chore(deps): update non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@biomejs/biome (source)	2.5.12 → 2.5.13			devDependencies	patch	2.5.14
@types/react (source)	19.2.18 → 19.3.0			devDependencies	minor
@types/react-dom (source)	19.2.7 → 19.3.0			devDependencies	minor
MudBlazor (source)	9.9.0 → 9.10.0			nuget	minor
react (source)	19.2.8 → 19.3.0			dependencies	minor
react-dom (source)	19.2.8 → 19.3.0			dependencies	minor
tailwind-merge (source)	3.6.0 → 3.7.0			dependencies	minor
uuid	1.26.0 → 1.26.1			dependencies	patch
vite (source)	8.2.2 → 8.3.0			devDependencies	minor

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.13

Compare Source

Patch Changes

• #​11379 07a0073 Thanks @​Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.

  /* Invalid */
  @import 'foo.css';
  
  .my-style {
    color: red;
  }
  
  /* Valid */
  @import 'foo.css' layer(base);
  
  @layer base {
    .my-style {
      color: red;
    }
  }

• #​11667 e997900 Thanks @​devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.

  element.childNodes[0];
  element.children[0];
  element.parentElement.parentElement;
  element.querySelector("a").querySelector("b");

• #​11620 20e513a Thanks @​jakeleventhal! - Fixed #​11610, #​11611, #​11612, #​11615, and #​11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

• #​11657 e322040 Thanks @​ematipico! - Fixed #​7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

• #​11670 4969ee1 Thanks @​ematipico! - Fixed #​7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

• #​11627 23aad6d Thanks @​ematipico! - Fixed #​6571 so Grit plugins can capture and inspect multiple named import specifiers.

• #​11631 00dbd3a Thanks @​ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.

• #​11628 a2f8ff7 Thanks @​dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.

  const kibibyte = 2 ^ 10; // 8, not 1024

• #​11670 4969ee1 Thanks @​ematipico! - Fixed #​7192: noUnusedPrivateClassMembers now considers compound assignments such as ??= to read and use private class members.

• #​11676 840a52a Thanks @​dyc3! - Fixed #​11672 and #​11671 by disabling the experimental capitalized-call and effect-dependency checks in useReactCompiler, matching their exclusion from upstream's recommended lint preset. Valid calls such as Intl.NumberFormat() and captures of variables declared inside effects no longer produce these diagnostics.

• #​11660 49485ed Thanks @​ematipico! - Fixed #​11653: Astro template suppression comments ({/* biome-ignore lint: reason */}) now suppress matching HTML lint diagnostics on the following line when full HTML support is enabled.

• #​11664 9a73b9c Thanks @​dyc3! - Improved the performance of useRegexpExec.

• #​11661 5341b3f Thanks @​ematipico! - Fixed #​7479. noUnusedVariables now treats Unicode escapes in identifiers as the same binding as their decoded spelling.

• #​11630 62e1fc5 Thanks @​dyc3! - Fixed the HTML formatter inserting whitespace between adjacent Svelte expressions when their combined length exceeds the line width.

   <span>
  -  {head.median - base.median >= 0 ? "+" : "−"}
  -  {formatMs(Math.abs(head.median - base.median))}
  +  {head.median - base.median >= 0 ? "+" : "−"}{formatMs(Math.abs(head.median - base.median))}
   </span>

• #​11658 ed4bfa4 Thanks @​fredrikblau! - Fixed #​11644: useHeadingContent no longer reports headings that render their text with a directive: set:html and set:text in Astro files, v-html and v-text in Vue files.

  <h1 set:html={heading} />
  <h2 set:text={heading}></h2>

  <template>
    <h1 v-html="heading"></h1>
    <h2 v-text="heading"></h2>
  </template>

• #​11613 47d7383 Thanks @​ematipico! - Improved the performance of Biome Formatter up to ~50% in some cases.

• #​11655 fd8fc74 Thanks @​ematipico! - Fixed #​6974, where noUnusedPrivateClassMembers incorrectly reported TypeScript private constructor properties read through object destructuring from this as unused.

• #​11618 21a10cf Thanks @​siketyan! - Fixed #​11605: Type inference now infers the type of an unannotated callback parameter from the signature of the function the callback is passed to, and honours explicit type arguments on call expressions. This improves type-aware analysis for noBaseToString, noFloatingPromises, noMisleadingReturnType, noMisusedPromises, noUnnecessaryConditions, noUnsafePlusOperands, noUselessTypeConversion, useArrayFind, useArraySortCompare, useAwaitThenable, useDisposables, useExhaustiveSwitchCases, useIncludes, useNullishCoalescing, useRegexpExec, and useStringStartsEndsWith. For example, noFloatingPromises can now detect Promises reached through such parameters:

  interface Context {
    doSomething(): Promise<void>;
  }
  
  declare function test(callback: (ctx: Context) => Promise<void>): void;
  
  test(async (ctx) => {
  	ctx.doSomething(); // now reported as a floating promise
  });

• #​11698 b019982 Thanks @​denbezrukov! - Fixed parsing of unquoted CSS URLs beginning with @ or !, such as url(@/assets/icon.svg) and url(!font.woff2). Preserved escaped and non-ASCII whitespace in raw URLs during formatting.

  -background-image: url(image\);
  +background-image: url(image\ );

• #​11622 c23e4c7 Thanks @​Netail! - Added the nursery rule noUnsafeIframeSandbox, which reports iframe elements whose sandbox attribute combines allow-scripts and allow-same-origin, since that combination lets the embedded document remove its own sandboxing.

  <iframe src="https://example.com" sandbox="allow-scripts allow-same-origin" />

• #​11606 de0528f Thanks @​dyc3! - Added the recommended noSvelteAtHtmlTags nursery rule, which reports Svelte {@html} tags that render unescaped HTML.

• #​11670 4969ee1 Thanks @​ematipico! - Fixed #​6782: GritQL plugins now match captured JSX component names against code snippets such as React.Fragment.

• #​11687 09d97d9 Thanks @​hori-design! - Fixed #​11678: useReactCompiler no longer panics on files that contain non-ASCII characters. This bumps the React Compiler version.

• #​11595 a64d757 Thanks @​dyc3! - Added the nursery Vue-domain rule useVueBaseImport rule, which enforces importing Vue APIs from vue instead of internal @vue/* packages.

• #​11675 353cbae Thanks @​dyc3! - Fixed useReactCompiler silently producing no diagnostics in WebAssembly builds, including the playground.

• #​11625 ea20e5a Thanks @​denbezrukov! - Improved linting performance for large CSS and JSON files.

• #​11670 4969ee1 Thanks @​ematipico! - Fixed #​7527: suppression actions for diagnostics emitted on comments are now inserted before the diagnostic comment. In particular, suppressing noTsIgnore now places the biome-ignore comment before @ts-ignore.

• #​11655 fd8fc74 Thanks @​ematipico! - Fixed #​8629, where noUnusedPrivateClassMembers incorrectly reported used private TypeScript method overload signatures as unused.

• #​11669 579f401 Thanks @​denbezrukov! - Improved the performance of noExcessiveLinesPerFile when skipBlankLines is false.

MudBlazor/MudBlazor (MudBlazor)

v9.10.0

What's Changed

New Features

• MudDataGrid: Add dense mode to ColumnsPanel by @​Nik-not-thicc in #​13578
• MudTable: Add GroupHeaderClass to TableGroupDefinition by @​evangelosvlachos96-dotcom in #​13804

Bug Fixes

• MudBaseInput: Prevent debounced input reformatting text mid-typing by @​danielchalmers in #​13709
• MudDynamicTabs: Fix CloseTab raised twice per key press by @​danielchalmers in #​13717
• MudRadio: Surface generic-mismatch diagnostic instead of killing the circuit by @​danielchalmers in #​13716
• MudDateRangePicker: Keep other half of range when one input fails to convert by @​danielchalmers in #​13710
• MudAutocomplete: Close menu when search returns no items by @​danielchalmers in #​13688
• MudInput: Stop the clear button reopening its host component by @​danielchalmers in #​13708
• MudNumericField: Fix floating-point precision when stepping with fractional Step by @​danielchalmers in #​13483
• MudTableSortLabel: Fix InitialSortDirection always used after unsorted by @​LarsBehl in #​13729
• MudDataGrid: Fix AllowUnsorted skipping Ascending when InitialSortDirection is Descending by @​LarsBehl in #​13757
• MudDataGrid: Preserve initial sort definitions in single mode by @​pttydou in #​13749
• MudDataGrid: Restore saved filter column titles by @​versile2 in #​13759

Accessibility

• Various components: Improve ARIA semantics by @​danielchalmers in #​13772
• MudSelect: Omit aria-controls while closed by @​danielchalmers in #​13773
• MudTable, MudDataGrid: Add aria-sort and selection checkbox names by @​danielchalmers in #​13774
• Form components: Link error text with aria-describedby by @​danielchalmers in #​13775
• MudDialog: Announce as modal and name them when header is hidden by @​danielchalmers in #​13780
• MudAutocomplete: Expose the combobox pattern to assistive technology by @​danielchalmers in #​13777
• MudTable: Render the empty and loading rows as data cells by @​danielchalmers in #​13778
• MudDialog: Add AriaLabel and AriaLabelledBy for dialogs the title cannot name by @​danielchalmers in #​13782
• MudMenu: Add menu roles and popup state to every activator by @​danielchalmers in #​13784
• MudIcon: Keep icons with an accessible name exposed by @​danielchalmers in #​13785
• MudPicker: Announce the popup as a dialog named after the field by @​danielchalmers in #​13786

Performance

• MudFormComponent: Stop compiling the For expression on every parameter set by @​danielchalmers in #​13682
• MudList: Optimize keyboard navigation scans by @​danielchalmers with @​Copilot in #​13696
• SankeyChart: Optimize membership scans by @​danielchalmers with @​Copilot in #​13697
• MudTable: Optimize row-selection checks by @​danielchalmers with @​Copilot in #​13698
• Charts: Remove repeated ChartData.Values snapshots by @​danielchalmers with @​Copilot in #​13699
• MudChip: Optimize keyboard-interceptor registration by @​danielchalmers with @​Copilot in #​13695
• MudTreeViewItem: Optimize tri-state checkbox calculation by @​danielchalmers with @​Copilot in #​13700
• MudListItem: Skip key interceptors for popup options by @​danielchalmers in #​13704
• MudText: Render its element directly by @​danielchalmers in #​13707
• Various components: Drop CssBuilder predicate lambdas that were never lazy by @​danielchalmers in #​13714
• MudElement: Capture element references without an extra render by @​danielchalmers in #​13706
• DefaultConverter: Register only the converter its type needs by @​danielchalmers in #​13713
• MudSelect: Skip extra render on mount when nothing resolves by @​danielchalmers in #​13730
• MudStack, MudButtonGroup, MudRTLProvider: Render element directly by @​danielchalmers in #​13731
• MudChipSet: Only re-render chips whose selection changed by @​danielchalmers in #​13734
• MudTreeView: Only re-render items whose state actually changed by @​danielchalmers in #​13732
• Localization: Stop rebuilding and re-reading resources per component by @​danielchalmers in #​13712
• MudItem: Build only the breakpoint classes that are set by @​danielchalmers in #​13738
• MudDataGrid: Reduce cell edit rerender overhead by @​danielchalmers in #​13792
• MudDataGrid: Reduce grouped row and context-menu rerender overhead by @​danielchalmers in #​13796
• MudTreeViewItem: Skip toggle button for leaf items by @​danielchalmers in #​13793
• MudTr: Render selection cell as plain markup by @​danielchalmers in #​13802
• MudPagination: Render list element directly by @​danielchalmers in #​13816

Other Changes

• MudFormComponent: Add Required text to LanguageResource by @​RemiCELLARD in #​13747
• MudSelect: Add SelectAllText text to LanguageResource by @​RemiCELLARD in #​13751
• MudPageContentNavigation: Use Headline translation in LanguageResource by @​RemiCELLARD in #​13753
• MudBreadcrumbs, MudSplitPanel: Localize hardcoded ARIA labels by @​danielchalmers in #​13788

New Contributors

• @​thaildhe172591 made their first contribution in #​13745
• @​RemiCELLARD made their first contribution in #​13747
• @​pttydou made their first contribution in #​13749
• @​evangelosvlachos96-dotcom made their first contribution in #​13804

Full Changelog: MudBlazor/MudBlazor@v9.9.0...v9.10.0

react/react (react)

v19.3.0

Compare Source

react/react (react-dom)

v19.3.0

Compare Source

dcastil/tailwind-merge (tailwind-merge)

v3.7.0

Compare Source

uuid-rs/uuid (uuid)

v1.26.1

Compare Source

What's Changed

• Seat the v7 counter below the version nibble by @​lenamonj in #​907
• Don't panic in overflowing Timestamp to SystemTime conversion by @​KodrAus in #​909
• Prepare for 1.26.1 release by @​KodrAus in #​910

New Contributors

• @​lenamonj made their first contribution in #​907

Full Changelog: uuid-rs/uuid@v1.26.0...v1.26.1

vitejs/vite (vite)

v8.3.0

Compare Source

Features

• build: avoid settling seen preload dependencies for performance (#​23446) (e6f6b3e)

Bug Fixes

• handle CRLF line endings in code frame positions (#​23219) (9913672)
• only treat whole node_modules path segments as dependencies (fix #​17467) (#​23437) (ef0dc17)

Performance Improvements

• proxy: pre-compile context matchers at server creation (#​23263) (8abf700)

---

Configuration

📅 Schedule: (in timezone Europe/Brussels)

• Branch creation
  • "before 9am on Saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.