chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@eslint/js (source)	^9.8.0 -> ^9.9.1					devDependencies	minor
@fontsource/fira-mono (source)	^5.0.13 -> ^5.0.14					devDependencies	patch
@stylistic/eslint-plugin-js (source)	^2.6.1 -> ^2.6.4					devDependencies	patch
@sveltejs/adapter-auto (source)	^3.2.2 -> ^3.2.4					devDependencies	patch
@sveltejs/adapter-auto (source)	3.2.2 -> 3.2.4					devDependencies	patch
@sveltejs/adapter-node (source)	^5.2.0 -> ^5.2.2					devDependencies	patch
@sveltejs/kit (source)	^2.5.20 -> ^2.5.24					devDependencies	patch
@sveltejs/package (source)	^2.3.2 -> ^2.3.4					devDependencies	patch
@types/node (source)	^20.14.14 -> ^20.16.1					devDependencies	minor
@types/node (source)	^20.14.14 -> ^20.16.1					dependencies	minor
carbon-components-svelte	^0.85.0 -> ^0.85.2					devDependencies	patch
carbon-preprocess-svelte	^0.11.5 -> ^0.11.6					devDependencies	patch
changesets/action	v1.4.7 -> v1.4.8					action	patch
dts-buddy	^0.5.1 -> ^0.5.3					devDependencies	patch
esbuild	^0.23.0 -> ^0.23.1					devDependencies	patch
eslint (source)	^9.8.0 -> ^9.9.1					devDependencies	minor
husky	^9.1.4 -> ^9.1.5					devDependencies	patch
lint-staged	^15.2.8 -> ^15.2.9					devDependencies	patch
playwright-core (source)	~1.45.3 -> ~1.46.1					devDependencies	minor
pnpm (source)	9.6.0 -> 9.9.0					packageManager	minor
postcss (source)	^8.4.40 -> ^8.4.41					devDependencies	patch
publint (source)	^0.2.9 -> ^0.2.10					devDependencies	patch
svelte (source)	^5.0.0-next.210 -> ^5.0.0-next.239					devDependencies	patch
svelte (source)	^5.0.0-next.210 -> ^5.0.0-next.239					dependencies	patch
svelte-check	^3.8.5 -> ^3.8.6					devDependencies	patch
typescript-eslint (source)	^8.0.1 -> ^8.3.0					devDependencies	minor
vite (source)	^5.3.5 -> ^5.4.2					devDependencies	minor

---

Release Notes

eslint/eslint (@​eslint/js)

v9.9.1

Compare Source

v9.9.0

Compare Source

fontsource/font-files (@​fontsource/fira-mono)

v5.0.14

Compare Source

eslint-stylistic/eslint-stylistic (@​stylistic/eslint-plugin-js)

v2.6.4

Compare Source

Bug Fixes

• configs: should not ignore templateLiteral for indent (3154799)

Chores

• alias for shared utils (#​510) (6ea8368)
• move utils (011f5fb)

v2.6.3

Compare Source

Bug Fixes

• add explicit "type": "commonjs" (9d37124)
• arrow-parens: wrong parens removal with optional parameter (#​499) (71896ce)
• lines-between-class-members: properly infer exceptAfterOverload from enforce (#​239) (3dfa159)
• ts/padding-line-between-statements: removing blank line between functions in interface (#​71) (#​468) (91eb636)

Chores

• move js utils out (bc3a15d)
• move utils (60ef2ba)
• share utils folder (deb8178)
• test: replace the parsing result files with the real parser (#​505) (bd6f8bc)
• unify createRule (#​507) (fc6e716)

v2.6.2

Compare Source

Bug Fixes

• indent: indentation for argument with decorators (#​487) (aefb3be)
• quotes: ignore backtick in ts import types (#​493) (a7f7c2a)

Chores

• consistent createRule argument order (83e22f2)
• indent: simplify the code related to PropertyDefinition with decorators (#​489) (53d731f)

sveltejs/kit (@​sveltejs/adapter-auto)

v3.2.4

Compare Source

Patch Changes

• chore: configure provenance in a simpler manner (#​12570)

• Updated dependencies [087a43d391fc38b8c008fb39a804dc6988974101]:

  • @​sveltejs/kit@​2.5.22

v3.2.3

Compare Source

Patch Changes

• chore: package provenance (#​12567)

• Updated dependencies [4930a8443caa53bcecee7b690cd28e429b1c8a20]:

  • @​sveltejs/kit@​2.5.21

sveltejs/kit (@​sveltejs/adapter-node)

v5.2.2

Compare Source

Patch Changes

• chore: configure provenance in a simpler manner (#​12570)

• Updated dependencies [087a43d391fc38b8c008fb39a804dc6988974101]:

  • @​sveltejs/kit@​2.5.22

v5.2.1

Compare Source

Patch Changes

• chore: package provenance (#​12567)

• Updated dependencies [4930a8443caa53bcecee7b690cd28e429b1c8a20]:

  • @​sveltejs/kit@​2.5.21

sveltejs/kit (@​sveltejs/kit)

v2.5.24

Compare Source

Patch Changes

• extend peer dependency range for @​sveltejs/vite-plugin-svelte to include 4.0.0-next for improved svelte5 support (#​12593)

v2.5.23

Compare Source

Patch Changes

• fix: use dynamic components in root.svelte instead of svelte:component for svelte 5 (#​12584)

v2.5.22

Compare Source

Patch Changes

• chore: configure provenance in a simpler manner (#​12570)

v2.5.21

Compare Source

Patch Changes

• chore: package provenance (#​12567)

sveltejs/kit (@​sveltejs/package)

v2.3.4

Compare Source

Patch Changes

• chore: configure provenance in a simpler manner (#​12570)

v2.3.3

Compare Source

Patch Changes

• chore: package provenance (#​12567)

carbon-design-system/carbon-components-svelte (carbon-components-svelte)

v0.85.2

Compare Source

v0.85.1

Compare Source

carbon-design-system/carbon-preprocess-svelte (carbon-preprocess-svelte)

v0.11.6

Compare Source

Fixes

• remove code comments from transpiled code

changesets/action (changesets/action)

v1.4.8

Compare Source

Patch Changes

• #​393 48ab0d2 Thanks @​s0! - Ensure the PR remains open when updated

• #​393 48ab0d2 Thanks @​s0! - Switch to cheaper API for querying existing PRs

Rich-Harris/dts-buddy (dts-buddy)

v0.5.3

Compare Source

• Support import * as X imports (#​89)
• Fix deduplication logic to rename exports in fewer cases (#​89)
• Recognize import dependencies within namespaces (#​89)

v0.5.2

Compare Source

• Support stripping internal types using @internal JSDoc tags (#​87)

evanw/esbuild (esbuild)

v0.23.1

Compare Source

• Allow using the node: import prefix with es* targets (#​3821)

  The node: prefix on imports is an alternate way to import built-in node modules. For example, import fs from "fs" can also be written import fs from "node:fs". This only works with certain newer versions of node, so esbuild removes it when you target older versions of node such as with --target=node14 so that your code still works. With the way esbuild's platform-specific feature compatibility table works, this was added by saying that only newer versions of node support this feature. However, that means that a target such as --target=node18,es2022 removes the node: prefix because none of the es* targets are known to support this feature. This release adds the support for the node: flag to esbuild's internal compatibility table for es* to allow you to use compound targets like this:

  // Original code
  import fs from 'node:fs'
  fs.open
  
  // Old output (with --bundle --format=esm --platform=node --target=node18,es2022)
  import fs from "fs";
  fs.open;
  
  // New output (with --bundle --format=esm --platform=node --target=node18,es2022)
  import fs from "node:fs";
  fs.open;

• Fix a panic when using the CLI with invalid build flags if --analyze is present (#​3834)

  Previously esbuild's CLI could crash if it was invoked with flags that aren't valid for a "build" API call and the --analyze flag is present. This was caused by esbuild's internals attempting to add a Go plugin (which is how --analyze is implemented) to a null build object. The panic has been fixed in this release.

• Fix incorrect location of certain error messages (#​3845)

  This release fixes a regression that caused certain errors relating to variable declarations to be reported at an incorrect location. The regression was introduced in version 0.18.7 of esbuild.

• Print comments before case clauses in switch statements (#​3838)

  With this release, esbuild will attempt to print comments that come before case clauses in switch statements. This is similar to what esbuild already does for comments inside of certain types of expressions. Note that these types of comments are not printed if minification is enabled (specifically whitespace minification).

• Fix a memory leak with pluginData (#​3825)

  With this release, the build context's internal pluginData cache will now be cleared when starting a new build. This should fix a leak of memory from plugins that return pluginData objects from onResolve and/or onLoad callbacks.

eslint/eslint (eslint)

v9.9.1

Compare Source

v9.9.0

Compare Source

Features

• 41d0206 feat: Add support for TS config files (#​18134) (Arya Emami)
• 3a4eaf9 feat: add suggestion to require-await to remove async keyword (#​18716) (Dave)

Documentation

• 9fe068c docs: how to author plugins with configs that extend other configs (#​18753) (Alec Gibson)
• 48117b2 docs: add version support page in the side navbar (#​18738) (Amaresh S M)
• fec2951 docs: add version support page to the dropdown (#​18730) (Amaresh S M)
• 38a0661 docs: Fix typo (#​18735) (Zaina Al Habash)
• 3c32a9e docs: Update yarn command for creating ESLint config (#​18739) (Temitope Ogunleye)
• f9ac978 docs: Update README (GitHub Actions Bot)

Chores

• 461b2c3 chore: upgrade to @eslint/[email protected] (#​18765) (Francesco Trotta)
• 59dba1b chore: package.json update for @​eslint/js release (Jenkins)
• fea8563 chore: update dependency @​eslint/core to ^0.3.0 (#​18724) (renovate[bot])
• aac191e chore: update dependency @​eslint/json to ^0.3.0 (#​18760) (renovate[bot])
• b97fa05 chore: update wdio dependencies for more stable tests (#​18759) (Christian Bromann)

typicode/husky (husky)

v9.1.5

Compare Source

lint-staged/lint-staged (lint-staged)

v15.2.9

Compare Source

Patch Changes

• #​1463 b69ce2d Thanks @​iiroj! - Set the maximum number of event listeners to the number of tasks. This should silence the console warning MaxListenersExceededWarning: Possible EventEmitter memory leak detected.

microsoft/playwright (playwright-core)

v1.46.1

Compare Source

v1.46.0

Compare Source

pnpm/pnpm (pnpm)

v9.9.0

Compare Source

v9.8.0

Compare Source

v9.7.1

Compare Source

v9.7.0: pnpm 9.7

Compare Source

Minor Changes

• Added pnpm version management. If the manage-package-manager-versions setting is set to true, pnpm will switch to the version specified in the packageManager field of package.json #​8363. This is the same field used by Corepack. Example:

  {
    "packageManager": "[email protected]"
  }

• Added the ability to apply patch to all versions #​8337.

  If the key of pnpm.patchedDependencies is a package name without a version (e.g. pkg), pnpm will attempt to apply the patch to all versions of the package. Failures will be skipped. If there's only one version of pkg installed, pnpm patch pkg and subsequent pnpm patch-commit $edit_dir will create an entry named pkg in pnpm.patchedDependencies. And pnpm will attempt to apply this patch to other versions of pkg in the future.

• Change the default edit dir location when running pnpm patch from a temporary directory to node_modules/.pnpm_patches/pkg[@​version] to allow the code editor to open the edit dir in the same file tree as the main project #​8379.

• Substitute environment variables in config keys #​6679.

Patch Changes

• pnpm install should run node-gyp rebuild if the project has a binding.gyp file even if the project doesn't have an install script #​8293.
• Print warnings to stderr #​8342.
• Peer dependencies of optional peer dependencies should be automatically installed #​8323.

Platinum Sponsors

Gold Sponsors

Our Silver Sponsors

postcss/postcss (postcss)

v8.4.41

Compare Source

• Fixed types (by @​nex3 and @​querkmachine).
• Cleaned up RegExps (by @​bluwy).

bluwy/publint (publint)

v0.2.10

Compare Source

Features

• Adds a new rule that validates the "repository" field (https://github.com/bluwy/publint/pull/106)
  • If "repository" is a string, it must be one of the supported shorthand strings from the docs.
  • If "repository" is an object with "type": "git", the "url" must be a valid git URL and can be parsed by npm.
  • The git:// protocol for GitHub repos should not be used due security concerns.
  • GitHub or GitLab links should be prefixed with git+ and postfixed with .git. (This is also warned by npm when publishing a package).

New Contributors

• @​Namchee made their first contribution in https://github.com/bluwy/publint/pull/106

Full Changelog: publint/publint@v0.2.9...v0.2.10

sveltejs/svelte (svelte)

v5.0.0-next.239

Compare Source

Patch Changes

• fix: properly handle proxied array length mutations (#​13026)

• fix: repair href attribute mismatches (#​13032)

v5.0.0-next.238

Compare Source

Patch Changes

• fix: always return true from deleteProperty trap (#​13008)

• fix: handle deletions of previously-unread state proxy properties (#​13008)

• fix: make internal sources ownerless (#​13013)

• fix: join text nodes separated by comments (#​13009)

v5.0.0-next.237

Compare Source

Patch Changes

• breaking: throw error if derived creates state and then depends on it (#​12985)

• fix: ensure assignments to state field inside constructor trigger effects (#​12985)

• fix: ensure $inspect works with SvelteMap and SvelteSet (#​12994)

• chore: default options.filename to "(unknown)" (#​12997)

• feat: allow non-synchronous legacy component instantiation (#​12970)

v5.0.0-next.236

Compare Source

Patch Changes

• fix: properly transform destructured $derived.by declarations (#​12984)

v5.0.0-next.235

Compare Source

Patch Changes

• chore: update client check for smaller bundle size (#​12975)

• fix: correctly hydrate empty raw blocks (#​12979)

v5.0.0-next.234

Compare Source

Patch Changes

• fix: allow deleting non-existent $restProps properties (#​12971)

• feat: only traverse trailing static nodes during hydration (#​12935)

v5.0.0-next.233

Compare Source

Patch Changes

• fix: more robust handling of var declarations ([#​12949](https://to

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[dominikg]

@dummdidumm fyi renovate-bot is able to bump hash pinned actions, including even the version comment. I did review the changes in 1.4.8 and they are ok