Skip to content

chore(deps): bump the deps group across 1 directory with 12 updates - #18

Closed
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/deps-abb0a8b960
Closed

chore(deps): bump the deps group across 1 directory with 12 updates#18
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/deps-abb0a8b960

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the deps group with 11 updates in the / directory:

Package From To
date-fns 4.1.0 4.4.0
mysql2 3.23.1 3.24.3
@sveltejs/adapter-node 5.4.0 5.5.7
@sveltejs/kit 2.49.0 2.70.3
@sveltejs/vite-plugin-svelte 4.0.4 7.3.0
@vitest/coverage-v8 1.6.1 5.0.0
@vitest/ui 1.6.1 5.0.0
svelte-check 4.3.4 4.7.6
typescript 5.9.3 7.0.2
vite 5.4.21 8.2.2
vitest 1.6.1 5.0.0

Updates date-fns from 4.1.0 to 4.4.0

Release notes

Sourced from date-fns's releases.

v4.4.0

This release revisits the approach to CDN usage and introduces a new package, @date-fns/cdn and deprecates the date-fns CDN scripts. It allowed reducing the zipped package size from 5.83 MB down to 3.96 MB without introducing any breaking changes.

In v5.0.0-alpha.0 where CDN scripts are completely removed from date-fns the change is more significant and brings the zipped package size down to 2.89 MB.

It is just the first step in optimizing the package size. Expect further size reduction in the future v4 and v5 versions.

Changed

  • DEPRECATED: The date-fns CDN scripts are now deprecated and will be removed in the next major release. Please switch to the new @date-fns/cdn package for CDN usage.

  • Removed CDN source maps to reduce the package size. If you rely on them, please switch to the new @date-fns/cdn package that still includes them.

v4.3.0

Kudos to @​ImRodry and @​puneetdixit200 for their contributions.

Fixed

v4.2.1

Fixed

  • Fixed type definitions missing in v4.2.0 due to TypeScript misconfiguration.

v4.2.0

This is a minor release in all senses, it only includes documentation updates (first of many) that points to the new You Don't Need date-fns* page.

* Not really

Changed

  • Added Temporal API references to the JSDoc annotations of add, addBusinessDays, and addDays.
Commits
  • cd53d25 Promote to v4.4.0
  • d948ec1 Preserve but deprecate CDN versions for v4, set up v5 with polyfills
  • ee65753 Add root mise :format task
  • 9f5bdf5 Add positional argument to test/smoke.sh script
  • 651ead6 Split CDN bundles into separate @​date-fns/cdn package
  • 224c1a2 Deprecate type tests as attw hangs on date-fns package
  • 7bb2842 Switch PACKAGE_OUTPUT_PATH to --dist flag in the package build script
  • b6ad5ac Add flags to control package build script
  • 424a783 Fix docs release after moving to monorepo setup
  • f95bcf1 (docs): Add missing tsx dependency
  • Additional commits viewable in compare view

Updates mysql2 from 3.23.1 to 3.24.3

Release notes

Sourced from mysql2's releases.

v3.24.3

3.24.3 (2026-09-01)

Bug Fixes

  • typings: PoolCluster node events emit a string nodeId (#4513) (1281e1e)

v3.24.2

3.24.2 (2026-08-24)

Bug Fixes

  • correct length-coded number size for the 3-byte range (#4500) (de56272)
  • promise: honour trace: false on every promise-API method (#4502) (1dcd8ef), closes #4501

v3.24.1

3.24.1 (2026-08-24)

Performance Improvements

  • single-pass utf8 string encoding for outgoing packets (#4495) (183e947)

v3.24.0

3.24.0 (2026-08-23)

Features

  • typed parameters, and adopt integer types the server reports (#4488) (8ec20f1)

Bug Fixes

  • zero dates come back as "undefined 00:00:00" with dateStrings (#4491) (5bf7bda)

Performance Improvements

  • remove per-query and per-row allocation hotspots (#4486) (c86fe5a)
  • serialize COM_STMT_EXECUTE in a single exact-size pass (#4494) (f3a60bc)

v3.23.4

3.23.4 (2026-08-19)

Bug Fixes

... (truncated)

Changelog

Sourced from mysql2's changelog.

3.24.3 (2026-09-01)

Bug Fixes

  • typings: PoolCluster node events emit a string nodeId (#4513) (1281e1e)

3.24.2 (2026-08-24)

Bug Fixes

  • correct length-coded number size for the 3-byte range (#4500) (de56272)
  • promise: honour trace: false on every promise-API method (#4502) (1dcd8ef), closes #4501

3.24.1 (2026-08-24)

Performance Improvements

  • single-pass utf8 string encoding for outgoing packets (#4495) (183e947)

3.24.0 (2026-08-23)

Features

  • typed parameters, and adopt integer types the server reports (#4488) (8ec20f1)

Bug Fixes

  • zero dates come back as "undefined 00:00:00" with dateStrings (#4491) (5bf7bda)

Performance Improvements

  • remove per-query and per-row allocation hotspots (#4486) (c86fe5a)
  • serialize COM_STMT_EXECUTE in a single exact-size pass (#4494) (f3a60bc)

3.23.4 (2026-08-19)

Bug Fixes

  • keep leading zeros in TIME fractional seconds (#4481) (3cccf4a)
  • typings: align callback Pool and PoolConnection types with runtime (#4478) (8b1f829)

3.23.3 (2026-08-10)

... (truncated)

Commits
  • 83bda80 chore(master): release 3.24.3 (#4514)
  • 6cac974 build(deps): bump lucide-react from 1.35.0 to 1.37.0 in /website (#4520)
  • d3f8ceb build(deps-dev): bump @​types/node from 26.3.0 to 26.4.0 in /website (#4519)
  • 05993b1 build(deps): bump lucide-react from 1.34.0 to 1.35.0 in /website (#4518)
  • 797f38e build(deps-dev): bump @​types/node from 26.3.0 to 26.4.0 (#4517)
  • f17babe build(deps-dev): bump @​biomejs/biome from 2.5.10 to 2.5.11 (#4516)
  • f4099d5 build(deps-dev): bump rollup from 4.62.5 to 4.63.1 in the rollup group (#4515)
  • 1281e1e fix(typings): PoolCluster node events emit a string nodeId (#4513)
  • 0957ae4 build(deps-dev): bump @​types/node from 26.2.0 to 26.3.0 (#4510)
  • a331feb build(deps-dev): bump @​types/node from 26.2.0 to 26.3.0 in /website (#4511)
  • Additional commits viewable in compare view

Updates @sveltejs/adapter-node from 5.4.0 to 5.5.7

Release notes

Sourced from @​sveltejs/adapter-node's releases.

@​sveltejs/adapter-node@​5.5.7

Patch Changes

@​sveltejs/adapter-node@​5.5.6

Patch Changes

  • fix: avoid circular dependency between server initialisation and hook retrieval that causes the app to crash on start (#16115)

  • fix: correctly resolve root directory on the server (#16114)

  • fix: ensure ENV_PREFIX is defined (#16106)

  • Updated dependencies [cf15fa0, 5c76121, 2992e17]:

    • @​sveltejs/kit@​2.67.0

@​sveltejs/adapter-node@​5.5.5

Patch Changes

Changelog

Sourced from @​sveltejs/adapter-node's changelog.

5.5.7

Patch Changes

5.5.6

Patch Changes

  • fix: avoid circular dependency between server initialisation and hook retrieval that causes the app to crash on start (#16115)

  • fix: correctly resolve root directory on the server (#16114)

  • fix: ensure ENV_PREFIX is defined (#16106)

  • Updated dependencies [cf15fa0, 5c76121, 2992e17]:

    • @​sveltejs/kit@​2.67.0

5.5.5

Patch Changes

5.5.4

Patch Changes

  • chore(deps): bump rollup to 4.59.0 (#15433)

5.5.3

Patch Changes

  • fix: validate ORIGIN env var at startup (#15045)

... (truncated)

Commits

Updates @sveltejs/kit from 2.49.0 to 2.70.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.70.3

Patch Changes

  • fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

@​sveltejs/kit@​2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (#1)

@​sveltejs/kit@​2.70.1

Patch Changes

  • docs: update links to hooks documentation (#16417)

@​sveltejs/kit@​2.70.0

Minor Changes

  • feat: move defineEnvVars to @sveltejs/kit/env (#16378)

Patch Changes

  • fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)

@​sveltejs/kit@​2.69.3

Patch Changes

  • fix: detect destructured load and actions exports during type generation (#16329)

  • fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

  • fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

@​sveltejs/kit@​2.69.2

Patch Changes

  • fix: set define values on globalThis when running Vitest (#16246)

@​sveltejs/kit@​2.69.1

Patch Changes

  • fix: prevent prototype pollution when deleting file inputs (#16218)

  • fix: prevent unhandled promise rejection (#16219)

@​sveltejs/kit@​2.69.0

Minor Changes

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.70.3

Patch Changes

  • fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

2.70.2

Patch Changes

  • fix: prevent quadratic backtracking in Accept header content negotiation (82712fc)

2.70.1

Patch Changes

  • docs: update links to hooks documentation (#16417)

2.70.0

Minor Changes

  • feat: move defineEnvVars to @sveltejs/kit/env (#16378)

Patch Changes

  • fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)

2.69.3

Patch Changes

  • fix: detect destructured load and actions exports during type generation (#16329)

  • fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

  • fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

2.69.2

Patch Changes

  • fix: detect destructured load and actions exports during type generation (#16329)

  • fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

  • fix: exclude deleted cookies from cookies.getAll() so it stays consistent with cookies.get() (#16297)

  • fix: reset failed <svelte:boundary> on client navigation so a stale +error.svelte is torn down (#16296)

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 4.0.4 to 7.3.0

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.3.0

Minor Changes

  • feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

  • fix: don't log inline config when encountering unexpected options (#1376)

@​sveltejs/vite-plugin-svelte@​7.2.0

Minor Changes

  • feat(inspector): add a context menu with current component stack (#1370)

@​sveltejs/vite-plugin-svelte@​7.1.4

Patch Changes

  • fix: enforce ltr styles for inspector (#1324)

@​sveltejs/vite-plugin-svelte@​7.1.3

Patch Changes

  • fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

@​sveltejs/vite-plugin-svelte@​7.1.2

Patch Changes

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

@​sveltejs/vite-plugin-svelte@​7.1.1

Patch Changes

  • fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

  • fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

@​sveltejs/vite-plugin-svelte@​7.1.0

Minor Changes

  • feat: enable optimizer for server environments during dev (#1328)

@​sveltejs/vite-plugin-svelte@​7.0.0

Major Changes

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.3.0

Minor Changes

  • feat: pass environment to dynamicCompileOptions (#1386)

Patch Changes

  • fix: don't log inline config when encountering unexpected options (#1376)

7.2.0

Minor Changes

  • feat(inspector): add a context menu with current component stack (#1370)

7.1.4

Patch Changes

  • fix: enforce ltr styles for inspector (#1324)

7.1.3

Patch Changes

  • fix: ensure the inspector is injected into the client correctly for Vite+ projects (#1355)

7.1.2

Patch Changes

  • fix: correctly resolve compiled CSS on the server for dependencies with Svelte files (#1342)

7.1.1

Patch Changes

  • fix: pass typescript.onlyRemoveTypeImports to transformWithOxc in vitePreprocess so that value imports are not dropped when they are only referenced in Svelte template markup (#1326)

  • fix: correctly resolve compiled CSS for optimised Svelte dependencies on the server (#1336)

7.1.0

Minor Changes

  • feat: enable optimizer for server environments during dev (#1328)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sveltejs/vite-plugin-svelte since your current version.


Updates @vitest/coverage-v8 from 1.6.1 to 5.0.0

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.0

Vitest 5 is officially out! This release focuses on performance and brings a lot of new features while fixing long-standing bugs. See our blog post for the official announcement.

   🚨 Breaking Changes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 4, 2026
@github-actions github-actions Bot added size/XL Pull request size by lines changed type:internal Refactor, tests, tooling ci:failing At least one pipeline check fails labels Sep 4, 2026
@github-actions

github-actions Bot commented Sep 4, 2026

Copy link
Copy Markdown

Pipeline

Check Detail
Types svelte-check
Tests vitest — no report
Build vite build

Some checks failed. The run log has the detail; nothing is merged until they pass.

Commit 46eaf29 · run log · this comment is updated in place on every push.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/deps-abb0a8b960 branch from 7e9dd65 to f84e9d5 Compare September 4, 2026 07:51
Bumps the deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [date-fns](https://github.com/date-fns/date-fns) | `4.1.0` | `4.4.0` |
| [mysql2](https://github.com/sidorares/node-mysql2) | `3.23.1` | `3.24.3` |
| [@sveltejs/adapter-node](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-node) | `5.4.0` | `5.5.7` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.49.0` | `2.70.3` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `4.0.4` | `7.3.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `1.6.1` | `5.0.0` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `1.6.1` | `5.0.0` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.4` | `4.7.6` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.21` | `8.2.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `5.0.0` |



Updates `date-fns` from 4.1.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v4.1.0...v4.4.0)

Updates `mysql2` from 3.23.1 to 3.24.3
- [Release notes](https://github.com/sidorares/node-mysql2/releases)
- [Changelog](https://github.com/sidorares/node-mysql2/blob/master/Changelog.md)
- [Commits](sidorares/node-mysql2@v3.23.1...v3.24.3)

Updates `@sveltejs/adapter-node` from 5.4.0 to 5.5.7
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/adapter-node/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-node@5.5.7/packages/adapter-node)

Updates `@sveltejs/kit` from 2.49.0 to 2.70.3
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.70.3/packages/kit)

Updates `@sveltejs/vite-plugin-svelte` from 4.0.4 to 7.3.0
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.3.0/packages/vite-plugin-svelte)

Updates `@vitest/coverage-v8` from 1.6.1 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/coverage-v8)

Updates `@vitest/ui` from 1.6.1 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/ui)

Updates `svelte` from 5.43.14 to 5.57.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte)

Updates `svelte-check` from 4.3.4 to 4.7.6
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.4...svelte-check@4.7.6)

Updates `typescript` from 5.9.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](microsoft/TypeScript@v5.9.3...v7.0.2)

Updates `vite` from 5.4.21 to 8.2.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.2.2/packages/vite)

Updates `vitest` from 1.6.1 to 5.0.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.0/packages/vitest)

---
updated-dependencies:
- dependency-name: "@sveltejs/adapter-node"
  dependency-version: 5.5.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.70.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: "@vitest/ui"
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: mysql2
  dependency-version: 3.24.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: svelte
  dependency-version: 5.57.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: svelte-check
  dependency-version: 4.7.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: deps
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: vite
  dependency-version: 8.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
- dependency-name: vitest
  dependency-version: 4.1.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/deps-abb0a8b960 branch from f84e9d5 to 4fac621 Compare September 7, 2026 08:54
@Mario-Mohar

Copy link
Copy Markdown
Owner

Erledigt über #22: dort sind SvelteKit, vite 6 samt plugin-svelte 5, vitest 5 und der cookie-Override zusammen drin, mit grüner Kette. Gegen main bringt dieser Zweig nichts mehr.

@Mario-Mohar
Mario-Mohar deleted the dependabot/npm_and_yarn/deps-abb0a8b960 branch September 11, 2026 07:10
@dependabot @github

dependabot Bot commented on behalf of github Sep 11, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:failing At least one pipeline check fails dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size/XL Pull request size by lines changed type:internal Refactor, tests, tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant