Bump the npm-minor-and-patch group in /assets with 2 updates

[dependabot]

Bumps the npm-minor-and-patch group in /assets with 2 updates: phoenix and @biomejs/biome.

Updates phoenix from 1.8.9 to 1.8.11

Release notes

Sourced from phoenix's releases.

v1.8.11

Bug fixes

• Fix Phoenix crashing on boot if Mix is available, but not started (#6789)

v1.8.10

Bug fixes

• [Phoenix.CodeReloader] Fix "must restart your server" messages from code reloader when compile.lock mtime changes without a content change (#6753)
• [Phoenix.Endpoint] add missing websocket options (#6758)
• [phoenix.js] Close and retry the longpoll transport when a batch POST times out (#6769)
• [phoenix.js] Release the stale reply binding of a buffered push (#6788)

Enhancements

• [phx.gen.release] Use Bob API to find Docker images in phx.gen.release --docker
• [Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)
• [Phoenix.Router] Support plugs with options in pipe_throught (#6755)
• [Phoenix.Token] document encode options (see the change in plug_crypto)
• [phoenix.js] Ensure transport errors are identifiable (#6763)

Changelog

Sourced from phoenix's changelog.

v1.8.11 (2028-08-12)

Bug fixes

• Fix Phoenix crashing on boot if Mix is available, but not started (#6789)

v1.8.10 (2026-08-10)

Bug fixes

• [Phoenix.CodeReloader] Fix "must restart your server" messages from code reloader when compile.lock mtime changes without a content change (#6753)
• [Phoenix.Endpoint] add missing websocket options (#6758)
• [phoenix.js] Close and retry the longpoll transport when a batch POST times out (#6769)
• [phoenix.js] Release the stale reply binding of a buffered push (#6788)

Enhancements

• [phx.gen.release] Use Bob API to find Docker images in phx.gen.release --docker
• [Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)
• [Phoenix.Router] Support plugs with options in pipe_throught (#6755)
• [Phoenix.Token] document encode options (see the change in plug_crypto)
• [phoenix.js] Ensure transport errors are identifiable (#6763)

Commits

• a986654 Release v1.8.11
• 51121f3 fix starting phoenix with mix available but not started (#6790)
• 109aacd Release v1.8.10
• c6c1761 Update assets
• 9f92654 release the stale reply binding of a buffered push (#6788)
• 5351c74 Improve transport docs
• 5dca4ed Make pipe_through accepts pipelines and all plug forms (#6760)
• 127f545 Include per-mount :check_origin in the origin policy cache key (#6774)
• b6b77e4 Close and retry the longpoll transport when a batch POST times out (#6769)
• 8e69e9c Fix broken doc reference in Phoenix.Debug (#6772)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.7 to 2.5.8

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.8

2.5.8

Patch Changes

• #10710 0a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

• #11251 ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

• #11247 52b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

  Invalid:

  {#each boxes as box}
    {@const area = box.width * box.height}
    <p>{area}</p>
  {/each}

  Valid:

  {#each boxes as box}
    {const area = $derived(box.width * box.height)}
    <p>{area}</p>
  {/each}

• #11252 d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

• #11143 6be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

• #11234 caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

   :root {
     --font-stack:
  -/* comment */
  +    /* comment */
       system-ui;
   }

• #11285 bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

  -:/* comment */ where(div) {}
  +:where(/* comment */ div) {}

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.8

Patch Changes

• #10710 0a0fbc1 Thanks @​dyc3! - Added a new nursery rule useReactCompiler, which reports diagnostics from React Compiler lint mode.

• #11251 ea9dd8a Thanks @​dyc3! - Improved performance of noImportCycles.

• #11247 52b44d6 Thanks @​dyc3! - Added the nursery rule noSvelteLegacyConst, which disallows legacy Svelte {@const} tags and recommends declaration tags with $derived().

  Invalid:

  {#each boxes as box}
    {@const area = box.width * box.height}
    <p>{area}</p>
  {/each}

  Valid:

  {#each boxes as box}
    {const area = $derived(box.width * box.height)}
    <p>{area}</p>
  {/each}

• #11252 d5f5704 Thanks @​Turtle-Hwan! - Fixed #11250: useAwait no longer reports async functions that contain an await using declaration.

• #11143 6be7be1 Thanks @​vznh! - Fixed #11017: noUselessUndefined no longer reports return undefined when the enclosing function has a return type annotation other than undefined or void.

• #11234 caefe39 Thanks @​subotac! - Fixed #11228: CSS block comments between a declaration colon and value now preserve their source indentation.

   :root {
     --font-stack:
  -/* comment */
  +    /* comment */
       system-ui;
   }

• #11285 bca1f73 Thanks @​denbezrukov! - Fixed #11280: CSS formatting keeps comments inside functional pseudo-classes and pseudo-elements instead of moving them before the function name.

  -:/* comment */ where(div) {}
  +:where(/* comment */ div) {}

... (truncated)

Commits

• 6b8f09c ci: release (#11236)
• 23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
• 52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
• 0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions