Skip to content

Bump the bun-minor-patch group with 6 updates - #152

Merged
kriswill merged 2 commits into
mainfrom
dependabot/bun/bun-minor-patch-c6a0c6f33a
Aug 23, 2026
Merged

Bump the bun-minor-patch group with 6 updates#152
kriswill merged 2 commits into
mainfrom
dependabot/bun/bun-minor-patch-c6a0c6f33a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the bun-minor-patch group with 6 updates:

Package From To
svelte 5.56.8 5.56.10
@biomejs/biome 2.5.7 2.5.9
@happy-dom/global-registrator 20.11.1 20.11.6
@types/bun 1.3.14 1.4.0
happy-dom 20.11.2 20.11.6
mermaid 11.16.1 11.17.0

Updates svelte from 5.56.8 to 5.56.10

Release notes

Sourced from svelte's releases.

svelte@5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

svelte@5.56.9

Patch Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

5.56.9

... (truncated)

Commits
  • 56a036f Version Packages (#18640)
  • 545205b perf: make async blocker analysis linear (#18549)
  • 950e2a8 fix: strip comments from inline style values in linear time (#18553)
  • ffc0e6e fix: release last_propagated_event after event propagation settles (#18569)
  • 2f684fe docs: clarify that context lookup includes the current component and all ance...
  • 3feb34a chore: deduplicate client/server context helpers (#18580)
  • 24130c1 fix: parse nth-child of syntax without whitespace after of (#18611)
  • a166761 fix: treat concise arrow function bodies as implicit returns when calculating...
  • a4c60cc fix: append_styles resolving to document.head in WC (#18614)
  • ee1249b fix: preserve renderer type in copy() during SSR (#18616)
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.7 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>
  export function greet() {
    console.log("Hello!");

... (truncated)

Commits

Updates @happy-dom/global-registrator from 20.11.1 to 20.11.6

Release notes

Sourced from @​happy-dom/global-registrator's releases.

v20.11.6

👷‍♂️ Patch fixes

v20.11.5

👷‍♂️ Patch fixes

  • Allow explicit element types for querySelector (e.g. querySelector<HTMLInputElement>(".my-input")) - By @​cyphercodes

v20.11.4

👷‍♂️ Patch fixes

  • Fixes the CORS check fetch() to match origins instead of host and protocol - By @​rexxars in task #1490

v20.11.3

👷‍♂️ Patch fixes

v20.11.2

👷‍♂️ Patch fixes

  • MutationObserver callback being GC'd due to orphaned WeakRef - By @​mixelburg in task #2264
Commits

Updates @types/bun from 1.3.14 to 1.4.0

Commits

Updates happy-dom from 20.11.2 to 20.11.6

Release notes

Sourced from happy-dom's releases.

v20.11.6

👷‍♂️ Patch fixes

v20.11.5

👷‍♂️ Patch fixes

  • Allow explicit element types for querySelector (e.g. querySelector<HTMLInputElement>(".my-input")) - By @​cyphercodes

v20.11.4

👷‍♂️ Patch fixes

  • Fixes the CORS check fetch() to match origins instead of host and protocol - By @​rexxars in task #1490

v20.11.3

👷‍♂️ Patch fixes

Commits

Updates mermaid from 11.16.1 to 11.17.0

Release notes

Sourced from mermaid's releases.

mermaid@11.17.0

Minor Changes

Patch Changes

  • #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

  • #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

  • #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

  • #8005 90eeece Thanks @​pbrolin47! - fix(flowchart): reverts the behavior change from #7672 (fix/4648-directions), since arrows between subgraphs are broken

  • #7951 afa2f80 Thanks @​aloisklink! - perf: use fastdom to batch DOM measurements (up to 25% speedup)

  • Updated dependencies [e848423]:

    • @​mermaid-js/parser@​1.2.1
Commits
  • 293b1c1 Merge pull request #8074 from mermaid-js/changeset-release/master
  • f484a36 Version Packages
  • 0a07bf6 Bump layout-elk version (#8078)
  • 1127c5f Merge pull request #8071 from mermaid-js/release/11.17.0
  • 8628ef1 docs: remove C4 typescript conversion changeset
  • 349ebd3 docs: remove non-user visible changeset
  • b5a744a docs: scope to all v11.17.0 changeset messages
  • 4150c73 Make changesets less verbose
  • 7ba4b6f [autofix.ci] apply automated fixes
  • b3d1f63 Fixed block rendering due to failing SS in applitools
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the bun-minor-patch group with 6 updates
a078a22 
Bumps the bun-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.8` | `5.56.10` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.7` | `2.5.9` |
| [@happy-dom/global-registrator](https://github.com/capricorn86/happy-dom) | `20.11.1` | `20.11.6` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.14` | `1.4.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.11.2` | `20.11.6` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.0` |


Updates `svelte` from 5.56.8 to 5.56.10
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.10/packages/svelte)

Updates `@biomejs/biome` from 2.5.7 to 2.5.9
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome)

Updates `@happy-dom/global-registrator` from 20.11.1 to 20.11.6
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.11.1...v20.11.6)

Updates `@types/bun` from 1.3.14 to 1.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `happy-dom` from 20.11.2 to 20.11.6
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.11.2...v20.11.6)

Updates `mermaid` from 11.16.1 to 11.17.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.0)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.56.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: bun-minor-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-minor-patch
- dependency-name: "@happy-dom/global-registrator"
  dependency-version: 20.11.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-minor-patch
- dependency-name: "@types/bun"
  dependency-version: 1.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun-minor-patch
- dependency-name: happy-dom
  dependency-version: 20.11.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: bun-minor-patch
- dependency-name: mermaid
  dependency-version: 11.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: bun-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 23, 2026
@github-actions

github-actions Bot commented Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Code Metrics Report

SPA test suite — bun test --coverage, floor 96%.

main (432ea2e) #152 (9f7ad06) +/-
Coverage 96.4% 96.4% +0.0%
Test Execution Time 3s 4s +1s
Details 
  |                     | main (432ea2e) | #152 (9f7ad06) |  +/-  |
  |---------------------|----------------|----------------|-------|
+ | Coverage            |          96.4% |          96.4% | +0.0% |
  |   Files             |             56 |             56 |     0 |
  |   Lines             |          11578 |          11591 |   +13 |
+ |   Covered           |          11165 |          11178 |   +13 |
- | Test Execution Time |             3s |             4s |   +1s |

Code coverage of files in pull request scope (99.3% → 99.3%)

Files Coverage +/- Status
scripts/licenses.ts 98.4% -1.6% modified
scripts/tree-rss.ts 100.0% +1.0% affected

Code Metrics Report (rust)

Rust crate — cargo llvm-cov outside the nix sandbox, ratcheted against main.

main (432ea2e) #152 (9f7ad06) +/-
Coverage 90.4% 90.4% 0.0%
Test Execution Time 1m8s 1m10s +2s
Details 
  |                     | main (432ea2e) | #152 (9f7ad06) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          90.4% |          90.4% | 0.0% |
  |   Files             |             18 |             18 |    0 |
  |   Lines             |           5528 |           5528 |    0 |
  |   Covered           |           5000 |           5000 |    0 |
- | Test Execution Time |           1m8s |          1m10s |  +2s |

Reported by octocov, composed by the build job.

@kriswill
Fall back to the README's License section for tarballs with no licens…
d1ec713 
…e file

mermaid 11.17.0 pulls in fastdom, whose npm tarball ships its MIT notice
only inside README.md's License section — the docs build refused to
bundle it. The notice still ships verbatim from the shipped copy: a
standalone license file wins, the README section is the fallback, and a
package with neither still fails the build.
@kriswill
kriswill merged commit 47267c8 into main Aug 23, 2026
8 checks passed
@kriswill
kriswill deleted the dependabot/bun/bun-minor-patch-c6a0c6f33a branch August 23, 2026 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@kriswill