chore(deps): bump the minor-and-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #34 · thaw-app/platform

dependabot · 2026-10-26T16:56:21Z

Bumps the minor-and-patch group with 5 updates in the / directory:

Package	From	To
@pulumi/pulumi	`3.267.0`	`3.272.0`
@biomejs/biome	`2.5.15`	`2.6.2`
@commitlint/cli	`21.2.3`	`21.2.4`
@commitlint/config-conventional	`21.2.3`	`21.2.4`
@types/bun	`1.4.2`	`1.4.4`

Updates @pulumi/pulumi from 3.267.0 to 3.272.0

Release notes

Sourced from @pulumi/pulumi's releases.

v3.272.0

3.272.0 (2026-10-22)

Features

[cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their exceptions #25290

[engine] Add an AwaitError provider protocol error indicating an operation needs to be awaited; the deployment continues, the resource's outputs are unknown, and the CLI exits with the dedicated ExitAwaitError code (10) #25278

[cli/env] Add pulumi env change-request commands for working with change requests #25122

Bug Fixes

[cli] Name the directory searched in the no Pulumi.yaml project file found error of pulumi preview, refresh, import, logs and install instead of leaving it empty #25187

[sdk] Keep the unknown outputs of remote components, such as those that depend on an awaiting or failed child, instead of resolving them as empty values #25291

Improvements

[cli/env] Use --organization/-o to select the organization in pulumi env setup commands #25231

[engine] Return dry-run outputs to dependents of resources skipped under --continue-on-error, instead of failing their registrations #25227

v3.271.0

3.271.0 (2026-10-21)

Features

[engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #25228

[cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #25280

[auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #25071

[auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #25073

Bug Fixes

[engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #25222

[cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #24665

[engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #24973

[engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #24995

[pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #25112

[sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #25168

[sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #25169

[sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #25181

[sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #25273

Improvements

[cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #25257

[protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #25277

v3.270.0

3.270.0 (2026-10-16)

Bug Fixes

... (truncated)

Changelog

Sourced from @pulumi/pulumi's changelog.

3.272.0 (2026-10-22)

Features

[cli/display] Collapse policy violations that an exception exempts under Policies: into one line per policy, and add --show-policy-exceptions to up and preview to list them with their exceptions #25290

[engine] Add an AwaitError provider protocol error indicating an operation needs to be awaited; the deployment continues, the resource's outputs are unknown, and the CLI exits with the dedicated ExitAwaitError code (10) #25278

[cli/env] Add pulumi env change-request commands for working with change requests #25122

Bug Fixes

[cli] Name the directory searched in the no Pulumi.yaml project file found error of pulumi preview, refresh, import, logs and install instead of leaving it empty #25187

[sdk] Keep the unknown outputs of remote components, such as those that depend on an awaiting or failed child, instead of resolving them as empty values #25291

Improvements

[cli/env] Use --organization/-o to select the organization in pulumi env setup commands #25231

[engine] Return dry-run outputs to dependents of resources skipped under --continue-on-error, instead of failing their registrations #25227

3.271.0 (2026-10-21)

Features

[engine] Add an id field to ReadResourceResponse so providers can return a resolved id that differs from the one supplied on the request; SDKs now surface this id via .id and resolve it as unknown when empty during preview #25228

[cli/policy] Create version 2 of the --policy-pack-config format, nesting policy configs under policies and adding an exceptions field #25280

[cli/policy] Apply the policy exceptions Pulumi Cloud sends for required policy packs #25284

[auto] Add state commands to the generated automation APIs for NodeJS, Python and Go #25071

[auto] Add env commands to the generated automation APIs for NodeJS, Python and Go #25073

Bug Fixes

[engine] Skip the provider Read in preview when a read's dependency is being created or replaced, and return unknown outputs to the SDK #25222

[cli] Fix pulumi org audit-log ignoring --user and --event-type, switch to the V2 audit log API, and add --end-time #24665

[engine] Stop sending resource inputs as the State field of Read to providers; providers can now distinguish a user-driven Get/import from a refresh by whether State is populated #24973

[engine] Redact secret values in invalid input diagnostics unless --show-secrets is passed #24995

[pcl] Make the PCL interpreter's lookup return the default unchanged when the key is absent from a map #25112

[sdk] Resolve the outputs of a resource that fails under --continue-on-error as unknown instead of failing them, so the rest of the program keeps running; recover no longer catches these failures #25168

[sdk] Resolve the outputs of a read that fails under --continue-on-error as unknown instead of as known empty values #25169

[sdk/python] Fix false missing-argument errors from ty on Output.apply and other Output methods #25181

[sdk/nodejs] Support single-member enums and as const objects in Node.js component inputs and outputs #25273

Improvements

[cli/new] Stop suggesting pulumi new in the first-login welcome message when the login was started by pulumi new #25257

[protobuf] Pass a mapper target to language hosts in GenerateProgram and GenerateProject requests #25277

3.270.0 (2026-10-16)

Bug Fixes

[cli/env] Fix pulumi env edit, env set, env rm and env provider overwriting changes made after they read the environment; on a conflict, env edit reopens the editor with your edits and the current definition, and the others fail #24983

[cli] Report an unknown drift status in pulumi stack drift status when drift detection has never run #25172

3.269.0 (2026-10-16)

... (truncated)

Commits

8a99ec5 Keep the unknown outputs of remote components (#25291)
0cbf317 Add AwaitError to the provider protocol (#25278)
c17c167 New policy test to check secrets and unknowns don't crash the policy pack (#2...
3b3c825 Changelog and go.mod updates for v3.271.0 (#25312)
a20fadf Freeze v3.271.0 (#25300)
0821473 Add env commands to the generated automation APIs (#25073)
5b4a72f Add state commands to the generated automation APIs (#25071)
4e1c620 Engine skips reads during preview if any dependencies don't yet exist (#25222)
1c2390f Resolve failed reads' outputs as unknown (#25169)
fcdbea1 Resolve failed resources' outputs as unknown (#25168)
Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.15 to 2.6.2

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.6.2

2.6.2

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },
    { "path": "local-plugin.grit" }
  ]
}
Use resolutionKind: "config" to resolve the plugin from the configuration file that declares it. Use resolutionKind: "project" to resolve the plugin from the consuming project. When omitted, resolutionKind defaults to project. This only affects plugin resolution; includes still apply to end-user project files as usual.
#11432 4befd08 Thanks @ematipico! - Added biome inspect config to show resolved configuration values and their origins as human-readable diagnostics, including matching overrides.

Configuration files can also extend other configurations up to ten levels deep. Repeated references to the same resolved file are ignored with an information diagnostic, while resolving multiple versions of one extended package produces an error.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.6.2

Patch Changes

#12494 3f40430 Thanks @ematipico! - Fix another patch

2.6.1

Patch Changes

#12492 edaa1db Thanks @ematipico! - Fixes a problem with npm publishing

2.6.0

Minor Changes
#11479 5c60ba8 Thanks @nhedger! - Added a --git flag to biome init. The flag enables Git VCS integration and sets vcs.useIgnoreFile to true in the generated configuration, even when the command runs outside a Git repository.

#11742 3a1356d Thanks @Netail! - Added the biome migrate stylelint command. It imports a Stylelint configuration and its ignore settings into your Biome configuration, mapping Stylelint rules to their Biome equivalents. Pass --write to apply the changes, and --include-inspired or --include-nursery to migrate additional rules.
#12318 774b5b5 Thanks @Netail! - Added the new assist action useGraphqlSortedDefinitions, which sorts the named definitions of a GraphQL document, such as types, type extensions, directives, fragments, and operations.

Invalid:
type User {
  id: ID!
}
enum Role {
ADMIN
USER
}
directive @auth on FIELD_DEFINITION
#6886 3479d15 Thanks @christymcgrory! - biome rage now shows the resolved files.includes and files.ignoreUnknown configuration.

#11102 0874b7f Thanks @gameroman! - Added support for useTailwindSortedClasses rule in HTML-ish files.
#10711 40de5a0 Thanks @soconnor-seeq! - Adds a new resolutionKind option for object-syntax plugin entries.

This allows shared Biome configs in monorepos to load local Grit plugins from the package that declares them instead of resolving plugin paths from the consuming project.
{
  "plugins": [
    { "path": "./grit/no-debugger.grit", "resolutionKind": "config" },
    { "path": "local-plugin.grit", "resolutionKind": "project" },

... (truncated)

Commits

0d9aef6 ci: release (#12495)
30ffad1 ci: release (#12493)
8c814e1 ci: release (#12065)
e51cec2 chore: update sponsors (#12428)
cb88f07 feat(lint): add noSvelteClassDirective (#12254)
774b5b5 feat: sorted GraphQL documents (#12318)
914dca7 feat(lint/js): add noUselessCall (#12082)
a3fa0d6 feat(graphql_analyze): implement useSortedArguments (#12282)
5f8ea6c feat(lint): add noVueLifecycleAfterAwait (#12229)
b92638b feat(lint): add noVueShadowNativeEvents (#12136)
Additional commits viewable in compare view

Updates @commitlint/cli from 21.2.3 to 21.2.4

Release notes

Sourced from @commitlint/cli's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

fix(load): replace config file arrays with seed arrays by @escapedcat in conventional-changelog/commitlint#5056

fix: update dependency jsonc to v3 by @renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

perf(load): load typescript configs with jiti directly by @escapedcat in conventional-changelog/commitlint#5052

Docs, etc

docs: add AGENTS.md with commit type guidance by @escapedcat in conventional-changelog/commitlint#5053

test(ensure): pin case conversion of digits, punctuation and accents by @escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @commitlint/cli's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @commitlint/cli

Commits

d8e3656 v21.2.4
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.3 to 21.2.4

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

fix(load): replace config file arrays with seed arrays by @escapedcat in conventional-changelog/commitlint#5056

fix: update dependency jsonc to v3 by @renovate[bot] in conventional-changelog/commitlint#5020

Performance Improvements

perf(load): load typescript configs with jiti directly by @escapedcat in conventional-changelog/commitlint#5052

Docs, etc

docs: add AGENTS.md with commit type guidance by @escapedcat in conventional-changelog/commitlint#5053

test(ensure): pin case conversion of digits, punctuation and accents by @escapedcat in conventional-changelog/commitlint#5055

Full Changelog: conventional-changelog/commitlint@v21.2.3...v21.2.4

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.4 (2026-10-18)

Note: Version bump only for package @commitlint/config-conventional

Commits

d8e3656 v21.2.4
See full diff in compare view

Updates @types/bun from 1.4.2 to 1.4.4

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@pulumi/pulumi](https://github.com/pulumi/pulumi/tree/HEAD/sdk/nodejs) | `3.267.0` | `3.272.0` | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.15` | `2.6.2` | | [@commitlint/cli](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/cli) | `21.2.3` | `21.2.4` | | [@commitlint/config-conventional](https://github.com/conventional-changelog/commitlint/tree/HEAD/@commitlint/config-conventional) | `21.2.3` | `21.2.4` | | [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.4.2` | `1.4.4` | Updates `@pulumi/pulumi` from 3.267.0 to 3.272.0 - [Release notes](https://github.com/pulumi/pulumi/releases) - [Changelog](https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md) - [Commits](https://github.com/pulumi/pulumi/commits/v3.272.0/sdk/nodejs) Updates `@biomejs/biome` from 2.5.15 to 2.6.2 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/@biomejs/biome@2.6.2/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.2/packages/@biomejs/biome) Updates `@commitlint/cli` from 21.2.3 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.3 to 21.2.4 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.4/@commitlint/config-conventional) Updates `@types/bun` from 1.4.2 to 1.4.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun) --- updated-dependencies: - dependency-name: "@pulumi/pulumi" dependency-version: 3.272.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@biomejs/biome" dependency-version: 2.6.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@commitlint/cli" dependency-version: 21.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: "@types/bun" dependency-version: 1.4.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-26T16:56:30Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: 5cd4c042-fbce-4f30-9861-4ea701352ad2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026

diazdesandi merged commit f57f8c1 into main Oct 31, 2026
3 of 5 checks passed

dependabot Bot deleted the dependabot/bun/minor-and-patch-819cc2d362 branch October 31, 2026 01:33

Navigation Menu

Repository navigation

chore(deps): bump the minor-and-patch group across 1 directory with 5 updates - #34

chore(deps): bump the minor-and-patch group across 1 directory with 5 updates#34
diazdesandi merged 1 commit into
mainfrom
dependabot/bun/minor-and-patch-819cc2d362

dependabot Bot commented on behalf of github Oct 26, 2026

Uh oh!

coderabbitai Bot commented Oct 26, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 26, 2026

v3.272.0

3.272.0 (2026-10-22)

Features

Bug Fixes

Improvements

v3.271.0

3.271.0 (2026-10-21)

Features

Bug Fixes

Improvements

v3.270.0

3.270.0 (2026-10-16)

Bug Fixes

3.272.0 (2026-10-22)

Features

Bug Fixes

Improvements

3.271.0 (2026-10-21)

Features

Bug Fixes

Improvements

3.270.0 (2026-10-16)

Bug Fixes

3.269.0 (2026-10-16)

Biome CLI v2.6.2

2.6.2

Minor Changes

2.6.2

Patch Changes

2.6.1

Patch Changes

2.6.0

Minor Changes

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

21.2.4 (2026-10-18)

v21.2.4

21.2.4 (2026-10-18)

Bug Fixes

Performance Improvements

Docs, etc

21.2.4 (2026-10-18)

Uh oh!

coderabbitai Bot commented Oct 26, 2026

Review skipped

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant