fix(deps): update all non-major dependencies #344
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.5.6->6.5.107.1.0->7.1.19.32.0->9.35.05.2.6->5.2.71.54.2->1.55.06.0.2->6.1.02.27.3->2.38.12.4.1->2.5.06.1.0->6.2.06.1.0->6.2.06.6.4->6.8.022.17.0->22.18.19.32.0->9.35.03.11.0->3.12.316.3.0->16.4.024.5.0->24.8.010.14.0->10.15.110.14.0->10.15.15.38.0->5.38.105.38.0->5.38.108.39.0->8.43.01.1.2->1.1.4Release Notes
withastro/astro (@astrojs/netlify)
v6.5.10Compare Source
Patch Changes
#14326
c24a8f4Thanks @jsparkdev! - Updatesviteversion to fix CVEUpdated dependencies []:
v6.5.9Compare Source
Patch Changes
#14269
4823c42Thanks @florian-lefebvre! - Updatescontext.netlifyto implement all its propertiesUpdated dependencies []:
v6.5.8Compare Source
Patch Changes
#14240
77b18fbThanks @delucis! - Increases the minimum supported version of Astro to 5.7.0Updated dependencies []:
v6.5.7Compare Source
Patch Changes
4d16de7]:withastro/astro (@astrojs/svelte)
v7.1.1Compare Source
Patch Changes
c24a8f4Thanks @jsparkdev! - Updatesviteversion to fix CVEeslint/eslint (@eslint/js)
v9.35.0Compare Source
v9.34.0Compare Source
v9.33.0Compare Source
fontsource/font-files (@fontsource/pt-sans)
v5.2.7Compare Source
microsoft/playwright (@playwright/test)
v1.55.0Compare Source
sveltejs/kit (@sveltejs/adapter-auto)
v6.1.0Compare Source
Minor Changes
Patch Changes
ece3906,5ac9d27,fed6331,69f4e5f,6b34122,9493537,f67ba09]:sveltejs/kit (@sveltejs/kit)
v2.38.1Compare Source
Patch Changes
fix: enable redirects from queries (#14400)
fix: remove empty nodes from serialized server load data (#14404)
fix: allow commands from within endpoints (#14343)
v2.38.0Compare Source
Minor Changes
query.batch(#14272)v2.37.1Compare Source
Patch Changes
fix: serialize server
loaddata before passing to universalload, to handle mutations and promises (#14298)fix: resolve_route prevent dropping a trailing slash of id (#14294)
fix: assign correct status code to form submission error on the client (#14345)
fix: un-proxy
form.result(#14346)v2.37.0Compare Source
Minor Changes
feat: automatically resolve
query.refresh()promises on the server (#14332)feat: allow query.set() to be called on the server (#14304)
Patch Changes
fix: disable CSRF checks in dev (#14335)
fix: allow redirects to external URLs from within form functions (#14329)
fix: add type definitions for
query.set()method to override the value of a remote query function (#14303)fix: ensure uniqueness of
form.for(...)across form functions (#14327)v2.36.3Compare Source
Patch Changes
fix: bump devalue (#14323)
chore: consolidate dev checks to use
esm-envinstead of a__SVELTEKIT_DEV__global (#14308)fix: reset form inputs by default when using remote form functions (#14322)
v2.36.2Compare Source
Patch Changes
chore: make config deprecation warnings more visible (#14281)
chore: remove redundant Not Found error message (#14289)
chore: deprecate
csrf.checkOriginin favour ofcsrf.trustedOrigins: ['*'](#14281)v2.36.1Compare Source
Patch Changes
$app/navigationworks in test files (#14195)v2.36.0Compare Source
Minor Changes
csrf.trustedOriginsconfiguration (#14021)Patch Changes
fix: correctly decode custom types streamed from a server load function (#14261)
fix: add trailing slash pathname when generating typed routes (#14065)
v2.35.0Compare Source
Minor Changes
Patch Changes
v2.34.1Compare Source
Patch Changes
fix: support multiple cookies with the same name across different paths and domains (
b2c5d02)fix: add link header when preloading font (#14200)
fix:
cookies.get(...)returnsundefinedfor a just-deleted cookie (b2c5d02)fix: load env before prerender (
c5f7139)v2.34.0Compare Source
Minor Changes
envaccess during prerender (#14243)Patch Changes
fix: clone
fetchresponses so that headers are mutable (#13942)fix: serialize server
loaddata before passing to universalload, to handle mutations (#14268)fix: allow
asset(...)to be used with imported assets (#14270)v2.33.1Compare Source
Patch Changes
fix: make paths in .css assets relative (#14262)
fix: avoid copying SSR stylesheets to client assets (#13069)
v2.33.0Compare Source
Minor Changes
Patch Changes
fix: use correct flag for server tracing (#14250)
fix: correct type names for new
handleUnseenRoutesoption (#14254)chore: Better docs and error message for missing
@opentelemetry/apidependency (#14250)v2.32.0Compare Source
Minor Changes
response.bodystream data as base64 in page (#11473)Patch Changes
.remote.tsfiles are used without theexperimental.remoteFunctionsflag (#14225)v2.31.1Compare Source
Patch Changes
v2.31.0Compare Source
Minor Changes
feat: OpenTelemetry tracing for
handle,sequence, form actions, remote functions, andloadfunctions running on the server (#13899)feat: add
instrumentation.server.tsfor tracing and observability setup (#13899)v2.30.1Compare Source
Patch Changes
$app/typesin a more Typescript-friendly way (#14207)v2.30.0Compare Source
Minor Changes
svelte.config.js(#13578)Patch Changes
fix: ensure buttonProps.enhance works on buttons with nested text (#14199)
fix: pass validation issues specifically to avoid non-enumerable spreading error (#14197)
v2.29.1Compare Source
Patch Changes
v2.29.0Compare Source
Minor Changes
kit.files.srcoption (#14152)Patch Changes
fix: don't treat
$lib/server.tsor$lib/server_whatever.tsas server-only modules, only$lib/server/**(#14191)fix: make illegal server-only import errors actually useful (#14155)
chore: deprecate
config.kit.filesoptions (#14152)fix: avoid warning if page options in a Svelte file belongs to a comment (#14180)
v2.28.0Compare Source
Minor Changes
feat: add
RouteIdandRouteParamsto NavigationTarget interface (#14167)feat: add
pendingproperty to forms and commands (#14137)Patch Changes
fix:
fetchimported assets during prerender (#12201)chore: refactor redundant base64 encoding/decoding functions (#14160)
fix: use correct cache result when fetching same url multiple times (#12355)
fix: don't refresh queries automatically when running commands (#14170)
fix: avoid writing remote function bundle to disk when treeshaking prerendered queries (#14161)
sveltejs/kit (@sveltejs/package)
v2.5.0Compare Source
Minor Changes
--preserve-outputflag to prevent deletion of the output directory before packaging (#13055)sveltejs/vite-plugin-svelte (@sveltejs/vite-plugin-svelte)
v6.2.0Compare Source
Minor Changes
optimization.inlineConstby default to ensure treeshaking works with esm-env in svelte (#1207)v6.1.4Compare Source
Patch Changes
fix: allow preprocess plugin to run twice (#1206)
fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)
replace kleur dependency with builtin node:utils styleText (#1210)
v6.1.3Compare Source
Patch Changes
api.filterand deprecateapi.idFilterto avoid confusingfilter.id = idFilter.idassignments when used as hybrid filter in other plugins (#1199)v6.1.2Compare Source
Patch Changes
v6.1.1Compare Source
Patch Changes
build --watch(#1189)testing-library/jest-dom (@testing-library/jest-dom)
v6.8.0Compare Source
v6.7.0Compare Source
Features
eslint/eslint (eslint)
v9.35.0Compare Source
v9.34.0Compare Source
v9.33.0Compare Source
sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)
v3.12.3Compare Source
Patch Changes
d92dde0Thanks @ota-meshi! - fix(no-top-level-browser-globals): false positives for compound logical expression guardsv3.12.2Compare Source
Patch Changes
#1299
5c7cba3Thanks @marekdedic! - feat: disabling more rules in runes mode#1299
5c7cba3Thanks @marekdedic! - feat: restricting SvelteKit rules to SvelteKit#1306
7cb3660Thanks @ota-meshi! - fix(no-unused-props): false positives forComponentProps<any>v3.12.1Compare Source
Patch Changes
27573f4Thanks @marekdedic! - fix: Not reporting mailto: and other unusual schema addresses in no-nmavigation-without-resolve (and its deprecated versions)v3.12.0Compare Source
Minor Changes
#1308
abbcfddThanks @marekdedic! - feat(no-navigation-without-resolve): added to recommended rule set#1289
e2e791fThanks @marekdedic! - feat: added the no-navigation-without-resolve rule#1289
e2e791fThanks @marekdedic! - chore: deprecated the no-navigation-without-base rulesindresorhus/globals (globals)
v16.4.0Compare Source
nodejs/node (node)
v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in #59611.
Other Notable Changes
7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595787bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #5970944d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #595877f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596094a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547bda32af587] - build: usewindows-2025runner (Michaël Zasso) #59673a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #597717a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #595370d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #5979168732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689f12c1ad961] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #5933545af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #5975057617244a4] - deps: V8: cherry-pick6b1b9bc(Xiao-Tao) #592832e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596161f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #597588671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #597239b5eb6eb50] - doc: fix missing links in theerrorspage (Nam Yooseong) #59427e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #5965296db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #5956287f829bd0c] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #596336ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #5964261d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #596353276bfa0d0] - doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy) #5926911de6c7ebb] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #596445bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #597248eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #596812865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #5971774a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #596113d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #597434fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908939befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #597660748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #596801a93df808c] - lib: revert to using default derived class constructors (René) #59650bb0755df37] - meta: bumpcodecov/codecov-action(dependabot[bot]) #5972645d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #5972901b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #5972834f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597275806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597810340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #596070bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #5956892128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #5962344c24657d3] - **srcConfiguration
📅 Schedule: Branch creation - "before 7am on friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.