Skip to content

chore(deps)(deps): bump the npm-production group across 1 directory with 9 updates - #423

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-469df5db49
Open

chore(deps)(deps): bump the npm-production group across 1 directory with 9 updates#423
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-production-469df5db49

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-production group with 9 updates in the / directory:

Package From To
js-yaml 5.2.3 5.3.0
svelte 5.56.8 5.56.10
@typescript-eslint/eslint-plugin 8.66.0 8.67.0
@typescript-eslint/parser 8.66.0 8.67.0
eslint 10.8.0 10.8.1
eslint-plugin-svelte 3.22.0 3.23.0
tsx 4.23.10 4.23.12
typescript-eslint 8.66.0 8.67.0
@napi-rs/cli 3.8.2 3.8.6

Updates js-yaml from 5.2.3 to 5.3.0

Changelog

Sourced from js-yaml's changelog.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

  • Added completely new documentation.
  • Exported DUMP_SCHEMA, the default schema used by the dumper.
  • Added YAMLException.throwAt() for throwing an error at a source position.

Changed

  • Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE, COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old exports are still preserved, but deprecated.
  • Made identify mandatory for custom tag definitions. Use identify: () => false for load-only tags.

Deprecated

  • Deprecated flat constant exports. Use grouped ones instead.

Removed

  • Removed the MERGE_KEY export (not used anymore after last fixes).

Fixed

  • Validate << sequence items at merge time, so aliased merge sources are checked too.
  • Resolve << outside of a mapping key as the plain string '<<', matching v4, instead of leaking an internal symbol into the result.
Commits
  • 04db458 5.3.0 released
  • 22ce0a0 Changelog update
  • fae37b8 fix: << outside a mapping key no longer leaks the internal merge symbol
  • b62ef83 fix: validate << sequence items at merge time, so aliased sources are check...
  • cc665ec docs: review and update annotations
  • 2aa24a6 Changelog update
  • eec6902 Restore deprecated parser constant exports
  • 03397ac Move throwErrorAt to YAMLException as throwAt
  • d9dd2c7 docs: new condensed theme
  • 0f898e6 docs: annotation tweaks
  • Additional commits viewable in compare view

Updates svelte from 5.56.8 to 5.56.10

Release notes

Sourced from svelte's releases.

svelte@5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

svelte@5.56.9

Patch Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.10

Patch Changes

  • fix: preserve CSS escape sequences when printing selectors (#18667)

  • fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

  • fix: transform expressions inside labeled statements during server compilation (#18617)

  • docs: clarify that context lookup includes the current component and all ancestors (#18581)

  • fix: apply CSS custom properties with falsy values on components (#18634)

  • fix: correctly print {#await ... catch x} et al (#18645)

  • fix: ignore comments of Program node during migration script (#18656)

  • fix: reliably resolve append_style to its correct root (#18614)

  • fix: clean up removed capture event handlers from spread attributes (#18618)

  • fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

  • fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

  • fix: give effect teardowns the value from before the first write in a flush (#18620)

  • fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

  • fix: preserve namespaces in CSS type selectors (#18678)

  • fix: increment private state fields through a non-this receiver (#18622)

  • chore: deduplicate client and server context helpers (#18580)

  • fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

  • fix: allow custom elements to receive async values as props (#18661)

  • fix: strip comments from inline style values in linear time (#18553)

  • fix: prevent declaration comments from breaking server derived references (#18641)

  • perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

  • fix: preserve short-circuiting for logical assignments to private state fields (#18594)

5.56.9

... (truncated)

Commits
  • 56a036f Version Packages (#18640)
  • 545205b perf: make async blocker analysis linear (#18549)
  • 950e2a8 fix: strip comments from inline style values in linear time (#18553)
  • ffc0e6e fix: release last_propagated_event after event propagation settles (#18569)
  • 2f684fe docs: clarify that context lookup includes the current component and all ance...
  • 3feb34a chore: deduplicate client/server context helpers (#18580)
  • 24130c1 fix: parse nth-child of syntax without whitespace after of (#18611)
  • a166761 fix: treat concise arrow function bodies as implicit returns when calculating...
  • a4c60cc fix: append_styles resolving to document.head in WC (#18614)
  • ee1249b fix: preserve renderer type in copy() during SSR (#18616)
  • Additional commits viewable in compare view

Updates @typescript-eslint/eslint-plugin from 8.66.0 to 8.67.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.67.0 (2026-08-10)

This was a version bump only for eslint-plugin to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits
  • 20a261f chore(release): publish 8.67.0
  • 6dfe4d0 chore(eslint-plugin-internal): [plugin-test-formatting] enforce zero-indentat...
  • 3b155bb chore: use typescript 7 for typechecking (#12601)
  • See full diff in compare view

Updates @typescript-eslint/parser from 8.66.0 to 8.67.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.67.0 (2026-08-10)

This was a version bump only for parser to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint from 10.8.0 to 10.8.1

Release notes

Sourced from eslint's releases.

v10.8.1

Bug Fixes

  • 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#21173) (dongkyu lee)
  • 151ba3f fix: false positives in getter-return and accessor-pairs (#21163) (Grit)
  • 6898df9 fix: ignore meta-property names in id-denylist (#21166) (Pixel)
  • 4d7db66 fix: ignore meta-property names in id-match (#21167) (Pixel)
  • 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#20935) (kuldeep kumar)

Documentation

  • 7d0cbf8 docs: Update README (GitHub Actions Bot)
  • 0a05812 docs: add missing backticks to no-duplicate-imports.js (#21183) (Lee Daeun)
  • 678c90b docs: Update README (GitHub Actions Bot)
  • 8a10424 docs: Update README (GitHub Actions Bot)
  • 69bb948 docs: Update README (GitHub Actions Bot)

Chores

  • 0a14800 chore: update github/codeql-action action to v4.37.4 (#21196) (renovate[bot])
  • 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#21191) (Lazizbek Ergashev)
  • 5611035 test: add error locations info to no-void (#21185) (Lee Daeun)
  • ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#21176) (dependabot[bot])
  • f131c03 chore: improve ecosystem test failure reporting (#20937) (crimsonjay0)
  • 1f6edde chore: update ecosystem plugins (#21182) (ESLint Bot)
  • d3266fb chore: unpin webpack dependency (#21172) (Francesco Trotta)
  • 65a6519 chore: add allowScripts field to package.json (#21092) (GiHoon Noh)
  • 22e5256 ci: add triage:no label to Dependabot PRs (#21141) (lumir)
  • 55c9038 ci: bump actions/labeler from 6 to 7 (#21159) (dependabot[bot])
  • 7280e78 chore: update dependency prettier to v3.9.6 (#21162) (renovate[bot])
  • eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#21156) (Francesco Trotta)
  • 60a178d chore: update ecosystem plugins (#21150) (ESLint Bot)
  • f9f61dc test: add error locations to no-unreachable (#21151) (JIYEON)
  • d086293 test: add error locations to no-undef (#21147) (JIYEON)
  • cc01b67 test: add error locations to no-useless-catch (#21144) (devoil)
  • 688e75e chore: add missing backticks in JSDoc (#21143) (Bo Hyun Kim)
  • 7c1e175 test: add error locations to require-await (#21145) (Grit)
  • 588a26d test: add error locations to no-extra-label (#21139) (dongkyu lee)
  • 059aa89 test: add error locations to no-useless-concat (#21140) (dongkyu lee)
  • 5a452a8 test: add error locations to no-const-assign (#21138) (dongkyu lee)
Commits

Updates eslint-plugin-svelte from 3.22.0 to 3.23.0

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.0

Minor Changes

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.0

Minor Changes

Commits

Updates tsx from 4.23.10 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • See full diff in compare view

Updates typescript-eslint from 8.66.0 to 8.67.0

Release notes

Sourced from typescript-eslint's releases.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.67.0 (2026-08-10)

🚀 Features

  • typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates @napi-rs/cli from 3.8.2 to 3.8.6

Commits
  • 70c1493 chore(release): publish
  • aeba312 fix(cli): compatible with emnapi v1 & v2 (#3454)
  • d532909 chore(deps): update dependency oxc-parser to ^0.144.0 (#3453)
  • b8ba732 fix(deps): update emnapi to v2.0.0-alpha.4 (#3451)
  • 06349eb chore(deps): update cross-platform-actions/action action to v1.4.0 (#3452)
  • a5b5f27 chore(release): publish
  • 980b0b3 fix(cli): validate publish-effective exports in threadless wasi pre-publish (...
  • f5c8872 chore(deps): lock file maintenance (#3435)
  • 956e452 chore: release (#3448)
  • 73048f5 chore(release): publish
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ith 9 updates

Bumps the npm-production group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.2.3` | `5.3.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.8` | `5.56.10` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.66.0` | `8.67.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.66.0` | `8.67.0` |
| [eslint](https://github.com/eslint/eslint) | `10.8.0` | `10.8.1` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.22.0` | `3.23.0` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.10` | `4.23.12` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.66.0` | `8.67.0` |
| [@napi-rs/cli](https://github.com/napi-rs/napi-rs) | `3.8.2` | `3.8.6` |



Updates `js-yaml` from 5.2.3 to 5.3.0
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.2.3...5.3.0)

Updates `svelte` from 5.56.8 to 5.56.10
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.10/packages/svelte)

Updates `@typescript-eslint/eslint-plugin` from 8.66.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.66.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/parser)

Updates `eslint` from 10.8.0 to 10.8.1
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.8.0...v10.8.1)

Updates `eslint-plugin-svelte` from 3.22.0 to 3.23.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.23.0/packages/eslint-plugin-svelte)

Updates `tsx` from 4.23.10 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.10...v4.23.12)

Updates `typescript-eslint` from 8.66.0 to 8.67.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.67.0/packages/typescript-eslint)

Updates `@napi-rs/cli` from 3.8.2 to 3.8.6
- [Release notes](https://github.com/napi-rs/napi-rs/releases)
- [Commits](https://github.com/napi-rs/napi-rs/compare/@napi-rs/cli@3.8.2...@napi-rs/cli@3.8.6)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: svelte
  dependency-version: 5.56.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: eslint
  dependency-version: 10.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-production
- dependency-name: typescript-eslint
  dependency-version: 8.67.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-production
- dependency-name: "@napi-rs/cli"
  dependency-version: 3.8.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: bot-update, dependencies, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Copilot AI balanced review requested due to automatic review settings August 24, 2026 09:14

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates JavaScript tooling and runtime dependencies while keeping the workspace lockfile synchronized.

Changes:

  • Updates nine direct dependencies, including Svelte, ESLint tooling, js-yaml, tsx, and NAPI CLI.
  • Refreshes associated transitive dependencies and peer resolutions.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
package.json Updates eslint-plugin-svelte to 3.23.0.
pnpm-lock.yaml Locks all dependency and transitive updates.
Files not reviewed (1)
  • pnpm-lock.yaml: Generated file

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant