Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 18, 2024

Bumps the development-dependencies group with 7 updates:

Package From To
parcel 2.12.0 2.13.0
rollup 4.25.0 4.27.2
@rsbuild/core 1.1.0 1.1.3
@sveltejs/kit 2.8.0 2.8.1
@sveltejs/vite-plugin-svelte 4.0.0 4.0.1
svelte 5.1.14 5.2.3
svelte-check 4.0.6 4.0.9

Updates parcel from 2.12.0 to 2.13.0

Release notes

Sourced from parcel's releases.

v2.13.0

Added

  • Core

    • Expose watcher ignore and watcher backend options – Details
    • Improve large watcher events payload experience – Details
    • Add support for globs in package.json#source – Details
    • Add config key invalidation – Details
  • Bundler

  • Dev Server

  • Resolver

    • 12x faster resolver cache – Details
    • Correctly handle empty resolver diagnostics array – Details

Fixed

  • Core

    • Remove abortcontroller-polyfill – Details
    • Fix missing content key in symbol propagation when asset is removed – Details
    • Update minimum supported node version to 16 – Details
    • Ensure the snapshot directory matches the watch dir – Details
    • Add parcel version to PluginOptions – Details
    • Fix possible race condition in the caching of request graph – Details
    • Ensure empty extended config throws a diagnostic – Details
    • Ensure Asset public ids are assigned deterministically – Details
    • Directories ignored by watcher should be relative to the watch directory – Details
    • Fix request tracker incremental cache write for new nodes – Details
    • Improve request graph cache reading – Details
    • Exit process with error code when reporters fail – Details
    • Write tmp files to the OS tmp directory - Details
    • Fix small HMR issues – Details
    • Fix crash in EntryRequest with multiple globs in the source field – Details
    • Revert split manifest runtime bundles – Details
    • Revert chunked cache blobs for improved stability – Details
    • Update dependencies – Details
  • Bundler

    • Fix assets outside project root with Manual Shared Bundles – Details
  • JavaScript

... (truncated)

Changelog

Sourced from parcel's changelog.

[2.13.0] - 2024-11-12

Added

  • Core

    • Expose watcher ignore and watcher backend options – Details
    • Improve large watcher events payload experience – Details
    • Add support for globs in package.json#source – Details
    • Add config key invalidation – Details
  • Bundler

  • Dev Server

  • Resolver

    • 12x faster resolver cache – Details
    • Correctly handle empty resolver diagnostics array – Details

Fixed

  • Core

    • Remove abortcontroller-polyfill – Details
    • Fix missing content key in symbol propagation when asset is removed – Details
    • Update minimum supported node version to 16 – Details
    • Ensure the snapshot directory matches the watch dir – Details
    • Add parcel version to PluginOptions – Details
    • Fix possible race condition in the caching of request graph – Details
    • Ensure empty extended config throws a diagnostic – Details
    • Ensure Asset public ids are assigned deterministically – Details
    • Directories ignored by watcher should be relative to the watch directory – Details
    • Fix request tracker incremental cache write for new nodes – Details
    • Improve request graph cache reading – Details
    • Exit process with error code when reporters fail – Details
    • Write tmp files to the OS tmp directory - Details
    • Fix small HMR issues – Details
    • Fix crash in EntryRequest with multiple globs in the source field – Details
    • Revert split manifest runtime bundles – Details
    • Revert chunked cache blobs for improved stability – Details
    • Update dependencies – Details
  • Bundler

    • Fix assets outside project root with Manual Shared Bundles – Details

... (truncated)

Commits

Updates rollup from 4.25.0 to 4.27.2

Release notes

Sourced from rollup's releases.

v4.27.2

4.27.2

2024-11-15

Bug Fixes

  • Ensure unused variables in patterns are always deconflicted if rendered (#5728)

Pull Requests

v4.27.1

4.27.1

2024-11-15

Bug Fixes

  • Fix some situations where parameter declarations could put Rollup into an infinite loop (#5727)

Pull Requests

v4.27.0

4.27.0

2024-11-15

Features

  • Tree-shake unused properties in object literals (#5420)

Bug Fixes

  • Change hash length limit to 21 to avoid inconsistent hash length (#5423)

Pull Requests

v4.26.0

4.26.0

2024-11-13

... (truncated)

Changelog

Sourced from rollup's changelog.

4.27.2

2024-11-15

Bug Fixes

  • Ensure unused variables in patterns are always deconflicted if rendered (#5728)

Pull Requests

4.27.1

2024-11-15

Bug Fixes

  • Fix some situations where parameter declarations could put Rollup into an infinite loop (#5727)

Pull Requests

4.27.0

2024-11-15

Features

  • Tree-shake unused properties in object literals (#5420)

Bug Fixes

  • Change hash length limit to 21 to avoid inconsistent hash length (#5423)

Pull Requests

4.26.0

2024-11-13

Features

  • Allow to avoid await bundle.close() via explicit resource management in TypeScript (#5721)

... (truncated)

Commits

Updates @rsbuild/core from 1.1.0 to 1.1.3

Release notes

Sourced from @​rsbuild/core's releases.

v1.1.3

What's Changed

New Features 🎉

Bug Fixes 🐞

Document 📖

Other Changes

Full Changelog: web-infra-dev/rsbuild@v1.1.2...v1.1.3

v1.1.2

What's Changed

New Features 🎉

Performance 🚀

Bug Fixes 🐞

Document 📖

Other Changes

... (truncated)

Commits

Updates @sveltejs/kit from 2.8.0 to 2.8.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.8.1

Patch Changes

  • fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

  • fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.8.1

Patch Changes

  • fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

  • fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

Commits

Updates @sveltejs/vite-plugin-svelte from 4.0.0 to 4.0.1

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​4.0.1

Patch Changes

  • removed references to compiler options no longer available in svelte5 (#1010)
Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

4.0.1

Patch Changes

  • removed references to compiler options no longer available in svelte5 (#1010)
Commits

Updates svelte from 5.1.14 to 5.2.3

Release notes

Sourced from svelte's releases.

svelte@5.2.3

Patch Changes

  • fix: ensure dynamic call expressions correctly generate output (#14345)

svelte@5.2.2

Patch Changes

  • fix: treat property accesses of literals as pure (#14325)

svelte@5.2.1

Patch Changes

  • fix: mark pseudo classes nested inside :not as used (#14303)

  • fix: disallow invalid attributes for <svelte:window> and <svelte:document> (#14228)

  • fix: ensure props passed to components via mount are updateable (#14210)

  • fix: mark subtree dynamic for img with loading attribute (#14317)

  • fix: avoid relying on Node specifics within compiler (#14314)

svelte@5.2.0

Minor Changes

  • feat: better inlining of static attributes (#14269)

svelte@5.1.17

Patch Changes

  • fix: account for :has(...) as part of :root (#14229)

  • fix: prevent nested pseudo class from being marked as unused (#14229)

  • fix: use strict equality for key block comparisons in runes mode (#14285)

  • fix: bump is-reference dependency to fix import.meta bug (#14286)

svelte@5.1.16

Patch Changes

  • fix: don't wrap pseudo classes inside :global(...) with another :global(...) during migration (#14267)

  • fix: bail on named slots with that have reserved keywords during migration (#14278)

svelte@5.1.15

Patch Changes

  • fix: consider static attributes that are inlined in the template (#14249)
Changelog

Sourced from svelte's changelog.

5.2.3

Patch Changes

  • fix: ensure dynamic call expressions correctly generate output (#14345)

5.2.2

Patch Changes

  • fix: treat property accesses of literals as pure (#14325)

5.2.1

Patch Changes

  • fix: mark pseudo classes nested inside :not as used (#14303)

  • fix: disallow invalid attributes for <svelte:window> and <svelte:document> (#14228)

  • fix: ensure props passed to components via mount are updateable (#14210)

  • fix: mark subtree dynamic for img with loading attribute (#14317)

  • fix: avoid relying on Node specifics within compiler (#14314)

5.2.0

Minor Changes

  • feat: better inlining of static attributes (#14269)

5.1.17

Patch Changes

  • fix: account for :has(...) as part of :root (#14229)

  • fix: prevent nested pseudo class from being marked as unused (#14229)

  • fix: use strict equality for key block comparisons in runes mode (#14285)

  • fix: bump is-reference dependency to fix import.meta bug (#14286)

5.1.16

Patch Changes

  • fix: don't wrap pseudo classes inside :global(...) with another :global(...) during migration (#14267)

... (truncated)

Commits
  • b145035 Version Packages (#14348)
  • 1c454c2 fix: ensure dynamic call expressions correctly generate output (#14345)
  • 396ea2e Version Packages (#14328)
  • 3a69b4c fix: ensure inline object literals are correctly serialised (#14325)
  • 95ab85f Version Packages (#14304)
  • 94471ca fix: avoid relying on Node specifics within compiler (#14314)
  • 1f0700f fix: mark subtree dynamic for img with loading attribute (#14317)
  • efc65d4 fix: mark pseudo classes nested inside :not as used (#14303)
  • e379319 fix: ensure props passed to components via mount are updateable (#14210)
  • 7fd3774 fix: disallow invalid attributes for \<svelte:window> and `<svelte:document>...
  • Additional commits viewable in compare view

Updates svelte-check from 4.0.6 to 4.0.9

Release notes

Sourced from svelte-check's releases.

svelte-check-4.0.9

  • fix: detect shadowed variables/types during type hoisting (#2590)

svelte-check-4.0.8

  • fix: fall back to any instead of unknown for untyped $props (#2582)
  • fix: robustify and fix file writing (#2584)
  • fix: hoist types related to $props rune if possible (#2571)

svelte-check-4.0.7

  • fix: $props: infer types for $bindable, infer function type from arrow function
Commits
  • fba28b2 fix: detect shadowed variables/types during type hoisting (#2590)
  • bf2e459 fix: hoist types related to $props rune if possible (#2571)
  • b83b665 fix: robustify and fix file writing
  • 1b205c2 perf: check for and return promise instead of awaiting (#2586)
  • 77160ff fix: fall back to any instead of unknown for untyped $props (#2582)
  • 437b0e1 fix: use user's Svelte parser when formatting if necessary (#2578)
  • bf1b8ef fix: adjust generated +layout.svelte file contents (#2580)
  • 49c7e58 chore: update Svelte documentation links for template syntax (#2579)
  • 0698bc7 fix: infer types for $bindable, infer function type from arrow function
  • 5bd4663 fix: make it possible to disable runes/legacy mode code lens
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [parcel](https://github.com/parcel-bundler/parcel) | `2.12.0` | `2.13.0` |
| [rollup](https://github.com/rollup/rollup) | `4.25.0` | `4.27.2` |
| [@rsbuild/core](https://github.com/web-infra-dev/rsbuild/tree/HEAD/packages/core) | `1.1.0` | `1.1.3` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.8.0` | `2.8.1` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `4.0.0` | `4.0.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.1.14` | `5.2.3` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.0.6` | `4.0.9` |


Updates `parcel` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/parcel-bundler/parcel/releases)
- [Changelog](https://github.com/parcel-bundler/parcel/blob/v2/CHANGELOG.md)
- [Commits](parcel-bundler/parcel@v2.12.0...v2.13.0)

Updates `rollup` from 4.25.0 to 4.27.2
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.25.0...v4.27.2)

Updates `@rsbuild/core` from 1.1.0 to 1.1.3
- [Release notes](https://github.com/web-infra-dev/rsbuild/releases)
- [Commits](https://github.com/web-infra-dev/rsbuild/commits/v1.1.3/packages/core)

Updates `@sveltejs/kit` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.8.1/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@4.0.1/packages/vite-plugin-svelte)

Updates `svelte` from 5.1.14 to 5.2.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.2.3/packages/svelte)

Updates `svelte-check` from 4.0.6 to 4.0.9
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](sveltejs/language-tools@svelte-check-4.0.6...svelte-check-4.0.9)

---
updated-dependencies:
- dependency-name: parcel
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: rollup
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@rsbuild/core"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: svelte-check
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies javascript Pull requests that update Javascript code labels Nov 18, 2024
Copy link
Member

@tbouffard tbouffard left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✔️ All checks pass
✔️ Changelog and release-notes reviewed. Nothing impactful for us.
✔️ Tested locally with the artifact built by GH Actions

@dependabot squash and merge

@dependabot dependabot bot merged commit 29b2386 into main Nov 19, 2024
15 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/development-dependencies-a3dc58c08a branch November 19, 2024 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant