chore(deps): bump the minor-and-patch group across 1 directory with 4 updates by dependabot[bot] · Pull Request #458 · databuddy-analytics/Databuddy

dependabot · 2026-05-20T08:54:57Z

Bumps the minor-and-patch group with 4 updates in the / directory: @biomejs/biome, @opentelemetry/sdk-node, @json-render/react and @tanstack/react-pacer.

Updates @biomejs/biome from 2.4.13 to 2.4.15

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.15

2.4.15

Patch Changes
#9394 ba3480e Thanks @dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.
#10254 e0a54cc Thanks @dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

For example, the following snippet triggers the rule:
import { nextTick } from "vue";
nextTick(() => {
updateDom();
});
#10219 64aee45 Thanks @dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

For example, the following snippet triggers the rule:
<input @keyup.13="submit" />
#10195 7b8d4e1 Thanks @dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

#10238 1110256 Thanks @dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

#10201 1a08f89 Thanks @realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

#9574 3bd2b6a Thanks @Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.
#10205 a704a6c Thanks @Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.
{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.15

Patch Changes
#9394 ba3480e Thanks @dyc3! - Added the nursery rule useTestHooksInOrder in the test domain. The rule enforces that Jest/Vitest lifecycle hooks (beforeAll, beforeEach, afterEach, afterAll) are declared in the order they execute, making test setup and teardown easier to reason about.
#10254 e0a54cc Thanks @dyc3! - Added a new nursery rule useVueNextTickPromise, which enforces Promise syntax when using Vue nextTick.

For example, the following snippet triggers the rule:
import { nextTick } from "vue";
nextTick(() => {
updateDom();
});
#10219 64aee45 Thanks @dyc3! - Added a new nursery rule noVueVOnNumberValues, that disallows deprecated number modifiers on Vue v-on directives.

For example, the following snippet triggers the rule:
<input @keyup.13="submit" />
#10195 7b8d4e1 Thanks @dyc3! - Added the new nursery rule useVueValidVFor, which validates Vue v-for directives and reports invalid aliases, missing component keys, and keys that do not use iteration variables.

#10238 1110256 Thanks @dyc3! - Added the recommended nursery rule noVueImportCompilerMacros, which disallows importing Vue compiler macros such as defineProps from vue because they are automatically available.

#10201 1a08f89 Thanks @realknove! - Fixed #10193: style/useReadonlyClassProperties no longer reports class properties as readonly-able when they are assigned inside arrow callbacks nested in class property initializers.

#9574 3bd2b6a Thanks @Conaclos! - Fixed #9530. The diagnostics of organizeImports are now more detailed and more precise. They are also better at localizing where the issue is.
#10205 a704a6c Thanks @Conaclos! - Fixed #10185. `organizeImports now errors when it encounters an unknown predefined group.

The following configuration is now reported as invalid because :INEXISTENT: is an unknown predefined group.
{
  "assist": {
    "actions": {
      "source": {
        "organizeImports": { "options": { "groups": [":INEXISTENT:"] } }
      }
    }
  }
}

... (truncated)

Commits

9dd3271 ci: release (#10210)
7b8d4e1 feat(lint/html/vue): add useVueValidVFor (#10195)
ba3480e feat(lint/js): add useTestHooksInOrder (#9394)
e0a54cc feat(lint/js/vue): add useVueNextTickPromise (#10254)
1110256 feat(lint/vue): add noVueImportCompilerMacros (#10238)
7f7419c fix: grammar in extends docstring (#10263)
0ae5840 feat(lint/js): add useThisForClassMethods (#9807)
83f7385 feat(lint/js): add noBaseToString (#9838)
64aee45 feat(lint/html/vue): add noVueVOnNumberValues (#10219)
46393e0 ci: release (#10100)
Additional commits viewable in compare view

Updates @opentelemetry/sdk-node from 0.215.0 to 0.218.0

Release notes

Sourced from @opentelemetry/sdk-node's releases.

experimental/v0.218.0

0.218.0

🚀 Features

feat(otlp-transformer): replace protobufjs metrics serialization with custom implementation #6625 @pichlermarc

feat(configuration): show all config validation errors, if there are multiple #6683 @trentm

feat(sdk-node): allow startNodeSDK() without an arg #6688 @trentm

🏠 Internal

refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions #6691 @david-luna

refactor(sdk-logs): use Logger.enabled() within Logger.emit() implementation #6680 @david-luna

experimental/v0.217.0

0.217.0

🚀 Features

feat(otlp-transformer): replace protobufjs trace serialization with custom implementation #6625 @pichlermarc

feat(configuration): auto-generate TypeScript types from OTel declarative config JSON schema (stable v1.0.0) using json-schema-to-typescript and ajv #6533 @MikeGoldsmith

feat(configuration, sdk-node): startNodeSDK() code path now uses log_level configuration to setup a DiagConsoleLogger #6668 @trentm

Note that allowed values for log_level in a configuration YAML file are not the same set as for OTEL_LOG_LEVEL. Use log_level: trace to see all logs (equivalent of OTEL_LOG_LEVEL=ALL). Use log_level: fatal to effectively disable the SDK's internal diagnostic logger (equivalent of OTEL_LOG_LEVEL=NONE).

If log_level is not specified, a diagnostic console logger at "info" level will be setup.

An invalid YAML config file will now result in a noop OTel SDK.

🐛 Bug Fixes

fix(configuration): do not validate OTEL_CONFIG_FILE value before using it for file config #6643 @trentm

fix(configuration): improve how 'additionalProperties' in JSON schema is translated to TS types #6650 @trentm

fix(configuration): remove stripMinItems and preprocessNullArrays from validation/parsing #6657 @trentm

fix(configuration): improve handling of enums in generated types #6659 @trentm

fix(configuration): improve the technique for removing '| null' on types the JSON Schema #6662 @trentm

fix(sampler-jaeger-remote): add missing axios dep #6656 @trentm

fix(exporter-prometheus): handle malformed URLs in Prometheus exporter request handler #6674 @homanp

experimental/v0.216.0

0.216.0

🚀 Features

feat(sdk-node): wire attribute_keys from declarative configuration to ViewOptions.attributesProcessors #6427 @ravitheja4531-cell

feat(sdk-node): set TracerProvider in startNodeSDK() #6607 @maryliag

🐛 Bug Fixes

fix(instrumentation-xml-http-request): avoid unwrapping XMLHttpRequest API when disabling #6611 @david-luna

fix(instrumentation-fetch): tolerate non-writable globalThis.fetch and fix premature _isEnabled / _isFetchPatched flips in enable() @brunorodmoreira

... (truncated)

Commits

06ad0ea chore: prepare next release (#6703)
38ca257 feat(otlp-transformer): replace protobufjs metrics serialization with custom ...
013c600 chore: prepare next release (#6699)
b7a0c63 feat(semantic-conventions): update semantic conventions to v1.41.1 (#6695)
774143b chore(renovate): add minimumReleaseAge to config (#6697)
e0dafe0 fix(otlp-exporter-base): remove brackets from IPv6 hostname in HTTP transport...
f804c93 chore(deps): update github/codeql-action digest to 68bde55 (#6682)
95e48e7 refactor(sdk-logs): alias LoggerProviderConfig to LoggerProviderOptions (...
907b627 feat(sdk-node): allow startNodeSDK() without an arg (#6688)
0d15261 docs: Add SIG meeting info and welcoming language (#6689)
Additional commits viewable in compare view

Updates @json-render/react from 0.18.0 to 0.19.0

Changelog

Sourced from @json-render/react's changelog.

0.19.0

New Features

Custom directives API — @json-render/core now supports custom directives via defineDirective, letting you declare new JSON shapes (like $format, $math) that resolve to computed values at render time. Directives compose naturally — nest $format over $math over $state and they resolve inside-out. All four renderers (React, Vue, Svelte, Solid) have built-in directive resolution (#279)

@json-render/directives — New package shipping seven ready-made directives: $format (date, currency, number, percent via Intl), $math (add, subtract, multiply, divide, mod, min, max, round, floor, ceil, abs), $concat, $count, $truncate, $pluralize, and $join. Also exports createI18nDirective for $t translation keys with {{param}} interpolation, and standardDirectives for one-line registration (#279)

Improvements

Example READMEs — Added documentation to the chat, dashboard, game-engine, and no-ai examples (#277)

Contributors

@ctate

Commits

838ee7b prepare v0.19.0 (#282)
714c38f feat: add custom directives API and @json-render/directives package (#279)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @json-render/react since your current version.

Updates @tanstack/react-pacer from 0.22.0 to 0.22.1

Release notes

Sourced from @tanstack/react-pacer's releases.

@tanstack/react-pacer@0.22.1

Patch Changes

Allow standalone devtools panels to render without required TanStack Devtools props. (#216)

Updated dependencies [47d02e2]:

@tanstack/pacer@0.21.1

Changelog

Sourced from @tanstack/react-pacer's changelog.

0.22.1

Patch Changes

Allow standalone devtools panels to render without required TanStack Devtools props. (#216)

Updated dependencies [47d02e2]:

@tanstack/pacer@0.21.1

Commits

a894009 ci: Version Packages (#217)
47d02e2 chore: dep upgrades (#216)
d3e3e27 chore(deps): update all non-major dependencies (#210)
8428657 chore(deps): update all non-major dependencies (#204)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Update minor and patch dependencies across API, Dashboard, and Docs to pick up fixes and small features. No app code changes.

Dependencies
- @opentelemetry/sdk-node → 0.218.0: better config validation, custom OTLP serialization, startNodeSDK() can run without args.
- @json-render/react → 0.19.0: adds custom directives API; optional @json-render/directives package.
- @tanstack/react-pacer → 0.22.1: devtools panels can render standalone without required props.
- @biomejs/biome → 2.4.15: linter rule updates and fixes.

^{Written for commit c21c935. Summary will update on new commits. Review in cubic}

… updates Bumps the minor-and-patch group with 4 updates in the / directory: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@opentelemetry/sdk-node](https://github.com/open-telemetry/opentelemetry-js), [@json-render/react](https://github.com/vercel-labs/json-render/tree/HEAD/packages/react) and [@tanstack/react-pacer](https://github.com/TanStack/pacer/tree/HEAD/packages/react-pacer). Updates `@biomejs/biome` from 2.4.13 to 2.4.15 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome) Updates `@opentelemetry/sdk-node` from 0.215.0 to 0.218.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-js/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-js/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-js@experimental/v0.215.0...experimental/v0.218.0) Updates `@json-render/react` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/vercel-labs/json-render/releases) - [Changelog](https://github.com/vercel-labs/json-render/blob/main/CHANGELOG.md) - [Commits](https://github.com/vercel-labs/json-render/commits/v0.19.0/packages/react) Updates `@tanstack/react-pacer` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/TanStack/pacer/releases) - [Changelog](https://github.com/TanStack/pacer/blob/main/packages/react-pacer/CHANGELOG.md) - [Commits](https://github.com/TanStack/pacer/commits/@tanstack/react-pacer@0.22.1/packages/react-pacer) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@opentelemetry/sdk-node" dependency-version: 0.218.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@json-render/react" dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@tanstack/react-pacer" dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2026-05-20T08:55:04Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dashboard	Ready	Preview, Comment	May 20, 2026 8:56am
databuddy-status	Ready	Preview, Comment	May 20, 2026 8:56am
documentation	Ready	Preview, Comment	May 20, 2026 8:56am

unkey-deploy · 2026-05-20T08:55:21Z

The latest updates on your projects. Learn more about Unkey Deploy

Name	Status	Preview	Inspect	Updated (UTC)
api (preview)	Ready	Visit Preview	Inspect	May 20, 2026 8:56am

socket-security · 2026-05-20T08:58:24Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	next@16.2.6
	@radix-ui/react-label@2.1.8
	@radix-ui/react-separator@1.1.8
	@radix-ui/react-aspect-ratio@1.1.8
	@radix-ui/react-toggle@1.1.10
	class-variance-authority@0.7.1
	fumadocs-docgen@2.1.0
	@radix-ui/react-progress@1.1.8
	@radix-ui/react-slot@1.2.4
	@radix-ui/react-avatar@1.1.11
	@radix-ui/react-use-controllable-state@1.2.2
	@types/topojson-client@3.1.5
	@radix-ui/react-switch@1.2.6
	@radix-ui/react-collapsible@1.1.12
	@radix-ui/react-toggle-group@1.1.11
	@radix-ui/react-tabs@1.1.13
	@types/topojson-specification@1.0.5
	@radix-ui/react-hover-card@1.1.15
	@radix-ui/react-checkbox@1.3.3
	@radix-ui/react-radio-group@1.3.8
	@radix-ui/react-dropdown-menu@2.1.16
	@radix-ui/react-alert-dialog@1.1.15
	@radix-ui/react-popover@1.1.15
	@radix-ui/react-context-menu@2.2.16
	@radix-ui/react-accordion@1.2.12
	@radix-ui/react-dialog@1.1.15
	next-validate-link@1.6.6
	@radix-ui/react-menubar@1.1.16
	@radix-ui/react-tooltip@1.2.8
	@radix-ui/react-slider@1.3.6
	fumadocs-mdx@14.3.0
	@types/mdx@2.0.13
	@radix-ui/react-scroll-area@1.2.10
See 42 more rows in the dashboard

View full report

cubic-dev-ai

No issues found across 4 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

Architecture diagram

sequenceDiagram
    participant Dev as Developer CLI
    participant Lint as Biome Linter
    participant Build as Build Pipeline
    participant API as API Service
    participant OTel as OpenTelemetry SDK
    participant Dash as Dashboard App
    participant JSONR as @json-render/react
    participant Pacer as @tanstack/react-pacer

    Note over Dev,Pacer: Dependency update PR - no code changes, only version bumps

    Dev->>Lint: CHANGED: run biome 2.4.15
    Lint->>Lint: Evaluate new nursery rules (useTestHooksInOrder, etc.)
    Lint-->>Dev: Lint results

    Build->>Build: CHANGED: uses updated biome version

    API->>OTel: CHANGED: @opentelemetry/sdk-node 0.218.0
    OTel->>OTel: startNodeSDK() can be called without args
    OTel->>OTel: Config validation shows all errors at once
    OTel->>OTel: Custom protobuf metrics serialization
    OTel-->>API: Telemetry initialized

    Dash->>JSONR: CHANGED: @json-render/react 0.19.0
    JSONR->>JSONR: Custom directives API available (defineDirective, $format, $math, etc.)
    JSONR->>JSONR: Optional @json-render/directives package
    JSONR-->>Dash: Render UI components

    Dash->>Pacer: CHANGED: @tanstack/react-pacer 0.22.1
    Pacer->>Pacer: Devtools panels render standalone without required props
    Pacer-->>Dash: Pacing/rate-limiting functionality

_{Shadow auto-approve: would require human review. This PR includes a production dependency update for @opentelemetry/sdk-node across three minor versions (0.215.0 → 0.218.0) with non-trivial changes to telemetry serialization and configuration, as well as a minor version bump for @json-render/react (0.18.0 → 0.19.0) that introduces a custom...

Re-trigger cubic}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026

dependabot Bot requested a review from izadoesdev as a code owner May 20, 2026 08:54

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2026

unkey-deploy Bot deployed to links - preview May 20, 2026 08:55 View deployment

vercel Bot deployed to Preview – databuddy-status May 20, 2026 08:55 View deployment

unkey-deploy Bot deployed to api - preview May 20, 2026 08:56 View deployment

vercel Bot deployed to Preview – documentation May 20, 2026 08:56 View deployment

vercel Bot deployed to Preview – dashboard May 20, 2026 08:56 View deployment

cubic-dev-ai Bot reviewed May 20, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#458

chore(deps): bump the minor-and-patch group across 1 directory with 4 updates#458
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/npm_and_yarn/staging/minor-and-patch-9b1bbdb419

dependabot Bot commented on behalf of github May 20, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

vercel Bot commented May 20, 2026 •

edited

Loading

Uh oh!

unkey-deploy Bot commented May 20, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 20, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 20, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.4.15

2.4.15

Patch Changes

2.4.15

Patch Changes

experimental/v0.218.0

0.218.0

🚀 Features

🏠 Internal

experimental/v0.217.0

0.217.0

🚀 Features

🐛 Bug Fixes

experimental/v0.216.0

0.216.0

🚀 Features

🐛 Bug Fixes

0.19.0

New Features

Improvements

Contributors

@​tanstack/react-pacer@​0.22.1

Patch Changes

0.22.1

Patch Changes

Summary by cubic

Uh oh!

vercel Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

unkey-deploy Bot commented May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented May 20, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 20, 2026 •

edited by cubic-dev-ai Bot

Loading

`@tanstack/react-pacer@0`.22.1

vercel Bot commented May 20, 2026 •

edited

Loading

unkey-deploy Bot commented May 20, 2026 •

edited

Loading