chore(deps): update all non-major dependencies#1277
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
chore(deps): update all non-major dependencies#1277renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
16 times, most recently
from
ebc6e1b to
344beb3
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
11 times, most recently
from
4a5dc2e to
b2440c4
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
f0f6df5 to
4bd4338
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
2 times, most recently
from
0bfab6c to
d598458
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
d598458 to
e94f75b
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.4.0→5.5.22.49.5→2.50.25.0.6→5.0.722.19.5→22.19.822.19.10(+1)22.19.5→22.19.822.19.10(+1)v6.0.1→v6.0.2v6.1.0→v6.2.010.4.23→10.4.24v1.5.3→v1.6.017.23.1→17.23.25.5.4→5.5.517.0.0→17.3.01.56.1→1.58.11.58.210.28.0→10.28.210.29.13.7.4→3.8.10.3.16→0.3.171.97.2→1.97.35.46.4→5.49.25.50.05.46.4→5.49.25.50.04.3.5→4.3.68.52.0→8.54.08.0.0-beta.7→8.0.0-beta.134.0.16→4.0.18Release Notes
sveltejs/kit (@sveltejs/adapter-node)
v5.5.2Compare Source
Patch Changes
fix: disable gzip and brotli when precompress=false (#15182)
Updated dependencies [
46c1ebd,2dd74c8,8871b54]:v5.5.1Compare Source
Patch Changes
fix: add validations for protocol, host, and port header values (
d9ae9b0)Updated dependencies [
81cd545,d9ae9b0,8ed8155]:v5.5.0Compare Source
Minor Changes
sveltejs/kit (@sveltejs/kit)
v2.50.2Compare Source
Patch Changes
fix: ensure inlined CSS follows
paths.assetsandpaths.relativesettings (#15153)fix: emit script CSP nonces when
unsafe-inlineis present ifstrict-dynamicis also present (#15221)fix: re-export browser/dev from esm-env (#15206)
fix: use validated args in batch resolver in both csr and ssr (#15215)
fix: ensure CSS inlining includes components that are conditionally rendered (#15153)
fix: only match rest params with matchers when the matcher matches (#15216)
fix: properly handle percent-encoded anchors (e.g.
<a href="#sparkles-%E2%9C%A8">) during prerendering. (#15231)v2.50.1Compare Source
Patch Changes
fix: include
hooks.serverandhooks.universalas explicit Vite build inputs to ensure assets imported by hooks files are correctly discovered (#15178)fix: improves fields type for generic components (#14974)
fix: preload links if href changes (#15191)
v2.50.0Compare Source
Minor Changes
buttonPropsfrom experimental remote form functions; use e.g.<button {...myForm.fields.action.as('submit', 'register')}>Register</button>button instead (#15144)tsconfig/bases (@tsconfig/svelte)
v5.0.7Compare Source
actions/checkout (actions/checkout)
v6.0.2Compare Source
actions/setup-node (actions/setup-node)
v6.2.0Compare Source
postcss/autoprefixer (autoprefixer)
v10.4.24Compare Source
changesets/action (changesets/action)
v1.6.0Compare Source
Minor Changes
342005dThanks @harsha-venugopal-ledn! - Upgrade from Node.js 20 to Node.js 24 LTSeslint-community/eslint-plugin-n (eslint-plugin-n)
v17.23.2Compare Source
🩹 Fixes
📚 Documentation
🧹 Chores
prettier/eslint-plugin-prettier (eslint-plugin-prettier)
v5.5.5Compare Source
Patch Changes
#772
7264ed0Thanks @BPScott! - Bump prettier-linter-helpers dependency to v1.0.1#776
77651a3Thanks @aswils! - fix: bump synckit for yarn PnP ESM issuesindresorhus/globals (globals)
v17.3.0Compare Source
295fba9v17.2.0Compare Source
jasmine: AddthrowUnlessandthrowUnlessAsyncglobals (#335)97f23a7v17.1.0Compare Source
webpackandrspackglobals (#333)65cae73microsoft/playwright (playwright-core)
v1.58.1Compare Source
Highlights
#39036 fix(msedge): fix local network permissions
#39037 chore: update cft download location
#38995 chore(webkit): disable frame sessions on fronzen builds
Browser Versions
v1.58.0Compare Source
v1.57.0Compare Source
pnpm/pnpm (pnpm)
v10.28.2: pnpm 10.28.2Compare Source
Patch Changes
Security fix: prevent path traversal in
directories.binfield.When pnpm installs a
file:orgit:dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked intonode_modules.This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g.,
/etc/passwd,~/.ssh/id_rsa) and have their contents copied when the package is installed.Note: This only affects
file:andgit:dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.Fixed optional dependencies to request full metadata from the registry to get the
libcfield, which is required for proper platform compatibility checks #9950.Platinum Sponsors
Gold Sponsors
v10.28.1Compare Source
prettier/prettier (prettier)
v3.8.1Compare Source
v3.8.0Compare Source
diff
🔗 Release note
publint/publint (publint)
v0.3.17Compare Source
Patch Changes
Fix packing packages with pnpm when
publishConfig.directoryis set (#216)Updated dependencies [
2dcb107]:sass/dart-sass (sass)
v1.97.3Compare Source
could cause outer style rules to be omitted.
sveltejs/svelte (svelte)
v5.49.2Compare Source
Patch Changes
chore: remove SvelteKit data attributes from elements.d.ts (#17613)
fix: avoid erroneous async derived expressions for blocks (#17604)
fix: avoid Cloudflare warnings about not having the "node:crypto" module (#17612)
fix: reschedule effects inside unskipped branches (#17604)
v5.49.1Compare Source
Patch Changes
fix: merge consecutive large text nodes (#17587)
fix: only create async functions in SSR output when necessary (#17593)
fix: properly separate multiline html blocks from each other in
print()(#17319)fix: prevent unhandled exceptions arising from dangling promises in <script> (#17591)
v5.49.0Compare Source
Minor Changes
ShadowRootInitobject to custom elementshadowoption (#17088)Patch Changes
fix: throw for unset
createContextget on the server (#17580)fix: reset effects inside skipped branches (#17581)
fix: preserve old dependencies when updating reaction inside fork (#17579)
fix: more conservative assignment_value_stale warnings (#17574)
fix: disregard
popoverelements when determining whether an element has content (#17367)fix: fire introstart/outrostart events after delay, if specified (#17567)
fix: increment signal versions when discarding forks (#17577)
v5.48.5Compare Source
Patch Changes
fix: run boundary
onerrorcallbacks in a microtask, in case they result in the boundary's destruction (#17561)fix: prevent unintended exports from namespaces (#17562)
fix: each block breaking with effects interspersed among items (#17550)
v5.48.4Compare Source
Patch Changes
v5.48.3Compare Source
Patch Changes
fix: hydration failing with settled async blocks (#17539)
fix: add pointer and touch events to a11y_no_static_element_interactions warning (#17551)
fix: handle false dynamic components in SSR (#17542)
fix: avoid unnecessary block effect re-runs after async work completes (#17535)
fix: avoid using dev-mode array.includes wrapper on internal array checks (#17536)
v5.48.2Compare Source
Patch Changes
waitfunction from internal client index (#17530)v5.48.1Compare Source
Patch Changes
fix: hoist snippets above const in same block (#17516)
fix: properly hydrate await in
{@​html}(#17528)fix: batch resolution of async work (#17511)
fix: account for empty statements when visiting in transform async (#17524)
fix: avoid async overhead for already settled promises (#17461)
fix: better code generation for const tags with async dependencies (#17518)
v5.48.0Compare Source
Minor Changes
parseCssfromsvelte/compiler(#17496)Patch Changes
fix: handle non-string values in
svelte:elementthisattribute (#17499)fix: faster deduplication of dependencies (#17503)
v5.47.1Compare Source
Patch Changes
selectedcontentreactivity (#17486)v5.47.0Compare Source
Minor Changes
<select>elements (#17429)Patch Changes
fix: mark subtree of svelte boundary as dynamic (#17468)
fix: don't reset static elements with debug/snippets (#17477)
sveltejs/language-tools (svelte-check)
v4.3.6Compare Source
Patch Changes
typescript-eslint/typescript-eslint (typescript-eslint)
v8.54.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.1Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
v8.53.0Compare Source
This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.
You can read about our versioning strategy and releases on our website.
vitejs/vite (vite)
v8.0.0-beta.13Compare Source
Features
Bug Fixes
Miscellaneous Chores
Code Refactoring
customResolverinresolve.alias(#21476) (81275c9)@rolldown/pluginutils(#21560) (c367b62)Tests
v8.0.0-beta.12Compare Source
Features
assetsfield for standalone CSS entry points (#21015) (f289b9b)Bug Fixes
Miscellaneous Chores
v8.0.0-beta.11Compare Source
Features
Bug Fixes
tsconfigoption when loading config (#21517) (5025c35)new URLpaths to correct relative file location (#21434) (ca96cbc)Documentation
Miscellaneous Chores
Code Refactoring
experimental.enableNativePlugin: 'resolver'(#21510) (f9d9213)import.meta.dirnameeverywhere (#21509) (7becf5f)v8.0.0-beta.10Compare Source
Bug Fixes
output.inlineDynamicImportoption (#21464) (471ce62)Documentation
build.dynamicImportVarsOptions(#21477) (54ce2ed)v8.0.0-beta.9Compare Source
Features
envPrefixcontains spaces (#21292) (9fcde3c)Bug Fixes
server.listencallback (#21451) (602d786)rolldownCjsExternalPluginforplatform: neutral(#21452) (d2fc4be)Miscellaneous Chores
Code Refactoring
rolldownCjsExternalPlugin(#21450) (ebda8fd)v8.0.0-beta.8Compare Source
⚠ BREAKING CHANGES
import.meta.hot.acceptresolution fallback (#21382)Features
Bug Fixes
process.getBuiltinModuleinstead ofimport('node:module')(#21402) (6633bcb)Code Refactoring
import.meta.hot.acceptresolution fallback (#21382) (71d0797)vitest-dev/vitest (vitest)
v4.0.18Compare Source
🚀 Experimental Features
onModuleRunnerhook toworker.init- by @sheremet-va in #9286 (ea837)🐞 Bug Fixes
meta.urlincreateRequire- by @sheremet-va in #9441 (e0572)View changes on GitHub
v4.0.17Compare Source
🚀 Features
🐞 Bug Fixes
addEventHandler#9371 - by @ThibautMarechal in #9372 and #9371 (40841)process.envandimport.meta.envdefines in inline project - by @hi-ogawa in #9239 (b70c9)ErrorEvent.messagewhen unhandledErrorEvent.erroris null - by @hi-ogawa in #9322 (5d84e)fileParallelismon an instance - by @sheremet-va in #9328 (15006)istanbul-lib-source-mapsusage - by @AriPerkkio in #9344 (b0940)Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.