fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@changesets/cli (source)	^2.27.11 -> ^2.27.12
@eslint/js (source)	^9.18.0 -> ^9.19.0
@sveltejs/kit (source)	^2.16.0 -> ^2.17.1
@sveltejs/package (source)	^2.3.7 -> ^2.3.10
@types/node (source)	^22.10.7 -> ^22.13.1
@types/node@<=20.12.0 (source)	20.11.5 -> 20.17.17
carbon-components-svelte	^0.87.1 -> ^0.87.4
carbon-icons-svelte (source)	^12.13.0 -> ^12.14.0
eslint (source)	^9.18.0 -> ^9.19.0
lint-staged	^15.4.1 -> ^15.4.3
playwright-core (source)	~1.49.1 -> ~1.50.1
pnpm (source)	9.15.4 -> 9.15.5
send@<0.19.0	^0.19.0 -> ^0.19.1
svelte (source)	^5.19.0 -> ^5.19.7
typescript-eslint (source)	^8.20.0 -> ^8.23.0
vite (source)	^6.0.9 -> ^6.0.11

---

Release Notes

changesets/changesets (@​changesets/cli)

v2.27.12

Compare Source

Patch Changes

• #​1562 a0f87f1 Thanks @​Netail, @​cefn! - Fixed changelog application when executing using npx and similar tools

• Updated dependencies [a0f87f1]:

  • @​changesets/apply-release-plan@​7.0.8

eslint/eslint (@​eslint/js)

v9.19.0

Compare Source

sveltejs/kit (@​sveltejs/kit)

v2.17.1

Compare Source

Patch Changes

• fix: make route resolution imports root-relative if paths.relative option is false (#​13412)

v2.17.0

Compare Source

Minor Changes

• feat: validate values for cache-control and content-type headers in dev mode (#​13114)

• feat: support server-side route resolution (#​13379)

Patch Changes

• chore: don't error during development when using use:enhance with +server as some third party libraries make it possible to POST forms to it (#​13397)

• fix: skip hooks for server fetch to prerendered routes (#​13377)

• fix: ignore non-entry-point CSS files during inlining (#​13395)

• fix: default server fetch to use prerendered paths (#​13377)

v2.16.1

Compare Source

Patch Changes

• fix: avoid overwriting headers for sub-requests made while loading the error page (#​13341)

• fix: correctly resolve index file entrypoints such as src/service-worker/index.js (#​13354)

• fix: correctly handle relative anchors when using the hash router (#​13356)

sveltejs/kit (@​sveltejs/package)

v2.3.10

Compare Source

Patch Changes

• chore: update to chokidar 4.0.3 (#​13381)

v2.3.9

Compare Source

Patch Changes

• chore: bump svelte2tsx dependency for more up-to-date d.ts output (#​8843)

• fix: adjust declaration map paths (#​8843)

v2.3.8

Compare Source

Patch Changes

• fix: resolve aliases more robustly (#​13351)

carbon-design-system/carbon-components-svelte (carbon-components-svelte)

v0.87.4

Compare Source

v0.87.3

Compare Source

v0.87.2

Compare Source

carbon-design-system/carbon-icons-svelte (carbon-icons-svelte)

v12.14.0

Compare Source

Features

• upgrade @carbon/icons to v11.54.0 (net +2 icons)

eslint/eslint (eslint)

v9.19.0

Compare Source

lint-staged/lint-staged (lint-staged)

v15.4.3

Compare Source

Patch Changes

• #​1512 cbfed1d Thanks @​tarik02! - Adjust TypeScript types for the default export so that it can be used as a value without error TS2693.

v15.4.2

Compare Source

Patch Changes

• #​1509 8827ebf Thanks @​iiroj! - Change lint-staged's dependencies to use caret (^) ranges instead of tilde (~). This makes it easier for package managers to perform dependency management when minor-level updates are also permitted instead of just patch-level.

microsoft/playwright (playwright-core)

v1.50.1

Compare Source

v1.50.0

Compare Source

Test runner

• New option timeout allows specifying a maximum run time for an individual test step. A timed-out step will fail the execution of the test.

  test('some test', async ({ page }) => {
    await test.step('a step', async () => {
      // This step can time out separately from the test
    }, { timeout: 1000 });
  });

• New method test.step.skip() to disable execution of a test step.

  test('some test', async ({ page }) => {
    await test.step('before running step', async () => {
      // Normal step
    });
  
    await test.step.skip('not yet ready', async () => {
      // This step is skipped
    });
  
    await test.step('after running step', async () => {
      // This step still runs even though the previous one was skipped
    });
  });

• Expanded expect(locator).toMatchAriaSnapshot() to allow storing of aria snapshots in separate YAML files.

• Added method expect(locator).toHaveAccessibleErrorMessage() to assert the Locator points to an element with a given aria errormessage.

• Option testConfig.updateSnapshots added the configuration enum changed. changed updates only the snapshots that have changed, whereas all now updates all snapshots, regardless of whether there are any differences.

• New option testConfig.updateSourceMethod defines the way source code is updated when testConfig.updateSnapshots is configured. Added overwrite and 3-way modes that write the changes into source code, on top of existing patch mode that creates a patch file.

  npx playwright test --update-snapshots=changed --update-source-method=3way

• Option testConfig.webServer added a gracefulShutdown field for specifying a process kill signal other than the default SIGKILL.

• Exposed testStep.attachments from the reporter API to allow retrieval of all attachments created by that step.

UI updates

• Updated default HTML reporter to improve display of attachments.
• New button for picking elements to produce aria snapshots.
• Additional details (such as keys pressed) are now displayed alongside action API calls in traces.
• Display of canvas content in traces is error-prone. Display is now disabled by default, and can be enabled via the Display canvas content UI setting.
• Call and Network panels now display additional time information.

Breaking

• expect(locator).toBeEditable() and locator.isEditable() now throw if the target element is not <input>, <select>, or a number of other editable elements.
• Option testConfig.updateSnapshots now updates all snapshots when set to all, rather than only the failed/changed snapshots. Use the new enum changed to keep the old functionality of only updating the changed snapshots.

Browser Versions

• Chromium 133.0.6943.16
• Mozilla Firefox 134.0
• WebKit 18.2

This version was also tested against the following stable channels:

• Google Chrome 132
• Microsoft Edge 132

pnpm/pnpm (pnpm)

v9.15.5: pnpm 9.15.5

Compare Source

Patch Changes

• Verify that the package name is valid when executing the publish command.
• When running pnpm install, the preprepare and postprepare scripts of the project should be executed #​8989.
• Quote args for scripts with shell-quote to support new lines (on POSIX only) #​8980.
• Proxy settings should be respected, when resolving Git-hosted dependencies #​6530.
• Replace strip-ansi with the built-in util.stripVTControlCharacters #​9009.

Platinum Sponsors

Gold Sponsors

pillarjs/send (send@<0.19.0)

v0.19.1

Compare Source

sveltejs/svelte (svelte)

v5.19.7

Compare Source

Patch Changes

• chore: remove unused code from signal logic (#​15195)

• fix: encounter svelte:element in blocks as sibling during pruning css (#​15165)

v5.19.6

Compare Source

Patch Changes

• fix: do not prune selectors like :global(.foo):has(.scoped) (#​15140)

• fix: don't error on slot prop inside block inside other component (#​15148)

• fix: ensure reactions are correctly attached for unowned deriveds (#​15158)

• fix: silence a11y attribute warnings when spread attributes present (#​15150)

• fix: prevent false-positive ownership validations due to hot reload (#​15154)

• fix: widen ownership when calling setContext (#​15153)

v5.19.5

Compare Source

Patch Changes

• fix: improve derived connection to ownership graph (#​15137)

• fix: correctly look for sibling elements inside blocks and components when pruning CSS (#​15106)

v5.19.4

Compare Source

Patch Changes

• fix: Add bind:focused property to HTMLAttributes type (#​15122)

• fix: lazily connect derievds (in deriveds) to their parent (#​15129)

• fix: disallow $state/$derived in const tags (#​15115)

v5.19.3

Compare Source

Patch Changes

• fix: don't throw for undefined non delegated event handlers (#​15087)

• fix: consistently set value to blank string when value attribute is undefined (#​15057)

• fix: optimise || expressions in template (#​15092)

• fix: correctly handle novalidate attribute casing (#​15083)

• fix: expand boolean attribute support (#​15095)

• fix: avoid double deriveds in component props (#​15089)

• fix: add check for is attribute to correctly detect custom elements (#​15086)

v5.19.2

Compare Source

Patch Changes

• fix: address regression with untrack (#​15079)

v5.19.1

Compare Source

Patch Changes

• fix: omit unnecessary nullish coallescing in template expressions (#​15056)

• fix: more efficient template effect grouping (#​15050)

• fix: ensure untrack correctly retains the active reaction (#​15065)

• fix: initialize files bind on hydration (#​15059)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.23.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.22.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

v8.21.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v6.0.11

Compare Source

• fix: preview.allowedHosts with specific values was not respected (#​19246) (aeb3ec8), closes #​19246
• fix: allow CORS from loopback addresses by default (#​19249) (3d03899), closes #​19249

v6.0.10

Compare Source

• fix: try parse server.origin URL (#​19241) (2495022), closes #​19241

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.