[bun](deps-dev): Bump the dev-deps group in /react with 4 updates

[dependabot]

Bumps the dev-deps group in /react with 4 updates: @biomejs/biome, @types/node, @types/react and lefthook.

Updates @biomejs/biome from 2.2.3 to 2.2.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.2.4

2.2.4

Patch Changes

• #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

• #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

  In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

• #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

• #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

  Example

  type BagOfPromises = {
    // This is an index signature definition. It declares that instances of type
    // `BagOfPromises` can be indexed using arbitrary strings.
    [property: string]: Promise<void>;
  };
  let bag: BagOfPromises = {};
  // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is
  // considered an access to the string index, and a Promise is expected.
  bag.iAmAPromise;

• #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

• #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

  In the following example, member as previously reported as unused. It is no longer reported.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.2.4

Patch Changes

• #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

• #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

  In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

• #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

• #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

  Example

  type BagOfPromises = {
    // This is an index signature definition. It declares that instances of type
    // `BagOfPromises` can be indexed using arbitrary strings.
    [property: string]: Promise<void>;
  };
  let bag: BagOfPromises = {};
  // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is
  // considered an access to the string index, and a Promise is expected.
  bag.iAmAPromise;

• #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

• #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

  In the following example, member as previously reported as unused. It is no longer reported.

  class TsBioo {
    private member: number;
  set_with_name(name: string, value: number) {
  this[name] = value;
  }
  }

... (truncated)

Commits

• 5d212c5 ci: release (#7450)
• 351bccd chore: restore release files
• 32dbfa1 ci: release (#7413)
• 75b6a0d feat(linter): add rule noJsxLiterals (#7248)
• 53ff5ae feat(analyse/json): add noDuplicateDependencies rule (#7142)
• See full diff in compare view

Updates @types/node from 24.3.1 to 24.4.0

Commits

• See full diff in compare view

Updates @types/react from 19.1.12 to 19.1.13

Commits

• See full diff in compare view

Updates lefthook from 1.12.4 to 1.13.0

Release notes

Sourced from lefthook's releases.

v1.13.0

Changelog

• 379d1fb0e7711ab3252732d84e103b33f22b9a03 chore: simplify PR template
• 6e0e843857eae86d98afe7f62edd200a7c040660 feat: fail on change (#1095)
• 8aba4e3063059f604694f73847a8d9916a3475b4 feat: recursively log successful results in summary (#1108)
• 97734e3afc830c0973dddfcfad28edeb2f368940 fix: add mutex to prevent concurrent git adds (#1115)
• 85521644812563675250bda68860f3de60a4425c fix: groups with successes and skips are successful (#1107)
• 0b679d01a02b90dd7d8a97ee79adc22497dc0882 fix: set --force for git add command (#1104)
• 69679a987e24de54f9ac2f10d2518564e7a50dda fix: use batched cmd for calculating git hashes (#1116)
• 1b42ebb2a1519a602c7db1098493a143462e1444 refactor: improve structuring (#1103)

Changelog

Sourced from lefthook's changelog.

1.13.0 (2025-09-11)

• fix: use batched cmd for calculating git hashes (#1116) by @​mrexox
• fix: add mutex to prevent concurrent git adds (#1115) by @​mrexox
• refactor: improve structuring (#1103) by @​mrexox
• feat: fail on change (#1095) by @​olivier-lacroix
• fix: set --force for git add command (#1104) by @​michaelm
• feat: recursively log successful results in summary (#1108) by @​siler
• fix: groups with successes and skips are successful (#1107) by @​siler

Commits

• 89564df 1.13.0: bugfixes and --fail-on-changes option
• 69679a9 fix: use batched cmd for calculating git hashes (#1116)
• 97734e3 fix: add mutex to prevent concurrent git adds (#1115)
• 1b42ebb refactor: improve structuring (#1103)
• 6e0e843 feat: fail on change (#1095)
• 379d1fb chore: simplify PR template
• 0b679d0 fix: set --force for git add command (#1104)
• 8aba4e3 feat: recursively log successful results in summary (#1108)
• 8552164 fix: groups with successes and skips are successful (#1107)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud