silver/bronze sponsors and add active ones
2aeec83 docs: prune lapsed gold sponsors and rebalance logo sizing
4c2fa95 docs: use Zernio primary wordmark for gold sponsor logo
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.

Updates @biomejs/biome from 2.4.16 to 2.5.6

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.6

2.5.6

Patch Changes
#11035 0e4b03b Thanks @ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.
#11043 22ec076 Thanks @denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:
 .example {
   value: outer(
     1,
     /* comment */
     nested(
-      first,
-      second
-    )
+        first,
+        second
+      )
   );
 }
#11007 c9acb25 Thanks @BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

#10152 50a9bd8 Thanks @Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

#11105 8ffe2b9 Thanks @dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

#10533 5809875 Thanks @Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

#11040 0abb620 Thanks @Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

#10858 6d18204 Thanks @ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.
#11009 2c36626 Thanks @ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

The following statements are now reported:
type AsyncCallback = () => Promise<void>;
declare const callback: AsyncCallback;
callback();
[1, 2, 3].map(async (value) => value);

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.6

Patch Changes
#11035 0e4b03b Thanks @ematipico! - Fixed a performance regression in noMisusedPromises that caused type inference to run repeatedly while linting a file.
#11043 22ec076 Thanks @denbezrukov! - Fixed CSS formatting for multiline function arguments preceded by comments:
 .example {
   value: outer(
     1,
     /* comment */
     nested(
-      first,
-      second
-    )
+        first,
+        second
+      )
   );
 }
#11007 c9acb25 Thanks @BTF-Kabir-2020! - Fixed #9195: useHookAtTopLevel no longer reports hooks in named forwardRef components that receive a ref parameter.

#10152 50a9bd8 Thanks @Zelys-DFKH! - Fixed #10131: Biome now correctly parses curried arrow functions in ternary consequents when the inner arrow's parameters use a destructuring pattern, e.g. cond ? (x) => ({ a, b }) => body : alt.

#11105 8ffe2b9 Thanks @dadavidtseng! - Fixed #11092: The noUselessTernary quick fix now preserves operator spacing when simplifying or inverting boolean ternary expressions.

#10533 5809875 Thanks @Mokto! - Fixed #10515: biome check --write was not idempotent on Svelte files — multi-line template literals in <script> blocks and block comments in <style> blocks gained an extra indent level on every run.

#11040 0abb620 Thanks @Mokto! - Fixed an issue where the HTML formatter would duplicate a comment placed directly before a Svelte {@const ...} or {@debug ...} block. The duplication compounded on every subsequent --write, causing the file to grow exponentially.

#10858 6d18204 Thanks @ruidosujeira! - Fixed #10839: Svelte {#each} array destructuring no longer includes spaces inside square brackets, and multiline bind function expressions now indent their getter, setter, and function body correctly.
#11009 2c36626 Thanks @ematipico! - Improved the accuracy of type-aware lint rules by resolving more inferred types. For example, noFloatingPromises now detects floating Promises returned by aliased callbacks and arrays of Promises created by async mapping callbacks.

The following statements are now reported:
type AsyncCallback = () => Promise<void>;
declare const callback: AsyncCallback;
callback();
[1, 2, 3].map(async (value) => value);
#10973 9cb044c Thanks @ematipico! - Fixed false positives in noMisleadingReturnType when generic-constraint, normalization, substitution, or structural return-type comparison cannot complete. The rule now suppresses diagnostics rather than suggesting a return type derived from partial information. For example, this unresolved return type is no longer reported:

... (truncated)

Commits

1139f1c ci: release (#11022)
781d68d feat(lint/js): add noRestrictedProperties (#9806)
412a0e9 ci: release (#10948)
b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
9a66bc7 chore: add latitude to sponsors (#10947)
bfc3f3d ci: release (#10887)
9e1999f chore: revert the revert
0b0fd8d chore: revert
0afa35a ci: release (#10817)
3447b2f feat(useDomQuerySelector): add ignore option (#10835)
Additional commits viewable in compare view

Updates @tailwindcss/postcss from 4.1.18 to 4.3.3

Release notes

Sourced from @tailwindcss/postcss's releases.

v4.3.3

Fixed

Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)

Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)

Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)

Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)

Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)

Parse selectors like [data-foo]div as two selectors instead of one (#20303)

Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)

Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)

Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)

Ensure --spacing(0) is optimized to <...
Description has been truncated

…updates Bumps the minor-updates group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.101.4` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.26` | `3.14.9` | | [@upstash/redis](https://github.com/upstash/redis-js) | `1.37.0` | `1.38.0` | | [framer-motion](https://github.com/motiondivision/motion) | `12.34.0` | `12.43.0` | | [viem](https://github.com/wevm/viem) | `2.46.1` | `2.55.10` | | [zod](https://github.com/colinhacks/zod) | `4.3.6` | `4.4.3` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.16` | `2.5.6` | | [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.1.18` | `4.3.3` | | [playwright](https://github.com/microsoft/playwright) | `1.61.0` | `1.62.1` | | [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.3.3` | Updates `@tanstack/react-query` from 5.90.21 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `@tanstack/react-virtual` from 3.13.26 to 3.14.9 - [Release notes](https://github.com/TanStack/virtual/releases) - [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md) - [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.9/packages/react-virtual) Updates `@upstash/redis` from 1.37.0 to 1.38.0 - [Release notes](https://github.com/upstash/redis-js/releases) - [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.37.0...@upstash/redis@1.38.0) Updates `framer-motion` from 12.34.0 to 12.43.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.34.0...v12.43.0) Updates `viem` from 2.46.1 to 2.55.10 - [Release notes](https://github.com/wevm/viem/releases) - [Commits](https://github.com/wevm/viem/compare/viem@2.46.1...viem@2.55.10) Updates `zod` from 4.3.6 to 4.4.3 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.6...v4.4.3) Updates `@biomejs/biome` from 2.4.16 to 2.5.6 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.6/packages/@biomejs/biome) Updates `@tailwindcss/postcss` from 4.1.18 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss) Updates `playwright` from 1.61.0 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.0...v1.62.1) Updates `tailwindcss` from 4.1.18 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: "@tanstack/react-virtual" dependency-version: 3.14.9 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: "@upstash/redis" dependency-version: 1.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: framer-motion dependency-version: 12.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: viem dependency-version: 2.55.10 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: zod dependency-version: 4.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: "@biomejs/biome" dependency-version: 2.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: "@tailwindcss/postcss" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: playwright dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-updates ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-08-07T10:34:55Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
yearnfi	Ready	Preview	Aug 7, 2026 10:36am

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
yearnfi-nextjs	Ignored	Preview	Aug 7, 2026 10:36am
yearnfi-nextjs-2	Ignored	Preview	Aug 7, 2026 10:36am

github-actions · 2026-08-07T10:35:03Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/@biomejs/biome

2.5.6

Unknown

npm/@tailwindcss/postcss

4.3.3

🟢 6.5

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 4/24 approved changesets -- score normalized to 1
Maintained	🟢 10	30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Security-Policy	⚠️ 0	security policy file not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Fuzzing	🟢 10	project is fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@tanstack/react-query

5.101.4

Unknown

npm/@tanstack/react-virtual

3.14.9

Unknown

npm/@upstash/redis

1.38.0

Unknown

npm/framer-motion

12.43.0

Unknown

npm/playwright

1.62.1

🟢 6.5

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) out of 30 and 6 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review	🟢 9	GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	no published package detected
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 6	binaries present in source code
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches

npm/tailwindcss

4.3.3

🟢 6.5

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 4/24 approved changesets -- score normalized to 1
Maintained	🟢 10	30 commit(s) and 22 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 10	GitHub workflow tokens follow principle of least privilege
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Security-Policy	⚠️ 0	security policy file not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
Fuzzing	🟢 10	project is fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/viem

2.55.10

Unknown

npm/zod

4.4.3

🟢 4.4

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 3/30 approved changesets -- score normalized to 1
Security-Policy	🟢 10	security policy file detected
Maintained	🟢 4	5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

package.json

socket-security · 2026-08-07T10:35:37Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
@tanstack/react-virtual@3.14.9
playwright@1.61.0 ⏵ 1.62.1	⁺¹	⁺¹
tailwindcss@4.1.18 ⏵ 4.3.3	⁺¹	⁺¹
@tanstack/react-query@5.90.21 ⏵ 5.101.4	⁺¹	⁺¹
zod@4.4.3
framer-motion@12.34.0 ⏵ 12.43.0		⁺¹
viem@2.55.10
@tailwindcss/postcss@4.1.18 ⏵ 4.3.3	⁺¹	⁺¹
@upstash/redis@1.37.0 ⏵ 1.38.0	⁺¹
@biomejs/biome@2.4.16 ⏵ 2.5.6	⁺¹	⁺¹

View full report

dependabot · 2026-08-07T17:44:56Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026

vercel Bot deployed to Preview – yearnfi August 7, 2026 10:36 View deployment

rossgalloway closed this Aug 7, 2026

dependabot Bot deleted the dependabot/bun/minor-updates-a8ad2fde20 branch August 7, 2026 17:45

Navigation Menu

Uh oh!

chore(deps): bump the minor-updates group across 1 directory with 10 updates - #1345

chore(deps): bump the minor-updates group across 1 directory with 10 updates#1345
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/minor-updates-a8ad2fde20

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

vercel Bot commented Aug 7, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 7, 2026

Uh oh!

socket-security Bot commented Aug 7, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 7, 2026

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

@​tanstack/react-query@​5.101.4

Patch Changes

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

@​tanstack/react-query@​5.101.3

Patch Changes

5.101.4

Patch Changes

5.101.3

Patch Changes

5.101.2

Patch Changes

5.101.1

Patch Changes

5.101.0

Patch Changes

5.100.14

Patch Changes

5.100.13

Patch Changes

@​tanstack/react-virtual@​3.14.9

Patch Changes

@​tanstack/react-virtual@​3.14.8

Patch Changes

@​tanstack/react-virtual@​3.14.7

Patch Changes

@​tanstack/react-virtual@​3.14.6

Patch Changes

@​tanstack/react-virtual@​3.14.5

Patch Changes

@​tanstack/react-virtual@​3.14.4

Patch Changes

@​tanstack/react-virtual@​3.14.3

Patch Changes

@​tanstack/react-virtual@​3.14.2

Patch Changes

3.14.9

Patch Changes

3.14.8

Patch Changes

3.14.7

Patch Changes

3.14.6

Patch Changes

3.14.5

Patch Changes

3.14.4

Patch Changes

3.14.3

Patch Changes

@​upstash/redis@​1.38.0

Minor Changes

@upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

What's Changed

[12.43.0] 2026-07-27

Added

Fixed

[12.42.2] 2026-07-01

Fixed

[12.42.1] 2026-06-30

Fixed

[12.42.0] 2026-06-24

Changed

Fixed

[12.41.0] 2026-06-23

Added

Fixed

`@tanstack/react-query-devtools@5`.101.4

`@tanstack/react-query-next-experimental@5`.101.4

`@tanstack/react-query-persist-client@5`.101.4

`@tanstack/react-query@5`.101.4

`@tanstack/react-query-devtools@5`.101.3

`@tanstack/react-query-next-experimental@5`.101.3

`@tanstack/react-query-persist-client@5`.101.3

`@tanstack/react-query@5`.101.3

`@tanstack/react-virtual@3`.14.9

`@tanstack/react-virtual@3`.14.8

`@tanstack/react-virtual@3`.14.7

`@tanstack/react-virtual@3`.14.6

`@tanstack/react-virtual@3`.14.5

`@tanstack/react-virtual@3`.14.4

`@tanstack/react-virtual@3`.14.3

`@tanstack/react-virtual@3`.14.2

`@upstash/redis@1`.38.0

vercel Bot commented Aug 7, 2026 •

edited

Loading