fix(deps): update all non-major dependencies - #344
Merged
Conversation
commit: |
✅ Deploy Preview for sheepdog ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
11 times, most recently
from
August 21, 2025 03:13
171edfa to
80f3447
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
10 times, most recently
from
August 27, 2025 23:07
fad7382 to
131a335
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
6 times, most recently
from
September 3, 2025 13:45
87e9b11 to
a736a7d
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
14 times, most recently
from
September 11, 2025 02:00
04de79a to
2bf2ba8
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
September 11, 2025 17:12
2bf2ba8 to
d020381
Compare
paoloricciuti
approved these changes
Sep 12, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.5.6->6.5.107.1.0->7.1.19.32.0->9.35.05.2.6->5.2.71.54.2->1.55.06.0.2->6.1.02.27.3->2.38.12.4.1->2.5.06.1.0->6.2.06.1.0->6.2.06.6.4->6.8.022.17.0->22.18.19.32.0->9.35.03.11.0->3.12.316.3.0->16.4.024.5.0->24.8.010.14.0->10.15.110.14.0->10.15.15.38.0->5.38.105.38.0->5.38.108.39.0->8.43.01.1.2->1.1.4Release Notes
withastro/astro (@astrojs/netlify)
v6.5.10Compare Source
Patch Changes
#14326
c24a8f4Thanks @jsparkdev! - Updatesviteversion to fix CVEUpdated dependencies []:
v6.5.9Compare Source
Patch Changes
#14269
4823c42Thanks @florian-lefebvre! - Updatescontext.netlifyto implement all its propertiesUpdated dependencies []:
v6.5.8Compare Source
Patch Changes
#14240
77b18fbThanks @delucis! - Increases the minimum supported version of Astro to 5.7.0Updated dependencies []:
v6.5.7Compare Source
Patch Changes
4d16de7]:withastro/astro (@astrojs/svelte)
v7.1.1Compare Source
Patch Changes
c24a8f4Thanks @jsparkdev! - Updatesviteversion to fix CVEeslint/eslint (@eslint/js)
v9.35.0Compare Source
v9.34.0Compare Source
v9.33.0Compare Source
fontsource/font-files (@fontsource/pt-sans)
v5.2.7Compare Source
microsoft/playwright (@playwright/test)
v1.55.0Compare Source
sveltejs/kit (@sveltejs/adapter-auto)
v6.1.0Compare Source
Minor Changes
Patch Changes
ece3906,5ac9d27,fed6331,69f4e5f,6b34122,9493537,f67ba09]:sveltejs/kit (@sveltejs/kit)
v2.38.1Compare Source
Patch Changes
fix: enable redirects from queries (#14400)
fix: remove empty nodes from serialized server load data (#14404)
fix: allow commands from within endpoints (#14343)
v2.38.0Compare Source
Minor Changes
query.batch(#14272)v2.37.1Compare Source
Patch Changes
fix: serialize server
loaddata before passing to universalload, to handle mutations and promises (#14298)fix: resolve_route prevent dropping a trailing slash of id (#14294)
fix: assign correct status code to form submission error on the client (#14345)
fix: un-proxy
form.result(#14346)v2.37.0Compare Source
Minor Changes
feat: automatically resolve
query.refresh()promises on the server (#14332)feat: allow query.set() to be called on the server (#14304)
Patch Changes
fix: disable CSRF checks in dev (#14335)
fix: allow redirects to external URLs from within form functions (#14329)
fix: add type definitions for
query.set()method to override the value of a remote query function (#14303)fix: ensure uniqueness of
form.for(...)across form functions (#14327)v2.36.3Compare Source
Patch Changes
fix: bump devalue (#14323)
chore: consolidate dev checks to use
esm-envinstead of a__SVELTEKIT_DEV__global (#14308)fix: reset form inputs by default when using remote form functions (#14322)
v2.36.2Compare Source
Patch Changes
chore: make config deprecation warnings more visible (#14281)
chore: remove redundant Not Found error message (#14289)
chore: deprecate
csrf.checkOriginin favour ofcsrf.trustedOrigins: ['*'](#14281)v2.36.1Compare Source
Patch Changes
$app/navigationworks in test files (#14195)v2.36.0Compare Source
Minor Changes
csrf.trustedOriginsconfiguration (#14021)Patch Changes
fix: correctly decode custom types streamed from a server load function (#14261)
fix: add trailing slash pathname when generating typed routes (#14065)
v2.35.0Compare Source
Minor Changes
Patch Changes
v2.34.1Compare Source
Patch Changes
fix: support multiple cookies with the same name across different paths and domains (
b2c5d02)fix: add link header when preloading font (#14200)
fix:
cookies.get(...)returnsundefinedfor a just-deleted cookie (b2c5d02)fix: load env before prerender (
c5f7139)v2.34.0Compare Source
Minor Changes
envaccess during prerender (#14243)Patch Changes
fix: clone
fetchresponses so that headers are mutable (#13942)fix: serialize server
loaddata before passing to universalload, to handle mutations (#14268)fix: allow
asset(...)to be used with imported assets (#14270)v2.33.1Compare Source
Patch Changes
fix: make paths in .css assets relative (#14262)
fix: avoid copying SSR stylesheets to client assets (#13069)
v2.33.0Compare Source
Minor Changes
Patch Changes
fix: use correct flag for server tracing (#14250)
fix: correct type names for new
handleUnseenRoutesoption (#14254)chore: Better docs and error message for missing
@opentelemetry/apidependency (#14250)v2.32.0Compare Source
Minor Changes
response.bodystream data as base64 in page (#11473)Patch Changes
.remote.tsfiles are used without theexperimental.remoteFunctionsflag (#14225)v2.31.1Compare Source
Patch Changes
v2.31.0Compare Source
Minor Changes
feat: OpenTelemetry tracing for
handle,sequence, form actions, remote functions, andloadfunctions running on the server (#13899)feat: add
instrumentation.server.tsfor tracing and observability setup (#13899)v2.30.1Compare Source
Patch Changes
$app/typesin a more Typescript-friendly way (#14207)v2.30.0Compare Source
Minor Changes
svelte.config.js(#13578)Patch Changes
fix: ensure buttonProps.enhance works on buttons with nested text (#14199)
fix: pass validation issues specifically to avoid non-enumerable spreading error (#14197)
v2.29.1Compare Source
Patch Changes
v2.29.0Compare Source
Minor Changes
kit.files.srcoption (#14152)Patch Changes
fix: don't treat
$lib/server.tsor$lib/server_whatever.tsas server-only modules, only$lib/server/**(#14191)fix: make illegal server-only import errors actually useful (#14155)
chore: deprecate
config.kit.filesoptions (#14152)fix: avoid warning if page options in a Svelte file belongs to a comment (#14180)
v2.28.0Compare Source
Minor Changes
feat: add
RouteIdandRouteParamsto NavigationTarget interface (#14167)feat: add
pendingproperty to forms and commands (#14137)Patch Changes
fix:
fetchimported assets during prerender (#12201)chore: refactor redundant base64 encoding/decoding functions (#14160)
fix: use correct cache result when fetching same url multiple times (#12355)
fix: don't refresh queries automatically when running commands (#14170)
fix: avoid writing remote function bundle to disk when treeshaking prerendered queries (#14161)
sveltejs/kit (@sveltejs/package)
v2.5.0Compare Source
Minor Changes
--preserve-outputflag to prevent deletion of the output directory before packaging (#13055)sveltejs/vite-plugin-svelte (@sveltejs/vite-plugin-svelte)
v6.2.0Compare Source
Minor Changes
optimization.inlineConstby default to ensure treeshaking works with esm-env in svelte (#1207)v6.1.4Compare Source
Patch Changes
fix: allow preprocess plugin to run twice (#1206)
fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)
replace kleur dependency with builtin node:utils styleText (#1210)
v6.1.3Compare Source
Patch Changes
api.filterand deprecateapi.idFilterto avoid confusingfilter.id = idFilter.idassignments when used as hybrid filter in other plugins (#1199)v6.1.2Compare Source
Patch Changes
v6.1.1Compare Source
Patch Changes
build --watch(#1189)testing-library/jest-dom (@testing-library/jest-dom)
v6.8.0Compare Source
v6.7.0Compare Source
Features
eslint/eslint (eslint)
v9.35.0Compare Source
v9.34.0Compare Source
v9.33.0Compare Source
sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)
v3.12.3Compare Source
Patch Changes
d92dde0Thanks @ota-meshi! - fix(no-top-level-browser-globals): false positives for compound logical expression guardsv3.12.2Compare Source
Patch Changes
#1299
5c7cba3Thanks @marekdedic! - feat: disabling more rules in runes mode#1299
5c7cba3Thanks @marekdedic! - feat: restricting SvelteKit rules to SvelteKit#1306
7cb3660Thanks @ota-meshi! - fix(no-unused-props): false positives forComponentProps<any>v3.12.1Compare Source
Patch Changes
27573f4Thanks @marekdedic! - fix: Not reporting mailto: and other unusual schema addresses in no-nmavigation-without-resolve (and its deprecated versions)v3.12.0Compare Source
Minor Changes
#1308
abbcfddThanks @marekdedic! - feat(no-navigation-without-resolve): added to recommended rule set#1289
e2e791fThanks @marekdedic! - feat: added the no-navigation-without-resolve rule#1289
e2e791fThanks @marekdedic! - chore: deprecated the no-navigation-without-base rulesindresorhus/globals (globals)
v16.4.0Compare Source
nodejs/node (node)
v24.8.0: 2025-09-10, Version 24.8.0 (Current), @targosCompare Source
Notable Changes
HTTP/2 Network Inspection Support in Node.js
Node.js now supports inspection of HTTP/2 network calls in Chrome DevTools for Node.js.
Usage
Write a
test.jsscript that makes HTTP/2 requests.Run it with these options:
Open
about:inspecton Google Chrome and click onOpen dedicated DevTools for Node.The
Networktab will let you track your HTTP/2 calls.Contributed by Darshan Sen in #59611.
Other Notable Changes
7a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #59537d6d05ba397] - (SEMVER-MINOR) worker: add cpu profile APIs for worker (theanarkh) #59428Commits
d913872369] - assert: cap input size in myersDiff to avoid Int32Array overflow (Haram Jeong) #595787bbbcf6666] - benchmark: sqlite prevent create both tables on prepare selects (Bruno Rodrigues) #5970944d7b92271] - benchmark: calibrate config array-vs-concat (Rafael Gonzaga) #595877f347fc551] - build: fix getting OpenSSL version on Windows (Michaël Zasso) #596094a317150d5] - build: fix 'implicit-function-declaration' on OpenHarmony platform (hqzing) #59547bda32af587] - build: usewindows-2025runner (Michaël Zasso) #59673a4a8ed8f6e] - build: compile bundled uvwasi conditionally (Carlo Cabrera) #59622d944a87761] - crypto: refactor subtle methods to use synchronous import (Filip Skokan) #597717a8e2c251d] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in node:crypto (Filip Skokan) #595704b631be0b0] - (SEMVER-MINOR) crypto: support Ed448 and ML-DSA context parameter in Web Cryptography (Filip Skokan) #595703e4b1e732c] - (SEMVER-MINOR) crypto: add KMAC Web Cryptography algorithms (Filip Skokan) #59647b1d28785b2] - (SEMVER-MINOR) crypto: add Argon2 Web Cryptography algorithms (Filip Skokan) #59544430691d1af] - (SEMVER-MINOR) crypto: support SLH-DSA KeyObject, sign, and verify (Filip Skokan) #595370d1e53d935] - deps: update uvwasi to 0.0.23 (Node.js GitHub Bot) #5979168732cf426] - deps: update histogram to 0.11.9 (Node.js GitHub Bot) #59689f12c1ad961] - deps: update googletest toeb2d85e(Node.js GitHub Bot) #5933545af6966ae] - deps: upgrade npm to 11.6.0 (npm team) #5975057617244a4] - deps: V8: cherry-pick6b1b9bc(Xiao-Tao) #592832e6225a747] - deps: update amaro to 1.1.2 (Node.js GitHub Bot) #596161f7f6dfae6] - diagnostics_channel: revoke DEP0163 (René) #597588671a6cdb3] - doc: stabilize --disable-sigusr1 (Rafael Gonzaga) #59707583b1b255d] - doc: update OpenSSL default security level to 2 (Jeetu Suthar) #597239b5eb6eb50] - doc: fix missing links in theerrorspage (Nam Yooseong) #59427e7bf712c57] - doc: update "Type stripping in dependencies" section (Josh Kelley) #5965296db47f91e] - doc: add Miles Guicent as triager (Miles Guicent) #5956287f829bd0c] - doc: markpath.matchesGlobas stable (Aviv Keller) #59572062b2f705e] - doc: improve documentation for raw headers in HTTP/2 APIs (Tim Perry) #596336ab9306370] - doc: update install_tools.bat free disk space (Stefan Stojanovic) #59579c8d6b60da6] - doc: fix quic session instance typo (jakecastelli) #5964261d0a2d1ba] - doc: fix filehandle.read typo (Ruy Adorno) #596353276bfa0d0] - doc: update migration recomendations forutil.is**()deprecations (Augustin Mauroy) #5926911de6c7ebb] - doc: fix missing link to the Error documentation in thehttppage (Alexander Makarenko) #59080f5b6829bba] - doc,crypto: add description to the KEM and supports() methods (Filip Skokan) #596445bfdc7ee74] - doc,crypto: cleanup unlinked and self method references webcrypto.md (Filip Skokan) #59608010458d061] - esm: populate separate cache for require(esm) in imported CJS (Joyee Cheung) #59679dbe6e63baf] - esm: fix missed renaming in ModuleJob.runSync (Joyee Cheung) #597248eb0d9d834] - fs: fix wrong order of file names in cpSync error message (Nicholas Paun) #59775e69be5611f] - fs: fix dereference: false on cpSync (Nicholas Paun) #596812865d2ac20] - http: unbreak keepAliveTimeoutBuffer (Robert Nagy) #59784ade1175475] - http: use cached '1.1' http version string (Robert Nagy) #5971774a09482de] - inspector: undici as shared-library should pass tests (Aras Abbasi) #59837772f8f415a] - inspector: add http2 tracking support (Darshan Sen) #596113d225572d7] - Revert "lib: optimize writable stream buffer clearing" (Yoo) #597434fd213ce73] - lib: fix isReadable and isWritable return type value (Gabriel Quaresma) #5908939befddb87] - lib: prefer TypedArrayPrototype primordials (Filip Skokan) #597660748160d2e] - lib: fix DOMException subclass support (Chengzhong Wu) #596801a93df808c] - lib: revert to using default derived class constructors (René) #59650bb0755df37] - meta: bumpcodecov/codecov-action(dependabot[bot]) #5972645d148d9be] - meta: bump actions/download-artifact from 4.3.0 to 5.0.0 (dependabot[bot]) #5972901b66b122e] - meta: bump github/codeql-action from 3.29.2 to 3.30.0 (dependabot[bot]) #5972834f7ab5502] - meta: bump actions/cache from 4.2.3 to 4.2.4 (dependabot[bot]) #597275806ea02af] - meta: bump actions/checkout from 4.2.2 to 5.0.0 (dependabot[bot]) #59725f667215583] - path: refactor path joining logic for clarity and performance (Lee Jiho) #597810340fe92a6] - repl: do not cause side effects in tab completion (Anna Henningsen) #59774a414c1eb51] - repl: fix REPL completion under unary expressions (Kingsword) #59744c206f8dd87] - repl: add isValidParentheses check before wrap input (Xuguang Mei) #596070bf9775ee2] - sea: implement sea.getAssetKeys() (Joyee Cheung) #59661bf26b478d8] - sea: allow using inspector command line flags with SEA (Joyee Cheung) #5956892128a8fe2] - src: use DictionaryTemplate for node_url_pattern (James M Snell) #59802bcb29fb84f] - src: correctly report memory changes to V8 (Yaksh Bariya) #5962344c24657d3] - **srcConfiguration
📅 Schedule: Branch creation - "before 7am on friday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.