deps(deps-dev): bump the dev-minor-and-patch group across 1 directory with 6 updates

[dependabot]

Bumps the dev-minor-and-patch group with 6 updates in the / directory:

Package	From	To
@biomejs/biome	2.5.3	2.5.5
@roxyapi/sdk	1.2.45	1.2.49
happy-dom	20.10.6	20.11.1
react	19.2.7	19.2.8
react-dom	19.2.7	19.2.8
vue	3.5.39	3.5.40

Updates @biomejs/biome from 2.5.3 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

• #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

  declare const value: 1n | 2n;
  switch (value) {
    case 1n:
      break;
  }

• #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

  type Recursive = Recursive;
  declare const value: Recursive;
  String(value);
  value || "fallback";

• #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

• #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

• #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

  Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

• #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

  - A:HOVER { COLOR: INITIAL; }
  + A:hover { color: initial; }
  - @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
  + @keyframes :GLOBAL KeepFrames { from { color: RED; } }
  - @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
  + @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

• #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

  -a { color: /* before */ /* after */ red !important; }
  +a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

• 412a0e9 ci: release (#10948)
• b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
• 9a66bc7 chore: add latitude to sponsors (#10947)
• bfc3f3d ci: release (#10887)
• See full diff in compare view

Updates @roxyapi/sdk from 1.2.45 to 1.2.49

Release notes

Sourced from @​roxyapi/sdk's releases.

v1.2.49

Full Changelog: RoxyAPI/sdk-typescript@v1.2.48...v1.2.49

v1.2.48

Full Changelog: RoxyAPI/sdk-typescript@v1.2.47...v1.2.48

v1.2.47

Full Changelog: RoxyAPI/sdk-typescript@v1.2.46...v1.2.47

v1.2.46

Full Changelog: RoxyAPI/sdk-typescript@v1.2.45...v1.2.46

Commits

• 975e3c3 release: v1.2.49
• 4373b69 chore(deps): bump typescript to 6.0.3
• 66447bf release: v1.2.48
• cbbcbda chore(deps,spec): take the safe dev bumps, regenerate from the live spec, and...
• 33de1c5 release: v1.2.47
• 7d130af release: v1.2.46
• 343b70c ci: retry spec fetch with backoff, move dependabot to the bun ecosystem
• See full diff in compare view

Updates happy-dom from 20.10.6 to 20.11.1

Release notes

Sourced from happy-dom's releases.

v20.11.1

👷‍♂️ Patch fixes

• Improve performance of query selectors by avoiding construction of DOMException when not needed - By @@​cyfung1031 in task #2228

v20.11.0

🎨 Features

• Adds support for CookieStore API - By @​TrevorBurnham in task #1864
• Adds support for Element.checkVisibility() - By @​capricorn86 in task #1506

Commits

• b3b31ad fix: #2228 Improve performance of query selectors by avoiding construction ...
• bffe73a chore: #2243 Fixes problem with canvas in release build (#2245)
• 9b46f5e chore: #2243 Fixes problem with canvas in release build (#2244)
• f9c57a5 feat: #1864 Adds support for CookieStore API (#2040)
• a4c4faf feat: #1506 Adds support for Element checkVisibility (#2223)
• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

• compiler-core: avoid leaking slot branch keys (#15051) (20c9d26), closes #15048
• hydration: pass namespace when patching dynamic props (#15082) (e0d2723), closes #15081 #15050
• reactivity: handle effect removal during scope stop (#15084) (378f978), closes #15083
• runtime-core: skip lazy hydration for detached roots (#15092) (97f3525), closes #15091
• runtime-core: unwind dangling blocks when slot content throws (#15071) (ddc132d), closes #15070
• runtime-dom: respect current select model type (#15010) (eb89e93), closes #15009
• server-renderer: handle errors in optimized component renders (#12601) (474907c), closes #12575
• server-renderer: remove package dependency cycle (#15063) (4d35eca)
• shared: prevent SSR comment escaping from creating closing delimiters (#15045) (bd962bb)
• types: don't constrain component $el type to Element (#15040) (164460a)

Commits

• fa2885d release: v3.5.40
• 20c9d26 fix(compiler-core): avoid leaking slot branch keys (#15051)
• 7da6334 Revert "fix(runtime-core): pause tracking when invoking function refs" (#15094)
• 90aecb1 chore(deps): update all non-major dependencies (#15026)
• 97f3525 fix(runtime-core): skip lazy hydration for detached roots (#15092)
• fe1c0f8 chore(deps): update test (#15025)
• e41c45a chore(deps): update dependency conventional-changelog to v8 (#15078)
• 3eb66a9 chore(deps): update actions/cache action to v6 (#15076)
• 40178dd chore(deps): update lint (#15075)
• 7f122b9 chore(deps): update dependency conventional-changelog-angular to v9 (#15079)
• Additional commits viewable in compare view

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.