chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/js (source)	9.36.0 -> 9.37.0
@sveltejs/adapter-node (source)	5.3.2 -> 5.3.3
@sveltejs/kit (source)	2.43.5 -> 2.46.4
@types/node (source)	22.18.6 -> 22.18.9
cross-env	10.0.0 -> 10.1.0
eslint (source)	9.36.0 -> 9.37.0
lint-staged	16.2.1 -> 16.2.3
playwright-core (source)	~1.55.0 -> ~1.56.0
pnpm (source)	10.17.1 -> 10.18.2
publint (source)	0.3.13 -> 0.3.14
svelte (source)	5.39.6 -> 5.39.11
svelte-check	4.3.2 -> 4.3.3
typescript (source)	5.9.2 -> 5.9.3
typescript-eslint (source)	8.44.1 -> 8.46.0
vite (source)	7.1.7 -> 7.1.9

---

Release Notes

eslint/eslint (@​eslint/js)

v9.37.0

Compare Source

sveltejs/kit (@​sveltejs/adapter-node)

v5.3.3

Compare Source

Patch Changes

• chore: update "homepage" field in package.json (#​14579)

sveltejs/kit (@​sveltejs/kit)

v2.46.4

Compare Source

Patch Changes

• fix: prevent access of Svelte 5-only untrack function (#​14658)

v2.46.3

Compare Source

Patch Changes

• fix: merge field.set(...) calls (#​14651)

• fix: don't automatically reset form after an enhanced submission (#​14626)

• fix: normalize path strings when updating field values (#​14649)

v2.46.2

Compare Source

Patch Changes

• fix: prevent code execution order issues around SvelteKit's env modules (#​14637)

v2.46.1

Compare Source

Patch Changes

• fix: use $derived for form fields (#​14621)

• docs: remove @example blocks to allow docs to deploy (#​14636)

• fix: require a value with submit and hidden fields (#​14635)

• fix: delete hydration cache on effect teardown (#​14611)

v2.46.0

Compare Source

Minor Changes

• feat: imperative form validation (#​14624)

Patch Changes

• fix: wait a tick before collecting form data for validation (#​14631)

• fix: prevent code execution order issues around SvelteKit's env modules (#​14632)

v2.45.0

Compare Source

Minor Changes

• feat: form.for(id) now implicitly sets id on form object (#​14623)

Patch Changes

• fix: allow fetch in remote function without emitting a warning (#​14610)

v2.44.0

Compare Source

Minor Changes

• feat: expose event.route and event.url to remote functions (#​14606)

• breaking: update experimental form API (#​14481)

Patch Changes

• fix: don't crawl error responses during prerendering (#​14596)

v2.43.8

Compare Source

Patch Changes

• fix: HMR for query (#​14587)

• fix: avoid client modules while traversing dependencies to prevent FOUC during dev (#​14577)

• fix: skip prebundling of .remote.js files (#​14583)

• fix: more robust remote file pattern matching (#​14578)

v2.43.7

Compare Source

Patch Changes

• fix: correctly type the result of form remote functions that do not accept data (#​14573)

• fix: force remote module chunks to isolate themselves (#​14571)

v2.43.6

Compare Source

Patch Changes

• fix: ensure cache key is consistent between client/server (#​14563)

• fix: keep resolve relative to initial base during prerender (#​14533)

• fix: avoid including HEAD twice when an unhandled HTTP method is used in a request to a +server handler that has both a GET handler and a HEAD handler (#​14564)

• fix: smoothscroll to deep link (#​14569)

kentcdodds/cross-env (cross-env)

v10.1.0

Compare Source

Features

• add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

eslint/eslint (eslint)

v9.37.0

Compare Source

lint-staged/lint-staged (lint-staged)

v16.2.3

Compare Source

Patch Changes

• #​1669 27cd541 Thanks @​iiroj! - When using --fail-on-changes, automatically hidden (partially) unstaged changes are no longer counted to make lint-staged fail.

v16.2.2

Compare Source

Patch Changes

• #​1667 699f95d Thanks @​iiroj! - The backup stash will not be dropped when using --fail-on-changes and there are errors. When reverting to original state is disabled (via --no-revert or --fail-on-changes), hidden (partially) unstaged changes are still restored automatically so that it's easier to resolve the situation manually.

  Additionally, the example for using the backup stash manually now uses the correct backup hash, if available:

  % npx lint-staged --fail-on-changes
  ✔ Backed up original state in git stash (c18d55a3)
  ✔ Running tasks for staged files...
  ✖ Tasks modified files and --fail-on-changes was used!
  ↓ Cleaning up temporary files...
  
  ✖ lint-staged failed because `--fail-on-changes` was used.
  
  Any lost modifications can be restored from a git stash:
  
    > git stash list --format="%h %s"
    c18d55a3 On main: lint-staged automatic backup
    > git apply --index c18d55a3

microsoft/playwright (playwright-core)

v1.56.0

Compare Source

pnpm/pnpm (pnpm)

v10.18.2

Compare Source

Patch Changes

• pnpm outdated --long should work #​10040.
• Replace ndjson with split2. Reduce the bundle size of pnpm CLI #​10054.
• pnpm dlx should request the full metadata of packages, when minimumReleaseAge is set #​9963.
• pnpm version switching should work when the pnpm home directory is in a symlinked directory #​9715.
• Fix EPIPE errors when piping output to other commands #​10027.

v10.18.1

Compare Source

Patch Changes

• Don't print a warning, when --lockfile-only is used #​8320.
• pnpm setup creates a command shim to the pnpm executable. This is needed to be able to run pnpm self-update on Windows #​5700.
• When using pnpm catalogs and running a normal pnpm install, pnpm produced false positive warnings for "skip adding to the default catalog because it already exists". This warning now only prints when using pnpm add --save-catalog as originally intended.

v10.18.0

Compare Source

Minor Changes

• Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

  Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
  Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

  Related PR: #​10025.

Patch Changes

• Retry filesystem operations on EAGAIN errors #​9959.
• Outdated command respects minimumReleaseAge configuration #​10030.
• Correctly apply the cleanupUnusedCatalogs configuration when removing dependent packages.
• Don't fail with a meaningless error when scriptShell is set to false #​8748.
• pnpm dlx should not fail when minimumReleaseAge is set #​10037.

publint/publint (publint)

v0.3.14

Compare Source

Patch Changes

• Add a new warning when an entrypoint is exported as CJS-only, has a default export, and has the __esModule marker. This setup has different interpretations by bundlers and runtimes, and implicit handling detection that may not be obvious for both package authors and users, hence it is discouraged. (#​201)

sveltejs/svelte (svelte)

v5.39.11

Compare Source

Patch Changes

• fix: flush batches whenever an async value resolves (#​16912)

v5.39.10

Compare Source

Patch Changes

• fix: hydrate each blocks inside element correctly (#​16908)

• fix: allow await in if block consequent and alternate (#​16890)

• fix: don't replace rest props with $$props for excluded props (#​16898)

• fix: correctly transform $derived private fields on server (#​16894)

• fix: add UNKNOWN evaluation value before breaking for binding.initial===SnippetBlock (#​16910)

v5.39.9

Compare Source

Patch Changes

• fix: flush when pending boundaries resolve (#​16897)

v5.39.8

Compare Source

Patch Changes

• fix: check boundary pending attribute at runtime on server (#​16855)

• fix: preserve tuple type in $state.snapshot (#​16864)

• fix: allow await in svelte:boundary without pending (#​16857)

• fix: update bind:checked error message to clarify usage with radio inputs (#​16874)

v5.39.7

Compare Source

Patch Changes

• chore: simplify batch logic (#​16847)

• fix: rebase pending batches when other batches are committed (#​16866)

• fix: wrap async children in $$renderer.async (#​16862)

• fix: silence label warning for buttons and anchor tags with title attributes (#​16872)

• fix: coerce nullish <title> to empty string (#​16863)

sveltejs/language-tools (svelte-check)

v4.3.3

Compare Source

Patch Changes

• fix: prevent file watcher issue (#​2859)

• fix: allow undefined and null values for #each in Svelte 5 (#​2863)

• perf: check if file content changed in tsconfig file watch (#​2859)

microsoft/TypeScript (typescript)

v5.9.3

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.46.0

Compare Source

🚀 Features

• typescript-eslint: export util types (#​10848, #​10849)

❤️ Thank You

• Mister-Hope @​Mister-Hope

You can read about our versioning strategy and releases on our website.

v8.45.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.1.9

Compare Source

Reverts

• server: drain stdin when not interactive (#​20885) (12d72b0)

v7.1.8

Compare Source

Bug Fixes

• css: improve url escape characters handling (#​20847) (24a61a3)
• deps: update all non-major dependencies (#​20855) (788a183)
• deps: update artichokie to 0.4.2 (#​20864) (e670799)
• dev: skip JS responses for document requests (#​20866) (6bc6c4d)
• glob: fix HMR for array patterns with exclusions (#​20872) (63e040f)
• keep ids for virtual modules as-is (#​20808) (d4eca98)
• server: drain stdin when not interactive (#​20837) (bb950e9)
• server: improve malformed URL handling in middlewares (#​20830) (d65a983)

Documentation

• create-vite: provide deno example (#​20747) (fdb758a)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​20810) (ea68a88)
• deps: update rolldown-related dependencies (#​20854) (4dd06fd)
• update url of create-react-app license (#​20865) (166a178)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.