Skip to content

Bump the npm group across 1 directory with 8 updates #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the npm group across 1 directory with 8 updates #17

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the npm group with 8 updates in the / directory:

Package From To
js-yaml 4.1.0 4.1.1
@sveltejs/adapter-auto 6.1.1 7.0.0
@sveltejs/kit 2.46.4 2.49.2
prettier 3.6.2 3.7.4
prettier-plugin-svelte 3.4.0 3.4.1
svelte 5.39.11 5.46.1
svelte-check 4.3.3 4.3.5
vite 7.1.9 7.3.0

Updates js-yaml from 4.1.0 to 4.1.1

Changelog

Sourced from js-yaml's changelog.

[4.1.1] - 2025-11-12

Security

  • Fix prototype pollution issue in yaml merge (<<) operator.
Commits

Updates @sveltejs/adapter-auto from 6.1.1 to 7.0.0

Release notes

Sourced from @​sveltejs/adapter-auto's releases.

@​sveltejs/adapter-auto@​7.0.0

Major Changes

  • feat: update adapter-vercel to version 6 (#14737)
Changelog

Sourced from @​sveltejs/adapter-auto's changelog.

7.0.0

Major Changes

  • feat: update adapter-vercel to version 6 (#14737)
Commits

Updates @sveltejs/kit from 2.46.4 to 2.49.2

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

@​sveltejs/kit@​2.49.1

Patch Changes

  • fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#15013)

  • fix: TypeError when doing response.clone() in page load (#15005)

@​sveltejs/kit@​2.49.0

Minor Changes

  • feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

@​sveltejs/kit@​2.48.8

Patch Changes

  • breaking: invalid now must be imported from @sveltejs/kit (#14768)

  • breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

@​sveltejs/kit@​2.48.7

Patch Changes

  • fix: allow multiple server-timing headers (#14700)

  • fix: allow access to root-level issues in schema-less forms (#14893)

  • fix: allow hosting hash-based apps from non-index.html files (#14825)

@​sveltejs/kit@​2.48.6

Patch Changes

  • fix: clear issues upon passing validation (#14683)

  • fix: don't use fork of unrelated route (#14947)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

2.49.1

Patch Changes

  • fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#15013)

  • fix: TypeError when doing response.clone() in page load (#15005)

2.49.0

Minor Changes

  • feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

2.48.8

Patch Changes

  • breaking: invalid now must be imported from @sveltejs/kit (#14768)

  • breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

2.48.7

Patch Changes

  • fix: allow multiple server-timing headers (#14700)

  • fix: allow access to root-level issues in schema-less forms (#14893)

  • fix: allow hosting hash-based apps from non-index.html files (#14825)

2.48.6

Patch Changes

... (truncated)

Commits
  • e9752a1 Version Packages (#15015)
  • 37619d2 docs: update invalidateAll documentation to mention query functions (#15042)
  • 1f2b4c3 fix: Correctly handle shared memory for DataView initialization in deserializ...
  • cd6837c test(kit): add regression test for the posixied instrumentation file (#15023)
  • 08a153b fix(kit): ensure instrumentation file is posixified on Windows (#14993)
  • 9d1c523 chore: More flaky test fixes (#15020)
  • ad71199 fix: Stop re-loading already-loaded CSS during server-side route resolution (...
  • f555ba6 Version Packages (#15007)
  • df05c8f fix: suppress state_referenced_locally warnings in `.svelte-kit/generated/r...
  • 977b8bd Bugfix: Fix #15004 by applying MDN recommended fix when proxying Response in ...
  • Additional commits viewable in compare view

Updates prettier from 3.6.2 to 3.7.4

Release notes

Sourced from prettier's releases.

3.7.4

What's Changed

🔗 Changelog

3.7.3

What's Changed

🔗 Changelog

3.7.2

What's Changed

🔗 Changelog

3.7.1

🔗 Changelog

3.7.0

diff

🔗 Release note

Changelog

Sourced from prettier's changelog.

3.7.4

diff

LWC: Avoid quote around interpolations (#18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>
<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>
<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;
// Prettier 3.7.3
type Foo = /** comment / (/* comment */ a | b) | c;
// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);
// Prettier 3.7.3 (first format)
type X = (A | B) &
(// comment
A | B);
// Prettier 3.7.3 (second format)
type X = (
| A
</tr></table>

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for prettier since your current version.


Updates prettier-plugin-svelte from 3.4.0 to 3.4.1

Changelog

Sourced from prettier-plugin-svelte's changelog.

3.4.1

  • (fix) externalize all prettier imports
  • (fix) don't remove parantheses of bind:ings with as type casts
Commits

Updates svelte from 5.39.11 to 5.46.1

Release notes

Sourced from svelte's releases.

[email protected]

Patch Changes

  • fix: type currentTarget in on function (#17370)

  • fix: skip static optimisation for stateless deriveds after await (#17389)

  • fix: prevent infinite loop when HMRing a component with an await (#17380)

[email protected]

Minor Changes

  • feat: Add csp option to render(...), and emit hashes when using hydratable (#17338)

[email protected]

Patch Changes

  • fix: race condition when importing AsyncLocalStorage (#17350)

[email protected]

Patch Changes

  • fix: correctly reschedule deferred effects when reviving a batch after async work (#17332)

  • fix: correctly print !doctype during print (#17341)

[email protected]

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

[email protected]

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

[email protected]

Patch Changes

  • fix: don't issue a11y warning for <video> without captions if it has no src (#17311)

  • fix: add srcObject to permitted <audio>/<video> attributes (#17310)

[email protected]

... (truncated)

Changelog

Sourced from svelte's changelog.

5.46.1

Patch Changes

  • fix: type currentTarget in on function (#17370)

  • fix: skip static optimisation for stateless deriveds after await (#17389)

  • fix: prevent infinite loop when HMRing a component with an await (#17380)

5.46.0

Minor Changes

  • feat: Add csp option to render(...), and emit hashes when using hydratable (#17338)

5.45.10

Patch Changes

  • fix: race condition when importing AsyncLocalStorage (#17350)

5.45.9

Patch Changes

  • fix: correctly reschedule deferred effects when reviving a batch after async work (#17332)

  • fix: correctly print !doctype during print (#17341)

5.45.8

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

5.45.7

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

5.45.6

... (truncated)

Commits

Updates svelte-check from 4.3.3 to 4.3.5

Release notes

Sourced from svelte-check's releases.

[email protected]

Patch Changes

  • fix: ensure await-block type is preserved in the latest Svelte version (#2895)

[email protected]

Patch Changes

  • chore: use machine format when run by Claude Code (#2870)
Commits
  • 63a22b8 Version Packages (#2896)
  • d0562f9 perf: only create objects for completion items for svelte syntax once (#2900)
  • 96e8ca8 fix(syntax): sveltejs ts highlighting when trailing type alias misses semicol...
  • 910437c fix: add some limit to store auto-import (#2909)
  • 383e689 perf: optimize path normalization (#2907)
  • 7985299 perf: avoid global completion in component start tag (#2904)
  • 35a3390 chore: skip document symbols timeout in test (#2903)
  • fae32d3 perf: optimize module resolution cache invalidation check (#2902)
  • b640868 [perf]: early return in getCompletions if in style or script tag (#2899)
  • b6ebbd8 fix: ensure await-block type is preserved in the latest Svelte version (#2895)
  • Additional commits viewable in compare view

Updates vite from 7.1.9 to 7.3.0

Release notes

Sourced from vite's releases.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.0 (2025-12-15)

Features

  • deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

Performance Improvements

Documentation

  • clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

7.2.4 (2025-11-20)

Bug Fixes

  • revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

  • allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)
  • deps: update all non-major dependencies (#21096) (6a34ac3)
  • deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

Miscellaneous Chores

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm group across 1 directory with 8 updates
cc959d9 
Bumps the npm group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.0` | `4.1.1` |
| [@sveltejs/adapter-auto](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-auto) | `6.1.1` | `7.0.0` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.46.4` | `2.49.2` |
| [prettier](https://github.com/prettier/prettier) | `3.6.2` | `3.7.4` |
| [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) | `3.4.0` | `3.4.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.39.11` | `5.46.1` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.3` | `4.3.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.1.9` | `7.3.0` |



Updates `js-yaml` from 4.1.0 to 4.1.1
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@4.1.0...4.1.1)

Updates `@sveltejs/adapter-auto` from 6.1.1 to 7.0.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-auto/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/adapter-auto)

Updates `@sveltejs/kit` from 2.46.4 to 2.49.2
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `prettier` from 3.6.2 to 3.7.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.6.2...3.7.4)

Updates `prettier-plugin-svelte` from 3.4.0 to 3.4.1
- [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/v3.4.1/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/prettier-plugin-svelte/commits/v3.4.1)

Updates `svelte` from 5.39.11 to 5.46.1
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte)

Updates `svelte-check` from 4.3.3 to 4.3.5
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/[email protected]@4.3.5)

Updates `vite` from 7.1.9 to 7.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@sveltejs/adapter-auto"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: prettier
  dependency-version: 3.7.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: prettier-plugin-svelte
  dependency-version: 3.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: svelte
  dependency-version: 5.46.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: svelte-check
  dependency-version: 4.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vite
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant