Skip to content

chore(deps-dev): bump the all-pnpm-dependencies group across 1 directory with 10 updates#73

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-pnpm-dependencies-08e36a3d47
Open

chore(deps-dev): bump the all-pnpm-dependencies group across 1 directory with 10 updates#73
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-pnpm-dependencies-08e36a3d47

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 13, 2026

Bumps the all-pnpm-dependencies group with 10 updates in the / directory:

Package From To
@rollup/plugin-commonjs 29.0.0 29.0.2
@sveltejs/kit 2.49.5 2.55.0
@sveltejs/vite-plugin-svelte 6.2.4 7.0.0
devalue 5.6.2 5.6.4
prettier 3.8.0 3.8.1
prettier-plugin-svelte 3.4.1 3.5.1
rollup 4.55.1 4.59.0
svelte 5.46.4 5.53.11
svelte-check 4.3.5 4.4.5
vite 7.3.1 8.0.0

Updates @rollup/plugin-commonjs from 29.0.0 to 29.0.2

Changelog

Sourced from @​rollup/plugin-commonjs's changelog.

v29.0.2

2026-03-06

Bugfixes

  • commonjs: conditional exports (#1952)

v29.0.1

2026-03-05

Bugfixes

  • commonjs: correctly replaces shorthand "global" property in object (#1957)
Commits
  • 2de0d62 chore(release): commonjs v29.0.2
  • ab65325 fix(commonjs): conditional exports (#1952)
  • 7d22981 chore(repo): add rollup-plugin keyword in package.json (#1955)
  • a79ae55 chore(release): commonjs v29.0.1
  • bb41cfd chore(release): commonjs v29.0.1
  • 14ae186 fix(commonjs): correctly replaces shorthand "global" property in object (#1957)
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​rollup/plugin-commonjs since your current version.


Updates @sveltejs/kit from 2.49.5 to 2.55.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.55.0

Minor Changes

  • feat: page and layout params with matchers are now type narrowed in $app/types, leading to better type safety when working with params in $app/types, $app/state, and hooks. (#15502)

@​sveltejs/kit@​2.54.0

Minor Changes

  • feat: allow error boundaries to catch errors on the server (#15308)

Patch Changes

  • chore: upgrade devalue (#15535)

  • fix: don't wait for remote functions that are not awaited in the template (#15280)

  • feat: allow resolve() to accept pathnames with a search string and/or hash (#15458)

  • chore: remove deprecation warnings for config.kit.files.* options when validating the Svelte config file (#15482)

  • fix: handles form target attribute in remote form redirects (#15457)

@​sveltejs/kit@​2.53.4

Patch Changes

  • fix: avoid Vite warning about unknown codeSplitting option (#15451)

@​sveltejs/kit@​2.53.3

Patch Changes

  • fix: prevent overlapping file metadata in remote functions form (faba869)

@​sveltejs/kit@​2.53.2

Patch Changes

  • fix: server-render nested form value sets (#15378)

  • fix: use deep partial types for form remote functions .value() and .set(...) (#14837)

  • fix: provide correct url info to remote functions (#15418)

  • fix: allow optional types for remote query/command/prerender functions (#15293)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.55.0

Minor Changes

  • feat: page and layout params with matchers are now type narrowed in $app/types, leading to better type safety when working with params in $app/types, $app/state, and hooks. (#15502)

2.54.0

Minor Changes

  • feat: allow error boundaries to catch errors on the server (#15308)

Patch Changes

  • chore: upgrade devalue (#15535)

  • fix: don't wait for remote functions that are not awaited in the template (#15280)

  • feat: allow resolve() to accept pathnames with a search string and/or hash (#15458)

  • chore: remove deprecation warnings for config.kit.files.* options when validating the Svelte config file (#15482)

  • fix: handles form target attribute in remote form redirects (#15457)

2.53.4

Patch Changes

  • fix: avoid Vite warning about unknown codeSplitting option (#15451)

2.53.3

Patch Changes

  • fix: prevent overlapping file metadata in remote functions form (faba869)

2.53.2

Patch Changes

  • fix: server-render nested form value sets (#15378)

  • fix: use deep partial types for form remote functions .value() and .set(...) (#14837)

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 6.2.4 to 7.0.0

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.0.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(options): remove deprecated options (#1274)

    • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
    • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
    • api.idFilter of vite-plugin-svelte:api use api.filter instead
    • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

  • breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

  • breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

@​sveltejs/vite-plugin-svelte@​7.0.0-next.1

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

@​sveltejs/vite-plugin-svelte@​7.0.0-next.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.0.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(options): remove deprecated options (#1274)

    • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
    • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
    • api.idFilter of vite-plugin-svelte:api use api.filter instead
    • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

  • breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

  • breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.1

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

... (truncated)

Commits

Updates devalue from 5.6.2 to 5.6.4

Release notes

Sourced from devalue's releases.

v5.6.4

Patch Changes

  • 87c1f3c: fix: reject __proto__ keys in malformed Object wrapper payloads

    This validates the "Object" parse path and throws when the wrapped value has an own __proto__ key.

  • 40f1db1: fix: ensure sparse array indices are integers

  • 87c1f3c: fix: disallow __proto__ keys in null-prototype object parsing

    This disallows __proto__ keys in the "null" parse path so null-prototype object hydration cannot carry that key through parse/unflatten.

v5.6.3

Patch Changes

  • 0f04d4d: fix: Properly handle __proto__
  • 819f1ac: fix: better encoding for sparse arrays
Changelog

Sourced from devalue's changelog.

5.6.4

Patch Changes

  • 87c1f3c: fix: reject __proto__ keys in malformed Object wrapper payloads

    This validates the "Object" parse path and throws when the wrapped value has an own __proto__ key.

  • 40f1db1: fix: ensure sparse array indices are integers

  • 87c1f3c: fix: disallow __proto__ keys in null-prototype object parsing

    This disallows __proto__ keys in the "null" parse path so null-prototype object hydration cannot carry that key through parse/unflatten.

5.6.3

Patch Changes

  • 0f04d4d: fix: Properly handle __proto__
  • 819f1ac: fix: better encoding for sparse arrays
Commits

Updates prettier from 3.8.0 to 3.8.1

Release notes

Sourced from prettier's releases.

3.8.1

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.1

diff

Include available printers in plugin type declarations (#18706 by @​porada)

// Input
import * as prettierPluginEstree from "prettier/plugins/estree";
// Prettier 3.8.0
// Property 'printers' does not exist on type 'typeof import("prettier/plugins/estree")'. ts(2339)
prettierPluginEstree.printers.estree; //=> any
// Prettier 3.8.1
prettierPluginEstree.printers.estree; //=> Printer
prettierPluginEstree.printers["estree-json"]; //=> Printer

Commits

Updates prettier-plugin-svelte from 3.4.1 to 3.5.1

Changelog

Sourced from prettier-plugin-svelte's changelog.

3.5.1

  • (fix) Svelte 5: print trailing attribute comments

3.5.0

  • (feat) Svelte 5: print attribute comments
Commits

Updates rollup from 4.55.1 to 4.59.0

Release notes

Sourced from rollup's releases.

v4.59.0

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

v4.58.0

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

v4.57.1

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Changelog

Sourced from rollup's changelog.

4.59.0

2026-02-22

Features

  • Throw when the generated bundle contains paths that would leave the output directory (#6276)

Pull Requests

4.58.0

2026-02-20

Features

  • Also support __NO_SIDE_EFFECTS__ annotation before variable declarations declaring function expressions (#6272)

Pull Requests

4.57.1

2026-01-30

Bug Fixes

  • Fix heap corruption issue in Windows (#6251)
  • Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

... (truncated)

Commits

Updates svelte from 5.46.4 to 5.53.11

Release notes

Sourced from svelte's releases.

svelte@5.53.11

Patch Changes

  • fix: remove untrack circular dependency (#17910)

  • fix: recover from errors that leave a corrupted effect tree (#17888)

  • fix: properly lazily evaluate RHS when checking for assignment_value_stale (#17906)

  • fix: resolve boundary in correct batch when hydrating (#17914)

  • chore: rebase batches after process, not during (#17900)

svelte@5.53.10

Patch Changes

  • fix: re-process batch if new root effects were scheduled (#17895)

svelte@5.53.9

Patch Changes

  • fix: better bind:this cleanup timing (#17885)

svelte@5.53.8

Patch Changes

  • fix: {@html} no longer duplicates content inside contenteditable elements (#17853)

  • fix: don't access inert block effects (#17882)

  • fix: handle asnyc updates within pending boundary (#17873)

  • perf: avoid re-traversing the effect tree after $: assignments (#17848)

  • chore: simplify scheduling logic (#17805)

svelte@5.53.7

Patch Changes

  • fix: correctly add __svelte_meta after else-if chains (#17830)

  • perf: cache element interactivity and source line splitting in compiler (#17839)

  • chore: avoid rescheduling effects during branch commit (#17837)

  • perf: optimize CSS selector pruning (#17846)

  • fix: preserve original boundary errors when keyed each rows are removed during async updates (#17843)

  • perf: avoid O(n²) name scanning in scope generate and unique (#17844)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.53.11

Patch Changes

  • fix: remove untrack circular dependency (#17910)

  • fix: recover from errors that leave a corrupted effect tree (#17888)

  • fix: properly lazily evaluate RHS when checking for assignment_value_stale (#17906)

  • fix: resolve boundary in correct batch when hydrating (#17914)

  • chore: rebase batches after process, not during (#17900)

5.53.10

Patch Changes

  • fix: re-process batch if new root effects were scheduled (#17895)

5.53.9

Patch Changes

  • fix: better bind:this cleanup timing (#17885)

5.53.8

Patch Changes

  • fix: {@html} no longer duplicates content inside contenteditable elements (#17853)

  • fix: don't access inert block effects (#17882)

  • fix: handle asnyc updates within pending boundary (#17873)

  • perf: avoid re-traversing the effect tree after $: assignments (#17848)

  • chore: simplify scheduling logic (#17805)

5.53.7

Patch Changes

  • fix: correctly add __svelte_meta after else-if chains (#17830)

  • perf: cache element interactivity and source line splitting in compiler (#17839)

  • chore: avoid rescheduling effects during branch commit (#17837)

... (truncated)

Commits

Updates svelte-check from 4.3.5 to 4.4.5

Release notes

Sourced from svelte-check's releases.

svelte-check@4.4.5

Patch Changes

  • fix: use Promise for async kit handler return types (#2966)

svelte-check@4.4.4

Patch Changes

  • fix: more robust detection of lang="ts" attribute (#2957)

  • fix: pass filename to warningFilter (#2959)

  • fix: resolve svelte files under path alias in --incremental/tsgo mode (#2955)

svelte-check@4.4.3

Patch Changes

  • fix: respect @ts-ignore etc comments within tags (#2950)

svelte-check@4.4.2

Patch Changes

  • fix: resolve shims correctly in --incremental/tsgo mode (cd1ff2f)

  • fix: include references in generated tsconfig.json in --incremental/tsgo mode (1990f74)

svelte-check@4.4.1

Patch Changes

  • fix: handle relative imports reaching outside working directory when using --incremental/--tsgo flags (#2942)

  • fix: support SvelteKit zero types in svelte-check --incremental (#2939)

svelte-check@4.4.0

Minor Changes

  • feat: provide --incremental and --tsgo flags (#2932)

Patch Changes

  • fix: ignore Unix domain sockets in file watcher to prevent crashes (#2931)

  • fix: properly use machine output by default for Claude Code (e9f58d2)

svelte-check@4.3.6

Patch Changes

  • fix: don't hoist type/snippet referencing $store (#2926)
Commits

Updates vite from 7.3.1 to 8.0.0

Release notes

Sourced from vite's releases.

create-vite@8.0.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0

Please refer to CHANGELOG.md for details.

v8.0.0-beta.18

Please refer to CHANGELOG.md for details.

v8.0.0-beta.17

Please refer to CHANGELOG.md for details.

v8.0.0-beta.16

Please refer to CHANGELOG.md for details.

v8.0.0-beta.15

Please refer to CHANGELOG.md for details.

v8.0.0-beta.14

Please refer to CHANGELOG.md for details.

v8.0.0-beta.13

Please refer to CHANGELOG.md for details.

v8.0.0-beta.12

Please refer to CHANGELOG.md for details.

v8.0.0-beta.11

Please refer to CHANGELOG.md for details.

v8.0.0-beta.10

Please refer to CHANGELOG.md for details.

v8.0.0-beta.9

Please refer to CHANGELOG.md for details.

v8.0.0-beta.8

Please refer to CHANGELOG.md for details.

v8.0.0-beta.7

Please refer to CHANGELOG.md for details.

v8.0.0-beta.6

Please refer to CHANGELOG.md for details.

v8.0.0-beta.5

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

8.0.0 (2026-03-12)

Vite 8 is here!

Today, we're thrilled to announce the release of the next Vite major:

⚠ BREAKING CHANGES

  • remove import.meta.hot.accept resolution fallback (#21382)
  • update default browser target (#21193)
  • the epic rolldown-vite merge (#21189)

Features

@dependabot
chore(deps-dev): bump the all-pnpm-dependencies group across 1 direct…
9281e27 
…ory with 10 updates

Bumps the all-pnpm-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@rollup/plugin-commonjs](https://github.com/rollup/plugins/tree/HEAD/packages/commonjs) | `29.0.0` | `29.0.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.49.5` | `2.55.0` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `6.2.4` | `7.0.0` |
| [devalue](https://github.com/sveltejs/devalue) | `5.6.2` | `5.6.4` |
| [prettier](https://github.com/prettier/prettier) | `3.8.0` | `3.8.1` |
| [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) | `3.4.1` | `3.5.1` |
| [rollup](https://github.com/rollup/rollup) | `4.55.1` | `4.59.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.46.4` | `5.53.11` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.5` | `4.4.5` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.3.1` | `8.0.0` |



Updates `@rollup/plugin-commonjs` from 29.0.0 to 29.0.2
- [Changelog](https://github.com/rollup/plugins/blob/master/packages/commonjs/CHANGELOG.md)
- [Commits](https://github.com/rollup/plugins/commits/commonjs-v29.0.2/packages/commonjs)

Updates `@sveltejs/kit` from 2.49.5 to 2.55.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.55.0/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 6.2.4 to 7.0.0
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.0.0/packages/vite-plugin-svelte)

Updates `devalue` from 5.6.2 to 5.6.4
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.6.2...v5.6.4)

Updates `prettier` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.0...3.8.1)

Updates `prettier-plugin-svelte` from 3.4.1 to 3.5.1
- [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/v3.5.1/CHANGELOG.md)
- [Commits](sveltejs/prettier-plugin-svelte@v3.4.1...v3.5.1)

Updates `rollup` from 4.55.1 to 4.59.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.1...v4.59.0)

Updates `svelte` from 5.46.4 to 5.53.11
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.11/packages/svelte)

Updates `svelte-check` from 4.3.5 to 4.4.5
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.5...svelte-check@4.4.5)

Updates `vite` from 7.3.1 to 8.0.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/create-vite@8.0.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@rollup/plugin-commonjs"
  dependency-version: 29.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-pnpm-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.55.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-pnpm-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-pnpm-dependencies
- dependency-name: devalue
  dependency-version: 5.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-pnpm-dependencies
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-pnpm-dependencies
- dependency-name: prettier-plugin-svelte
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-pnpm-dependencies
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-pnpm-dependencies
- dependency-name: svelte
  dependency-version: 5.53.11
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-pnpm-dependencies
- dependency-name: svelte-check
  dependency-version: 4.4.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-pnpm-dependencies
- dependency-name: vite
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-pnpm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file npm npm dependencies labels Mar 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file npm npm dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants