Skip to content

Update all non-major dependencies#44

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/all-minor-patch
Feb 1, 2026
Merged

Update all non-major dependencies#44
renovate[bot] merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 1, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@iconify-json/lucide 1.2.77 → 1.2.87 age confidence
@iconify-json/simple-icons 1.2.61 → 1.2.69 age confidence
@sveltejs/vite-plugin-svelte (source) 6.2.1 → 6.2.4 age confidence
@unocss/preset-icons (source) 66.5.9 → 66.6.0 age confidence
@unocss/preset-web-fonts (source) 66.5.9 → 66.6.0 age confidence
@unocss/preset-wind3 (source) 66.5.9 → 66.6.0 age confidence
@unocss/reset (source) 66.5.9 → 66.6.0 age confidence
@unocss/transformer-compile-class (source) 66.5.9 → 66.6.0 age confidence
@unocss/vite (source) 66.5.9 → 66.6.0 age confidence
es-toolkit (source) 1.42.0 → 1.44.0 age confidence
meilisearch 0.54.0 → 0.55.0 age confidence
pnpm (source) 10.24.0 → 10.28.2 age confidence
prettier (source) 3.7.3 → 3.8.1 age confidence
prettier-plugin-svelte 3.4.0 → 3.4.1 age confidence
svelte (source) 5.45.3 → 5.49.1 age confidence
svelte-check 4.3.4 → 4.3.6 age confidence
vite (source) 7.2.9 → 7.3.1 age confidence

Release Notes

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v6.2.4

Compare Source

Patch Changes
  • fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#​1258)

v6.2.3

Compare Source

Patch Changes
  • fix(filter): ignore zero-tagged ids per rollup convention (#​1255)

v6.2.2

Compare Source

Patch Changes

  • Update experimental support for rolldown-vite to vite 8 beta (#​1246)

  • perf: switch from debug to obug (smaller, esm-only) (#​1241)

unocss/unocss (@​unocss/preset-icons)

v66.6.0

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v66.5.12

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v66.5.11

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub

v66.5.10

Compare Source

   🚀 Features
   🐞 Bug Fixes
    View changes on GitHub
toss/es-toolkit (es-toolkit)

v1.44.0

Compare Source

Released on January 16th, 2026.

  • Added shouldRetry option to retry function. ([#​1585])
  • Added isEmptyObject predicate function. ([#​1584])
  • Added isNumber predicate function.
  • Enhanced error cloning to support AggregateError. ([#​1563])
  • Implemented collection methods for Maps and Sets.
  • Added bundle size analysis and visualization components to docs. ([#​1564])
  • Fixed flattenObject to retain empty objects and arrays.
  • Enhanced type safety for clone function.
  • Fixed clone error when cloning object with null prototype. ([#​1570])
  • Fixed array function callbacks to include index and array parameters. ([#​1561])
  • Fixed compat/cloneDeep and cloneDeepWith to clone null-prototype objects as regular objects. ([#​1562])
  • Fixed compat/clamp to ensure consistency with lodash. ([#​1555])
  • Simplified intersection filter callback for consistency. ([#​1582])
  • Fixed incorrect function names and output in cloneDeep JSDoc examples. ([#​1583])

We sincerely thank @​raon0211, @​dayongkr, @​eunwoo-levi, @​matt-oakes, @​T3sT3ro, and @​D-Sketon for their contributions. We appreciate your great efforts!

v1.43.0

Compare Source

Released on December 12th, 2025.

  • Enhanced merge to handle arrays and objects consistently, and to match lodash's behavior with date values and array-like objects. ([#​1553], [#​1542], [#​1548])
  • Fixed isMatch and isMatchWith to match lodash's behavior.
  • Fixed intersectionBy implementation and removed duplicates when the mapper produces the same values. ([#​1528])
  • Fixed throttle working like debounce.
  • Fixed type inference in toSnakeCaseKeys, toCamelCaseKeys for edge cases and improved type inference for uppercase keys. ([#​1538])
  • Fixed casing utilities (camelCase, kebabCase, lowerCase, snakeCase, startCase, upperCase) to match lodash's behavior. ([#​1525])
  • Fixed compat/template to disable ES interpolation when custom interpolate is provided. ([#​1527])
  • Fixed incorrect example in differenceBy documentation. ([#​1543])
  • Performance improvement: updated deburr to use arrays to construct the deburrMap. ([#​1526])

We sincerely thank @​dayongkr, @​raon0211, @​wo-o29, @​Yeom-JinHo, @​Copilot, @​oshosh, @​vbfox, @​sukvvon, @​sankeyangshu, @​D-Sketon, @​seo-rii for their contributions. We appreciate your great efforts!

meilisearch/meilisearch-js (meilisearch)

v0.55.0: 🌻

Compare Source

⚠️ Experimental

🚀 Enhancements

⚙️ Maintenance/misc

Thanks again to @​Copilot, @​Ritinpaul, @​Strift, @​dependabot[bot], @​flevi29, and dependabot[bot]! 🎉

pnpm/pnpm (pnpm)

v10.28.2: pnpm 10.28.2

Compare Source

Patch Changes

  • Security fix: prevent path traversal in directories.bin field.

  • When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

    This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

    Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.

  • Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #​9950.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

  • Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

  • Fix installation of Git dependencies using annotated tags #​10335.

    Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

  • Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

  • Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

  • Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
  • Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Bit

Gold Sponsors

Discord CodeRabbit Workleap
Stackblitz Vite

v10.26.0

Compare Source

v10.25.0

Compare Source

prettier/prettier (prettier)

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)
<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>
TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)
// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;
TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)
// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);
sveltejs/prettier-plugin-svelte (prettier-plugin-svelte)

v3.4.1

Compare Source

sveltejs/svelte (svelte)

v5.49.1

Compare Source

Patch Changes

  • fix: merge consecutive large text nodes (#​17587)

  • fix: only create async functions in SSR output when necessary (#​17593)

  • fix: properly separate multiline html blocks from each other in print() (#​17319)

  • fix: prevent unhandled exceptions arising from dangling promises in <script> (#​17591)

v5.49.0

Compare Source

Minor Changes
  • feat: allow passing ShadowRootInit object to custom element shadow option (#​17088)
Patch Changes

  • fix: throw for unset createContext get on the server (#​17580)

  • fix: reset effects inside skipped branches (#​17581)

  • fix: preserve old dependencies when updating reaction inside fork (#​17579)

  • fix: more conservative assignment_value_stale warnings (#​17574)

  • fix: disregard popover elements when determining whether an element has content (#​17367)

  • fix: fire introstart/outrostart events after delay, if specified (#​17567)

  • fix: increment signal versions when discarding forks (#​17577)

v5.48.5

Compare Source

Patch Changes

  • fix: run boundary onerror callbacks in a microtask, in case they result in the boundary's destruction (#​17561)

  • fix: prevent unintended exports from namespaces (#​17562)

  • fix: each block breaking with effects interspersed among items (#​17550)

v5.48.4

Compare Source

Patch Changes
  • fix: avoid duplicating escaped characters in CSS AST (#​17554)

v5.48.3

Compare Source

Patch Changes

  • fix: hydration failing with settled async blocks (#​17539)

  • fix: add pointer and touch events to a11y_no_static_element_interactions warning (#​17551)

  • fix: handle false dynamic components in SSR (#​17542)

  • fix: avoid unnecessary block effect re-runs after async work completes (#​17535)

  • fix: avoid using dev-mode array.includes wrapper on internal array checks (#​17536)

v5.48.2

Compare Source

Patch Changes
  • fix: export wait function from internal client index (#​17530)

v5.48.1

Compare Source

Patch Changes

  • fix: hoist snippets above const in same block (#​17516)

  • fix: properly hydrate await in {@&#8203;html} (#​17528)

  • fix: batch resolution of async work (#​17511)

  • fix: account for empty statements when visiting in transform async (#​17524)

  • fix: avoid async overhead for already settled promises (#​17461)

  • fix: better code generation for const tags with async dependencies (#​17518)

v5.48.0

Compare Source

Minor Changes
  • feat: export parseCss from svelte/compiler (#​17496)
Patch Changes

  • fix: handle non-string values in svelte:element this attribute (#​17499)

  • fix: faster deduplication of dependencies (#​17503)

v5.47.1

Compare Source

Patch Changes
  • fix: trigger selectedcontent reactivity (#​17486)

v5.47.0

Compare Source

Minor Changes
  • feat: customizable <select> elements (#​17429)
Patch Changes

  • fix: mark subtree of svelte boundary as dynamic (#​17468)

  • fix: don't reset static elements with debug/snippets (#​17477)

v5.46.4

Compare Source

Patch Changes

v5.46.3

Compare Source

Patch Changes

  • fix: reconnect clean deriveds when they are read in a reactive context (#​17362)

  • fix: don't transform references of function declarations in legacy mode (#​17431)

  • fix: notify deriveds of changes to sources inside forks (#​17437)

  • fix: always reconnect deriveds in get, when appropriate (#​17451)

  • fix: prevent derives without dependencies from ever re-running (286b40c4526ce9970cb81ddd5e65b93b722fe468)

  • fix: correctly update writable deriveds inside forks (#​17437)

  • fix: remove $inspect calls after await expressions when compiling for production server code (#​17407)

  • fix: clear batch between runs (#​17424)

  • fix: adjust loc property of Program nodes created from <script> elements (#​17428)

  • fix: don't revert source to UNINITIALIZED state when time travelling (#​17409)

v5.46.1

Compare Source

Patch Changes

  • fix: type currentTarget in on function (#​17370)

  • fix: skip static optimisation for stateless deriveds after await (#​17389)

  • fix: prevent infinite loop when HMRing a component with an await (#​17380)

v5.46.0

Compare Source

Minor Changes
  • feat: Add csp option to render(...), and emit hashes when using hydratable (#​17338)

v5.45.10

Compare Source

Patch Changes
  • fix: race condition when importing AsyncLocalStorage (#​17350)

v5.45.9

Compare Source

Patch Changes

  • fix: correctly reschedule deferred effects when reviving a batch after async work (#​17332)

  • fix: correctly print !doctype during print (#​17341)

v5.45.8

Compare Source

Patch Changes

  • fix: set AST root.start to 0 and root.end to template.length (#​17125)

  • fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#​17329)

v5.45.7

Compare Source

Patch Changes

  • fix: Add <textarea wrap="off"> as a valid attribute value (#​17326)

  • fix: add more css selectors to print() (#​17330)

  • fix: don't crash on hydratable serialization failure (#​17315)

v5.45.6

[Compare Source](https://redirect.g

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies label Feb 1, 2026
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 1e63c9d to e631876 Compare February 1, 2026 14:02
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from e631876 to 829c8c4 Compare February 1, 2026 14:02
@renovate renovate bot merged commit 1ff09d7 into main Feb 1, 2026
4 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch February 1, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants