fix(deps): update all non-major dependencies#362
Conversation
Deploying with
|
| Status | Name | Latest Commit | Updated (UTC) |
|---|---|---|---|
| ❌ Deployment failed View logs |
saas-starter | ef24f4e | Jun 15 2026, 02:01 PM |
85e187c to
60286bc
Compare
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
5d737dc to
e3e25ff
Compare
dd106da to
9fff44a
Compare
b2c24ff to
6c82141
Compare

This PR contains the following updates:
2.0.0→2.1.12.0.0→2.1.13.12.1→3.12.21.14.0→1.18.0^0.18.0→^0.19.01.62.0→1.69.01.70.01.59.1→1.60.01.61.02.60.1→2.65.02.65.12.5.7→2.5.87.0.0→7.1.20.5.19→0.5.204.2.4→4.3.04.3.125.6.0→25.9.38.59.1→8.61.08.59.1→8.61.08.15.0→8.17.0de0fac2→df4cb1cfefa07e→d5726de2.18.0→2.18.10.1.2→0.1.41.37.0→1.41.03.17.1→3.19.06.11.0→6.16.11.62.0→1.69.01.70.03.8.3→3.8.43.5.1→3.5.25.55.7→5.56.34.4.7→4.6.03.5.0→3.6.04.2.4→4.3.04.3.18.59.1→8.61.053.1.1→53.4.08.0.10→8.0.164.1.5→4.1.84.1.9Release Notes
Konixy/better-svelte-email (@better-svelte-email/components)
v2.1.1Compare Source
Patch Changes
66be550: Updated packages, enabled npm trusted publisher and provenancev2.1.0Compare Source
Minor Changes
6a6cc75: - Allow external images in cli email preview.bse/resend.jsoncredential storage.See the docs for more details.
v2.0.1Compare Source
Patch Changes
198c010: Removed the@better-svelte-email/serverdependency for the@better-svelte-email/componentspackage. Also updated READMEs across the library.Konixy/better-svelte-email (@better-svelte-email/server)
v2.1.1Compare Source
Patch Changes
66be550: Updated packages, enabled npm trusted publisher and provenancev2.1.0Compare Source
Minor Changes
6a6cc75: - Allow external images in cli email preview.bse/resend.jsoncredential storage.See the docs for more details.
v2.0.1Compare Source
Patch Changes
198c010: Removed the@better-svelte-email/serverdependency for the@better-svelte-email/componentspackage. Also updated READMEs across the library.adobe/react-spectrum (@internationalized/date)
v3.12.2Compare Source
lucide-icons/lucide (@lucide/svelte)
v1.18.0: Version 1.18.0Compare Source
What's Changed
play-officon by @Ahmed-Dghaies in #4412@nextfrom installation instructions for@lucide/svelteby @alecglassford in #4432webcam-officon by @jordan-burnett in #4242New Contributors
Full Changelog: lucide-icons/lucide@1.17.0...1.18.0
v1.17.0: Version 1.17.0Compare Source
What's Changed
martiniicon by @jamiemlaw in #4335globe-checkby @Barakudum in #4342parasolicon by @karsa-mistmere in #4347Full Changelog: lucide-icons/lucide@1.16.0...1.17.0
v1.16.0: Version 1.16.0Compare Source
What's Changed
blendericon by @rrod497 in #3884Full Changelog: lucide-icons/lucide@1.15.0...1.16.0
v1.15.0: Version 1.15.0Compare Source
What's Changed
text-cursoricon by @jamiemlaw in #4340landmarkicon by @jamiemlaw in #4334candy-caneicon by @jguddas in #4148volleyballicon by @jamiemlaw in #4338chart-no-axes-combinedicon by @jguddas in #3567New Contributors
Full Changelog: lucide-icons/lucide@1.14.0...1.15.0
mmailaender/convex-svelte (@mmailaender/convex-svelte)
v0.19.1Compare Source
Patch Changes
v0.19.0Compare Source
microsoft/playwright (@playwright/test)
v1.60.0Compare Source
🌐 HAR recording on Tracing
tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same
content,modeandurlFilteroptions asrecordHar. The returned Disposable makes it easy to scope a recording withawait using:🪝 Drop API
New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches
dragenter,dragover, anddropwith a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:🎯 Aria snapshots
page.locator('body').boxesoption on locator.ariaSnapshot() / page.ariaSnapshot() appends each element's bounding box as[box=x,y,width,height], useful for AI consumption.🛑 test.abort()
New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:
New APIs
Browser, Context and Page
Locators and Assertions
descriptionin page.getByRole() / locator.getByRole() / frame.getByRole() / frameLocator.getByRole() for matching the accessible description.pseudoin expect(locator).toHaveCSS() reads computed styles from::beforeor::after.stylein locator.highlight() applies extra inline CSS to the highlight overlay, plus new page.hideHighlight() to clear all highlights.Network
noDefaultsin browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.Errors and Reporting
line/columnproperties (lineNumber/columnNumberare deprecated).expect(...)matcher failure.workerInfoargument with details about the worker for fixture teardown errors.Test runner
{testFileBaseName}token in testProject.snapshotPathTemplate — file name without extension.workers: 0or negative values.🛠️ Other improvements
npx playwright show-reportaccepts.zipfiles directly — no need to unzip first.repeatEachIndexis shown in the test header when non-zero.Breaking Changes⚠️
Locator.ariaRef()— use the standard locator.ariaSnapshot() pipeline.handleoption onBrowserContext.exposeBindingandPage.exposeBinding.loggeroption onBrowserType.connectandBrowserType.connectOverCDP— use tracing instead.videosPath/videoSize— userecordVideoinstead.Browser Versions
This version was also tested against the following stable channels:
sveltejs/kit (@sveltejs/kit)
v2.65.0Compare Source
Minor Changes
Patch Changes
fix: dedupe remote data (#15991)
fix: skip client build if all routes have CSR disabled (#15936)
v2.64.0Compare Source
Minor Changes
Fileobjects (#15978)Patch Changes
v2.63.1Compare Source
Patch Changes
fix: use SSE for
query.live(#15957)fix: use forward slashes in the generated
env.d.tsimport path on Windows (#15977)fix: allow
$app/environmentwith a warning whenexplicitEnvironmentVariablesis enabled (#15980)fix: avoid importing Vite while validating explicit environment variables (#15953)
docs: adjust the release version of explicit env vars (#15968)
fix: ensure
versionis defined when importing from$app/envwith explicit environment variables (#15971)v2.63.0Compare Source
Minor Changes
Patch Changes
fix: remove check for svelte.config.js before running
sync(#15946)fix: generate a placeholder tsconfig.json to squelch sync-time warnings (#15948)
fix: allow use of
$app/env/publicin service workers (#15950)v2.62.0Compare Source
Minor Changes
Patch Changes
fix: preserve multiple
Set-Cookieheaders on 304 responses (#15902)fix: preload for anchor elements that were just previously preloaded (#15915)
fix: catch load function streaming errors on the client (#15929)
fix: avoid generating the
_app/env.jsmodule if public dynamic environment variables are not used by the app (#15940)v2.61.1Compare Source
Patch Changes
v2.61.0Compare Source
Minor Changes
breaking: the
.run()method has been removed from remote queries on both the client and the server. Useawait query()directly instead — it now works everywhere (#15779)feat: remote queries can now be awaited in any context (event handlers, module scope, async callbacks), not just inside reactive contexts. The cache is shared across reactive and non-reactive subscribers, so awaiting a query in an event handler will dedupe with components that have already subscribed to the same query. (#15779)
feat: live query instances are now themselves async-iterable (#15878)
feat: add programmatic
submitmethod toformremote function instances (#15657)feat: pass
formremote function instance intoenhancecallback (#15657)Patch Changes
fix: resolve the app payload without using
process.env.NODE_ENV(#15852)fix: support
exactOptionalPropertyTypesfor optional route params (#15825)fix: correctly send
truevalue to the server for 'submit' and 'hidden' form fields (#15858)fix: avoid build warnings about undefined universal hooks (#15895)
fix: prefer default error page when failing to decode the URL pathname (#15744)
fix: disable link prefetching on slow internet connections (#15885)
fix: allow routes ending with optional parameters next to more specific routes (#15861)
fix: remove reliance on Content-Length header in deserialize_binary_form, which caused failures when proxies (e.g. Vercel, Azure) strip the header and use chunked transfer encoding (#15796)
sveltejs/kit (@sveltejs/package)
v2.5.8Compare Source
Patch Changes
svelte2tsxdependency to support TypeScript 6 (#15896)sveltejs/vite-plugin-svelte (@sveltejs/vite-plugin-svelte)
v7.1.2Compare Source
Patch Changes
v7.1.1Compare Source
Patch Changes
fix: pass
typescript.onlyRemoveTypeImportstotransformWithOxcinvitePreprocessso that value imports are not dropped when they are only referenced in Svelte template markup (#1326)fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)
v7.1.0Compare Source
Minor Changes
tailwindlabs/tailwindcss-typography (@tailwindcss/typography)
v0.5.20Compare Source
Fixed
tailwindlabs/tailwindcss (@tailwindcss/vite)
v4.3.0Compare Source
Added
@container-sizeutility (#18901)scrollbar-{auto,thin,none}utilities forscrollbar-width, andscrollbar-thumb-*/scrollbar-track-*color utilities forscrollbar-color(#19981, #20019)scrollbar-gutter-*utilities (#20018)zoom-*utilities (#20020)tab-*utilities (#20022)@variantwith stacked variants (e.g.@variant hover:focus { … }) (#19996)@variantwith compound variants (e.g.@variant hover, focus { … }) (#19996)--default(…)in--value(…)and--modifier(…)for functional@utilitydefinitions (#19989)Fixed
@pluginresolves package JavaScript entries instead of browser CSS entries when using@tailwindcss/vite(#19949)@importand@pluginpaths resolving from the wrong directory when using@tailwindcss/vite(#19965)@variantare processed by@tailwindcss/vite(#19966)basewhenresult.opts.fromis not provided when using@tailwindcss/postcss(#19980)_whitespace in arbitrary values (#19986)w-[calc(100%---spacing(60))]→w-[calc(100%-(--spacing(60)))]) (#19986)-mt-[20in]→mt-[-20in], notmt-[-1920px]) (#19988):has()variants from[&:has(…)]tohas-[…](#19991)styleattributes (e.g.style="flex-grow: 1"→style="flex-grow: 1", notstyle="grow: 1") (#19918)@utilitydefinitions with the same name but different value types (#19777)PluginWithConfigtype fromtailwindcss/pluginto fix errors when inferring plugin config types (#19707)startandendlegacy utilities without values do not generate CSS (#20003)--value(…)is required in functional@utilitydefinitions (#20005)-left-[(var(--a)+var(--b))]) (#20011)typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.61.0Compare Source
🚀 Features
UnaryExpression.prefixto alwaystrue(#12372)❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.60.1Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.60.0Compare Source
This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.4Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.3Compare Source
This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
v8.59.2Compare Source
🩹 Fixes
❤️ Thank You
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
typescript-eslint/typescript-eslint (@typescript-eslint/parser)
v8.61.0Compare Source
This was a version bump only for parser to align it with other projects, there were no code changes.
See GitHub Releases for more information.
You can read about our versioning strategy and releases on our website.
[
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.