Skip to content

Bump the npm-dependencies group with 12 updates#189

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/npm-dependencies-f66d0be4be
Closed

Bump the npm-dependencies group with 12 updates#189
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/npm-dependencies-f66d0be4be

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 13, 2026 •
edited
Loading

Bumps the npm-dependencies group with 12 updates:

Package From To
vite 8.0.7 8.0.8
@eslint/compat 2.0.4 2.0.5
@lucide/svelte 1.7.0 1.8.0
@sveltejs/kit 2.57.0 2.57.1
@types/node 25.5.2 25.6.0
bits-ui 2.17.2 2.17.3
globals 17.4.0 17.5.0
prettier 3.8.1 3.8.2
rollup-plugin-license 3.7.0 3.7.1
svelte 5.55.2 5.55.3
vite-plugin-mkcert 1.17.10 2.0.0
vitest 4.1.3 4.1.4

Updates vite from 8.0.7 to 8.0.8

Release notes

Sourced from vite's releases.

v8.0.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.8 (2026-04-09)

Features

Bug Fixes

  • avoid dns.getDefaultResultOrder temporary (#22202) (15f1c15)
  • ssr: class property keys hoisting matching imports (#22199) (e137601)
Commits

Updates @eslint/compat from 2.0.4 to 2.0.5

Release notes

Sourced from @​eslint/compat's releases.

migrate-config: v2.0.5

2.0.5 (2026-04-03)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^2.0.3 to ^2.0.4
    • devDependencies
      • @​eslint/core bumped from ^1.1.1 to ^1.2.0

compat: v2.0.5

2.0.5 (2026-04-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.2.0 to ^1.2.1
Changelog

Sourced from @​eslint/compat's changelog.

2.0.5 (2026-04-08)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/core bumped from ^1.2.0 to ^1.2.1
Commits

Updates @lucide/svelte from 1.7.0 to 1.8.0

Release notes

Sourced from @​lucide/svelte's releases.

Version 1.8.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.7.0...1.8.0

Commits
  • 51e37e2 fix aria-hidden="true" in @​lucide/svelte (#4234)
  • 7623e23 feat(docs): add Zephyr Cloud to Hero Backers tier & rework updateSponsors scr...
  • See full diff in compare view

Updates @sveltejs/kit from 2.57.0 to 2.57.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.57.1

Patch Changes

  • fix: better validation for redirect inputs (10d7b44)

  • fix: enforce BODY_SIZE_LIMIT on chunked requests (3202ed6)

  • fix: use default values as fallbacks (#15680)

  • fix: relax form typings for union types (#15687)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.57.1

Patch Changes

  • fix: better validation for redirect inputs (10d7b44)

  • fix: enforce BODY_SIZE_LIMIT on chunked requests (3202ed6)

  • fix: use default values as fallbacks (#15680)

  • fix: relax form typings for union types (#15687)

Commits

Updates @types/node from 25.5.2 to 25.6.0

Commits

Updates bits-ui from 2.17.2 to 2.17.3

Release notes

Sourced from bits-ui's releases.

bits-ui@2.17.3

Patch Changes

  • fix(ContextMenu): treat outside interactions correctly for nested floaters inside the trigger (#2020)
Commits

Updates globals from 17.4.0 to 17.5.0

Release notes

Sourced from globals's releases.

v17.5.0

  • Update globals (2026-04-12) (#342) 5d84602

sindresorhus/globals@v17.4.0...v17.5.0

Commits

Updates prettier from 3.8.1 to 3.8.2

Release notes

Sourced from prettier's releases.

3.8.2

  • Support Angular v21.2

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

<!-- Input -->
@let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.1 -->
@​let fn = (a) =>        a?    1:2;
{{ fn ( a         instanceof b)}}
<!-- Prettier 3.8.2 -->
@​let fn = (a) => (a ? 1 : 2);
{{ fn(a instanceof b) }}

Commits

Updates rollup-plugin-license from 3.7.0 to 3.7.1

Changelog

Sourced from rollup-plugin-license's changelog.

3.5.0 (2024-06-22)

  • release: prepare next release (71f5bcf)
  • release: prepare next release (2c51c64)
  • release: release version (f27f51d)
  • release: release version (8a7f79c)
  • chore: fix lint task (a7c455f)
  • chore: remove (deprecated) eslint-config-google (0ba031f)
  • chore(ci): push release to current branch (03112e9)
  • chore(deps-dev): bump @​rollup/plugin-commonjs from 25.0.7 to 25.0.8 (#1732) (8bd6fb3), closes #1732
  • chore(deps-dev): bump @​rollup/plugin-commonjs from 25.0.8 to 26.0.1 (#1741) (25f03f2), closes #1741
  • chore(deps-dev): bump globalthis from 1.0.3 to 1.0.4 (#1721) (54084da), closes #1721
  • chore(deps-dev): bump gulp-conventional-changelog from 4.0.0 to 5.0.0 (#1723) (d6ae13f), closes #1723
  • chore(deps-dev): bump prettier from 3.2.5 to 3.3.0 (#1737) (3e80b2a), closes #1737
  • chore(deps-dev): bump prettier from 3.3.0 to 3.3.1 (#1740) (ef8aabf), closes #1740
  • chore(deps-dev): bump prettier from 3.3.1 to 3.3.2 (#1746) (e4fbe41), closes #1746
  • chore(deps-dev): bump rimraf from 5.0.5 to 5.0.7 (#1727) (44fd2d4), closes #1727
  • chore(deps-dev): bump rollup from 4.14.3 to 4.16.2 (#1715) (0126778), closes #1715
  • chore(deps-dev): bump rollup from 4.16.2 to 4.16.4 (#1716) (2256205), closes #1716
  • chore(deps-dev): bump rollup from 4.16.4 to 4.17.2 (#1722) (084276a), closes #1722
  • chore(deps-dev): bump the babel group with 2 updates (#1720) (6720a77), closes #1720
  • chore(deps-dev): bump the babel group with 2 updates (#1739) (2d3d1d3), closes #1739
  • chore(deps-dev): bump the babel group with 3 updates (#1733) (b56dc88), closes #1733
  • chore(deps-dev): bump the typescript-eslint group across 1 directory with 2 updates (#1729) (5cfc7c0), closes #1729
  • chore(deps-dev): bump the typescript-eslint group across 1 directory with 2 updates (#1748) (c0abf2d), closes #1748
  • chore(deps-dev): bump the typescript-eslint group with 2 updates (#1714) (1deea69), closes #1714
  • chore(deps-dev): bump the typescript-eslint group with 2 updates (#1717) (3571d80), closes #1717
  • chore(deps-dev): bump the typescript-eslint group with 2 updates (#1735) (c3d769f), closes #1735
  • chore(deps-dev): bump the typescript-eslint group with 2 updates (#1736) (2e053de), closes #1736
  • chore(deps-dev): bump typescript from 5.4.5 to 5.5.2 (#1750) (374962d), closes #1750
  • --- (#1730) (40dc5e6), closes #1730
  • Update readme (780ff50)
  • feat: drop glob usage (#1742) (2623a1b), closes #1742
  • feat: drop mkdirp (#1743) (2f90c74), closes #1743
  • feat: include private self dependency (1401f5d)
  • docs: update README & changelog (bdfca87)

3.4.0 (2024-04-18)

  • release: prepare next release (1c6c911)
  • release: release version (a576572)
  • chore: add changelog update workflow (5f4ed57)
  • chore: update changelog (a48e164)
  • chore: update readme (8254eae)
  • chore(ci): add node 21 (80cefa0)
  • chore(ci): remove invalid option (16e4d5d)
  • chore(ci): update actions/checkout to version 4.1.2 (9742e59)
  • chore(ci): use node 20 (184cc0b)

... (truncated)

Commits
  • 6faf8f5 release: release version
  • 9b28938 chore(ci): add provenance
  • 23fd98e chore: update npmignore
  • 4d9fc6f chore(ci): use --no-git-checks in publish task
  • e01dc36 chore(ci): update publish task
  • fd0f645 chore(ci): fix publish task
  • 3f298e6 fix: fix lint
  • 348e933 Fix bug when a package license type is string (#2108)
  • 3fc6424 chore: enable pnpm trustPolicy
  • ccc4626 chore: enable pnpm blockExoticSubdeps
  • Additional commits viewable in compare view

Updates svelte from 5.55.2 to 5.55.3

Release notes

Sourced from svelte's releases.

svelte@5.55.3

Patch Changes

  • fix: ensure proper HMR updates for dynamic components (#18079)

  • fix: correctly calculate @const blockers (#18039)

  • fix: freeze deriveds once their containing effects are destroyed (#17921)

  • fix: defer error boundary rendering in forks (#18076)

  • fix: avoid false positives for reactivity loss warning (#18088)

Changelog

Sourced from svelte's changelog.

5.55.3

Patch Changes

  • fix: ensure proper HMR updates for dynamic components (#18079)

  • fix: correctly calculate @const blockers (#18039)

  • fix: freeze deriveds once their containing effects are destroyed (#17921)

  • fix: defer error boundary rendering in forks (#18076)

  • fix: avoid false positives for reactivity loss warning (#18088)

Commits

Updates vite-plugin-mkcert from 1.17.10 to 2.0.0

Release notes

Sourced from vite-plugin-mkcert's releases.

v2.0.0

2.0.0 (2026-04-09)

Bug Fixes

  • plugin: relax request generic default type (0c62aed)

Features

  • plugin: add ipv6 hosts to default list (8dfc9f7), closes #116
  • plugin: add apply option for plugin execution (9a58063), closes #112
  • plugin: detect mkcert binary from path (de2702c), closes #96
  • plugin: improve logger control and download progress (23f8cd4)
  • plugin: support proxy download and improve request handling (06f74b4)

BREAKING CHANGES

  • plugin: require Node.js >= 22.19.0.

v1.17.12

1.17.12 (2026-04-09)

Bug Fixes

fix: replace axios with native fetch API

Changelog

Sourced from vite-plugin-mkcert's changelog.

2.0.0 (2026-04-09)

Bug Fixes

  • plugin: relax request generic default type (0c62aed)

Features

  • add ipv6 hosts to default list (8dfc9f7), closes #116
  • plugin: add apply option for plugin execution (9a58063), closes #112
  • plugin: detect mkcert binary from path (de2702c), closes #96
  • plugin: improve logger control and download progress (23f8cd4)
  • plugin: support proxy download and improve request handling (06f74b4)

BREAKING CHANGES

  • plugin: require Node.js >= 22.19.0.

1.17.12 (2026-04-09)

Bug Fixes

  • ci: pass npm token in release workflow (32355fd)
  • ci: setup pnpm before node cache initialization (f44dc12)
  • release: avoid setup-node npm auth conflicts (f896941)
  • release: use OIDC auth path for npm publishing (2535095)

1.17.11 (2026-04-08)

Bug Fixes

Commits
  • 0b2eeee chore(release): 2.0.0 [skip ci]
  • de2702c feat(plugin): detect mkcert binary from path
  • 9a58063 feat(plugin): add apply option for plugin execution
  • 0c62aed fix(plugin): relax request generic default type
  • a1e8e90 refactor(plugin): split lib helpers into utils modules
  • 450a402 docs(plugin): add vite compatibility badge
  • 23f8cd4 feat(plugin): improve logger control and download progress
  • caa65b3 docs: update git commit message rules
  • 06f74b4 feat(plugin): support proxy download and improve request handling
  • f1db630 docs: add copilot commit message rules
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite-plugin-mkcert since your current version.


Updates vitest from 4.1.3 to 4.1.4

Release notes

Sourced from vitest's releases.

v4.1.4

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • ac04bac chore: release v4.1.4
  • 82c858d chore: Remove no-op function in plugin config logic (#8501)
  • d4fbb5c feat(experimental): support aria snapshot (#9668)
  • b77de96 feat(reporter): add filterMeta option to json reporter (#10078)
  • a120e3a feat(experimental): expose assertion as a public field (#10095)
  • 5375780 feat(coverage): default to text reporter skipFull if agent detected (#10018)
  • a1b5f0f fix: make expect(..., message) consistent as error message prefix (#10068)
  • 203f07a fix: use "black" foreground for labeled terminal message to ensure contrast (...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dependencies group with 12 updates
803fc53 
Bumps the npm-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.7` | `8.0.8` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.4` | `2.0.5` |
| [@lucide/svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/svelte) | `1.7.0` | `1.8.0` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.57.0` | `2.57.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.5.2` | `25.6.0` |
| [bits-ui](https://github.com/huntabyte/bits-ui) | `2.17.2` | `2.17.3` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.5.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.2` |
| [rollup-plugin-license](https://github.com/mjeanroy/rollup-plugin-license) | `3.7.0` | `3.7.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.2` | `5.55.3` |
| [vite-plugin-mkcert](https://github.com/liuweiGL/vite-plugin-mkcert) | `1.17.10` | `2.0.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.3` | `4.1.4` |


Updates `vite` from 8.0.7 to 8.0.8
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.8/packages/vite)

Updates `@eslint/compat` from 2.0.4 to 2.0.5
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.5/packages/compat)

Updates `@lucide/svelte` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.8.0/packages/svelte)

Updates `@sveltejs/kit` from 2.57.0 to 2.57.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.57.1/packages/kit)

Updates `@types/node` from 25.5.2 to 25.6.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `bits-ui` from 2.17.2 to 2.17.3
- [Release notes](https://github.com/huntabyte/bits-ui/releases)
- [Commits](https://github.com/huntabyte/bits-ui/compare/bits-ui@2.17.2...bits-ui@2.17.3)

Updates `globals` from 17.4.0 to 17.5.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.4.0...v17.5.0)

Updates `prettier` from 3.8.1 to 3.8.2
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.2)

Updates `rollup-plugin-license` from 3.7.0 to 3.7.1
- [Changelog](https://github.com/mjeanroy/rollup-plugin-license/blob/master/CHANGELOG.md)
- [Commits](mjeanroy/rollup-plugin-license@v3.7.0...v3.7.1)

Updates `svelte` from 5.55.2 to 5.55.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.3/packages/svelte)

Updates `vite-plugin-mkcert` from 1.17.10 to 2.0.0
- [Release notes](https://github.com/liuweiGL/vite-plugin-mkcert/releases)
- [Changelog](https://github.com/liuweiGL/vite-plugin-mkcert/blob/main/CHANGELOG.md)
- [Commits](liuweiGL/vite-plugin-mkcert@v1.17.10...v2.0.0)

Updates `vitest` from 4.1.3 to 4.1.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.4/packages/vitest)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 8.0.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@lucide/svelte"
  dependency-version: 1.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.57.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: bits-ui
  dependency-version: 2.17.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: globals
  dependency-version: 17.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dependencies
- dependency-name: prettier
  dependency-version: 3.8.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: rollup-plugin-license
  dependency-version: 3.7.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: svelte
  dependency-version: 5.55.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
- dependency-name: vite-plugin-mkcert
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dependencies
- dependency-name: vitest
  dependency-version: 4.1.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 13, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Apr 13, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/npm-dependencies-f66d0be4be branch April 13, 2026 13:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants