chore(deps): Bump the bun-minor-patch group across 1 directory with 5 updates

[dependabot]

Bumps the bun-minor-patch group with 5 updates in the / directory:

Package	From	To
@insurup/sdk	0.1.35	0.1.42
@stricli/core	1.2.7	1.3.0
open	11.0.0	11.0.1
@biomejs/biome	2.4.16	2.5.9
@types/bun	1.3.14	1.4.0

Updates @insurup/sdk from 0.1.35 to 0.1.42

Release notes

Sourced from @​insurup/sdk's releases.

v0.1.42

Changes

• ci: fix publish failing with empty version on draft releases @​kerem-acer (#80)

Contributors

@​kerem-acer

v0.1.41

Changes

• feat: align policy sdk with core endpoints @​berkansr (#79)

Contributors

@​berkansr and @​github-actions[bot]

v0.1.40

Changes

• fix(contracts): align WebhookEvent values + add agentBranchIds @​ahmetcantiryaki (#77)

Contributors

@​ahmetcantiryaki and @​github-actions[bot]

v0.1.39

Changes

• fix(sdk): correct reviseProposal + setProposalBranch wire contracts @​kerem-acer (#76)

Contributors

@​github-actions[bot] and @​kerem-acer

v0.1.38

Changes

• No changes

Contributors

@​github-actions[bot] and @​kerem-acer

v0.1.37

Changes

• fix(sdk): align proposal detail contract + document routes with deployed API @​kerem-acer (#74)

... (truncated)

Commits

• 9eec9af ci: derive publish version from release.tag_name, fail fast if empty (#80)
• 5506f2f feat: align policy sdk with core endpoints (#79)
• d585a93 chore: bump version to 0.1.40
• 41f57b1 fix(contracts): align WebhookEvent values + add agentBranchIds (#77)
• a79906e chore: bump version to 0.1.39
• 115bfc8 fix(sdk): correct reviseProposal + setProposalBranch wire contracts (#76)
• b5384be chore: bump version to 0.1.38
• b85072c fix(contracts): add missing enabled flag to InsuranceProduct (#75)
• a67d40b chore: bump version to 0.1.37
• 7f714e3 fix(sdk): align proposal detail contract + document routes with deployed API ...
• Additional commits viewable in compare view

Updates @stricli/core from 1.2.7 to 1.3.0

Release notes

Sourced from @​stricli/core's releases.

v1.3.0

1.3.0 (2026-07-16)

🚀 Features

• core integrations for built-in flags and lifecycle hooks (c6095a4)

🩹 Fixes

• consolidate ansi color logic for both streams (d19f9d0)

❤️ Thank You

• Michael Molisani

v1.2.9

1.2.9 (2026-07-02)

🩹 Fixes

• use correct ANSI code to reset bold mode for routes (18ed140)

❤️ Thank You

• Michael Molisani

v1.2.8

1.2.8 (2026-06-18)

🩹 Fixes

• handle argument escape sequence in route scanner (87461d5)

❤️ Thank You

• Michael Molisani

Changelog

Sourced from @​stricli/core's changelog.

1.3.0 (2026-07-16)

🚀 Features

• core integrations for built-in flags and lifecycle hooks (c6095a4)

🩹 Fixes

• consolidate ansi color logic for both streams (d19f9d0)

❤️ Thank You

• Michael Molisani

1.2.9 (2026-07-02)

🩹 Fixes

• use correct ANSI code to reset bold mode for routes (18ed140)

❤️ Thank You

• Michael Molisani

1.2.8 (2026-06-18)

🩹 Fixes

• handle argument escape sequence in route scanner (87461d5)

❤️ Thank You

• Michael Molisani

Commits

• 692ce63 chore(release): 1.3.0
• 7ecb7fe docs: default integrations, relation to app config
• c6095a4 feat: core integrations for built-in flags and lifecycle hooks
• 0b9348e Merge pull request #180 from bloomberg/docs/llms-txt
• 86f71b7 docs: add llms.txt generation
• d94d1d1 docs: link to stricli org on npmx in navbar/footer
• d19f9d0 fix: consolidate ansi color logic for both streams
• 00a674c ci(publish): explicitly set prerelease=false when making latest release
• 34821bd Merge pull request #173 from bloomberg/release-5
• 467e572 chore(release): 1.2.9
• Additional commits viewable in compare view

Updates open from 11.0.0 to 11.0.1

Release notes

Sourced from open's releases.

v11.0.1

• Fix WSL failure when the working directory is unreachable from Windows 6ac3fe4

---

sindresorhus/open@v11.0.0...v11.0.1

Commits

• f38acc8 11.0.1
• 6ac3fe4 Fix WSL failure when the working directory is unreachable from Windows
• a30acc7 Meta tweaks
• See full diff in compare view

Updates @biomejs/biome from 2.4.16 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>
    export function greet() {
      console.log("Hello!");

... (truncated)

Commits

• 2081460 ci: release (#11309)
• 6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
• a8798ea feat: useNamedLayer (#11377)
• 85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
• e65f07e feat(lint): nursery useControlLabel (#11312)
• ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
• 6b8f09c ci: release (#11236)
• 23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
• 52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
• 0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
• Additional commits viewable in compare view

Updates @types/bun from 1.3.14 to 1.4.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions