chore(deps): update dependency svelte to ^5.0.0-next.193 #227
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
![renovate-approve[bot]](https://avatars.githubusercontent.com/in/7394?s=60&v=4){kind=small}
|
The latest updates on your projects. Learn more about Vercel for Git ↗︎ 1 Skipped Deployment
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
renovate
bot
force-pushed
the
renovate/svelte-5.x
branch
2 times, most recently
from
70db7a0 to
d55d31f
Compare
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/[email protected] |
renovate
bot
force-pushed
the
renovate/svelte-5.x
branch
2 times, most recently
from
47f38c8 to
9b4ac99
Compare
renovate
bot
changed the title
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
renovate
bot
force-pushed
the
renovate/svelte-5.x
branch
3 times, most recently
from
4894744 to
f2ec638
Compare
renovate
bot
force-pushed
the
renovate/svelte-5.x
branch
from
f2ec638 to
6f1a309
Compare
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update ( If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
This PR contains the following updates:
^5.0.0-next.165->^5.0.0-next.193Release Notes
sveltejs/svelte (svelte)
v5.0.0-next.193Compare Source
Patch Changes
fix: improve validation error that occurs when using
{@​render ...}to render default slotted content (#12521)fix: reset hydrate node after
hydrate(...)(#12512)v5.0.0-next.192Compare Source
Patch Changes
fix: make animations more robust to quick shuffling (#12496)
feat: warn if binding to a non-reactive property (#12500)
fix: ensure $state proxy invokes set accessor if present (#12503)
v5.0.0-next.191Compare Source
Patch Changes
fix: properly assign trailing comments (#12471)
breaking: remove deep reactivity from non-bindable props (#12484)
fix: ensure async initial store value is noticed (#12486)
fix: don't add imports to hoisted event parameters (#12493)
fix: set
volumethrough DOM property rather than attribute (#12485)v5.0.0-next.190Compare Source
Patch Changes
fix: hydrate multiple
<svelte:head>elements correctly (#12475)fix: assign correct scope to attributes of named slot (#12476)
breaking: warn on quoted single-expression attributes in runes mode (#12479)
v5.0.0-next.189Compare Source
Patch Changes
v5.0.0-next.188Compare Source
Patch Changes
fix: ensure
$state.snapshotnever errors (#12445)feat: move dev-time component properties to private symbols' (#12461)
v5.0.0-next.187Compare Source
Patch Changes
fix: always pass original component to HMR wrapper (#12454)
fix: ensure previous transitions are properly aborted (#12460)
v5.0.0-next.186Compare Source
Patch Changes
feat: skip pending block for already-resolved promises (#12274)
feat: add ability to ignore warnings through
warningFiltercompiler option (#12296)fix: run animations in microtask so that deferred transitions can measure nodes correctly (#12453)
v5.0.0-next.185Compare Source
Patch Changes
fix: allow leading and trailing comments in mustache expression (#11866)
fix: ensure hydration walks all nodes (#12448)
fix: prevent whitespaces merging across component boundaries (#12449)
fix: detect mutations within assignment expressions (#12429)
v5.0.0-next.184Compare Source
Patch Changes
fix: show correct errors for invalid runes in
.svelte.jsfiles (#12432)breaking: use structuredClone inside
$state.snapshot(#12413)v5.0.0-next.183Compare Source
Patch Changes
fix: properly validate snippet/slot interop (#12421)
fix: cache call expressions in render tag arguments (#12418)
fix: optimize
bind:group(#12406)v5.0.0-next.182Compare Source
Patch Changes
fix: abort outro when intro starts (#12321)
feat: warn in dev on
{@​html ...}block hydration mismatch (#12396)feat: only create a maximum of one document event listener per event (#12383)
fix: disallow using
let:directives with component render tags (#12400)fix: mark variables in shorthand style directives as referenced (#12392)
fix: handle empty else if block in legacy AST (#12397)
fix: properly delay intro transitions (#12389)
v5.0.0-next.181Compare Source
Patch Changes
fix: reflect SvelteURLSearchParams changes to SvelteURL (#12285)
fix: ensure hmr block effects are transparent for transitions (#12384)
feat: simpler HMR logic (#12391)
v5.0.0-next.180Compare Source
Patch Changes
fix: handle nested
:global(...)selectors (#12365)feat: include CSS in
<head>whencss: 'injected'(#12374)fix: destroy effects that error on creation (#12376)
breaking: rename
legacy.componentApitocompatibility.componentApi(#12370)fix: correctly validate
<svelte:component>withbind:this(#12368)v5.0.0-next.179Compare Source
Patch Changes
fix: ensure
$slotsreturns a record of booleans (#12359)feat: single-pass hydration (#12335)
v5.0.0-next.178Compare Source
Patch Changes
v5.0.0-next.177Compare Source
Patch Changes
breaking: play transitions on
mountby default (#12351)fix: make
<select><option value>behavior consistent (#12316)chore: stricter control flow syntax validation in runes mode (#12342)
fix: resolve legacy component props equality for mutations (#12348)
fix: make
$statecomponent exports settable (#12345)v5.0.0-next.176Compare Source
Patch Changes
fix: correct start of
{:else if}and{:else}(#12043)fix: reverse parent/child order in invalid HTML warning (#12336)
fix: reorder reactive statements during migration (#12329)
feat: better
<svelte:element>SSR output (#12339)chore: align warning and error objects, add frame property (#12326)
fix: ensure
$effect.rootis ignored on the server (#12332)fix: enable local transitions on
svelte:element(#12346)v5.0.0-next.175Compare Source
Patch Changes
fix: correctly compile $effect.root in svelte modules (#12315)
fix: ensure
bind:thisworks with component with no return value (#12290)v5.0.0-next.174Compare Source
Patch Changes
fix: bail out of event hoisting when referencing store subscriptions (#12301)
chore: make store initialization logic simpler (#12281)
fix: make props optional during SSR (#12284)
fix: ensure each blocks properly handle $state.frozen objects in prod (#12305)
fix: ensure rest props access on hoisted event handlers works (#12298)
fix: lazily create a derived for each read method on
SvelteDate.prototype(#12110)v5.0.0-next.173Compare Source
Patch Changes
v5.0.0-next.172Compare Source
Patch Changes
v5.0.0-next.171Compare Source
Patch Changes
v5.0.0-next.170Compare Source
Patch Changes
fix: bump dts-buddy for better type generation (#12262)
breaking: expose
CompileErrorinterface, not class (#12255)v5.0.0-next.169Compare Source
Patch Changes
breaking: rename
svelte/reactivityhelpers to includeSvelteprefix (#12248)fix: avoid duplicate signal dependencies (#12245)
v5.0.0-next.168Compare Source
Patch Changes
fix: ensure HMR doesn't mess with anchor nodes (#12242)
fix: deconflict multiple snippets of the same name (#12221)
v5.0.0-next.167Compare Source
Patch Changes
fix: make more types from
svelte/compilerpublic (#12189)fix: support contenteditable binding undefined fallback (#12210)
breaking: prevent usage of arguments keyword in certain places (#12191)
fix(types): export CompileResult and Warning (#12212)
fix: ensure element dir properties persist with text changes (#12204)
fix: disallow accessing internal Svelte props (#12207)
fix: make media bindings more robust (#12206)
fix: allow slot attribute inside snippets (#12188)
feat: allow
let props = $props()and optimize prop read access (#12201)feat: improve type arguments for Snippet and $bindable (#12197)
v5.0.0-next.166Compare Source
Patch Changes
fix: remove correct event listener from document (#12101)
fix: correctly serialize object assignment expressions (#12175)
fix: robustify migration script around indentation and comments (#12176)
fix: improve await block behaviour in non-runes mode (#12179)
fix: improve select handling of dynamic value with placeholders (#12181)
Configuration
📅 Schedule: Branch creation - "before 2pm on Monday" in timezone Europe/London, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.