chore(deps): update npm

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sveltejs/kit (source)	^2.21.0 -> ^2.21.1
@types/node (source)	^22.15.18 -> ^22.15.21
bits-ui	^1.4.8 -> ^1.7.0
eslint-plugin-svelte (source)	^3.8.1 -> ^3.9.0
marked (source)	^15.0.11 -> ^15.0.12
octokit	^4.1.3 -> ^4.1.4
posthog-js (source)	^1.242.2 -> ^1.246.0
posthog-node (source)	^4.17.1 -> ^4.17.2
svelte (source)	^5.30.2 -> ^5.33.1
svelte-sonner	^1.0.1 -> ^1.0.3

---

Release Notes

sveltejs/kit (@​sveltejs/kit)

v2.21.1

Compare Source

Patch Changes

• chore: clarify which functions handleFetch affects (#​13788)

• fix: ensure $env and $app/environment are correctly set while analysing server nodes (#​13790)

huntabyte/bits-ui (bits-ui)

v1.7.0

Compare Source

Minor Changes

• feat(DropdownMenu): new DropdownMenu.CheckboxGroup component (#​1486)

• feat(ContextMenu): new ContextMenu.CheckboxGroup component (#​1486)

• feat(Menubar): new Menubar.CheckboxGroup component (#​1486)

Patch Changes

• fix(Select): ensure scroll buttons render on subsequent mounts (#​1484)

• fix(Combobox): ensure scroll buttons render on subsequent mounts (#​1484)

v1.6.1

Compare Source

Patch Changes

• fix(Tooltip): ensure only one tooltip within a Provider can be open at a time (#​1481)

• fix(Command): replace encodeURIComponent with css.escape for attribute values (#​1482)

v1.6.0

Compare Source

Minor Changes

• feat(Slider): expose thumb active state (#​1471)

Patch Changes

• fix(DateRangeField): ensure prepopulated value takes priority over placeholder for validation (#​1479)

• fix(NavigationMenu): do not close Sub content when clicking the trigger (#​1473)

• fix(NavigationMenu): render Content without Viewport (#​1474)

• fix(DateField): ensure prepopulated value takes priority over placeholder for validation (#​1479)

v1.5.3

Compare Source

Patch Changes

• chore: remove internal uses of parameter properties (#​1466)

v1.5.2

Compare Source

Patch Changes

• fix(RangeCalendar): ensure weekStartsOn is absolute and fallback to locale if not provided (#​1462)

• fix(DateRangePicker): use current field to determine max days in month (#​1460)

• fix(DateRangePicker): ensure weekStartsOn is absolute and fallback to locale if not provided (#​1462)

• fix(DatePicker): ensure weekStartsOn is absolute and fallback to locale if not provided (#​1462)

• fix(Calendar): ensure weekStartsOn is absolute and fallback to locale if not provided (#​1462)

• fix(DateRangeField): use current field to determine max days in month (#​1460)

v1.5.1

Compare Source

Patch Changes

• fix(NavigationMenu): allow roving focus to link items (#​1457)

v1.5.0

Compare Source

Minor Changes

• feat(Menu): add onSelect for SubTrigger (#​1454)

Patch Changes

• fix(ScrollArea): ensure thumb properly restores previous position (#​1455)

• fix(DatePicker): export Portal parts (#​1451)

• fix(Menu): remove unused closeOnSelect prop from SubTrigger components (#​1453)

sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)

v3.9.0

Compare Source

Minor Changes

• #​1235 6e86e30 Thanks @​43081j! - Improve performance of ignore comment extraction and add support for comma-separated ignore codes

v3.8.2

Compare Source

Patch Changes

• #​1231 0681f90 Thanks @​marekdedic! - fix(consistent-selector-style): Fixed detections of repeated elements such as in {#each}

markedjs/marked (marked)

v15.0.12

Compare Source

Bug Fixes

• use esbuild for accurate sourcemaps (#​3670) (7a6b2d7)

octokit/octokit.js (octokit)

v4.1.4

Compare Source

Bug Fixes

• deps: add explicit dependency on @octokit/webhooks (#​2847) (3589cd2), closes #​2844

PostHog/posthog-js (posthog-js)

v1.246.0

Compare Source

• fix: Block newer google bots (#​1974)

v1.245.2

Compare Source

• fix: linked flag any variant match (#​1972)
• fix: modernise domain spelunking cookie setting code (#​1973)
• chore: fix changelog (#​1971)

v1.245.1

Compare Source

• chore: update some dependencies (#​1969)
• fix: don't call receivedFeatureFlags if flags were disabled (#​1964)
• fix: csp trailing slash (#​1967)

v1.245.0

Compare Source

• feat: add new options for survey positions (#​1965)

v1.244.0

Compare Source

• automation let us down here, and this is identical to 1.243.1

v1.243.1

Compare Source

• feat: suppression matching (#​1937)
• fix: survey should reappear after url is matching again (#​1962)
• feat: sample violations for easier testing (#​1966)
• feat: allow answer question when clicking on the choice (#​1958)

v1.242.3

Compare Source

• fix: add new relic to payload host denylist (#​1952)
• chore: remove unused function from survey extensions (#​1960)

PostHog/posthog-js-lite (posthog-node)

v4.17.2

Compare Source

1. chore: improve event prop types
2. fix: no throw in sendImmediate

sveltejs/svelte (svelte)

v5.33.1

Compare Source

Patch Changes

• fix: make deriveds on the server lazy again (#​15964)

v5.33.0

Compare Source

Minor Changes

• feat: XHTML compliance (#​15538)

• feat: add fragments: 'html' | 'tree' option for wider CSP compliance (#​15538)

v5.32.2

Compare Source

Patch Changes

• chore: simplify <pre> cleaning (#​15980)

• fix: attach __svelte_meta correctly to elements following a CSS wrapper (#​15982)

• fix: import untrack directly from client in svelte/attachments (#​15974)

v5.32.1

Compare Source

Patch Changes

• Warn when an invalid <select multiple> value is given (#​14816)

v5.32.0

Compare Source

Minor Changes

• feat: warn on implicitly closed tags (#​15932)

• feat: attachments fromAction utility (#​15933)

Patch Changes

• fix: only re-run directly applied attachment if it changed (#​15962)

v5.31.1

Compare Source

Patch Changes

• fix: avoid auto-parenthesis for special-keywords-only MediaQuery (#​15937)

v5.31.0

Compare Source

Minor Changes

• feat: allow state fields to be declared inside class constructors (#​15820)

Patch Changes

• fix: Add missing AttachTag in Tag union type inside the AST namespace from "svelte/compiler" (#​15946)

wobsoriano/svelte-sonner (svelte-sonner)

v1.0.3

Compare Source

Patch Changes

• be39b67: Avoid triggering nested $effect updates on dismissal

v1.0.2

Compare Source

Patch Changes

• ae0b9fa: Fixed an issue where usage of toast inside $effect causes an infinite loop

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
svelte-changelog	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 24, 2025 11:12am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Explain this complex logic.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai explain this code block.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and explain its main purpose.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.