chore(deps): update dependency ultracite to v7.7.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
ultracite (source)	7.1.5 → 7.7.0

---

Release Notes

haydenbleasel/ultracite (ultracite)

v7.7.0

Compare Source

Minor Changes

• 24b0d27: Wire up the nestjs ESLint preset to actually enforce rules. Previously the preset exported an empty const config = [], meaning users who imported ultracite/eslint/nestjs got nothing. It now layers @darraghor/eslint-plugin-nestjs-typed (22 rules covering NestJS conventions, dependency injection correctness, and class-validator/Swagger usage) using the same dynamic-enable pattern as the other framework presets.

  Consumers who already had the empty preset in their config may see new violations on first run.

Patch Changes

• 161418a: Add missing Biome stable rules to the core config:

  • suspicious/noDuplicateDependencies → "error" — flags a dependency listed multiple times in the same group, or across dependencies and devDependencies, in package.json.
  • suspicious/useDeprecatedDate → "off" — GraphQL-only convention requiring a deletionDate argument on @deprecated; too opinionated for the default preset.

• 9a2b548: Pin @angular-eslint/eslint-plugin to ^21.3.1 in packages/cli/package.json. Previously declared as "latest", which defeats lockfile reproducibility and means each bun install could pull a newer version than what was tested at publish time. The current resolved version (21.3.1) is unchanged.

• 44f6d7f: Align ESLint presets with the oxlint configs (the maintained source of truth). Mostly tightens ESLint where oxlint was stricter; a few documented behavioural exceptions oxlint carries (rule conflicts, bun:test compat) are mirrored back.

  core — eslint.mjs now enforces complexity, no-unused-private-class-members, sort-keys, sort-vars, and full prefer-destructuring (object + array). typescript.mjs now enforces no-confusing-void-expression, no-misused-promises, prefer-readonly, strict-boolean-expressions, and sets return-await: ["error", "always"]. import.mjs now sets consistent-type-specifier-style: ["error", "prefer-top-level"].

  next — added next-env.d.ts override that disables import-x/no-unassigned-import on the generated file.

  remix — added routeTree.gen.ts override that disables unicorn/filename-case and unicorn/no-abusive-eslint-disable on the generated file.

  react — disabled react/jsx-boolean-value, react/no-unknown-property, and react/only-export-components to match oxlint.

  jest — broadened test globs to **/*.{test,spec}.{ts,tsx,js,jsx} + **/__tests__/**/*.{ts,tsx,js,jsx} (previously missed *.spec.* and __tests__/). Disabled no-empty-function and promise/prefer-await-to-then in test scope. Disabled jest/require-hook, jest/no-conditional-in-test, jest/no-hooks, jest/prefer-expect-assertions to mirror oxlint's bun:test/mocking accommodations.

  vitest — same test-glob broadening; same no-empty-function / promise/prefer-await-to-then test-scope disables. Removed the prefer-importing-vitest-globals and prefer-to-have-been-called-times disables (oxlint enforces these). Added prefer-lowercase-title: off and valid-title: off to resolve the documented conflict with prefer-describe-function-title (#​665).

• 63f6a18: Drop the redundant react-hooks/exhaustive-deps: "error" override in config/eslint/react/rules/react-hooks.mjs. The dynamic-enable pattern already sets every non-deprecated react-hooks/* rule to "error", so the override was dead code. No behavior change.

• 5a0ce67: Refresh the misleading header comment in config/eslint/core/rules/eslint-typescript.mjs. The disables for the formatting rules (brace-style, comma-dangle, indent, etc.) used to defer to @typescript-eslint's typed equivalents, but those rules were removed in v8. They're now disabled because Prettier/Oxfmt owns formatting. Updated the comment to reflect the actual rationale.

• d681f70: Clean up config/eslint/core/rules/typescript.mjs: remove 22 stale overrides that referenced rules no longer present in @typescript-eslint/eslint-plugin v8.

  Most were formatting rules moved out to @stylistic (block-spacing, brace-style, comma-dangle, comma-spacing, func-call-spacing, indent, key-spacing, keyword-spacing, lines-around-comment, lines-between-class-members, member-delimiter-style, no-extra-parens, object-curly-spacing, padding-line-between-statements, quotes, semi, space-before-blocks, space-before-function-paren, space-infix-ops, type-annotation-spacing). The remaining two (no-type-alias, sort-type-union-intersection-members) were removed/deprecated upstream. All were dead no-ops — no behavior change.

v7.6.5

Compare Source

Patch Changes

• 3e08c25: Fix ultracite init failing with npm error No workspaces found! in npm monorepos. When isMonorepo() was true, nypm was passed workspace: true, which translates to --workspaces for npm — that installs in every workspace package and errors when patterns match nothing. We now skip the workspace flag for npm (the default root install is what we want) while preserving the flag for pnpm (--workspace-root) and yarn classic (-W). Applies to ultracite, husky, lefthook, and lint-staged installs.

v7.6.4

Compare Source

Patch Changes

• aba89bb: Add new oxlint 1.63.0 rules:

  • eslint/logical-assignment-operators → "error" — prefer ||=, &&=, ??= over their longhand equivalents; aligns with the modern-JS baseline.
  • eslint/require-unicode-regexp → "error" — require the u (or v) flag on regex literals for correct Unicode handling.
  • eslint/no-restricted-properties → "off" — purely a project-specific allowlist; no useful default to enforce.
  • unicorn/no-negated-condition → "error" — newly split from the eslint version; the unicorn variant additionally covers ternary expressions and complements the existing eslint/no-negated-condition.
  • jsx-a11y/interactive-supports-focus → "error" — interactive elements (click handlers, role="button", etc.) must be keyboard-focusable; matches the rest of the a11y baseline.
  • vue/return-in-computed-property → "error" — computed properties must return a value; missing return silently breaks reactivity.
  • vue/no-deprecated-model-definition → "error" — flags Vue 2 model: { ... } usage; Vue 3 is the supported target.
  • vitest/prefer-mock-return-shorthand → "error", vitest/no-unneeded-async-expect-function → "error", vitest/prefer-to-have-been-called-times → "error", vitest/prefer-snapshot-hint → "error" — newly split out from the jest plugin; mirrors the existing jest config which has all four enabled.
  • vitest/require-hook → "off" — newly split out from jest; disabled to mirror jest config (bun:test mock.module() must be called at top level).

• 522155e: Set typescript/return-await to ["error", "always"] to resolve a circular conflict between eslint/require-await, typescript/promise-function-async, and typescript/return-await on Promise-returning functions outside try/catch. With the default in-try-catch mode, autofixers chase each other: promise-function-async adds async, require-await then demands an await, and return-await removes any return await outside a try/catch — leaving no resolvable state. The "always" mode keeps return await everywhere, breaking the cycle while preserving consistent stack traces.

v7.6.3

Compare Source

Patch Changes

• f584d93: Disable unicorn/number-literal-case due to oxc-project/oxc#21949.

• ef5c3ae: Fix ultracite check and ultracite fix short-circuiting after the formatter step. Previously, when the formatter (oxfmt or Prettier) exited non-zero, the linter (oxlint, ESLint, Stylelint) was never invoked, hiding lint errors until formatting was clean. The commands now run every step, accumulate failures, and exit with the first failing tool's status. Fixes #​690.

• 3ecb159: Fix the generated oxfmt.config.ts template, which used extends: [ultracite] — a key oxfmt does not recognize, so the preset was silently dropped and built-in options like sortImports never took effect. The template now spreads the preset (...ultracite) so its options are actually applied. Fixes #​689.

• 5a18ec8: Add new oxlint 1.61.0 and 1.62.0 rules:

  • eslint/func-name-matching → "error" — function names should match the variable they're assigned to; matches the project's strict baseline.
  • eslint/no-underscore-dangle → "off" — common patterns like _id (Mongo) and _internal make this rule too noisy in practice.
  • typescript/explicit-member-accessibility → "off" — forcing public/private on every class member is verbose and not idiomatic in modern TS.
  • jest/prefer-expect-assertions → "off" and vitest/prefer-expect-assertions → "off" — requiring expect.assertions(n) in every test is too strict for general use; not all tests need explicit assertion counts.
  • vitest/max-expects → "error" and vitest/max-nested-describe → "error" — newly split out from the jest plugin; mirrors the existing jest config which has both enabled.
  • vitest/no-conditional-in-test → "off" — newly split out from jest; disabled to mirror jest config (mock factories use conditionals for path-based routing).
  • vitest/no-hooks → "off" — newly split out from jest; disabled to mirror jest config (bun:test uses beforeEach for mock.restore()).
  • react/forbid-component-props → "off" — parity with the ESLint config, which already disables this rule.

v7.6.2

Compare Source

Patch Changes

• 5be860c: Automatically detect frameworks during the init process.
• 10d9e95: Support -v as a short alias for --version on the CLI (previously only -V worked).
• 8ff1b96: Fix update command not migrating legacy ultracite/<name> extends entries to ultracite/biome/<name> (e.g. ultracite/core, ultracite/react, ultracite/type-aware, etc.).
• 5e055ce: Ignore Cloudflare Workers' generated worker-configuration.d.ts (produced by wrangler types), matching the existing handling of next-env.d.ts.
• 9cc7416: Add a universal editor target that creates .vscode/settings.json for every VS Code-based editor (VS Code, Cursor, Windsurf, CodeBuddy, Antigravity, IBM Bob, Kiro, Trae, Void) with a single selection. The init prompt now offers a "Universal" option, and --editors universal works as an alias on the CLI.

v7.6.1

Compare Source

Patch Changes

• 2fbded9: Disable the typescript/prefer-readonly-parameter-types Oxlint rule. While the rule is useful for user-authored types, it fires on virtually every parameter that touches a third-party type (Express Request/Response, React events, Node Buffer, ORM models, DOM APIs) because those types aren't deeply readonly internally — leaving users with unfixable violations. Matches the existing ESLint config, which already has this rule off.
• 617affd: Fix dist/, .next/, **/*.gen.*, and other strong-negation (!!) ignore globs being dropped when a consumer's biome.jsonc extends ultracite/biome/core and also defines its own files.includes. The globs moved into config/shared/ignores.jsonc in 7.5.9 were transitively extended through biome/core, and Biome's extend merge doesn't carry files.includes through a two-level chain when the middle config lacks its own entry. The patterns are now inlined directly in biome/core's files.includes (still generated from config/shared/ignores.mjs), matching the pre-7.5.9 behavior.
• d681e08: Remove the nonexistent import-x/enforce-node-protocol-usage rule from the ESLint core config, which caused ESLint 9 to throw Could not find "enforce-node-protocol-usage" in plugin "import-x". Node protocol enforcement is already covered by unicorn/prefer-node-protocol.

v7.6.0

Compare Source

Minor Changes

• 67227c9: Add new Biome rules
• f506624: Add new oxlint 1.160.0 rules

Patch Changes

• a684c4a: Fix Tanstack Query ESLint plugin import
• 4983eaa: Skip the init skill-install prompt when the Ultracite skill is already installed in the current project or globally.

v7.5.9

Compare Source

Patch Changes

• 77e9b41: Aggregate all ignore patterns
• 73fc21c: Code reliability improvements
• 63f7426: Migrate remaining json parsing to jsonc-parser
• aa199d1: fix conflicting prefer-describe-function-title / valid-title rules in vitest
• 402908e: Replace custom yaml parser with dependency
• 3dbfe5c: Validate framework name to prevent injection
• a2cdc0f: Warn if the file looks like it has ultracite config but we couldn't parse it
• 95718bb: Use cross-spawn for cross-platform spawn compatibility
• d09174b: Ignore .open-next in the Biome and ESLint core presets.
• 71aeca4: Remove remaining execSync calls
• e81a604: Add zod for safer json parsing

v7.5.8

Compare Source

Patch Changes

• c35a1b3: Performance improvements - doctor
• 56e4c00: Remove process.exit() - swap with typed Error
• d35d03c: Performance optimizations - mkdir(), readFile()
• ee224a6: Use Commander.js args properly
• a2b7a46: Rework doctor command
• cf4a044: Fix angular eslint plugin typo
• 25eb24f: Optimize dev dep install
• b46537a: Performance optimizations - exists()

v7.5.7

Compare Source

Patch Changes

• a63d9c5: Fix cross-config leaking rules
• d18d0e7: Configure Prettier with frameworks context
• 1d6de0d: Add declaration files for ultracite/oxlint/* and ultracite/oxfmt so TypeScript config imports resolve without ts(7016) errors.
• 1073f34: Ensure init'ed JSON files have newlines

v7.5.6

Compare Source

Patch Changes

• acf4a97: Update oxlint jest rules
• 6905932: Fix vitest/no-importing-vitest-globals conflict
• 4e4dc03: Update oxlint vitest rules
• 6a583d1: Fix oxfmt setup config

v7.5.5

Compare Source

Patch Changes

• 5437f81: Attempt to fix oxlint/oxfmt AGAIN

v7.5.4

Compare Source

Patch Changes

• 66999e0: Fix oxlint and oxfmt yet again

v7.5.3

Compare Source

Patch Changes

• 97c3938: Fix oxlint and oxfmt import paths

v7.5.2

Compare Source

Patch Changes

• 22df7a5: Fix oxlint import issues

v7.5.1

Compare Source

Patch Changes

• e96c55a: Switch oxlint.config.ts to js imports

v7.5.0

Compare Source

Minor Changes

• 7861cf7: Migrate oxlint and oxfmt configurations from JSON to TypeScript using defineConfig. The CLI now generates oxlint.config.ts and oxfmt.config.ts instead of .oxlintrc.json and .oxfmtrc.jsonc, and all internal framework presets have been converted to TypeScript.

Patch Changes

• fdb1493: Exclude package manager lock files (bun.lock, bun.lockb, package-lock.json, yarn.lock, pnpm-lock.yaml) from Biome linting and formatting

v7.4.4

Compare Source

Patch Changes

• e9db6f1: Add IBM Bob agent, editor, and logo
• 5341bcc: Disable vitest/prefer-strict-boolean-matchers to resolve conflict with prefer-to-be-truthy and prefer-to-be-falsy

v7.4.3

Compare Source

Patch Changes

• 42b3552: Update the bundled VS Code settings to use js/ts.tsdk.path and js/ts.tsdk.promptToUseWorkspaceVersion instead of the deprecated typescript.tsdk setting.
• a0a03c6: Allow utf-8 values in the unicorn/text-encoding-identifier-case rule across the bundled ESLint and Oxlint configs.

v7.4.2

Compare Source

Patch Changes

• 94e770e: Remove non-existent oxlint rules (import/no-unresolved, vitest/no-done-callback) for compatibility with oxlint 1.58.0+

v7.4.0

Compare Source

Minor Changes

• c189cf1: Add support for new agent integrations including Zencoder, Ona, OpenClaw, Continue, Snowflake Cortex, Deepagents, Qoder, Kimi CLI, Kode, MCPJam, Mux, Pi, Neovate, Pochi, and AdaL, plus add CodeBuddy as a supported editor.

Patch Changes

• 04d8455: Add no-void rule with allowAsStatement to complement no-floating-promises
• e38d579: Fix DEP0190 deprecation warnings in check, fix, and doctor by routing CLI subprocesses through a shared cross-spawn runner with shell: false, while preserving Windows command resolution and direct file-path argument passing.
• 98cb8c2: Pin ESLint initialization to a peer-compatible dependency set so ultracite init no longer installs an incompatible eslint@latest with eslint-plugin-github
• fd7d05f: Disable conflicting vitest/prefer-called-times oxlint rule to resolve conflict with vitest/prefer-called-once
• 581ea40: Add typed ultracite/oxlint exports for use in oxlint.config.ts.

v7.3.2

Compare Source

Patch Changes

• 8ffeb33: Add support for .oxlintrc.mjs and oxlint.config.ts

v7.3.1

Compare Source

Patch Changes

• f84edff: Fix --type-aware for Biome
• acf301c: Migrate from eslint-plugin-import to import-x
• 5749eb1: Create test frameworks

v7.3.0

Compare Source

Minor Changes

• 0d27e68: fix noUnusedImports removing new imports in agent hooks

Patch Changes

• 668fe62: Add --type-aware flag for biome
• 4280484: Disable max-statements in Oxlint
• d37b046: Disable jsdoc/require-param-type and jsdoc/require-returns-type for TS files

v7.2.5

Compare Source

Patch Changes

• 83bafe4: Disable useValidLang rule for SvelteKit app.html to prevent false positives from %lang% placeholder
• 4df6da9: Disable noUndeclaredVariables for Svelte files to fix false positives with template block variables like {#each}

v7.2.4

Compare Source

Patch Changes

• cfaa912: Remove Jest and Vitest rules from non-test files
• f72f2dc: Add support for copilot hooks
• 66d51fd: Disable import/no-nodejs-modules for Chris Consent
• d1e8490: Create skill

v7.2.3

Compare Source

Patch Changes

• 3cd6e7b: Upgrade Biome to 2.4

v7.2.2

Compare Source

Patch Changes

• 8db75d7: Only run shell: true on windows

v7.2.1

Compare Source

Patch Changes

• 0d21c46: Restore shell for windows

v7.2.0

Compare Source

Minor Changes

• fe9acf6: Use local binaries

Patch Changes

• 357be7e: Store full package manager info from detectPackageManager()
• 8666788: Fix Husky precommit hook

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for semantic-template ready!

Name	Link
🔨 Latest commit	0544cd5
🔍 Latest deploy log	https://app.netlify.com/projects/semantic-template/deploys/69b9c413745e480008938b98
😎 Deploy Preview	https://deploy-preview-103--semantic-template.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for semantic-template ready!

Name	Link
🔨 Latest commit	d8ccb40
🔍 Latest deploy log	https://app.netlify.com/projects/semantic-template/deploys/6a140a334cf2e700084b7896
😎 Deploy Preview	https://deploy-preview-103--semantic-template.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[happy-haki]

Closing: will be superseded by a consolidated dependency update PR with 7-day npm publish rule applied.

[coauthors]

People can be co-author:

Candidate	Reasons	Count	Add this as commit message
@happy-haki	#103 (comment)	1	Co-authored-by: happy-haki <266456141+happy-haki@users.noreply.github.com>

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (^7.1.5). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.