From 4d53d6922a3ab7638deb5d6229917fbb5ce5284b Mon Sep 17 00:00:00 2001 From: "Ricardo Q. Bazan" Date: Wed, 4 Nov 2026 00:07:03 -0500 Subject: [PATCH 1/2] chore: move to @rrlab/cli 1.7.1, biome-plugin 1.3.0 and biome-config 0.1.0 cli 1.7.1 drops rimraf, and with it glob 13 and minimatch 10 and their advisories, which Dependabot can't patch from here. biome-config 0.1.0 carries the Markdown settings and keeps Biome off the files other tools write. The built dist/ is byte-identical. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01J1Ak7btEZVEoTBDd6NBH9g --- package.json | 6 +-- pnpm-lock.yaml | 99 ++++++++++++++------------------------------------ 2 files changed, 31 insertions(+), 74 deletions(-) diff --git a/package.json b/package.json index 0c268fc..dda8856 100644 --- a/package.json +++ b/package.json @@ -34,9 +34,9 @@ "@biomejs/biome": "^2.6.4", "@changesets/changelog-github": "^1.0.1", "@changesets/cli": "^3.0.3", - "@rrlab/biome-config": "^0.0.7", - "@rrlab/biome-plugin": "^1.2.3", - "@rrlab/cli": "^1.7.0", + "@rrlab/biome-config": "^0.1.0", + "@rrlab/biome-plugin": "^1.3.0", + "@rrlab/cli": "^1.7.1", "@rrlab/oxc-plugin": "^1.3.0", "@rrlab/ts-config": "^0.0.6", "@rrlab/tsdown-config": "^0.2.1", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 02a5e96..1131816 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -176,17 +176,17 @@ importers: specifier: ^3.0.3 version: 3.0.3 '@rrlab/biome-config': - specifier: ^0.0.7 - version: 0.0.7(@biomejs/biome@2.6.4) + specifier: ^0.1.0 + version: 0.1.0(@biomejs/biome@2.6.4) '@rrlab/biome-plugin': - specifier: ^1.2.3 - version: 1.2.3(@biomejs/biome@2.6.4)(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1)) + specifier: ^1.3.0 + version: 1.3.0(@biomejs/biome@2.6.4)(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1)) '@rrlab/cli': - specifier: ^1.7.0 - version: 1.7.0(@pnpm/logger@1001.0.1) + specifier: ^1.7.1 + version: 1.7.1(@pnpm/logger@1001.0.1) '@rrlab/oxc-plugin': specifier: ^1.3.0 - version: 1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(oxfmt@0.75.0)(oxlint-tsgolint@7.0.2005)(oxlint@1.90.0(oxlint-tsgolint@7.0.2005)) + version: 1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(oxfmt@0.75.0)(oxlint-tsgolint@7.0.2005)(oxlint@1.90.0(oxlint-tsgolint@7.0.2005)) '@rrlab/ts-config': specifier: ^0.0.6 version: 0.0.6(@types/node@26.6.6)(typescript@7.0.2) @@ -195,10 +195,10 @@ importers: version: 0.2.1(tsdown@0.23.4(typescript@7.0.2)) '@rrlab/tsdown-plugin': specifier: ^1.3.0 - version: 1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(tsdown@0.23.4(typescript@7.0.2))(typescript@7.0.2) + version: 1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(tsdown@0.23.4(typescript@7.0.2))(typescript@7.0.2) '@rrlab/vitest-plugin': specifier: ^0.3.0 - version: 0.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(vitest@5.0.5) + version: 0.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(vitest@5.0.5) '@types/node': specifier: ^26.6.6 version: 26.6.6 @@ -899,20 +899,20 @@ packages: '@rolldown/pluginutils@1.0.1': resolution: {integrity: sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==} - '@rrlab/biome-config@0.0.7': - resolution: {integrity: sha512-gXQLDhmj93XFtbIsKm1iySpB2P59PL9kdSKXXHmOYHjQtk/Dh7Uh3jWDnHnsHbgJcfHTcCnJSrZakDgBHwW9RQ==} + '@rrlab/biome-config@0.1.0': + resolution: {integrity: sha512-up8yBGp3XgjfmclDRkuozcBnGTpZeEMZOXJIzKvuPxNDoQzmgVvKJS+zhkIkhcAAOyssXusvtkEPWPGbvHmkdQ==} peerDependencies: - '@biomejs/biome': '>=2.3.0' + '@biomejs/biome': '>=2.6.0' - '@rrlab/biome-plugin@1.2.3': - resolution: {integrity: sha512-ZOEbbh5DAlCNq026SGksxt6OKmSfZBuzIIvyI4zFBgib9TYtg11q+EuCgIhzE5l3YfOhgYdBAFsLWlgtSHPrIQ==} + '@rrlab/biome-plugin@1.3.0': + resolution: {integrity: sha512-5RSokubQzwWyhERYhQfBtlfSI9Bv2POXnPZc8FC7YwAEe+/Z83rB8Aote0P5PoiONoMnc88iNXyCN/hfr3Zq4w==} engines: {node: '>=22.18.0'} peerDependencies: - '@biomejs/biome': '>=2.3.0' - '@rrlab/cli': ^1.7.0 + '@biomejs/biome': '>=2.6.0' + '@rrlab/cli': ^1.7.1 - '@rrlab/cli@1.7.0': - resolution: {integrity: sha512-Kdhr/UvzjombSu59MqsYiD5K93ptILWGiXDhPnOwCj3bMbeuLFdpVhwcUe9MaeiBHgyq93CagP3ZKRa+AdIYmA==} + '@rrlab/cli@1.7.1': + resolution: {integrity: sha512-v5rhvgdx7W7dJ5+IZ00bWekl6VywJxYXrqHbDmxxxh76HXaSNfTMmfHUVKiVmp4Qk4mny0Vrv2T1PsNjCDE5Xw==} engines: {node: '>=22.18.0'} hasBin: true @@ -1380,10 +1380,6 @@ packages: resolution: {integrity: sha512-X6fBC0pmImC70gvX2zm56go9hx0MyoGVdG0tUCkg/D+Xnh5TJsOZ7iDbOdI3PvmtrDxnu1YdDufpK2QJX1Meqw==} engines: {node: '>=20.20.0'} - glob@13.0.6: - resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==} - engines: {node: 18 || 20 || >=22} - glob@14.0.3: resolution: {integrity: sha512-A1vjIwC3qpdCso45Iw127gnp7sPhqgY8lUQhDrArIs+GbmfaaVPFuoyy7WyLT9EPZCRZ7j7aLdwUhQmHWesEow==} engines: {node: 18 || 20 || >=22} @@ -1601,10 +1597,6 @@ packages: resolution: {integrity: sha512-VP79XUPxV2CigYP3jWwAUFSku2aKqBH7uTAapFWCBqutsbmDo96KY5o8uh6U+/YSIn5OxJnXp73beVkpqMIGhA==} engines: {node: '>=18'} - minimatch@10.2.5: - resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==} - engines: {node: 18 || 20 || >=22} - minimatch@11.0.4: resolution: {integrity: sha512-/UJ1dEoVQTjPNDh6SGlUo+ueLMmoHTas4q+8yaAR/5t6nLAIiBDJtoYUh20IYleix7ehiQkgczb84PE3uzHkxg==} engines: {node: 20 || >=22} @@ -1675,9 +1667,6 @@ packages: resolution: {integrity: sha512-y3b8Kpd8OAN444hxfBbFfj1FY/RjtTd8tzYwhUqNYXx0fXx2iX4maP4Qr6qhIKbQXI02wTLAda4fYUbDagTUFw==} engines: {node: '>=6'} - package-json-from-dist@1.0.1: - resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==} - package-manager-detector@1.9.0: resolution: {integrity: sha512-zAMfbta9nPA8AKkA4WdmNAT8R8s6Dk0/xwPsqNnRidMFcLo1YkLuPDTgs2f64XdzS8vbLNnoJ+uUIkgbz7oRHA==} @@ -1685,10 +1674,6 @@ packages: resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==} engines: {node: '>=8'} - path-scurry@2.0.2: - resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==} - engines: {node: 18 || 20 || >=22} - path-scurry@3.0.0: resolution: {integrity: sha512-1pTbQqH1wIwMi/eleQ5leFTTCkzFsPcgXNjwOA8YGGW/W4/kHT3dssE7Z6NH+zuqNLOzOB0uaD61yl7cAcVhgg==} engines: {node: 18 || 20 || >=22} @@ -1747,11 +1732,6 @@ packages: resolve-pkg-maps@1.0.0: resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==} - rimraf@6.1.3: - resolution: {integrity: sha512-LKg+Cr2ZF61fkcaK1UdkH2yEBBKnYjTyWzTJT6KNPcSPaiT7HSdhtMXQuN5wkTX0Xu72KQ1l8S42rlmexS2hSA==} - engines: {node: 20 || >=22} - hasBin: true - rolldown-plugin-dts@0.28.8: resolution: {integrity: sha512-FVhfqxorCWcc20BVT5eVRfRjzLLl6mgzjcMR4gSBf0K4oQMXT0qoHhhzfXy0L7y83fQy7Ug5ZDNk90xM3/LiCQ==} engines: {node: ^22.18.0 || ^24.11.0 || >=26.0.0} @@ -2540,20 +2520,20 @@ snapshots: '@rolldown/pluginutils@1.0.1': {} - '@rrlab/biome-config@0.0.7(@biomejs/biome@2.6.4)': + '@rrlab/biome-config@0.1.0(@biomejs/biome@2.6.4)': dependencies: '@biomejs/biome': 2.6.4 - '@rrlab/biome-plugin@1.2.3(@biomejs/biome@2.6.4)(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))': + '@rrlab/biome-plugin@1.3.0(@biomejs/biome@2.6.4)(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))': dependencies: '@biomejs/biome': 2.6.4 - '@rrlab/cli': 1.7.0(@pnpm/logger@1001.0.1) + '@rrlab/cli': 1.7.1(@pnpm/logger@1001.0.1) '@variablelab/clibuddy': 0.8.2(@pnpm/logger@1001.0.1) comment-json: 5.0.0 transitivePeerDependencies: - '@pnpm/logger' - '@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1)': + '@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1)': dependencies: '@clack/prompts': 1.8.1 '@usage-spec/commander': 1.1.0 @@ -2566,14 +2546,13 @@ snapshots: lilconfig: 3.1.4 magicast: 0.5.5 nypm: 0.6.12 - rimraf: 6.1.3 transitivePeerDependencies: - '@pnpm/logger' - supports-color - '@rrlab/oxc-plugin@1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(oxfmt@0.75.0)(oxlint-tsgolint@7.0.2005)(oxlint@1.90.0(oxlint-tsgolint@7.0.2005))': + '@rrlab/oxc-plugin@1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(oxfmt@0.75.0)(oxlint-tsgolint@7.0.2005)(oxlint@1.90.0(oxlint-tsgolint@7.0.2005))': dependencies: - '@rrlab/cli': 1.7.0(@pnpm/logger@1001.0.1) + '@rrlab/cli': 1.7.1(@pnpm/logger@1001.0.1) '@variablelab/clibuddy': 0.8.2(@pnpm/logger@1001.0.1) oxfmt: 0.75.0 oxlint: 1.90.0(oxlint-tsgolint@7.0.2005) @@ -2593,9 +2572,9 @@ snapshots: dependencies: tsdown: 0.23.4(typescript@7.0.2) - '@rrlab/tsdown-plugin@1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(tsdown@0.23.4(typescript@7.0.2))(typescript@7.0.2)': + '@rrlab/tsdown-plugin@1.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(tsdown@0.23.4(typescript@7.0.2))(typescript@7.0.2)': dependencies: - '@rrlab/cli': 1.7.0(@pnpm/logger@1001.0.1) + '@rrlab/cli': 1.7.1(@pnpm/logger@1001.0.1) '@variablelab/clibuddy': 0.8.2(@pnpm/logger@1001.0.1) magicast: 0.5.5 tsdown: 0.23.4(typescript@7.0.2) @@ -2604,9 +2583,9 @@ snapshots: transitivePeerDependencies: - '@pnpm/logger' - '@rrlab/vitest-plugin@0.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.0(@pnpm/logger@1001.0.1))(vitest@5.0.5)': + '@rrlab/vitest-plugin@0.3.0(@pnpm/logger@1001.0.1)(@rrlab/cli@1.7.1(@pnpm/logger@1001.0.1))(vitest@5.0.5)': dependencies: - '@rrlab/cli': 1.7.0(@pnpm/logger@1001.0.1) + '@rrlab/cli': 1.7.1(@pnpm/logger@1001.0.1) '@variablelab/clibuddy': 0.8.2(@pnpm/logger@1001.0.1) vitest: 5.0.5(@types/node@26.6.6)(@vitest/browser-playwright@5.0.5)(@vitest/ui@5.0.5)(vite@8.3.5(@types/node@26.6.6)(yaml@2.9.1)) transitivePeerDependencies: @@ -2927,12 +2906,6 @@ snapshots: dependencies: resolve-pkg-maps: 1.0.0 - glob@13.0.6: - dependencies: - minimatch: 10.2.5 - minipass: 7.1.3 - path-scurry: 2.0.2 - glob@14.0.3: dependencies: minimatch: 11.0.4 @@ -3094,10 +3067,6 @@ snapshots: mimic-function@5.0.1: {} - minimatch@10.2.5: - dependencies: - brace-expansion: 5.0.12 - minimatch@11.0.4: dependencies: '@isaacs/nonrecursive-glob-match': 1.0.3 @@ -3181,8 +3150,6 @@ snapshots: p-map@2.1.0: {} - package-json-from-dist@1.0.1: {} - package-manager-detector@1.9.0: {} parse-json@5.2.0: @@ -3192,11 +3159,6 @@ snapshots: json-parse-even-better-errors: 2.3.1 lines-and-columns: 1.2.4 - path-scurry@2.0.2: - dependencies: - lru-cache: 11.5.1 - minipass: 7.1.3 - path-scurry@3.0.0: dependencies: lru-cache: 11.5.1 @@ -3246,11 +3208,6 @@ snapshots: resolve-pkg-maps@1.0.0: {} - rimraf@6.1.3: - dependencies: - glob: 13.0.6 - package-json-from-dist: 1.0.1 - rolldown-plugin-dts@0.28.8(rolldown@1.2.16)(typescript@7.0.2): dependencies: dts-resolver: 3.0.0 From b8e5775d52336074cf5080ca38337ccec1606df6 Mon Sep 17 00:00:00 2001 From: "Ricardo Q. Bazan" Date: Wed, 4 Nov 2026 00:07:07 -0500 Subject: [PATCH 2/2] chore: drop the biome.json exclusions @rrlab/biome-config now carries Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01J1Ak7btEZVEoTBDd6NBH9g --- biome.json | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/biome.json b/biome.json index 2ea219a..5d49646 100644 --- a/biome.json +++ b/biome.json @@ -1,7 +1,4 @@ { "$schema": "./node_modules/@biomejs/biome/configuration_schema.json", - "extends": ["@rrlab/biome-config"], - "files": { - "includes": ["**", "!.mise/locks", "!.changeset/*.md", "!CHANGELOG.md", "!.github/workflows/pullfrog.yml"] - } + "extends": ["@rrlab/biome-config"] }