Skip to content

Bump the dependencies group with 9 updates - #10

Merged
zeyus merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-54dcf87b02
Nov 7, 2026
Merged

zeyus merged 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-54dcf87b02

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 9 updates:

Package From To
@sveltejs/adapter-static 4.0.0 4.0.1
@sveltejs/kit 3.1.0 3.1.1
@tailwindcss/vite 4.3.3 4.3.4
@types/node 26.6.5 26.6.6
eslint 10.13.0 10.14.0
eslint-plugin-svelte 3.23.1 3.24.0
globals 17.13.0 17.14.0
svelte-check 4.7.7 4.7.8
tailwindcss 4.3.3 4.3.4

Updates @sveltejs/adapter-static from 4.0.0 to 4.0.1

Release notes

Sourced from @​sveltejs/adapter-static's releases.

@​sveltejs/adapter-static@​4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Changelog

Sourced from @​sveltejs/adapter-static's changelog.

4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Commits
  • 3d85a7a Version Packages
  • 8a81718 fix: escape prerendered paths used in Vercel route patterns
  • 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
  • See full diff in compare view

Updates @sveltejs/kit from 3.1.0 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Commits
  • 3d85a7a Version Packages
  • 9ed55b4 only treat params as a client entrypoint with client-side route resolution
  • ae07803 fix: prevent server-only modules from being imported into browser code via sr...
  • a8f7c1e Merge commit from fork
  • 7993d5e Merge commit from fork
  • 24d8ee4 Merge commit from fork
  • 2c190fe Merge commit from fork
  • 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
  • a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
  • b378468 test: check service worker sourcemaps in options-3
  • Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.3 to 4.3.4

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.4

Added

  • Add @tailwindcss/turbopack, a Turbopack loader for using Tailwind CSS with Next.js (#20367)

Fixed

  • Ensure watch mode detects changes to symlinked @source files whose real paths aren't otherwise scanned (#20356)
  • Ensure variants using @scope wrap generated utilities instead of nesting inside them (#20369)
  • Ensure nested @scope rules preserve their scoping semantics when flattened (#20369)
  • Preserve declarations directly inside @scope by wrapping them in :where(:scope) (#20369)
  • Ensure generated utilities include a space in empty var() fallbacks (e.g. var(--tw-blur,) → var(--tw-blur, )) (#20373)
  • Canonicalization: convert arbitrary breakpoint and container query variants to named equivalents (e.g. max-[64rem]:flex → max-lg:flex) (#20380)
  • Prevent @tailwindcss/vite from crashing on every edit under Vite's experimental bundledDev mode (#20379)
  • Ensure @tailwindcss/oxide falls back to WASM on platforms without native bindings (#20383)
  • Extract class candidates from Ruby %w and %W literals using angle brackets or custom delimiters (e.g. %w<flex>, %w|flex|), including in Slim and Haml templates (#20387)
  • Preserve whitespace in --default(…) values in functional @utility definitions (e.g. --default(box alphabetic) no longer becomes boxalphabetic) (#20392)
  • Ensure automatic source detection respects negation-based .gitignore files (e.g. /* followed by !/… patterns) (#20397)
  • Ensure root theme('…') namespace lookups in JavaScript plugins and config files return the full namespace object instead of the value of its DEFAULT key (#20399)
  • Skip ignored directories when generating watch globs instead of walking their contents on every rebuild (#20408)
  • Drop invalid UTF-8 candidates during class detection (#20389)
  • Prevent @tailwindcss/vite from forcing full-page reloads for scanned files that Vite does not handle as modules (e.g. .php files) (#20414)
  • Canonicalization: don't merge utilities that reference different theme variables set to CSS-wide keywords like unset (#20417)
  • Don't generate utilities when a modifier is used that would otherwise be silently ignored (e.g. rounded-sm/[5], shadow-sm/foo, stroke-2/50) (#20419)
  • Preserve and, or, and not inside selectors in supports-[…] variants (e.g. supports-[selector(a:not(.foo))]:flex) (#20420)
  • Don't warn about Angular's ::ng-deep and :host-context() when optimizing CSS (#20434)
  • Don't generate CSS for candidates containing an empty additional modifier (e.g. bg-red-500/50/ and group-hover/foo//bar:flex) (#20466)
  • Ensure min-*, max-*, and container query variants with decimal values are sorted numerically (e.g. min-[40.25rem] before min-[40.5rem]) (#20512)
  • Ensure CSS comments ending with \*/ are closed correctly instead of swallowing the CSS that follows (e.g. /* C:\temp\*/) (#20508)
  • Improve style invalidation performance of group-* and peer-* variants (#20513)
  • Ensure cached compilers release their loadModule and loadStylesheet callbacks after compilation (#20531)
  • Canonicalization: preserve & when moving a pseudo-element into * or ** (e.g. [&_::before]:flex → **:[&::before]:flex) (#20550)
  • Ensure the Set.prototype.intersection polyfill in canonicalizeCandidates(…) returns the intersection instead of the first set on Node.js < 22 (#20562)
  • Canonicalization: ensure inline theme(…) alphas with more than 2 decimals migrate to a percentage modifier with the same opacity (e.g. theme(colors.red.500/.12345) → text-red-500/[12.345%], not text-red-500/[12.345]) (#20563)
  • Canonicalization: preserve inline theme(…) alphas as an arbitrary percentage when a custom --opacity-* theme value would change the opacity (e.g. theme(colors.red.500/50%) → text-red-500/[50%] with --opacity-50: 10%) (#20563)
  • Ensure the @property fallback isn't applied in Safari versions that no longer support margin-trim: inline (#20569)
  • Treat viewport units like dvmin and svi and font-relative units like cap and rex as lengths in arbitrary values (e.g. text-[10dvmin] generates font-size instead of color) (#20516)
  • Write plugin logs to stderr in tailwindcss canonicalize so they don't end up in the results on stdout (#20561)
  • Extract class shorthands on later lines when Pug text, comments, or quoted attribute values contain unbalanced brackets, or a quote that doesn't start a string (e.g. input(pattern=/"/.source)) (#20547, #20572)
  • Underline the correct occurrence of an unsupported data type in --value(…) warnings (#20554)
  • Canonicalization: prefer an existing candidate when collapsing utilities over another utility with the same default theme value (e.g. text-foreground text-primary → text-primary, not text-card-checked-border) (#20540)
  • Canonicalization: don't collapse utilities into a utility that uses another theme variable with the same default value (e.g. mt-card mb-card → my-card, not my-4) (#20574)
  • Ensure @tailwindcss/postcss rewrites relative url(…)s of stylesheets that are inlined before it runs (e.g. @imports in Vite) in optimized builds (#20576)
  • Drop nested rules that put a combinator after a pseudo-element when using pseudo-element variants (e.g. selection:* on a utility with a nested & > * rule) (#20575)
  • Don't generate CSS for arbitrary values with unbalanced parentheses or brackets (e.g. w-[calc(1px] or [--x:a[b]) (#20577)
  • Canonicalization: prevent collapse: true from taking exponentially longer when classes are linked through a utility that sets many properties (e.g. sr-only) (#20558)
  • Ensure & is substituted inside :-moz-any(…) and :-webkit-any(…) in custom variants (e.g. @custom-variant firefox (:-moz-any(&));) (#20486)
  • Ensure the standalone macOS binaries have a valid code signature, so macOS 27 no longer kills them at launch (#20578)
  • Ensure @tailwindcss/turbopack and @tailwindcss/webpack rebuild when the input CSS changes (e.g. next dev with Turbopack no longer serves the CSS of the previous edit) (#20582)
  • Canonicalization: don't drop a utility that sets a --tw-* variable when an unrelated property has the same value (e.g. link mt-4 no longer becomes mt-4 when link sets margin-top: 16px and --tw-translate-x: 16px) (#20593)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.4] - 2026-11-02

Added

  • Add @tailwindcss/turbopack, a Turbopack loader for using Tailwind CSS with Next.js (#20367)

Fixed

  • Ensure watch mode detects changes to symlinked @source files whose real paths aren't otherwise scanned (#20356)
  • Ensure variants using @scope wrap generated utilities instead of nesting inside them (#20369)
  • Ensure nested @scope rules preserve their scoping semantics when flattened (#20369)
  • Preserve declarations directly inside @scope by wrapping them in :where(:scope) (#20369)
  • Ensure generated utilities include a space in empty var() fallbacks (e.g. var(--tw-blur,) → var(--tw-blur, )) (#20373)
  • Canonicalization: convert arbitrary breakpoint and container query variants to named equivalents (e.g. max-[64rem]:flex → max-lg:flex) (#20380)
  • Prevent @tailwindcss/vite from crashing on every edit under Vite's experimental bundledDev mode (#20379)
  • Ensure @tailwindcss/oxide falls back to WASM on platforms without native bindings (#20383)
  • Extract class candidates from Ruby %w and %W literals using angle brackets or custom delimiters (e.g. %w<flex>, %w|flex|), including in Slim and Haml templates (#20387)
  • Preserve whitespace in --default(…) values in functional @utility definitions (e.g. --default(box alphabetic) no longer becomes boxalphabetic) (#20392)
  • Ensure automatic source detection respects negation-based .gitignore files (e.g. /* followed by !/… patterns) (#20397)
  • Ensure root theme('…') namespace lookups in JavaScript plugins and config files return the full namespace object instead of the value of its DEFAULT key (#20399)
  • Skip ignored directories when generating watch globs instead of walking their contents on every rebuild (#20408)
  • Drop invalid UTF-8 candidates during class detection (#20389)
  • Prevent @tailwindcss/vite from forcing full-page reloads for scanned files that Vite does not handle as modules (e.g. .php files) (#20414)
  • Canonicalization: don't merge utilities that reference different theme variables set to CSS-wide keywords like unset (#20417)
  • Don't generate utilities when a modifier is used that would otherwise be silently ignored (e.g. rounded-sm/[5], shadow-sm/foo, stroke-2/50) (#20419)
  • Preserve and, or, and not inside selectors in supports-[…] variants (e.g. supports-[selector(a:not(.foo))]:flex) (#20420)
  • Don't warn about Angular's ::ng-deep and :host-context() when optimizing CSS (#20434)
  • Don't generate CSS for candidates containing an empty additional modifier (e.g. bg-red-500/50/ and group-hover/foo//bar:flex) (#20466)
  • Ensure min-*, max-*, and container query variants with decimal values are sorted numerically (e.g. min-[40.25rem] before min-[40.5rem]) (#20512)
  • Ensure CSS comments ending with \*/ are closed correctly instead of swallowing the CSS that follows (e.g. /* C:\temp\*/) (#20508)
  • Improve style invalidation performance of group-* and peer-* variants (#20513)
  • Ensure cached compilers release their loadModule and loadStylesheet callbacks after compilation (#20531)
  • Canonicalization: preserve & when moving a pseudo-element into * or ** (e.g. [&_::before]:flex → **:[&::before]:flex) (#20550)
  • Ensure the Set.prototype.intersection polyfill in canonicalizeCandidates(…) returns the intersection instead of the first set on Node.js < 22 (#20562)
  • Canonicalization: ensure inline theme(…) alphas with more than 2 decimals migrate to a percentage modifier with the same opacity (e.g. theme(colors.red.500/.12345) → text-red-500/[12.345%], not text-red-500/[12.345]) (#20563)
  • Canonicalization: preserve inline theme(…) alphas as an arbitrary percentage when a custom --opacity-* theme value would change the opacity (e.g. theme(colors.red.500/50%) → text-red-500/[50%] with --opacity-50: 10%) (#20563)
  • Ensure the @property fallback isn't applied in Safari versions that no longer support margin-trim: inline (#20569)
  • Treat viewport units like dvmin and svi and font-relative units like cap and rex as lengths in arbitrary values (e.g. text-[10dvmin] generates font-size instead of color) (#20516)
  • Write plugin logs to stderr in tailwindcss canonicalize so they don't end up in the results on stdout (#20561)
  • Extract class shorthands on later lines when Pug text, comments, or quoted attribute values contain unbalanced brackets, or a quote that doesn't start a string (e.g. input(pattern=/"/.source)) (#20547, #20572)
  • Underline the correct occurrence of an unsupported data type in --value(…) warnings (#20554)
  • Canonicalization: prefer an existing candidate when collapsing utilities over another utility with the same default theme value (e.g. text-foreground text-primary → text-primary, not text-card-checked-border) (#20540)
  • Canonicalization: don't collapse utilities into a utility that uses another theme variable with the same default value (e.g. mt-card mb-card → my-card, not my-4) (#20574)
  • Ensure @tailwindcss/postcss rewrites relative url(…)s of stylesheets that are inlined before it runs (e.g. @imports in Vite) in optimized builds (#20576)
  • Drop nested rules that put a combinator after a pseudo-element when using pseudo-element variants (e.g. selection:* on a utility with a nested & > * rule) (#20575)
  • Don't generate CSS for arbitrary values with unbalanced parentheses or brackets (e.g. w-[calc(1px] or [--x:a[b]) (#20577)
  • Canonicalization: prevent collapse: true from taking exponentially longer when classes are linked through a utility that sets many properties (e.g. sr-only) (#20558)
  • Ensure & is substituted inside :-moz-any(…) and :-webkit-any(…) in custom variants (e.g. @custom-variant firefox (:-moz-any(&));) (#20486)
  • Ensure the standalone macOS binaries have a valid code signature, so macOS 27 no longer kills them at launch (#20578)
  • Ensure @tailwindcss/turbopack and @tailwindcss/webpack rebuild when the input CSS changes (e.g. next dev with Turbopack no longer serves the CSS of the previous edit) (#20582)

... (truncated)

Commits

Updates @types/node from 26.6.5 to 26.6.6

Commits

Updates eslint from 10.13.0 to 10.14.0

Release notes

Sourced from eslint's releases.

v10.14.0

Features

  • d23a7f9 feat: fix property descriptor handling in func-name-matching (#21400) (xbinaryx)

Bug Fixes

  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460) (lumir)
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449) (xbinaryx)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419) (lumir)
  • 6194939 fix: no-invalid-this crash on accessor fields without initializer (#21442) (xbinaryx)
  • 9155e14 fix: Update @​humanfs/node dependency version (#21434) (Nicholas C. Zakas)
  • cb2b9d4 fix: avoid invalid object-shorthand fixes for super methods (#21323) (dvd233)
  • 5ee3915 fix: yoda invalid autofix at statement start (#21424) (Daniel Pinto)

Documentation

  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437) (lumir)
  • dab466e docs: Update README (GitHub Actions Bot)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452) (Pixel)
  • 7697550 docs: Update README (GitHub Actions Bot)
  • 0c699d5 docs: Remove Tidelift commercial support (#21416) (Milos Djermanovic)
  • 0880666 docs: update loadESLint() documentation for v10 (#21374) (Minseon Kim)
  • e06fe87 docs: Revise AI acknowledgment options in PR template (#21414) (Nicholas C. Zakas)

Chores

  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462) (Francesco Trotta)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450) (renovate[bot])
  • a031c40 chore: update ecosystem plugins (#21445) (ESLint Bot)
  • 67d2ca2 chore: add troubleshooting page URL to circular fixes warning message (#21429) (Milos Djermanovic)
  • 276021d chore: update github/codeql-action action to v4.39.0 (#21432) (renovate[bot])
  • 449724e chore: update ecosystem plugins (#21420) (ESLint Bot)
  • 8ffeb8c chore: update dependency prettier to v3.9.10 (#21417) (renovate[bot])
Commits
  • 12cbff4 10.14.0
  • 6b696e7 Build: changelog update for 10.14.0
  • 0e2ab70 ci: disable eslint-plugin-unicorn ecosystem test (#21462)
  • 4a12580 fix: require minimatch 10.2.6 to avoid vulnerable brace-expansion (#21460)
  • 0f94f47 docs: remove zh-hans from docs language switcher (#21437)
  • dab466e docs: Update README
  • 827a8f3 fix: no-restricted-globals crash on global objects as property values (#21449)
  • 97431f8 docs: replace --rulesdir with a virtual plugin in custom rules docs (#21452)
  • 6e3f988 chore: update github/codeql-action action to v4.39.1 (#21450)
  • 161558a fix: handle LS, PS and empty hashbang comments (#21419)
  • Additional commits viewable in compare view

Updates eslint-plugin-svelte from 3.23.1 to 3.24.0

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.24.0

Minor Changes

  • #1553 8cca2e0 Thanks @​marekdedic! - feat(no-navigation-without-resolve): track resolve() through array elements, object properties and {#each} iteration variables

Patch Changes

  • #1380 9944910 Thanks @​baseballyama! - fix(no-navigation-without-resolve): check complete rel tokens before exempting external links

  • #1566 e49015d Thanks @​arpitjain099! - fix(no-unused-props): fix false positives and negatives around spreads, aliases, dotted keys, and props that share a type

  • #1516 7538afa Thanks @​kevin-easygo! - fix(no-reactive-functions): use isSpaceBetween instead of isSpaceBetweenTokens, which was removed in ESLint v10

  • #1618 7999ad4 Thanks @​baseballyama! - fix(valid-compile): read the parser from context.languageOptions.parserOptions, since context.parserOptions was removed in ESLint v10

  • #1606 78def78 Thanks @​ozenyunus35! - Allow a comment before a closing token in svelte/indent to be aligned with the previous line instead of requiring the indentation of the closing token.

  • #1581 3b308f3 Thanks @​badreddinesaadioui! - fix(prefer-svelte-reactivity): stop reporting in legacy (non-runes) components, where the svelte/reactivity classes are not tracked

  • #1627 36abd30 Thanks @​baseballyama! - Fix false positives in svelte/no-unused-props:

    • The props object is destructured (e.g. const { a } = props). A destructured key now counts as used when its binding is used, and an unused one is reported. Nested destructuring (e.g. const { name } = user) can now report unused nested properties, the same as user.name.
    • The props object is used as a whole (e.g. $inspect(props) or fn(props)). Every property now counts as used. A type query like typeof props.a is not counted as a use.
    • A dynamic key like user[key] now counts as using every property of user.
    • Numeric and template literal keys like props[0].a and props[`a`], and wrapped values like props!.a, (props as Props).a and (props satisfies Props).a are now tracked.
    • Instances of generic classes are now skipped like other class instances.
    • With allowUnusedNestedProperties, nested properties are never reported.
    • Class members that cannot be read from outside (#foo, private, protected) are no longer reported, e.g. in intersections.
  • #1629 5e0c7bf Thanks @​baseballyama! - Stop svelte/no-unused-svelte-ignore from reporting svelte-ignore comments for runtime warnings (e.g. ownership_invalid_binding), which the compiler can't report.

  • #1626 9aa3a7a Thanks @​baseballyama! - Require postcss@^8.5.10 to avoid GHSA-qx2v-qp2m-jg93.

  • #1613 80e66ec Thanks @​smile-alive! - fix(sort-attributes): do not report or move shorthand attributes and directives across spread attributes

  • #1635 cf11995 Thanks @​baseballyama! - fix(require-store-reactive-access): with type information, don't report callable stores used as functions, actions, transitions, or event handlers, and stores from function calls such as getContext() checked with ?? / ??= with a store fallback. Don't auto-fix stores that are not declared at the top level, are used in the module script, or are on the left side of ||= / &&= / ??=.

  • #1616 a972353 Thanks @​eknathdj! - Honor svelte-ignore comments on nested script nodes in svelte/no-unused-svelte-ignore and svelte/valid-compile (Svelte 5), and no longer treat a comment at the end of the previous line as an ignore comment for the next node.

  • #1648 ae85b36 Thanks @​baseballyama! - chore: update svelte-eslint-parser to 1.10.1

  • #1625 9b859e3 Thanks @​baseballyama! - Pass compilerOptions.runes from the Svelte config to the compiler in svelte/valid-compile and svelte/no-unused-svelte-ignore, so runes-mode warnings are reported for files that rely on runes: true. The function form (runes: ({ filename }) => ...) is also supported.

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.24.0

Minor Changes

  • #1553 8cca2e0 Thanks @​marekdedic! - feat(no-navigation-without-resolve): track resolve() through array elements, object properties and {#each} iteration variables

Patch Changes

  • #1380 9944910 Thanks @​baseballyama! - fix(no-navigation-without-resolve): check complete rel tokens before exempting external links

  • #1566 e49015d Thanks @​arpitjain099! - fix(no-unused-props): fix false positives and negatives around spreads, aliases, dotted keys, and props that share a type

  • #1516 7538afa Thanks @​kevin-easygo! - fix(no-reactive-functions): use isSpaceBetween instead of isSpaceBetweenTokens, which was removed in ESLint v10

  • #1618 7999ad4 Thanks @​baseballyama! - fix(valid-compile): read the parser from context.languageOptions.parserOptions, since context.parserOptions was removed in ESLint v10

  • #1606 78def78 Thanks @​ozenyunus35! - Allow a comment before a closing token in svelte/indent to be aligned with the previous line instead of requiring the indentation of the closing token.

  • #1581 3b308f3 Thanks @​badreddinesaadioui! - fix(prefer-svelte-reactivity): stop reporting in legacy (non-runes) components, where the svelte/reactivity classes are not tracked

  • #1627 36abd30 Thanks @​baseballyama! - Fix false positives in svelte/no-unused-props:

    • The props object is destructured (e.g. const { a } = props). A destructured key now counts as used when its binding is used, and an unused one is reported. Nested destructuring (e.g. const { name } = user) can now report unused nested properties, the same as user.name.
    • The props object is used as a whole (e.g. $inspect(props) or fn(props)). Every property now counts as used. A type query like typeof props.a is not counted as a use.
    • A dynamic key like user[key] now counts as using every property of user.
    • Numeric and template literal keys like props[0].a and props[`a`], and wrapped values like props!.a, (props as Props).a and (props satisfies Props).a are now tracked.
    • Instances of generic classes are now skipped like other class instances.
    • With allowUnusedNestedProperties, nested properties are never reported.
    • Class members that cannot be read from outside (#foo, private, protected) are no longer reported, e.g. in intersections.
  • #1629 5e0c7bf Thanks @​baseballyama! - Stop svelte/no-unused-svelte-ignore from reporting svelte-ignore comments for runtime warnings (e.g. ownership_invalid_binding), which the compiler can't report.

  • #1626 9aa3a7a Thanks @​baseballyama! - Require postcss@^8.5.10 to avoid GHSA-qx2v-qp2m-jg93.

  • #1613 80e66ec Thanks @​smile-alive! - fix(sort-attributes): do not report or move shorthand attributes and directives across spread attributes

  • #1635 cf11995 Thanks @​baseballyama! - fix(require-store-reactive-access): with type information, don't report callable stores used as functions, actions, transitions, or event handlers, and stores from function calls such as getContext() checked with ?? / ??= with a store fallback. Don't auto-fix stores that are not declared at the top level, are used in the module script, or are on the left side of ||= / &&= / ??=.

  • #1616 a972353 Thanks @​eknathdj! - Honor svelte-ignore comments on nested script nodes in svelte/no-unused-svelte-ignore and svelte/valid-compile (Svelte 5), and no longer treat a comment at the end of the previous line as an ignore comment for the next node.

  • #1648 ae85b36 Thanks @​baseballyama! - chore: update svelte-eslint-parser to 1.10.1

  • #1625 9b859e3 Thanks @​baseballyama! - Pass compilerOptions.runes from the Svelte config to the compiler in svelte/valid-compile and svelte/no-unused-svelte-ignore, so runes-mode warnings are reported for files that rely on runes: true. The function form (runes: ({ filename }) => ...) is also supported.

Commits
  • bed2470 chore: release eslint-plugin-svelte (#1611)
  • ae85b36 chore: update svelte-eslint-parser to 1.10.1 (#1648)
  • 5e0c7bf fix(no-unused-svelte-ignore): skip runtime warning codes (#1629)
  • cf11995 fix(require-store-reactive-access): allow callable stores and ?? fallbacks ...
  • 36abd30 fix(no-unused-props): handle props object destructuring and generic class ins...
  • 9b859e3 fix(valid-compile): respect compilerOptions.runes from svelte config (#1625)
  • 9aa3a7a fix: require postcss ^8.5.10 and refresh yaml in lockfile (#1626)
  • 7538afa fix(no-reactive-functions): use isSpaceBetween for ESLint v10 (#1516)
  • 7999ad4 fix(valid-compile): read parser from context.languageOptions for ESLint v10...
  • 3b308f3 fix(prefer-svelte-reactivity): don't report in non-runes components (#1581)
  • Additional commits viewable in compare view

Updates globals from 17.13.0 to 17.14.0

Release notes

Sourced from globals's releases.

v17.14.0

  • Update globals (2026-11-01) (#355) 7abfb5d

sindresorhus/globals@v17.13.0...v17.14.0

Commits

Bumps the dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [@sveltejs/adapter-static](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-static) | `4.0.0` | `4.0.1` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.1.0` | `3.1.1` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.3` | `4.3.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |
| [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.23.1` | `3.24.0` |
| [globals](https://github.com/sindresorhus/globals) | `17.13.0` | `17.14.0` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.7.7` | `4.7.8` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.3` | `4.3.4` |


Updates `@sveltejs/adapter-static` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-static/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-static@4.0.1/packages/adapter-static)

Updates `@sveltejs/kit` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.1/packages/kit)

Updates `@tailwindcss/vite` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/@tailwindcss-vite)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.13.0 to 10.14.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.13.0...v10.14.0)

Updates `eslint-plugin-svelte` from 3.23.1 to 3.24.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.24.0/packages/eslint-plugin-svelte)

Updates `globals` from 17.13.0 to 17.14.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.13.0...v17.14.0)

Updates `svelte-check` from 4.7.7 to 4.7.8
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.7.7...svelte-check@4.7.8)

Updates `tailwindcss` from 4.3.3 to 4.3.4
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.4/packages/tailwindcss)

---
updated-dependencies:
- dependency-name: "@sveltejs/adapter-static"
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: eslint
  dependency-version: 10.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.24.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: globals
  dependency-version: 17.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: svelte-check
  dependency-version: 4.7.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 7, 2026
@zeyus
zeyus merged commit a2b0e51 into main Nov 7, 2026
3 checks passed
@zeyus
zeyus deleted the dependabot/npm_and_yarn/dependencies-54dcf87b02 branch November 7, 2026 11:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant