build(deps-dev): bump the dev-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #113 · hackclub/resolution

dependabot · 2026-07-07T13:55:21Z

Bumps the dev-dependencies group with 9 updates in the /resolution-frontend directory:

Package	From	To
@sveltejs/adapter-vercel	`6.3.3`	`6.3.4`
@sveltejs/kit	`2.59.1`	`2.69.1`
@sveltejs/vite-plugin-svelte	`7.1.2`	`7.1.4`
@testing-library/svelte	`5.3.1`	`5.4.2`
@vitest/coverage-v8	`4.1.6`	`4.1.10`
svelte	`5.55.5`	`5.56.4`
svelte-check	`4.4.8`	`4.7.2`
vite	`8.0.12`	`8.1.3`
vitest	`4.1.6`	`4.1.10`

Updates @sveltejs/adapter-vercel from 6.3.3 to 6.3.4

Release notes

Sourced from @sveltejs/adapter-vercel's releases.

@sveltejs/adapter-vercel@6.3.4

Patch Changes

fix: prevent missing immutable assets from being cached as 404s for a year (#16077)

Updated dependencies [63f1b0b, 1dbff3f, 961ba01, d2e108c, d2e108c, d2e108c, 860b3c7, f8c842c, d3aa5fe, 0dd7659, 03e9f66, 57b7b7b, 4eabadc, 6fbf2b6, 276744d, 8740132, f430a68, 1c7a8dc]:

@sveltejs/kit@2.66.0

Changelog

Sourced from @sveltejs/adapter-vercel's changelog.

6.3.4

Patch Changes

fix: prevent missing immutable assets from being cached as 404s for a year (#16077)

Updated dependencies [63f1b0b, 1dbff3f, 961ba01, d2e108c, d2e108c, d2e108c, 860b3c7, f8c842c, d3aa5fe, 0dd7659, 03e9f66, 57b7b7b, 4eabadc, 6fbf2b6, 276744d, 8740132, f430a68, 1c7a8dc]:

@sveltejs/kit@2.66.0

Commits

4c9b8f1 Version Packages (#16062)
59f5262 fix: don't cache missing immutable asset 404s (#16077)
4add7be chore(deps): bump esbuild from 0.25.12 to 0.28.1 in the npm_and_yarn group ac...
c2e8f04 feat: TypeScript 6.0 (#15595)
627553f fix(adapter): remove vite-plugin-svelte from devDependencies (#15615)
See full diff in compare view

Updates @sveltejs/kit from 2.59.1 to 2.69.1

Release notes

Sourced from @sveltejs/kit's releases.

@sveltejs/kit@2.69.1

Patch Changes

fix: prevent prototype pollution when deleting file inputs (#16218)

fix: prevent unhandled promise rejection (#16219)

@sveltejs/kit@2.69.0

Minor Changes

feat: expose submitted property of remote forms (#14811)

Patch Changes

fix: clear issues and touched states on form reset (#16163)

fix: return undefined from fields.branch.issues() when only fields.branch.leaf has issues (#16187)

@sveltejs/kit@2.68.0

Minor Changes

feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#15816)

feat: set value of submit fields when form is submitted (#15979)

Patch Changes

fix: skip native_navigation when __data.json returns 404 on a static fallback page (#16135)

fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#15267)

fix: snapshot form fields on read (#16150)

fix: strip field prefix before erroring on duplicates (#16151)

fix: call reset function via prototype (#16138)

... (truncated)

Changelog

Sourced from @sveltejs/kit's changelog.

2.69.1

Patch Changes

fix: prevent prototype pollution when deleting file inputs (#16218)

fix: prevent unhandled promise rejection (#16219)

2.69.0

Minor Changes

feat: expose submitted property of remote forms (#14811)

Patch Changes

fix: clear issues and touched states on form reset (#16163)

fix: return undefined from fields.branch.issues() when only fields.branch.leaf has issues (#16187)

2.68.0

Minor Changes

feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#15816)

feat: set value of submit fields when form is submitted (#15979)

Patch Changes

fix: skip native_navigation when __data.json returns 404 on a static fallback page (#16135)

fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#15267)

fix: snapshot form fields on read (#16150)

fix: strip field prefix before erroring on duplicates (#16151)

fix: call reset function via prototype (#16138)

... (truncated)

Commits

d89edcc Version Packages (#16221)
82b0370 fix: prevent unhandled promise rejection (#16219)
df32f6f fix: prevent prototype pollution when deleting file inputs (#16218)
18801ae Version Packages (#16167)
fd628a5 fix: return undefined from fields.branch.issues() when only `fields.branc...
4f6bcbb feat(remote form): expose submitted property (#14811)
53d37f9 fix: clear issues and touched states on form reset (#16163)
fef1827 Version Packages (#16142)
e82a0a8 feat: set value of submit fields when form is submitted (#15979)
6bde3b6 fix: snapshot form fields on read (#16150)
Additional commits viewable in compare view

Updates @sveltejs/vite-plugin-svelte from 7.1.2 to 7.1.4

Release notes

Sourced from @sveltejs/vite-plugin-svelte's releases.

@sveltejs/vite-plugin-svelte@7.1.4

Patch Changes

fix: enforce ltr styles for inspector (#1324)

@sveltejs/vite-plugin-svelte@7.1.3

Patch Changes

fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

Changelog

Sourced from @sveltejs/vite-plugin-svelte's changelog.

7.1.4

Patch Changes

fix: enforce ltr styles for inspector (#1324)

7.1.3

Patch Changes

fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

Commits

c867a3a Version Packages (#1368)
dbdb255 fix: inspector rtl host styles (#1324)
694bc95 chore(deps): update dependency typescript to v6 (#1315)
9281816 chore(deps): update all non-major dependencies (#1365)
02d370d Version Packages (#1361)
3b581de Revert "feat: support .svelte.mjs and .svelte.mts files" (#1366)
5545e1a feat: support .svelte.mjs and .svelte.mts files (#1293)
2cb977e fix(inspector): activate under Vite+ by matching its client module path (#1355)
See full diff in compare view

Updates @testing-library/svelte from 5.3.1 to 5.4.2

Release notes

Sourced from @testing-library/svelte's releases.

@testing-library/svelte@5.4.2

@testing-library/svelte 5.4.2 (2026-06-23)

Bug Fixes

core: separate runes and non-runes wrapper scaffold (#497) (514a9c5), closes #496

Dependencies

@testing-library/svelte-core: upgraded to 1.1.3

@testing-library/svelte@5.4.1

@testing-library/svelte 5.4.1 (2026-06-21)

Dependencies

@testing-library/svelte-core: upgraded to 1.1.2

@testing-library/svelte@5.4.0

@testing-library/svelte 5.4.0 (2026-06-20)

Features

add wrapper option (#492) (959f8c5)

Dependencies

@testing-library/svelte-core: upgraded to 1.1.0

Commits

514a9c5 fix(core): separate runes and non-runes wrapper scaffold (#497)
959f8c5 feat: add wrapper option (#492)
bc9cab5 chore(deps-dev): bump the development group across 1 directory with 11 update...
See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.6 to 4.1.10

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.10

   🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
a7a61e7 chore: release v4.1.9 (#10598)
e61f2dd chore: release v4.1.8
e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
a09d472 chore: release v4.1.7
See full diff in compare view

Updates svelte from 5.55.5 to 5.56.4

Release notes

Sourced from svelte's releases.

svelte@5.56.4

Patch Changes

fix: include wrapping parentheses in {@const} declarator end position (#18436)

fix: always unset reactivity context after restoring it (#18453)

fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

svelte@5.56.3

Patch Changes

fix: ignore errors that occur in destroyed effects (#18384)

fix: type BigInts in $state.snapshot(...) return values (#18388)

svelte@5.56.2

Patch Changes

fix: properly track effect end node for async sibling component (#18371)

fix: prevent false-positive reactivity loss warning (#18373)

chore: bump esrap dependency (#18372)

fix: ignore declaration tags for animation directive (#18366)

fix: reject pending async deriveds on discard (#18308)

svelte@5.56.1

Patch Changes

fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

fix: parse declaration tag contents more robustly (#18353)

fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

fix: tolerate whitespace before let/const in declaration tags (#18348)

fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

fix: more robust parsing of declaration tags with regards to type (#18330)

fix: preserve newlines in spread input values when the type attribute is applied after value (#18345)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.4

Patch Changes

fix: include wrapping parentheses in {@const} declarator end position (#18436)

fix: always unset reactivity context after restoring it (#18453)

fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

5.56.3

Patch Changes

fix: ignore errors that occur in destroyed effects (#18384)

fix: type BigInts in $state.snapshot(...) return values (#18388)

5.56.2

Patch Changes

fix: properly track effect end node for async sibling component (#18371)

fix: prevent false-positive reactivity loss warning (#18373)

chore: bump esrap dependency (#18372)

fix: ignore declaration tags for animation directive (#18366)

fix: reject pending async deriveds on discard (#18308)

5.56.1

Patch Changes

fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

fix: parse declaration tag contents more robustly (#18353)

fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

fix: tolerate whitespace before let/const in declaration tags (#18348)

fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

... (truncated)

Commits

eae50df Version Packages (#18435)
36ae062 fix: always unset reactivity context after restoring it (#18453)
a6985bc fix: strip ? from optional parameters in svelte lang ts (#18448)
c4daa49 fix: include wrapping parentheses in {@const} declarator end (#18436)
0510174 fix: make SvelteURLSearchParams notifications accurate (#18425)
8ea3ee8 chore(deps-dev): bump esbuild from 0.25.11 to 0.28.1 (#18427)
a9f4854 Version Packages (#18389)
71a6515 fix: check boundary exists before calling error handler in async derived (#18...
3d83c9a fix: add bigint to Primitive type for $state.snapshot (#18388)
51baf1c Version Packages (#18357)
Additional commits viewable in compare view

Updates svelte-check from 4.4.8 to 4.7.2

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.2

Patch Changes

fix: resolve tsgo bin path with package.json (#3074)

fix: report tsconfig errors in --tsgo-experimental-api (#3070)

svelte-check@4.7.1

Patch Changes

fix: correctly parse --tsgo-experimental-api flag (#3067)

svelte-check@4.7.0

Minor Changes

feat: add --config option (#3066)

feat: svelte-check tsgo support with experimental api (#3036)

Patch Changes

fix: load esm version of Vite (#3065)

fix: stop excluding workspaces under dot-prefixed ancestors (#3037)

Updated dependencies [7a3464b, a2561fc]:

@sveltejs/load-config@0.2.0

svelte-check@4.6.0

Minor Changes

feat: support reading Svelte config from vite.config.js/ts (#3031)

Patch Changes

Updated dependencies [151cf45]:

@sveltejs/load-config@0.1.1

svelte-check@4.5.0

Minor Changes

feat: support Svelte 5 declaration tags (#3033)

Patch Changes

fix: properly handle props with the name slot inside Svelte 5 snippets (#3030)

feat: add support for svelte config ts/mts files (#3009)

Commits

dafb5f1 Version Packages (#3075)
61ae3d8 fix: report tsconfig errors in --tsgo-experimental-api (#3070)
d5bc4da fix: resolve tsgo bin path with package.json (#3074)
32556db Version Packages (#3069)
4e52661 fix (svelte-check): --tsgo-experimental-api option is not honored (#3067)
fbb1291 Version Packages (#3059)
3a1e384 feat: svelte-check tsgo support with experimental api (#3036)
8a6f155 fix(svelte-check): stop excluding workspaces under dot-prefixed ancestors (#3...
7659b0f perf: remove lodash (#3038)
a2561fc feat: enable passing Svelte config file paths (#3066)
Additional commits viewable in compare view

Updates vite from 8.0.12 to 8.1.3

Release notes

Sourced from vite's releases.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.0.16

Please refer to CHANGELOG.md for details.

v8.0.15

Please refer to CHANGELOG.md for details.

v8.0.14

Please refer to CHANGELOG.md for details.

v8.0.13

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.3 (2026-07-02)

Bug Fixes

css: inject inlined CSS after the shebang line (#22717) (1534d36)

deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)

preload css for nested dynamic imports (#22759) (2c53054)

ssr: correct stacktrace column position for first line (#22828) (c4acd69)

8.1.2 (2026-06-30)

Bug Fixes

deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)

restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)

revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

8.1.1 (2026-06-30)

Features

update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)

bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)

bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)

css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)

css: resolve tsconfig paths in CSS and Sass @import (#22775) (ef0b891)

deps: update all non-major dependencies (#22734) (e635f49)

deps: update all non-major dependencies (#22804) (8837400)

deps: update rolldown-related dependencies (#22591) (2ce6677)

escape ids with multiple null bytes (#22687) (833fc30)

hide console window when running 'net use' on Windows (#22698) (92b63f2)

ignore bundled config temp dir (#22800) (043a810)

invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)

optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)

optimizer: scanner should resolve input from root (#22769) (9722b07)

resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)

return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)

server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)

use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

... (truncated)

Commits

578ffb8 release: v8.1.3
7103c3a fix(deps): bump es-module-lexer to 2.3.0 (#22838)
1534d36 fix(css): inject inlined CSS after the shebang line (#22717)
c4acd69 fix(ssr): correct stacktrace column position for first line (#22828)
2c53054 fix: preload css for nested dynamic imports (#22759)
ba31193 release: v8.1.2
0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
Additional commits viewable in compare view

Updates vitest from 4.1.6 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

browser: Check fs access in builtin commands [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode (claude-opus-4-8) in vitest-dev/vitest#10680 (5c18d)

vm: Fix external module resolve error with deps optimizer query for encoded URI [backport to v4] - by @SveLil and @hi-ogawa in vitest-dev/vitest#10661 (bae52)

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in vitest-dev/vitest#10546 (a5180)

browser:

Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10555 (7fb29)

Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in vitest-dev/vitest#10497 and vitest-dev/vitest#10556 (fbc62)

mocker:

Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in vitest-dev/vitest#10548 (2c955)

pool:

Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in vitest-dev/vitest#10543 and vitest-dev/vitest#10564 (934b0)

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

browser:

Disable client cdp API when allowWrite/allowExec: false [backport to v4] - by @hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)

Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by @toxik and @Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

Commits

db616d2 chore: release v4.1.10 (#10718)
bae52b5 fix(vm): fix external modul...
Description has been truncated

…ith 9 updates Bumps the dev-dependencies group with 9 updates in the /resolution-frontend directory: | Package | From | To | | --- | --- | --- | | [@sveltejs/adapter-vercel](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-vercel) | `6.3.3` | `6.3.4` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.59.1` | `2.69.1` | | [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `7.1.2` | `7.1.4` | | [@testing-library/svelte](https://github.com/testing-library/svelte-testing-library/tree/HEAD/packages/svelte) | `5.3.1` | `5.4.2` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.6` | `4.1.10` | | [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.5` | `5.56.4` | | [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.8` | `4.7.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.12` | `8.1.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.6` | `4.1.10` | Updates `@sveltejs/adapter-vercel` from 6.3.3 to 6.3.4 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-vercel/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-vercel@6.3.4/packages/adapter-vercel) Updates `@sveltejs/kit` from 2.59.1 to 2.69.1 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.69.1/packages/kit) Updates `@sveltejs/vite-plugin-svelte` from 7.1.2 to 7.1.4 - [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.1.4/packages/vite-plugin-svelte) Updates `@testing-library/svelte` from 5.3.1 to 5.4.2 - [Release notes](https://github.com/testing-library/svelte-testing-library/releases) - [Changelog](https://github.com/testing-library/svelte-testing-library/blob/main/CHANGELOG.md) - [Commits](https://github.com/testing-library/svelte-testing-library/commits/@testing-library/svelte@5.4.2/packages/svelte) Updates `@vitest/coverage-v8` from 4.1.6 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `svelte` from 5.55.5 to 5.56.4 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.4/packages/svelte) Updates `svelte-check` from 4.4.8 to 4.7.2 - [Release notes](https://github.com/sveltejs/language-tools/releases) - [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.8...svelte-check@4.7.2) Updates `vite` from 8.0.12 to 8.1.3 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.3/packages/vite) Updates `vitest` from 4.1.6 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@sveltejs/adapter-vercel" dependency-version: 6.3.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@sveltejs/kit" dependency-version: 2.69.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@sveltejs/vite-plugin-svelte" dependency-version: 7.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@testing-library/svelte" dependency-version: 5.4.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: svelte dependency-version: 5.56.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: svelte-check dependency-version: 4.7.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vite dependency-version: 8.1.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

socket-security · 2026-07-07T13:57:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability	Quality	Maintenance
@sveltejs/adapter-vercel@6.3.3 ⏵ 6.3.4	⁺¹		⁺¹	⁺³
vitest@4.1.6 ⏵ 4.1.10	⁺¹		⁺¹	⁺²
@vitest/coverage-v8@4.1.6 ⏵ 4.1.10				⁺²
@sveltejs/kit@2.59.1 ⏵ 2.69.1		⁺²	⁺¹	⁺¹
@sveltejs/vite-plugin-svelte@7.1.2 ⏵ 7.1.4	⁺¹		⁺¹	⁺⁴
vite@8.0.12 ⏵ 8.1.3		⁺¹⁸	⁺¹	⁺¹
svelte@5.55.5 ⏵ 5.56.4	⁺¹	⁺⁶	⁺¹	^-1
svelte-check@4.4.8 ⏵ 4.7.2
@testing-library/svelte@5.3.1 ⏵ 5.4.2	⁺¹			⁺²

View full report

socket-security · 2026-07-07T13:57:24Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@emnapi/runtime` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: `?` → `npm/vite@8.1.3` → `npm/@emnapi/runtime@1.11.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@emnapi/runtime@1.11.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 7, 2026

vercel Bot deployed to Preview July 7, 2026 13:55 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the dev-dependencies group across 1 directory with 9 updates#113

build(deps-dev): bump the dev-dependencies group across 1 directory with 9 updates#113
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/resolution-frontend/dev-dependencies-19f15e2046

dependabot Bot commented on behalf of github Jul 7, 2026

Uh oh!

socket-security Bot commented Jul 7, 2026

Uh oh!

socket-security Bot commented Jul 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 7, 2026

@​sveltejs/adapter-vercel@​6.3.4

Patch Changes

6.3.4

Patch Changes

@​sveltejs/kit@​2.69.1

Patch Changes

@​sveltejs/kit@​2.69.0

Minor Changes

Patch Changes

@​sveltejs/kit@​2.68.0

Minor Changes

Patch Changes

2.69.1

Patch Changes

2.69.0

Minor Changes

Patch Changes

2.68.0

Minor Changes

Patch Changes

@​sveltejs/vite-plugin-svelte@​7.1.4

Patch Changes

@​sveltejs/vite-plugin-svelte@​7.1.3

Patch Changes

7.1.4

Patch Changes

7.1.3

Patch Changes

@​testing-library/svelte@​5.4.2

@​testing-library/svelte 5.4.2 (2026-06-23)

Bug Fixes

Dependencies

@​testing-library/svelte@​5.4.1

@​testing-library/svelte 5.4.1 (2026-06-21)

Dependencies

@​testing-library/svelte@​5.4.0

@​testing-library/svelte 5.4.0 (2026-06-20)

Features

Dependencies

v4.1.10

🐞 Bug Fixes

v4.1.9

🐞 Bug Fixes

v4.1.8

🐞 Bug Fixes

v4.1.7

🐞 Bug Fixes

svelte@5.56.4

Patch Changes

svelte@5.56.3

Patch Changes

svelte@5.56.2

Patch Changes

svelte@5.56.1

Patch Changes

5.56.4

Patch Changes

5.56.3

Patch Changes

5.56.2

Patch Changes

5.56.1

Patch Changes

svelte-check@4.7.2

Patch Changes

svelte-check@4.7.1

Patch Changes

svelte-check@4.7.0

Minor Changes

Patch Changes

svelte-check@4.6.0

Minor Changes

Patch Changes

svelte-check@4.5.0

Minor Changes

Patch Changes

v8.1.3

`@sveltejs/adapter-vercel@6`.3.4

`@sveltejs/kit@2`.69.1

`@sveltejs/kit@2`.69.0

`@sveltejs/kit@2`.68.0

`@sveltejs/vite-plugin-svelte@7`.1.4

`@sveltejs/vite-plugin-svelte@7`.1.3

`@testing-library/svelte@5`.4.2

`@testing-library/svelte` 5.4.2 (2026-06-23)

`@testing-library/svelte@5`.4.1

`@testing-library/svelte` 5.4.1 (2026-06-21)

`@testing-library/svelte@5`.4.0

`@testing-library/svelte` 5.4.0 (2026-06-20)