Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2025

Bumps the prod-dependencies group with 7 updates in the / directory:

Package From To
@lucide/svelte 0.555.0 0.556.0
@sveltejs/kit 2.49.1 2.49.2
isomorphic-dompurify 2.33.0 2.34.0
knip 5.71.0 5.72.0
svelte 5.45.5 5.45.8
velite 0.3.0 0.3.1
wrangler 4.52.1 4.53.0

Updates @lucide/svelte from 0.555.0 to 0.556.0

Release notes

Sourced from @​lucide/svelte's releases.

Version 0.556.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@0.555.0...0.556.0

Commits

Updates @sveltejs/kit from 2.49.1 to 2.49.2

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

Commits
  • e9752a1 Version Packages (#15015)
  • 37619d2 docs: update invalidateAll documentation to mention query functions (#15042)
  • 1f2b4c3 fix: Correctly handle shared memory for DataView initialization in deserializ...
  • cd6837c test(kit): add regression test for the posixied instrumentation file (#15023)
  • 08a153b fix(kit): ensure instrumentation file is posixified on Windows (#14993)
  • 9d1c523 chore: More flaky test fixes (#15020)
  • ad71199 fix: Stop re-loading already-loaded CSS during server-side route resolution (...
  • See full diff in compare view

Updates isomorphic-dompurify from 2.33.0 to 2.34.0

Release notes

Sourced from isomorphic-dompurify's releases.

2.34.0: Updated dependencies

Changelog

  • Updated dompurify and jsdom.
  • Updated dev dependencies.

See the complete changelog for more details.

Release

2.34.0

Commits
  • dded60d chore: Incremented project version.
  • 044f7b2 Updated deps.
  • 895d5cd Merge pull request #379 from kkomelin/dependabot/npm_and_yarn/dompurify-3.3.1
  • 816f91f Merge pull request #380 from kkomelin/dependabot/npm_and_yarn/jsdom-27.3.0
  • a48c30b chore(deps): bump jsdom from 27.2.0 to 27.3.0
  • 66c4321 chore(deps): bump dompurify from 3.3.0 to 3.3.1
  • 16425bc Merge pull request #378 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.15
  • 8c8900c chore(deps-dev): bump vitest from 4.0.14 to 4.0.15
  • 541d6ae Merge pull request #377 from kkomelin/dependabot/npm_and_yarn/vitest-4.0.14
  • b7d8b6d chore(deps-dev): bump vitest from 4.0.13 to 4.0.14
  • See full diff in compare view

Updates knip from 5.71.0 to 5.72.0

Release notes

Sourced from knip's releases.

Release 5.72.0

  • Resolve setupFiles and globalSetup from config file dir (resolve #1317) (ff8c33d20e1cfbd9eaa7d7f963e5ddbf99678770)
  • Add SASS/SCSS compiler (resolve #1292) (333ace375f74357b62d1a6b31260fd29f54b5932)
  • Update compilers docs (2a5be2d48fbde70f82063dfbba23ceaf17b30291)
  • Move & update dependencies (9fb19b3d7dc3c6f2e991feab83e7a0cdc189a476)
  • Add .vscode/extensions.json (77433bc68590e1695084cb3829c8743fd86b1762)
  • Keep tracing exports/members through pseudo re-exports + conditions (resolve #1371) (fb3cc39e8d59950ad721b5b6ba10d620d55afad2)
  • Defer work for a minor perf optimization (e0a464900b73e8a917db86a03d060b52f6dd261c)
  • Remove obsolete .prettierignore (9cd40e1b1702ffc112aa56b8533d7208e7ecb40e)
  • Add docs re. coding agents + AGENTS.md (262dacf37cec57f957b0fda2010bc5caca25ebc3)
  • Add some docs/hints to code (8237a304690f12fbfd9a0589376a36d7b12bce52)
  • Ignore void lint issue in explorer helper type (33d7497809b6458044082d1505d1f750d98eb2b4)
  • Ignore dependencies used by IDE extensions (fb988139784eed1e1e4ac4c79b46dfd1608762d6)
  • Update rsbuild plugin to check preEntry (#1373) (b542cb7a92d67d0a5ffad2404c23cd1b6abbab5d) - thanks @​MichielHegemans!
  • Support cli args for config file in vite plugin (ab01e82e3378bf89d45a2edf245004b92460e967)
  • Refactor traceRefs out and improve export tracer (62d574eb3b6f744fa698668ef2bbae2d61fff80d)
  • Improve & add importAliases to refs tracker (f90eed6d1f612a169c8ed677a53c3028c0e2eb44)
  • Make non-pkg specifiers relative in SCSS compiler (c77ea4431eafef46ee80494d52e2f1a48379cd08)
  • Allow integration test patch (733bc92771f37ff20a3260a03d56128d3e10f8dd)
  • Add knip config patch to eslint integration test (ff6979403704a9953894958b3603532c312434d7)
  • Work that tracer ✨ (d79c1f6239683e50174f353ad2a2fe1145df6dbe)
  • Allow multiple --performance-fn (5be3cdc3908d55585e915b68889a6e065edc7034)
  • Add extensionAlias (ebf3ff3ac0775a57cfc16bfbf90dd425c75bf7d3)
  • Sort files for trace output & add diff test helper (4c22ec32d5cf3432f2003d9df5f2ffa9739e568f)
  • Bump oxc-resolver to 11.15.0 (ff4d0899e98331890bfcfc38e68ed45f0262003b)
  • Add tsconfig: auto and use resolveFileSync method (b2f213d4db15050e22a7b8f973a443b89dcb632c)
  • Use containingFile (not dir) (ed0cdacf972b44d57bcf739a39bbffc4bec61c77)
  • Add missing tsconfig.json files (141d5c81d5fb3f3c98c729596d3fac979dfeef63)
  • Add test for tsconfig rootDirs (close #873) (eeb41744983bf96c88091afdfb0bbc8fded7c287)
  • Keep using sync resolver outside ts module scope (a3fd7dd42b3e34b68d23e3028ddc92e07266bcc1)
  • Add index to mem table (96edd57bf2eb98771577c106347fa45ca4c7e02b)
  • Update export tracer screenshots (018837137882deea5bc9206ba716edd0a49255c8)
  • Add SVGR plugin (3b564dd28425c2c95d129b1f90a095d5dadf532b)
  • Update command to create plugin in help text (6385b2513ba012b4f479ec8292d766f01a771198)
  • Format (dee9795b114c9d341fc3f41c2a3268b5568aa1cb)
  • Add support for viteConfigPath in storybook plugin (ec9d6ccf647e305758cbb03df6f4ddc188e5f98b)
  • Add impl walk-through & new plugin instructions (4f0c8b100d718d6e292e24ccf9b7717fefd44f19)
  • Minor refactor formatTrace (143755e9c916dd884b01da9740a98905152bdd26)
Commits
  • 12152fc Release 5.72.0
  • 143755e Minor refactor formatTrace
  • ec9d6cc Add support for viteConfigPath in storybook plugin
  • dee9795 Format
  • 6385b25 Update command to create plugin in help text
  • 3b564dd Add SVGR plugin
  • 96edd57 Add index to mem table
  • a3fd7dd Keep using sync resolver outside ts module scope
  • eeb4174 Add test for tsconfig rootDirs (close #873)
  • 141d5c8 Add missing tsconfig.json files
  • Additional commits viewable in compare view

Updates svelte from 5.45.5 to 5.45.8

Release notes

Sourced from svelte's releases.

[email protected]

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

[email protected]

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

[email protected]

Patch Changes

  • fix: don't issue a11y warning for <video> without captions if it has no src (#17311)

  • fix: add srcObject to permitted <audio>/<video> attributes (#17310)

Changelog

Sourced from svelte's changelog.

5.45.8

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

5.45.7

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

5.45.6

Patch Changes

  • fix: don't issue a11y warning for <video> without captions if it has no src (#17311)

  • fix: add srcObject to permitted <audio>/<video> attributes (#17310)

Commits
  • 01cd352 Version Packages (#17331)
  • 3cabb52 fix: set Root start/end to null when fragment contains only whitespace (#17125)
  • 7ec9e4b fix: prevent erroneous state_referenced_locally warnings on prop fallbacks ...
  • ebf7d94 Version Packages (#17328)
  • 6ae3e90 fix: Added the "off" value to the TS definition for textarea's wrap attribute...
  • 123fab2 fix: add more css selectors to print() (#17330)
  • 44058da fix: Don't crash on hydratable serialization failures (#17315)
  • 275fa82 Version Packages (#17312)
  • 0990095 fix: don't issue a11y warning for video without captions if it has no src (...
  • 46603d9 fix: add srcObject to permitted \<audio>/\<video> attributes (#17310)
  • Additional commits viewable in compare view

Updates velite from 0.3.0 to 0.3.1

Release notes

Sourced from velite's releases.

v0.3.1

What's Changed

New Contributors

Full Changelog: zce/velite@v0.3.0...v0.3.1

Commits
  • c2dbc68 chore: version bump to v0.3.1
  • da806d5 chore: upgrade deps
  • 890c865 feat: add re-export type attribute (#364)
  • a4726c2 Add JSON Import Attribute for Node.js Compatibility (#354)
  • 34fdb6f fix: make ZodMeta extend VeliteFile as documented (#349)
  • ab1632d chore(deps): update actions/setup-node action to v5 (#347)
  • 4c7a2b6 chore(deps): update dependency node to v22 (#342)
  • fcc132b chore(deps): update dependency vite to v7 (#329)
  • 0134ee1 chore: upgrade actions/checkout to v5 in workflows
  • See full diff in compare view

Updates wrangler from 4.52.1 to 4.53.0

Release notes

Sourced from wrangler's releases.

[email protected]

Minor Changes

  • #11500 af54c63 Thanks @​dario-piotrowicz! - Add new autoconfig_summary field to the deploy output entry

    This change augments wrangler deploy output being printed to WRANGLER_OUTPUT_FILE_DIRECTORY or WRANGLER_OUTPUT_FILE_PATH to also include a new autoconfig_summary field containing the possible summary details for the autoconfig process (the field is undefined if autoconfig didn't run).

    Note: the field is experimental and could change while autoconfig is not GA

  • #11477 9988cc9 Thanks @​ascorbic! - Support Nuxt in autoconfig

  • #11472 ce295bf Thanks @​dario-piotrowicz! - Support Qwik projects in autoconfig

  • #10937 9514c9a Thanks @​ReppCodes! - Add support for "targeted" placement mode with region, host, and hostname fields

    This change adds a new mode to placement configuration. You can specify one of the following fields to target specific external resources for Worker placement:

    • region: Specify a region identifier (e.g., "aws:us-east-1") to target a region from another cloud service provider
    • host: Specify a host with (required) port (e.g., "example.com:8123") to target a TCP service
    • hostname: Specify a hostname (e.g., "example.com") to target an HTTP resource

    These fields are mutually exclusive - only one can be specified at a time.

    Example configuration:

    [placement]
    host = "example.com:8123"
  • #11498 ac861f8 Thanks @​penalosa! - Add React Router support in autoconfig

  • #11506 79d30d4 Thanks @​vicb! - Set the target JS version to ES2024

Patch Changes

Commits
  • 8672321 Version Packages (#11511)
  • 9988cc9 Support Nuxt in autoconfig (#11477)
  • 94c67e8 fix: types from @​cloudflare/workers-utils not being exported correctly from W...
  • 0faacee Add outputDir to the deploy output entry's autoconfig_summary field (#11516)
  • 45480b1 CFSQL-1406 update wrangler d1 ... --help output from Cloudflare Docs site (...
  • 56e78c8 SQC-707 Fix npx wrangler dev with Hyperdrive binding slow latency on (#11443)
  • 0aa959a Use native node:vm module when available (#10621)
  • af54c63 Add new autoconfig_summary field to the deploy output entry (#11500)
  • 819e287 Use workerd node:console when available (#10606)
  • f550b62 fix(create-cloudflare): install dependencies without --legacy-peer-deps (#11483)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 7 updates

Bumps the prod-dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@lucide/svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/svelte) | `0.555.0` | `0.556.0` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.49.1` | `2.49.2` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `2.33.0` | `2.34.0` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `5.71.0` | `5.72.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.45.5` | `5.45.8` |
| [velite](https://github.com/zce/velite) | `0.3.0` | `0.3.1` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.52.1` | `4.53.0` |



Updates `@lucide/svelte` from 0.555.0 to 0.556.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/0.556.0/packages/svelte)

Updates `@sveltejs/kit` from 2.49.1 to 2.49.2
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit)

Updates `isomorphic-dompurify` from 2.33.0 to 2.34.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@2.33.0...2.34.0)

Updates `knip` from 5.71.0 to 5.72.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/5.72.0/packages/knip)

Updates `svelte` from 5.45.5 to 5.45.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/[email protected]/packages/svelte)

Updates `velite` from 0.3.0 to 0.3.1
- [Release notes](https://github.com/zce/velite/releases)
- [Commits](zce/velite@v0.3.0...v0.3.1)

Updates `wrangler` from 4.52.1 to 4.53.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/[email protected]/packages/wrangler)

---
updated-dependencies:
- dependency-name: "@lucide/svelte"
  dependency-version: 0.556.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: isomorphic-dompurify
  dependency-version: 2.34.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: knip
  dependency-version: 5.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: svelte
  dependency-version: 5.45.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: velite
  dependency-version: 0.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: wrangler
  dependency-version: 4.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 9, 2025
@getarcaneappbot
Copy link
Contributor

Preview deployed successfully!

Built from commit 1780f7f

@kmendell kmendell merged commit 760d7f9 into main Dec 12, 2025
2 checks passed
@kmendell kmendell deleted the dependabot/npm_and_yarn/prod-dependencies-8320032132 branch December 12, 2025 02:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants