Skip to content

chore(deps): bump the npm group with 20 updates - #57

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-7643e021f0
Open

chore(deps): bump the npm group with 20 updates#57
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-7643e021f0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown

Bumps the npm group with 20 updates:

Package From To
@codemirror/commands 6.10.3 6.11.1
@codemirror/lang-markdown 6.5.0 6.5.2
@codemirror/language 6.12.3 6.12.4
@codemirror/state 6.6.0 6.7.6
@codemirror/view 6.43.1 6.43.13
@lezer/markdown 1.7.1 1.7.2
@tauri-apps/api 2.11.0 2.11.1
@tauri-apps/plugin-dialog 2.7.1 2.7.3
@tauri-apps/plugin-updater 2.10.1 2.12.0
@sveltejs/kit 2.65.0 2.70.3
@sveltejs/vite-plugin-svelte 5.1.1 7.3.1
@tauri-apps/cli 2.11.2 2.11.5
@testing-library/jest-dom 6.9.1 7.0.1
@types/node 25.9.3 26.6.2
jsdom 29.1.1 30.1.1
svelte 5.56.3 5.57.1
svelte-check 4.6.0 4.7.6
typescript 5.6.3 7.0.2
vite 6.4.3 8.3.0
vitest 3.2.6 5.0.1

Updates @codemirror/commands from 6.10.3 to 6.11.1

Commits

Updates @codemirror/lang-markdown from 6.5.0 to 6.5.2

Commits

Updates @codemirror/language from 6.12.3 to 6.12.4

Commits

Updates @codemirror/state from 6.6.0 to 6.7.6

Commits

Updates @codemirror/view from 6.43.1 to 6.43.13

Commits

Updates @lezer/markdown from 1.7.1 to 1.7.2

Commits

Updates @tauri-apps/api from 2.11.0 to 2.11.1

Release notes

Sourced from @​tauri-apps/api's releases.

@​tauri-apps/api v2.11.1

No known vulnerabilities found

[2.11.1]

Enhancements

  • 916782601 (#15520 by @​polw1) Document that Monitor.size, Monitor.position and Monitor.workArea are in physical pixels, with examples showing how to convert them to the logical pixels expected by window creation options via toLogical(monitor.scaleFactor).
> @tauri-apps/api@2.11.1 npm-publish /home/runner/work/tauri/tauri/packages/api
> pnpm build && cd ./dist && pnpm publish --access public --loglevel silly --no-git-checks

> @​tauri-apps/api@​2.11.1 build /home/runner/work/tauri/tauri/packages/api
> rollup -c --configPlugin typescript


�[36m
�[1m./src/app.ts, ./src/core.ts, ./src/dpi.ts, ./src/event.ts, ./src/image.ts, ./src/index.ts, ./src/menu.ts, ./src/mocks.ts, ./src/path.ts, ./src/tray.ts, ./src/webview.ts, ./src/webviewWindow.ts, ./src/window.ts�[22m → �[1m./dist, ./dist�[22m...�[39m
�[32mcreated �[1m./dist, ./dist�[22m in �[1m883ms�[22m�[39m
�[36m
�[1msrc/index.ts�[22m → �[1m../../crates/tauri/scripts/bundle.global.js�[22m...�[39m
�[32mcreated �[1m../../crates/tauri/scripts/bundle.global.js�[22m in �[1m1.4s�[22m�[39m
npm verbose cli /opt/hostedtoolcache/node/24.16.0/x64/bin/node /opt/hostedtoolcache/node/24.16.0/x64/bin/npm
npm info using npm@11.13.0
npm info using node@v24.16.0
npm silly config load:file:/opt/hostedtoolcache/node/24.16.0/x64/lib/node_modules/npm/npmrc
npm silly config load:file:/tmp/286e8dee195254a4370e608b672019b0/.npmrc
npm silly config load:file:/home/runner/.npmrc
npm silly config load:file:/home/runner/.config/pnpm/rc
npm verbose title npm publish tauri-apps-api-2.11.1.tgz
npm verbose argv "publish" "--ignore-scripts" "tauri-apps-api-2.11.1.tgz" "--access" "public" "--loglevel" "silly"
npm verbose logfile logs-max:10 dir:/home/runner/.npm/_logs/2026-06-17T13_41_23_851Z-
npm verbose logfile /home/runner/.npm/_logs/2026-06-17T13_41_23_851Z-debug-0.log
npm warn Unknown env config "verify-deps-before-run". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm warn Unknown env config "npm-globalconfig". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm warn Unknown env config "overrides". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm warn Unknown env config "_jsr-registry". This will stop working in the next major version of npm. See npm help npmrc for supported config options.
npm silly logfile done cleaning log files
npm verbose publish [ 'tauri-apps-api-2.11.1.tgz' ]
</tr></table>

... (truncated)

Commits

Updates @tauri-apps/plugin-dialog from 2.7.1 to 2.7.3

Commits

Updates @tauri-apps/plugin-updater from 2.10.1 to 2.12.0

Release notes

Sourced from @​tauri-apps/plugin-updater's releases.

updater-js v2.12.0

[2.12.0]

  • 1308bfa3 Breaking change: the allowDowngrades option was removed from the check command and is now read from the plugin configuration instead.

    Previously any code running in the webview could pass allowDowngrades: true to plugin:updater|check and relax the version check from "the update must be newer" to "the update must be different", overriding the comparator the application had configured on the Rust side. The flag is now an application-level setting:

    {
  "plugins": {
    "updater": {
      "allowDowngrades": true
    }
  }
}

    It defaults to false, and is ignored when the application provides its own Builder::default_version_comparator, which continues to take precedence.

npm warn publish npm auto-corrected some errors in your package.json when publishing.  Please run "npm pkg fix" to address these errors.
npm warn publish errors corrected:
npm warn publish "repository" was changed from a string to an object
npm warn publish "repository.url" was normalized to "git+https://github.com/tauri-apps/plugins-workspace.git"
npm notice
npm notice 📦  @tauri-apps/plugin-updater@2.12.0
npm notice Tarball Contents
npm notice 888B LICENSE.spdx
npm notice 3.2kB README.md
npm notice 3.2kB dist-js/index.cjs
npm notice 3.0kB dist-js/index.d.ts
npm notice 3.2kB dist-js/index.js
npm notice 659B package.json
npm notice Tarball Details
npm notice name: @tauri-apps/plugin-updater
npm notice version: 2.12.0
npm notice filename: tauri-apps-plugin-updater-2.12.0.tgz
npm notice package size: 3.9 kB
npm notice unpacked size: 14.1 kB
npm notice shasum: f3b47d4bae20f5499efe043f4debb7c85f88b9b3
npm notice integrity: sha512-74+g7rSIHXQje[...]osT+6nphSa8Og==
npm notice total files: 6
npm notice
npm notice npm tokens that bypass 2FA are being restricted for account changes and direct publishing. Learn how to prepare: https://gh.io/npm-gat-bypass2fa-deprecation
npm notice Publishing to https://registry.npmjs.org/ with tag latest and public access
npm notice publish Signed provenance statement with source and build information from GitHub Actions
npm notice publish Provenance statement published to transparency log: https://search.sigstore.dev/?logIndex=2893838281
</tr></table>

... (truncated)

Commits

Updates @sveltejs/kit from 2.65.0 to 2.70.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.70.3

Patch Changes

  • fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

@​sveltejs/kit@​2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (#1)

@​sveltejs/kit@​2.70.1

Patch Changes

  • docs: update links to hooks documentation (#16417)

@​sveltejs/kit@​2.70.0

Minor Changes

  • feat: move defineEnvVars to @sveltejs/kit/env (#16378)

Patch Changes

  • fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)

@​sveltejs/kit@​2.69.3

Patch Changes

  • fix: detect destructured load and actions exports during type generation (#16329)

  • fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

  • fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

@​sveltejs/kit@​2.69.2

Patch Changes

  • fix: set define values on globalThis when running Vitest (#16246)

@​sveltejs/kit@​2.69.1

Patch Changes

  • fix: prevent prototype pollution when deleting file inputs (#16218)

  • fix: prevent unhandled promise rejection (#16219)

@​sveltejs/kit@​2.69.0

Minor Changes

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.70.3

Patch Changes

  • fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (82712fc)

2.70.1

Patch Changes

  • docs: update links to hooks documentation (#16417)

2.70.0

Minor Changes

  • feat: move defineEnvVars to @sveltejs/kit/env (#16378)

Patch Changes

  • fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)

2.69.3

Patch Changes

  • fix: detect destructured load and actions exports during type generation (#16329)

  • fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

  • fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

3.0.0-next.7

Major Changes

  • breaking: change form.error type from any to App.Error | undefined (#16245)

  • feat: allow adapters to provide additional Vite plugins (#16206)

  • breaking: move tracing out of the experimental namespace and remove the instrumentation flag (#16260)

  • breaking: remove $app/stores (#15499)

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 5.1.1 to 7.3.1

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.3.1

Patch Changes

  • fix: inject the inspector into the client under Vite+ on pnpm, where the realpathed client module has no vite/ segment before dist/ (#1373)

@​sveltejs/vite-plugin-svelte@​7.3.0

Minor Changes

  • feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

  • fix: don't log inline config when encountering unexpected options (#1376)

@​sveltejs/vite-plugin-svelte@​7.2.0

Minor Changes

  • feat(inspector): add a context menu with current component stack (#1370)

@​sveltejs/vite-plugin-svelte@​7.1.4

Patch Changes

  • fix: enforce ltr styles for inspector (#1324)

@​sveltejs/vite-plugin-svelte@​7.1.3

Patch Changes

  • fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

@​sveltejs/vite-plugin-svelte@​7.1.2

Patch Changes

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

@​sveltejs/vite-plugin-svelte@​7.1.1

Patch Changes

  • fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

  • fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

@​sveltejs/vite-plugin-svelte@​7.1.0

Minor Changes

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.3.1

Patch Changes

  • fix: inject the inspector into the client under Vite+ on pnpm, where the realpathed client module has no vite/ segment before dist/ (#1373)

7.3.0

Minor Changes

  • feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

  • fix: don't log inline config when encountering unexpected options (#1376)

7.2.0

Minor Changes

  • feat(inspector): add a context menu with current component stack (#1370)

7.1.4

Patch Changes

  • fix: enforce ltr styles for inspector (#1324)

7.1.3

Patch Changes

  • fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

7.1.2

Patch Changes

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

7.1.1

Patch Changes

  • fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

  • fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sveltejs/vite-plugin-svelte since your current version.


Updates @tauri-apps/cli from 2.11.2 to 2.11.5

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.11.5

[2.11.5]

Security fixes

  • 5a87bab12 Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

    An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

    tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Dependencies

  • Upgraded to tauri-cli@2.11.5

@​tauri-apps/cli v2.11.4

[2.11.4]

Bug Fixes

  • 67ffa192a (#15596 by @​FabianLars) Fixed an issue in the AppImage bundler that caused the /.desktop and .DirIcon files to be absolute symlinks instead of relative symlinks which caused problems with AppImage installers like AppManager.

Dependencies

  • Upgraded to tauri-cli@2.11.4

@​tauri-apps/cli v2.11.3

[2.11.3]

Bug Fixes

  • 50b0237ed (#15549 by @​Legend-Master) Escape special characters in productName when generating Android strings.xml

  • 728c8d4a5 (#15473 by @​Legend-Master) Skip building bundles when using tauri android run

  • be0cb0d43 (#15344 by @​raglady) Fix NDK_HOME environment variable not honored when set

  • ed8fd411f (#15552 by @​Legend-Master) Make ureq_proto show trace level logs only on -vvv instead of -vv

  • fca4a31f9 (#15454 by @​fallintoplace) Fix tauri migrate generating invalid namespace imports for aliased pluginified imports from @tauri-apps/api.

    Inputs like import { cli as superCli } from "@tauri-apps/api" now migrate to import * as superCli from "@tauri-apps/plugin-cli" instead of producing invalid ESM syntax. The migration tests also reparse migrated JS, Svelte, and Vue output so syntax regressions are caught directly.

Dependencies

  • Upgraded to tauri-cli@2.11.3
Commits

Updates @testing-library/jest-dom from 6.9.1 to 7.0.1

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.1

7.0.1 (2026-08-09)

Bug Fixes

  • declare vitest as an optional peer dependency (#733) (3782c78)

v7.0.0

7.0.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

  • @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

  • add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)
Commits
  • 3782c78 fix: declare vitest as an optional peer dependency (#733)
  • 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
  • cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
  • 55c07ce ci: switch release to npm trusted publishing (#726)
  • 213256f docs: move toHaveSelection from the deprecated section (#717)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.


Updates @types/node from 25.9.3 to 26.6.2

Commits

Updates jsdom from 29.1.1 to 30.1.1

Release notes

Sourced from jsdom's releases.

v30.1.1

  • Fixed spurious window blur and focusout events and incorrect event.relatedTarget values when focusing an element after removing the previously focused element, which regressed in v30.1.0. (@​asamuzaK)
  • Fixed focus and blur behavior across frames, and focusing the document's viewport through document.documentElement.focus(). (@​asamuzaK)
  • Fixed focus targets removed or disabled by blur listeners becoming active, and text selections made by focus and blur listeners being overwritten. (@​asamuzaK)
  • Fixed element.focus() incorrectly focusing disabled form controls and <input type="hidden"> elements with tabindex="". (@​scttcper)
  • Fixed invalid style.setProperty() calls changing existing !important priorities, serialized styles, or mutation records. (@​FedgeNo)
  • Fixed !important handling when updating CSS longhands after shorthands, using variables or CSS-wide keywords, and assigning style properties directly. (@​FedgeNo)
  • Fixed <noscript> parsing with includeNodeLocations: true or inside frames to honor the runScripts option.
  • Fixed the storageQuota option being ignored by frames.
  • Fixed encoding detection of HTML and XML byte input to honor XML encoding declarations and detect UTF-16 without a byte order mark.
  • Fixed exceptions caused by truncated charset parameters in <meta> elements, and encoding detection incorrectly using incomplete <meta> tags. (@​FedgeNo)
  • Fixed XML serialization errors for namespaces named constructor, toString, __proto__, or "null", and incorrect reuse of namespace prefixes declared on sibling elements.
  • Fixed element.innerHTML and element.outerHTML in XML documents to reject invalid characters in attribute values and avoid stack overflows on large strings.
  • Fixed selector matching for :lang(), :nth-child(... of ...) after mutations, and :has() with duplicate IDs or nested logical pseudo-classes. (@​asamuzaK)

v30.1.0

jsdom is feeling the AGI!

This release is dedicated to @​scttcper, who unleashed @​codex upon jsdom and found tons of performance improvements. Along the way, he found and fixed many correctness issues as well.

We really appreciate his thoughtful PRs, which did a great job following the project's contribution guidelines, and were clearly human-curated, with their PR descriptions edited to be brief and respectful of the maintainers' time.

Thanks to @​scttcper, as well as all the other contributors of this release (most of whom were AI-assisted).

  • Added named access to elements on document, such as document.myForm for <form name="myForm">. (@​vojtisprime11)
  • Added QuotaExceededError, including its use for storage quota errors and oversized crypto.getRandomValues() requests.
  • Added support for the relaxed DOM naming rules when creating elements, attributes, and document types.
  • Improved performance of DOM construction, tree mutations, range operations, and live collection access, especially on large documents. (@​scttcper, @​erezrokah)
  • Improved performance of getComputedStyle(), style changes, and CSS serialization. (@​scttcper, @​jhult)
  • Improved performance of event dispatch, form control and label lookups, and updates to <select> elements and radio button groups. (@​scttcper)
  • Reduced memory use when creating and working with DOM nodes, attributes, event listeners, and mutation observers. (@​scttcper)
  • Changed window.close() to preserve access to the document and its DOM through retained references.
  • Fixed element.querySelectorAll() returning no matches when the first part of the selector matches the element itself, which regressed in v30.0.0. (@​asamuzaK)
  • Fixed case sensitivity in CSS attribute selectors, including selectors matching data-state="", title="", and other case-sensitive values. (@​asamuzaK)
  • Fixed document.querySelector() failing to find a matching element when an earlier element has the same ID but does not match the rest of the selector. (@​vojtisprime11)
  • Fixed :focus matching in shadow trees. (@​asamuzaK)
  • Fixed DOM insertion and replacement, including valid document.replaceChildren() calls, invalid document element and doctype placements, and mutations during element.replaceWith().
  • Fixed the ordering of script execution, custom element callbacks, iframe loading, and mutation observer notifications during DOM insertion, including in shadow trees.
  • Fixed queued events and navigation continuing after window.close() or iframe removal, and prevented new scripts, resource loads, timers, and animation frames from starting in destroyed documents. (@​scttcper)
  • Fixed parent documents waiting indefinitely for loading to finish when a child iframe removes itself during loading.
  • Fixed request cancellation across redirects, during pending requestInterceptor() callbacks, and when reusing an XMLHttpRequest after aborting it.
  • Fixed resource loading and JSDOM.fromURL() potentially hanging when response handling throws and response stream cleanup does not finish.
  • Fixed successful cached resource loads being treated as aborted.
  • Fixed getComputedStyle() and document.styleSheets using the wrong stylesheet order after inserting or updating <style> elements.
  • Fixed getComputedStyle() ignoring nested @import and @media rules in imported stylesheets, and returning stale results after imports finish loading.
  • Fixed style invalidation, stylesheet removal, and frame source updates in shadow trees.
  • Fixed repeated getComputedStyle() calls changing case-sensitive background URLs, and inconsistent resolution of border shorthands containing system colors. (@​scttcper)
  • Fixed computed border widths, including borderless elements incorrectly reporting 16px, which regressed in v30.0.0. (@​Alberto-BaseNet)
  • Fixed getComputedStyle() to resolve 'font-weight' keywords to numeric values. (@​tianrking)
  • Fixed getComputedStyle() to convert lengths to pixels inside CSS math functions containing percentages, and to resolve percentages in 'font-size' math functions. (@​soroushm)

... (truncated)

Commits
  • 0a117f4 30.1.1
  • 103f67d Remove unnecessary window cleanup from API tests
  • cdda00a Test HTTP/2 document and subresource loading
  • 7ab92ce Update @​asamuzakjp/dom-selector to v9.2.1
  • d940c20 Share jsdom settings across descendant windows
  • 6ba40cb Fix and simplify option propagation
  • 3b3be70 Preserve CSS priorities across declaration updates
  • 97b2758 Align focusing and unfocusing with HTML
  • b7b460b Update w3c-xmlserializer to v6
  • 71d562f Update html-encoding-sniffer to v7
  • Additional commits viewable in compare view

Updates svelte from 5.56.3 to 5.57.1

Release notes

Sourced from svelte's releases.

svelte@5.57.1

Patch Changes

  • fix: cancel deferred event listeners during cleanup (#18749)

  • fix: preserve global CSS in components without scopable elements (#18793)

  • fix: reduce SSR render result garbage collection (#18798)

  • fix: resolve the fallback of an each block in the enclosing scope (#18803)

  • perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

  • fix: prevent effect tree of batches from interfering with each other (#18508)

  • fix: serialize input default values during server rendering (#18733)

  • fix: remove WAS_MARKED flag in favor of Set (#18127)

  • fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

  • fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

  • fix: keep $state.eager when used as a variable initializer (#18809)

  • perf: avoid regex matching in parser where possible (#18736)

  • fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

  • fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

svelte@5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.1

Patch Changes

  • fix: cancel deferred event listeners during cleanup (#18749)

  • fix: preserve global CSS in components without scopable elements (#18793)

  • fix: reduce SSR render result garbage collection (#18798)

  • fix: resolve the fallback of an each block in the enclosing scope (#18803)

  • perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

  • fix: prevent effect tree of batches from interfering with each other (#18508)

  • fix: serialize input default values during server rendering (#18733)

  • fix: remove WAS_MARKED flag in favor of Set (#18127)

  • fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

  • fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

  • fix: keep $state.eager when used as a variable initializer (#18809)

  • perf: avoid regex matching in parser where possible (#18736)

  • fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

  • fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

... (truncated)

Commits
  • 636eaaa Version Packages (#18750)
  • 8030ff2 fix: remove incorrect special handling of :export pseudo-selectors (#18839)
  • <...

    Description has been truncated

@dependabot
chore(deps): bump the npm group with 20 updates
df377dc 
Bumps the npm group with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` |
| [@codemirror/lang-markdown](https://github.com/codemirror/lang-markdown) | `6.5.0` | `6.5.2` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.12.4` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.6.0` | `6.7.6` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.43.1` | `6.43.13` |
| [@lezer/markdown](https://github.com/lezer-parser/markdown) | `1.7.1` | `1.7.2` |
| [@tauri-apps/api](https://github.com/tauri-apps/tauri) | `2.11.0` | `2.11.1` |
| [@tauri-apps/plugin-dialog](https://github.com/tauri-apps/plugins-workspace) | `2.7.1` | `2.7.3` |
| [@tauri-apps/plugin-updater](https://github.com/tauri-apps/plugins-workspace) | `2.10.1` | `2.12.0` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.65.0` | `2.70.3` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `5.1.1` | `7.3.1` |
| [@tauri-apps/cli](https://github.com/tauri-apps/tauri) | `2.11.2` | `2.11.5` |
| [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) | `6.9.1` | `7.0.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.3` | `26.6.2` |
| [jsdom](https://github.com/jsdom/jsdom) | `29.1.1` | `30.1.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.3` | `5.57.1` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.6.0` | `4.7.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `6.4.3` | `8.3.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.6` | `5.0.1` |


Updates `@codemirror/commands` from 6.10.3 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/lang-markdown` from 6.5.0 to 6.5.2
- [Changelog](https://github.com/codemirror/lang-markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/lang-markdown/commits)

Updates `@codemirror/language` from 6.12.3 to 6.12.4
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/language/commits)

Updates `@codemirror/state` from 6.6.0 to 6.7.6
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.43.1 to 6.43.13
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `@lezer/markdown` from 1.7.1 to 1.7.2
- [Changelog](https://github.com/lezer-parser/markdown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/lezer-parser/markdown/commits)

Updates `@tauri-apps/api` from 2.11.0 to 2.11.1
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/api-v2.11.0...@tauri-apps/api-v2.11.1)

Updates `@tauri-apps/plugin-dialog` from 2.7.1 to 2.7.3
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@log-v2.7.1...dialog-v2.7.3)

Updates `@tauri-apps/plugin-updater` from 2.10.1 to 2.12.0
- [Release notes](https://github.com/tauri-apps/plugins-workspace/releases)
- [Commits](tauri-apps/plugins-workspace@updater-v2.10.1...updater-v2.12.0)

Updates `@sveltejs/kit` from 2.65.0 to 2.70.3
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.70.3/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 5.1.1 to 7.3.1
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.3.1/packages/vite-plugin-svelte)

Updates `@tauri-apps/cli` from 2.11.2 to 2.11.5
- [Release notes](https://github.com/tauri-apps/tauri/releases)
- [Commits](https://github.com/tauri-apps/tauri/compare/@tauri-apps/cli-v2.11.2...@tauri-apps/cli-v2.11.5)

Updates `@testing-library/jest-dom` from 6.9.1 to 7.0.1
- [Release notes](https://github.com/testing-library/jest-dom/releases)
- [Changelog](https://github.com/testing-library/jest-dom/blob/main/CHANGELOG.md)
- [Commits](testing-library/jest-dom@v6.9.1...v7.0.1)

Updates `@types/node` from 25.9.3 to 26.6.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `jsdom` from 29.1.1 to 30.1.1
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v29.1.1...v30.1.1)

Updates `svelte` from 5.56.3 to 5.57.1
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.1/packages/svelte)

Updates `svelte-check` from 4.6.0 to 4.7.6
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.6.0...svelte-check@4.7.6)

Updates `typescript` from 5.6.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.6.3...v7.0.2)

Updates `vite` from 6.4.3 to 8.3.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite)

Updates `vitest` from 3.2.6 to 5.0.1
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.1/packages/vitest)

---
updated-dependencies:
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@codemirror/lang-markdown"
  dependency-version: 6.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@codemirror/language"
  dependency-version: 6.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@lezer/markdown"
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@tauri-apps/api"
  dependency-version: 2.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@tauri-apps/plugin-dialog"
  dependency-version: 2.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@tauri-apps/plugin-updater"
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.70.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@tauri-apps/cli"
  dependency-version: 2.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@testing-library/jest-dom"
  dependency-version: 7.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: jsdom
  dependency-version: 30.1.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: svelte
  dependency-version: 5.57.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: svelte-check
  dependency-version: 4.7.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: vite
  dependency-version: 8.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 5.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 26, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 26, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants