Repository navigation
build(deps-dev): bump the dev-dependencies group with 4 updates - #2278
Merged
cursor[bot] merged 1 commit intoNov 9, 2026
Merged
Conversation
Bumps the dev-dependencies group with 4 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [svelte-check](https://github.com/sveltejs/language-tools). Updates `@types/node` from 26.6.5 to 26.6.6 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `oxlint` from 1.89.0 to 1.90.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.90.0/npm/oxlint) Updates `svelte` from 5.57.2 to 5.57.3 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte) Updates `svelte-check` from 4.7.7 to 4.7.8 - [Release notes](https://github.com/sveltejs/language-tools/releases) - [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.7.7...svelte-check@4.7.8) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.6.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: oxlint dependency-version: 1.90.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: svelte dependency-version: 5.57.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: svelte-check dependency-version: 4.7.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the
 |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Dependabot dev-dependencies group bump is safe to merge.
Updates (manifest + lockfile only; build(deps-dev): will not cut a release):
@types/node26.6.5 → 26.6.6 (patch, published 2026-10-28). DT #75745 adds experimentalnode:zlibZIP types. Additive, not inmain.js.oxlint1.89.0 → 1.90.0 (minor, published 2026-10-27). Newtypescript/no-unsafe-enum-assignmentis not in.oxlintrc. Peer flooroxlint-tsgolint >=7.0.2005already satisfied. Existing type-aware rules unchanged; lint is 0 diagnostics.svelte5.57.2 → 5.57.3 (patch, published 2026-10-26). Compiler/runtime bugfixes (a11y fallback role, init property checks, hydration attribute writes, unowned derived tracking). Compiles intomain.js;svelte-checkand the Vitest Svelte suite are the gate.svelte-check4.7.7 → 4.7.8 (patch, published 2026-11-01).--tsgo/--tsgo-experimental-apifixes;hooks.servertyping is SvelteKit-only and unused here.
All four clear the 7-day minimumReleaseAge / Dependabot cooldown.
Local (Node 22.23.4): pnpm install --frozen-lockfile; pnpm run lint (oxlint + svelte-policy + svelte-check --tsgo-experimental-api --fail-on-warnings: 0 errors / 0 warnings); pnpm run build; pnpm run test (6986 passed, 28 skipped). pnpm audit --prod 0. Remaining full-audit low deepmerge@4.3.1 via @sveltejs/vite-plugin-svelte is pre-existing.
CI: Test, Build + Lint, Docs, CodeQL (javascript-typescript + actions), Dependency Review, and PR Title are green.
No plugin runtime regressions. Squash-merging.
Sent by Cursor Automation: Dependabot PRs
cursor
Bot
deleted the
dependabot/npm_and_yarn/dev-dependencies-e033002a45
branch
November 9, 2026 12:49
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dev-dependencies group with 4 updates: @types/node, oxlint, svelte and svelte-check.
Updates
@types/nodefrom 26.6.5 to 26.6.6Commits
Updates
oxlintfrom 1.89.0 to 1.90.0Release notes
Sourced from oxlint's releases.
Changelog
Sourced from oxlint's changelog.
Commits
9b6fff4release(apps): oxlint v1.90.0 && oxfmt v0.75.0 (#28191)831cdf1feat(oxlint): require mininum oxlint-tsgolint version v7.0.2005 (#28118)d1b00f4feat(linter/typescript): implement no-unsafe-enum-assignment rule (#28117)165c91ffeat(linter/typescript/await-thenable): supportallowMixedPromiseArraysopt...Updates
sveltefrom 5.57.2 to 5.57.3Release notes
Sourced from svelte's releases.
Changelog
Sourced from svelte's changelog.
Commits
23bb146Version Packages (#18947)356c876chore: better async derived labels (#19068)3c032adchore: DRY out batch intersection logic (#19061)5bd3e3cchore: add newbatch.#is_skippedmethod (#19058)91b5110fix: use the first valid fallback role inrolefor a11y checks (#19045)50e3d28chore: remove obsolete code (#19051)bd762fbfix: skip redundant attribute writes during hydration (#18869)40bb084chore: more passing async tests (#19014)a841a29chore: bring over passing async-eager tests (#19011)4473857chore: bring over more tests that already pass on main (#19007)Updates
svelte-checkfrom 4.7.7 to 4.7.8Release notes
Sourced from svelte-check's releases.
Commits
e7826d3Merge pull request #3148 from sveltejs/changeset-release/master6a44b38Version Packagese980054fix: show inlay hints in scripts that come after other content (#3150)54ac0c0fix: typehooks.serverexports with--tsgo-experimental-api(#3154)704ee0cfix: report a tsconfig parse error instead of an internal error with --increm...fda3f39fix: resolve dts map sources relative to map file (#3173)55e5410fix: update --tsgo-experimental-api for typescript 7.1 (#3168)c2a9be7fix: hide imports from document symbols (#3113)5682d2afix: Preserve ts files listed intsconfig.jsonwith --tsgo (#3146)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions