chore(deps): update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@biomejs/biome (source)	^1.7.0 -> ^1.7.1
cssnano	^7.0.0 -> ^7.0.1
dompurify	^3.1.0 -> ^3.1.1
vite (source)	^5.2.9 -> ^5.2.10

---

Release Notes

biomejs/biome (@​biomejs/biome)

v1.7.1

Compare Source

Editors

Bug fixes

• Fix #​2403 by printing the errors in the client console. Contributed by @​ematipico

Formatter

Bug fixes

• Add parentheses for the return expression that has leading multiline comments. #​2504. Contributed by @​ah-yu

• Correctly format dangling comments of continue statements. #​2555. Contributed by @​ah-yu

Linter

Bug fixes

• Fix case where jsxRuntime wasn't being respected by useImportType rule (#​2473).Contributed by @​arendjr
• Fix #​2460, where the rule noUselessFragments was crashing the linter in some cases. Now cases like these are correctly handled:

  callFunction(<>{bar}</>)

  Contributed by @​ematipico
• Fix #​2366, where noDuplicateJsonKeys incorrectly computed the kes to highlight. Contributed by @​ematipico

Enhancements

• The rule noMisplacedAssertions now considers valid calling expect inside waitFor:

  import { waitFor } from '@​testing-library/react';
  
  await waitFor(() => {
    expect(111).toBe(222);
  });

  Contributed by @​ematipico

cssnano/cssnano (cssnano)

v7.0.1: v7.0.1

Compare Source

Patch changes

Update postcss-calc dependency to latest version

cure53/DOMPurify (dompurify)

v3.1.1: DOMPurify 3.1.1

Compare Source

• Fixed an mXSS sanitiser bypass reported by @​icesfont
• Added new code to track element nesting depth
• Added new code to enforce a maximum nesting depth of 255
• Added coverage tests and necessary clobbering protections

Note that this is a security release and should be upgraded to immediately. Please also note that further releases may follow as the underlying vulnerability is apparently new and further variations may be discovered.

vitejs/vite (vite)

v5.2.10

Compare Source

• revert: perf: use workspace root for fs cache (#​15712) (#​16476) (77e7359), closes #​15712 #​16476
• fix: add base to virtual html (#​16442) (721f94d), closes #​16442
• fix: adjust esm syntax judgment logic (#​16436) (af72eab), closes #​16436
• fix: don't add outDirs to watch.ignored if emptyOutDir is false (#​16453) (6a127d6), closes #​16453
• fix(cspNonce): don't overwrite existing nonce values (#​16415) (b872635), closes #​16415
• feat: show warning if root is in build.outDir (#​16454) (11444dc), closes #​16454
• feat: write cspNonce to style tags (#​16419) (8e54bbd), closes #​16419
• chore(deps): update dependency eslint-plugin-n to v17 (#​16381) (6cccef7), closes #​16381

---

Configuration

📅 Schedule: Branch creation - "every 2 weeks on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[github-actions]

Playwright E2E Test Results

78 tests  ±0   78 ✅ ±0   1m 49s ⏱️ -3s
69 suites ±0    0 💤 ±0 
 1 files   ±0    0 ❌ ±0 

Results for commit 41b9281. ± Comparison against base commit c431875.

♻️ This comment has been updated with latest results.