Skip to content

chore(deps-dev): bump the development-dependencies group across 1 directory with 11 updates#284

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-47bac22763
Open

chore(deps-dev): bump the development-dependencies group across 1 directory with 11 updates#284
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/development-dependencies-47bac22763

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 31, 2026 •
edited
Loading

Bumps the development-dependencies group with 10 updates in the / directory:

Package From To
typescript 5.9.3 6.0.3
vite 7.3.2 8.0.10
parcel 2.16.3 2.16.4
@rollup/plugin-terser 0.4.4 1.0.0
rollup 4.55.1 4.60.2
serve 14.2.5 14.2.6
@rsbuild/core 1.7.2 2.0.2
@sveltejs/kit 2.49.4 2.58.0
@sveltejs/vite-plugin-svelte 6.2.4 7.0.0
svelte-check 4.3.5 4.4.6

Updates typescript from 5.9.3 to 6.0.3

Commits
  • 050880c Bump version to 6.0.3 and LKG
  • eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
  • ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
  • 0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
  • 607a22a Bump version to 6.0.2 and LKG
  • 9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
  • 35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
  • e175b69 Bump version to 6.0.1-rc and LKG
  • af4caac Update LKG
  • 8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
  • Additional commits viewable in compare view

Updates vite from 7.3.2 to 8.0.10

Changelog

Sourced from vite's changelog.

8.0.10 (2026-04-23)

Features

Bug Fixes

  • hmrClient.logger.debug and hmrClient.logger.error looked different from other HMR logs (#22147) (a4d828f)
  • css: show filename in CSS minification warnings for .css?inline (#22292) (83f0a78)
  • optimizer: allow user transform.target to override default in optimizeDeps (#22273) (5c7cec6)
  • remove format sniffing module resolution from JS resolver (#22297) (b8a21cc)

Code Refactoring

8.0.9 (2026-04-20)

Features

Bug Fixes

  • allow binding when strictPort is set but wildcard port is in use (#22150) (dfc8aa5)
  • build: emptyOutDir should happen for watch rebuilds (#22207) (ee52267)
  • bundled-dev: reject requests to HMR patch files in non potentially trustworthy origins (#22269) (868f141)
  • css: use unique key for cssEntriesMap to prevent same-basename collision (#22039) (374bb5d)
  • deps: update all non-major dependencies (#22219) (4cd0d67)
  • deps: update all non-major dependencies (#22268) (c28e9c1)
  • detect Deno workspace root (fix #22237) (#22238) (1b793c0)
  • dev: handle errors in watchChange hook (#22188) (fc08bda)
  • optimizer: handle more chars that will be sanitized (#22208) (3f24533)
  • skip fallback sourcemap generation for ?raw imports (#22148) (3ec9cda)

Documentation

Miscellaneous Chores

  • deps: update dependency dotenv-expand to v13 (#22271) (0a3887d)

8.0.8 (2026-04-09)

Features

... (truncated)

Commits
  • 32c2978 release: v8.0.10
  • a4d06d9 feat: update rolldown to 1.0.0-rc.17 (#22299)
  • a4d828f fix: hmrClient.logger.debug and hmrClient.logger.error looked different f...
  • 83f0a78 fix(css): show filename in CSS minification warnings for .css?inline (#22292)
  • b8a21cc fix: remove format sniffing module resolution from JS resolver (#22297)
  • 40a0847 refactor: typecheck client directory (#22284)
  • 5c7cec6 fix(optimizer): allow user transform.target to override default in optimizeDe...
  • 9437518 refactor: enable some typecheck rules (#22278)
  • ce729f5 release: v8.0.9
  • 605bb97 docs: update build CLI defaults (#22261)
  • Additional commits viewable in compare view

Updates parcel from 2.16.3 to 2.16.4

Changelog

Sourced from parcel's changelog.

[2.16.4] – 2026-02-01

Fixed

  • Dev server
    • Add --no-cors option to disable CORS headers – Details
Commits

Updates @rollup/plugin-terser from 0.4.4 to 1.0.0

Changelog

Sourced from @​rollup/plugin-terser's changelog.

v1.0.0

2026-03-05

Breaking Changes

  • terser!: upgrade serialize-javascript to v7 and node to v20 (#1968)
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​rollup/plugin-terser since your current version.


Updates rollup from 4.55.1 to 4.60.2

Changelog

Sourced from rollup's changelog.

4.60.2

2026-04-18

Bug Fixes

  • Resolve a variable rendering bug when generating different formats from the same build (#6350)

Pull Requests

4.60.1

2026-03-30

Bug Fixes

  • Resolve a situation where side effect imports could be dropped due to a caching issue (#6286)

Pull Requests

4.60.0

... (truncated)

Commits

Updates serve from 14.2.5 to 14.2.6

Changelog

Sourced from serve's changelog.

14.2.6

Patch Changes

  • 7fcb924: Bump ajv to 8.18.0
  • b3888f9: Update serve-handler to 6.1.7 to fix ReDoS vulnerabilities
Commits

Updates @rsbuild/core from 1.7.2 to 2.0.2

Commits

Updates @sveltejs/kit from 2.49.4 to 2.58.0

Changelog

Sourced from @​sveltejs/kit's changelog.

2.58.0

Minor Changes

  • breaking: require limit in requested (as originally intended) (#15739)

  • feat: RemoteQueryFunction gains an optional third generic parameter Validated (defaulting to Input) that represents the argument type after schema validation/transformation (#15739)

  • breaking: requested now yields { arg, query } entries instead of the validated argument (#15739)

Patch Changes

  • fix: allow query().current, .error, .loading, and .ready to work in non-reactive contexts (#15699)

  • fix: prevent deep_set crash on nullish nested values (#15600)

  • fix: restore correct RemoteFormFields typing for nullable array fields (e.g. when a schema uses .default([])), so .as('checkbox') and friends work again (#15723)

  • fix: don't warn about removed SSI comments in transformPageChunk (#15695)

    Server-side include (SSI) directives like <!--#include virtual="..." --> are HTML comments that are replaced by servers such as nginx. Previously, removing them in transformPageChunk would trigger a false positive warning about breaking Svelte's hydration. Since SSI comments always start with <!--# and Svelte's hydration comments never do, they can be safely excluded from the check.

  • Change enhance function return type from void to MaybePromise. (#15710)

  • fix: throw an error when resolve is called with an external URL (#15733)

  • fix: avoid FOUC for CSR-only pages by loading styles and fonts before CSR starts (#15718)

  • fix: reset form result on redirect (#15724)

2.57.1

Patch Changes

  • fix: better validation for redirect inputs (10d7b44)

  • fix: enforce BODY_SIZE_LIMIT on chunked requests (3202ed6)

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 6.2.4 to 7.0.0

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.0.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(options): remove deprecated options (#1274)

    • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
    • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
    • api.idFilter of vite-plugin-svelte:api use api.filter instead
    • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

  • breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

  • breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.1

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

... (truncated)

Commits

Updates svelte from 5.46.1 to 5.46.4

Changelog

Sourced from svelte's changelog.

5.46.4

Patch Changes

5.46.3

Patch Changes

  • fix: reconnect clean deriveds when they are read in a reactive context (#17362)

  • fix: don't transform references of function declarations in legacy mode (#17431)

  • fix: notify deriveds of changes to sources inside forks (#17437)

  • fix: always reconnect deriveds in get, when appropriate (#17451)

  • fix: prevent derives without dependencies from ever re-running (286b40c4526ce9970cb81ddd5e65b93b722fe468)

  • fix: correctly update writable deriveds inside forks (#17437)

  • fix: remove $inspect calls after await expressions when compiling for production server code (#17407)

  • fix: clear batch between runs (#17424)

  • fix: adjust loc property of Program nodes created from <script> elements (#17428)

  • fix: don't revert source to UNINITIALIZED state when time travelling (#17409)

5.46.2

Notice

Not published due to CI issue

Commits

Updates svelte-check from 4.3.5 to 4.4.6

Commits

@dependabot dependabot Bot added dependencies javascript Pull requests that update Javascript code labels Mar 31, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-47bac22763 branch 2 times, most recently from 2d5cef2 to 34da37a Compare April 9, 2026 15:16
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-47bac22763 branch from 34da37a to 7530d7f Compare April 20, 2026 17:44
@dependabot
chore(deps-dev): bump the development-dependencies group across 1 dir…
e0033e0 
…ectory with 11 updates

Bumps the development-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.2` | `8.0.10` |
| [parcel](https://github.com/parcel-bundler/parcel) | `2.16.3` | `2.16.4` |
| [@rollup/plugin-terser](https://github.com/rollup/plugins/tree/HEAD/packages/terser) | `0.4.4` | `1.0.0` |
| [rollup](https://github.com/rollup/rollup) | `4.55.1` | `4.60.2` |
| [serve](https://github.com/vercel/serve) | `14.2.5` | `14.2.6` |
| [@rsbuild/core](https://github.com/web-infra-dev/rsbuild/tree/HEAD/packages/core) | `1.7.2` | `2.0.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.49.4` | `2.58.0` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `6.2.4` | `7.0.0` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.5` | `4.4.6` |



Updates `typescript` from 5.9.3 to 6.0.3
- [Commits](microsoft/TypeScript@v5.9.3...v6.0.3)

Updates `vite` from 7.3.2 to 8.0.10
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.10/packages/vite)

Updates `parcel` from 2.16.3 to 2.16.4
- [Changelog](https://github.com/parcel-bundler/parcel/blob/v2/CHANGELOG.md)
- [Commits](https://github.com/parcel-bundler/parcel/commits/v2.16.4)

Updates `@rollup/plugin-terser` from 0.4.4 to 1.0.0
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/terser/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/beep-v1.0.0/packages/terser)

Updates `rollup` from 4.55.1 to 4.60.2
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.1...v4.60.2)

Updates `serve` from 14.2.5 to 14.2.6
- [Changelog](https://github.com/vercel/serve/blob/main/CHANGELOG.md)
- [Commits](vercel/serve@v14.2.5...v14.2.6)

Updates `@rsbuild/core` from 1.7.2 to 2.0.2
- [Commits](https://github.com/web-infra-dev/rsbuild/commits/v2.0.2/packages/core)

Updates `@sveltejs/kit` from 2.49.4 to 2.58.0
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.58.0/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 6.2.4 to 7.0.0
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.0.0/packages/vite-plugin-svelte)

Updates `svelte` from 5.46.1 to 5.46.4
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.46.4/packages/svelte)

Updates `svelte-check` from 4.3.5 to 4.4.6
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.5...svelte-check@4.4.6)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-terser"
  dependency-version: 1.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: "@rsbuild/core"
  dependency-version: 1.7.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: parcel
  dependency-version: 2.16.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: rollup
  dependency-version: 4.60.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: serve
  dependency-version: 14.2.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte
  dependency-version: 5.46.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte-check
  dependency-version: 4.4.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.0.3
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the development-dependencies group with 11 updates chore(deps-dev): bump the development-dependencies group across 1 directory with 11 updates Apr 27, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/development-dependencies-47bac22763 branch from 7530d7f to e0033e0 Compare April 27, 2026 19:03
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Apr 27, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants