Maintenance: Update Patch & Minor by dle-renovate-bot[bot] · Pull Request #202 · polaroidkidd/dle.dev

dle-renovate-bot · 2026-07-01T00:55:32Z

This PR contains the following updates:

Package	Type	Update	Change	Pending
@sveltejs/kit (source)	devDependencies	minor	`^2.66.0` → `^2.68.0`
eslint (source)	devDependencies	minor	`^10.5.0` → `^10.6.0`
eslint-plugin-svelte (source)	devDependencies	minor	`^3.19.0` → `^3.20.0`
globals	devDependencies	minor	`^17.6.0` → `^17.7.0`
prettier (source)	devDependencies	minor	`^3.8.4` → `^3.9.1`	`3.9.4` (+2)
svelte (source)	devDependencies	patch	`^5.56.3` → `^5.56.4`
svelte-check	devDependencies	minor	`^4.6.0` → `^4.7.1`
typescript-eslint (source)	devDependencies	minor	`^8.61.1` → `^8.62.0`	`8.62.1`
vite (source)	devDependencies	minor	`^8.0.16` → `^8.1.0`	`8.1.2` (+1)
wrangler (source)	devDependencies	minor	`^4.103.0` → `^4.105.0`	`4.106.0`

Release Notes

sveltejs/kit (@sveltejs/kit)

`v2.68.0`

Minor Changes

feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#15816)
feat: set value of submit fields when form is submitted (#15979)

Patch Changes

fix: skip native_navigation when __data.json returns 404 on a static fallback page (#16135)
fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#15267)
fix: snapshot form fields on read (#16150)
fix: strip field prefix before erroring on duplicates (#16151)
fix: call reset function via prototype (#16138)
chore: fix navigation type hover info (#16147)

`v2.67.0`

Compare Source

Minor Changes

feat: add prerender.handleInvalidUrl option for invalid URLs discovered while crawling (#16088)

Patch Changes

fix: support exactOptionalPropertyTypes for optional form schema fields (#15866)
fix: avoid unnecessarily overriding a user's Vite 8 codeSplitting setting (#16118)

eslint/eslint (eslint)

`v10.6.0`

Compare Source

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)
f291007 feat: add checkRelationalComparisons to no-constant-binary-expression (#20948) (sethamus)

Bug Fixes

6b05784 fix: prefer-exponentiation-operator invalid autofix at statement start (#20997) (Milos Djermanovic)
bb9eb2a fix: account for shadowed Boolean in no-extra-boolean-cast (#21013) (den$)
8fd8741 fix: don't report shadowed undefined in radix rule (#21011) (Pixel)
5784980 fix: don't report shadowed undefined in no-throw-literal (#21010) (Pixel)
9cd1e6d fix: suppress invalid class suggestion in no-promise-executor-return (#21008) (Pixel)
d4eb2dc fix: don't report shadowed undefined in prefer-promise-reject-errors (#21006) (Pixel)
2360464 fix: prefer-promise-reject-errors false positives for shadowed Promise (#21003) (den$)
63d52d2 fix: restore max-classes-per-file report range (#21002) (Pixel)
7feaff0 fix: callback detection logic for IIFEs in max-nested-callbacks (#20979) (fnx)
399a2ec fix: don't report inner non-callbacks in max-nested-callbacks (#20995) (Milos Djermanovic)

Documentation

a83683d docs: Update README (GitHub Actions Bot)
f5449f9 docs: document userland patterns for global assertionOptions in RuleT… (#20986) (playgirl)
bea49f7 docs: Update README (GitHub Actions Bot)
e5f70f9 docs: update code-path diagrams (#20984) (Tanuj Kanti)
8890c2d docs: add TypeScript config guidance for MCP server (#20796) (Pierluigi Lenoci)
3eb3d9b docs: Update README (GitHub Actions Bot)
c5bb59c docs: Update README (GitHub Actions Bot)
eb3c97c docs: fix grammar in prefer-const rule description (#20983) (lumir)

Chores

6a42034 ci: run ecosystem tests on main branch (#20891) (sethamus)
3dbacdb ci: bump actions/checkout from 6 to 7 (#21014) (dependabot[bot])
c3abfca chore: correct JSDoc param types in html formatter (#21018) (Minseon Kim)
a832320 ci: split ecosystem tests into separate jobs (#21001) (xbinaryx)
27166e7 chore: update ecosystem plugins (#21005) (ESLint Bot)
865d76e ci: bump pnpm/action-setup from 6.0.8 to 6.0.9 (#20989) (dependabot[bot])
27a88c9 chore: update dependency markdown-it to v14 in root (#20994) (Milos Djermanovic)
970cea6 chore: update dependency markdown-it to v14 (#20993) (Milos Djermanovic)
b482120 chore: update dependency prettier to v3.8.4 (#20990) (renovate[bot])
6993fb3 chore: update ecosystem plugins (#20985) (ESLint Bot)

sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)

`v3.20.0`

Compare Source

Minor Changes

#1545 32ba915 Thanks @baseballyama! - feat: add svelte/no-at-const-tags rule

Patch Changes

#1503 989bfa5 Thanks @teemingc! - fix(valid-prop-names-in-kit-pages): drop errors from allowed page props in Svelte 5 to follow SvelteKit

sindresorhus/globals (globals)

`v17.7.0`

Compare Source

Update globals (2026-06-22) (#345) 33b75f9

prettier/prettier (prettier)

`v3.9.1`

Compare Source

diff

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

Bug details #18016

`v3.9.0`

Compare Source

diff

🔗 Release Notes

`v3.8.5`

Compare Source

diff

Flow: Support `readonly` as a variance annotation (#19022 by @marcoww6)

Flow now accepts readonly as a property variance annotation, equivalent to + (covariant/read-only).

// Input
type T = {
  readonly foo: string,
};

// Prettier 3.8.4
SyntaxError

// Prettier 3.8.5
type T = {
  readonly foo: string,
};

sveltejs/svelte (svelte)

`v5.56.4`

Compare Source

Patch Changes

fix: include wrapping parentheses in {@const} declarator end position (#18436)
fix: always unset reactivity context after restoring it (#18453)
fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)
fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

sveltejs/language-tools (svelte-check)

`v4.7.1`

Compare Source

Patch Changes

fix: correctly parse --tsgo-experimental-api flag (#3067)

`v4.7.0`

Compare Source

Minor Changes

feat: add --config option (#3066)
feat: svelte-check tsgo support with experimental api (#3036)

Patch Changes

fix: load esm version of Vite (#3065)
fix: stop excluding workspaces under dot-prefixed ancestors (#3037)
Updated dependencies [7a3464b, a2561fc]:
- @sveltejs/load-config@0.2.0

typescript-eslint/typescript-eslint (typescript-eslint)

`v8.62.0`

Compare Source

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

`v8.1.0`

Compare Source

Features

extend server.fs.deny list with common files (#22707) (61ba8fd)
update rolldown to 1.1.2 (#22695) (4f008a6)
use ~ for Rolldown (#22693) (9928722)

Bug Fixes

bundled-dev: errors should be kept when incremental build fails (#22617) (9a0dd48)
cache falsy values in perEnvironmentState (#22715) (0e91e79)
glob: respect caseSensitive option in hmr matcher (#22711) (65f525e)
html: omit nonce on import map when cspNonce is unset (#22713) (8340bb5)
optimizer: skip null-valued exports in expandGlobIds glob resolution (#22611) (8b9f5cd)
resolved build options should be kept as a getter (#22691) (3527191)
server: handle malformed URI in memory files middleware (#22714) (df9e0a5)
use literal envPrefix queries for Vite Task (#22706) (da72733)
warn on deprecated envFile (#22555) (ed7b283)

Code Refactoring

client: inline dev-id value in CSS selector (#22736) (57f59bc)
remove unused removeRawQuery util (#22724) (403cc60)
use rolldownOptions property for chunkImportMap (#22692) (8e8816c)

cloudflare/workers-sdk (wrangler)

`v4.105.0`

Compare Source

Minor Changes

#14311 34e0cef Thanks @sherryliu-lsy! - Add Google Artifact Registry support to containers registries configure

wrangler containers registries configure now recognizes *-docker.pkg.dev (Google Artifact Registry) domains.
- The Google service account email is the public credential, supplied with --gar-email. It must match the client_email in the service account key.
- The service account JSON key is the private credential. It is provided via stdin (a file path, raw JSON, or base64) or an interactive prompt (a file path or base64) — never as a CLI flag, so it does not appear in shell history. The key is validated against --gar-email and stored base64-encoded.
- Secret reuse inherits the existence-first flow: when the target Secrets Store secret already exists, it is reused by reference and the key is not required. In that case the email cannot be verified locally; it is validated against the key when images are pulled.
```
<path-to-key>.json | npx wrangler@latest containers registries configure <region>-docker.pkg.dev --gar-email=<service-account-email> --secret-name=Google_Service_Account_JSON_Key
```

Patch Changes

#14424 5f40dd5 Thanks @MattieTK! - Bump am-i-vibing from 0.4.0 to 0.5.0

This updates the agentic environment detection library to the latest version, which adds detection for the Pi coding agent (earendil-works/pi).
#14406 3b743c1 Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260623.1 1.20260625.1
#14343 daa5389 Thanks @th0m! - Use digest-pinned image references for Dockerfile container deploys

Dockerfile-backed container deploys now use the pushed image digest when deploying the container application. This lets snapshot-enabled container apps pass Cloudchamber validation while keeping local, non-pushed builds and registry image URI deploys unchanged.
#14394 8a5cf8c Thanks @Partha-Shankar! - fix(d1): escape migrationsTableName and filenames in SQLite queries

D1 migration commands in both wrangler and @cloudflare/vitest-pool-workers interpolated the migrationsTableName config value and migration filenames directly into SQL strings without any escaping. This meant:
- A table name such as my"table would produce invalid SQL in CREATE TABLE, SELECT, and INSERT statements, and
- A migration filename containing an apostrophe (e.g. what's-new.sql) would break the INSERT INTO ... VALUES ('...') statement appended after each migration in wrangler.
Both identifiers are now properly escaped before interpolation: migrationsTableName is wrapped in double-quotes with internal double-quotes doubled (SQL-standard identifier quoting), and migration filenames used as string literals have their single-quotes doubled before insertion.
Updated dependencies [3b743c1]:
- miniflare@4.20260625.0

`v4.104.0`

Compare Source

Minor Changes

#14369 e312dec Thanks @edmundhung! - Add getEnv() to createTestHarness() Worker handles

Tests can now access the full env object for a Worker with await server.getWorker<Env>().getEnv(), including vars, secrets, and bindings.

Patch Changes

#14364 a085dec Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260617.1 1.20260619.1
#14383 9a0de8f Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260619.1 1.20260621.1
#14397 fab565f Thanks @dependabot! - Update dependencies of "miniflare", "wrangler"

The following dependency versions have been updated:

Dependency From To

workerd 1.20260621.1 1.20260623.1
#14388 3f02864 Thanks @petebacondarwin! - Stop erroring when find_additional_modules discovers a file that only matches a inactive module rule

Module rules assign module types to imported files — they are not include/exclude filters. Also, setting fallthrough: false in a rule will cause subsequent rules to become inactive. Previously, when find_additional_modules walked the filesystem and discovered a file whose only matching rule is inactive, Wrangler would throw an error and fail the build.

This meant that adding a user rule like the one below would break the build for any .txt, .html, .sql, .bin or .wasm file that didn't match the user-supplied globs but lived somewhere under the module root:
```
// wrangler.json
{
  "rules": [
    {
      "type": "Text",
      "globs": ["html/includeme.html"],
      "fallthrough": false
    }
  ]
}
```
Discovered files that only match an inactive rule are now silently skipped (a debug-level log records each skip for troubleshooting), so users can use fallthrough: false to narrow the set of files attached to their Worker without having to delete or move untouched files on disk.

The direct-import path is unchanged: importing a file in code that only matches an inactive rule is still a hard error, because the imported file genuinely needs a defined module type.

Fixes #14257.
#14358 4ef872f Thanks @gabivlj! - Fix container egress interception on arm64 Docker runtimes

Both wrangler dev and the Cloudflare Vite plugin no longer force the proxy-everything sidecar image to pull as linux/amd64, allowing Docker to select the native image from the multi-platform manifest. Set MINIFLARE_CONTAINER_EGRESS_IMAGE_PLATFORM to force a specific platform when needed.
#14362 2a02858 Thanks @sherryliu-lsy! - Don't require the private credential when reusing an existing Secrets Store secret in containers registries configure

wrangler containers registries configure now checks whether the target Secrets Store secret already exists before resolving the private credential. When the secret already exists it is reused by reference, so the private credential no longer needs to be supplied (via stdin in non-interactive mode, or via a prompt interactively). This applies to all external registries.

The new-secret path is unchanged: the credential is still required and stored. The only visible interactive change is that the secret prompt now appears last and only when a new secret is being created.
Updated dependencies [a085dec, 9a0de8f, fab565f]:
- miniflare@4.20260623.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

| datasource | package | from | to | | ---------- | -------------------- | ------- | ------- | | npm | @sveltejs/kit | 2.66.0 | 2.68.0 | | npm | eslint | 10.5.0 | 10.6.0 | | npm | eslint-plugin-svelte | 3.19.0 | 3.20.0 | | npm | globals | 17.6.0 | 17.7.0 | | npm | prettier | 3.8.4 | 3.9.1 | | npm | svelte | 5.56.3 | 5.56.4 | | npm | svelte-check | 4.6.0 | 4.7.1 | | npm | typescript-eslint | 8.61.1 | 8.62.0 | | npm | vite | 8.0.16 | 8.1.0 | | npm | wrangler | 4.103.0 | 4.105.0 |

changeset-bot · 2026-07-01T00:55:36Z

⚠️ No Changeset found

Latest commit: ebd6f18

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

dle-renovate-bot Bot enabled auto-merge (squash) July 1, 2026 00:55

dle-renovate-bot Bot merged commit 3f012a6 into master Jul 1, 2026
2 checks passed

dle-renovate-bot Bot deleted the dle-renovate/minor-patch branch July 1, 2026 00:55

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Maintenance: Update Patch & Minor#202

Maintenance: Update Patch & Minor#202
dle-renovate-bot[bot] merged 1 commit into
masterfrom
dle-renovate/minor-patch

dle-renovate-bot Bot commented Jul 1, 2026

Uh oh!

changeset-bot Bot commented Jul 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dle-renovate-bot Bot commented Jul 1, 2026

Release Notes

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Features

Bug Fixes

Documentation

Chores

Minor Changes

Patch Changes

CLI: Fix ignored file has been cached incorrectly (#​19483 by @​kovsu)

Flow: Support readonly as a variance annotation (#​19022 by @​marcoww6)

Patch Changes

Patch Changes

Minor Changes

Patch Changes

🚀 Features

❤️ Thank You

Features

Bug Fixes

Code Refactoring

Minor Changes

Patch Changes

Minor Changes

Patch Changes

Configuration

Uh oh!

changeset-bot Bot commented Jul 1, 2026

⚠️ No Changeset found

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

CLI: Fix ignored file has been cached incorrectly (#19483 by @kovsu)

Flow: Support `readonly` as a variance annotation (#19022 by @marcoww6)