Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 11, 2025

Bumps the development-dependencies group with 3 updates: @rsbuild/core, @sveltejs/kit and svelte.

Updates @rsbuild/core from 1.6.13 to 1.6.14

Release notes

Sourced from @​rsbuild/core's releases.

v1.6.14

What's Changed

New Features 🎉

Bug Fixes 🐞

Refactor 🔨

Document 📖

Other Changes

Full Changelog: web-infra-dev/rsbuild@v1.6.13...v1.6.14

Commits
  • 15e9875 release: v1.6.14 (#6739)
  • 49c67f8 feat(deps): update dependency @​rspack/core to v1.6.7 (#6738)
  • 9ef0252 fix: use proper API to preserve source maps of inlined chunks (#6734)
  • a7dfb50 chore: update Rslint v0.1.4 and refactor types (#6733)
  • 9e0a887 refactor: improve type definitions and documentation (#6732)
  • cc9c593 fix: throw when no free port is found (#6719)
  • fb9a309 fix(fileSize): Avoid tiny gzip total diffs in file size reports (#6720)
  • 0a496c6 docs: improve documentation for file size diff (#6717)
  • See full diff in compare view

Updates @sveltejs/kit from 2.49.1 to 2.49.2

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.49.2

Patch Changes

  • fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

  • fix: posixify the instrumentation file import on Windows (#14993)

  • fix: Correctly handle shared memory when decoding binary form data (#15028)

Commits
  • e9752a1 Version Packages (#15015)
  • 37619d2 docs: update invalidateAll documentation to mention query functions (#15042)
  • 1f2b4c3 fix: Correctly handle shared memory for DataView initialization in deserializ...
  • cd6837c test(kit): add regression test for the posixied instrumentation file (#15023)
  • 08a153b fix(kit): ensure instrumentation file is posixified on Windows (#14993)
  • 9d1c523 chore: More flaky test fixes (#15020)
  • ad71199 fix: Stop re-loading already-loaded CSS during server-side route resolution (...
  • See full diff in compare view

Updates svelte from 5.45.6 to 5.45.8

Release notes

Sourced from svelte's releases.

svelte@5.45.8

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

svelte@5.45.7

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

Changelog

Sourced from svelte's changelog.

5.45.8

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#17329)

5.45.7

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#17326)

  • fix: add more css selectors to print() (#17330)

  • fix: don't crash on hydratable serialization failure (#17315)

Commits
  • 01cd352 Version Packages (#17331)
  • 3cabb52 fix: set Root start/end to null when fragment contains only whitespace (#17125)
  • 7ec9e4b fix: prevent erroneous state_referenced_locally warnings on prop fallbacks ...
  • ebf7d94 Version Packages (#17328)
  • 6ae3e90 fix: Added the "off" value to the TS definition for textarea's wrap attribute...
  • 123fab2 fix: add more css selectors to print() (#17330)
  • 44058da fix: Don't crash on hydratable serialization failures (#17315)
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 3 updates: [@rsbuild/core](https://github.com/web-infra-dev/rsbuild/tree/HEAD/packages/core), [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) and [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte).


Updates `@rsbuild/core` from 1.6.13 to 1.6.14
- [Release notes](https://github.com/web-infra-dev/rsbuild/releases)
- [Commits](https://github.com/web-infra-dev/rsbuild/commits/v1.6.14/packages/core)

Updates `@sveltejs/kit` from 2.49.1 to 2.49.2
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.49.2/packages/kit)

Updates `svelte` from 5.45.6 to 5.45.8
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.45.8/packages/svelte)

---
updated-dependencies:
- dependency-name: "@rsbuild/core"
  dependency-version: 1.6.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.49.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte
  dependency-version: 5.45.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies javascript Pull requests that update Javascript code labels Dec 11, 2025
@sonarqubecloud
Copy link

Copy link
Member

@tbouffard tbouffard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✔️ Tested locally with the artifact built by GH Actions
✔️ All checks pass
✔️ Changelog and release-notes reviewed. Nothing impactful for us.

@dependabot squash and merge

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 11, 2025

Beginning January 27, 2026, Dependabot will no longer support the @dependabot squash and merge command. Please use GitHub's native pull request controls instead. Please see the changelog announcement for additional details.

@dependabot dependabot bot merged commit 0c01980 into main Dec 11, 2025
18 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development-dependencies-a55c6633a1 branch December 11, 2025 15:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant