Skip to content

Bump svelte, @storybook/addon-svelte-csf and @sveltejs/vite-plugin-svelte#1326

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-566575f126
Closed

Bump svelte, @storybook/addon-svelte-csf and @sveltejs/vite-plugin-svelte#1326
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-566575f126

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 3, 2026 •
edited
Loading

Bumps svelte, @storybook/addon-svelte-csf and @sveltejs/vite-plugin-svelte. These dependencies needed to be updated together.
Updates svelte from 4.2.20 to 5.53.7

Release notes

Sourced from svelte's releases.

svelte@5.53.7

Patch Changes

  • fix: correctly add __svelte_meta after else-if chains (#17830)

  • perf: cache element interactivity and source line splitting in compiler (#17839)

  • chore: avoid rescheduling effects during branch commit (#17837)

  • perf: optimize CSS selector pruning (#17846)

  • fix: preserve original boundary errors when keyed each rows are removed during async updates (#17843)

  • perf: avoid O(n²) name scanning in scope generate and unique (#17844)

  • fix: preserve each items that are needed by pending batches (#17819)

svelte@5.53.6

Patch Changes

  • perf: optimize parser hot paths for faster compilation (#17811)

  • fix: SvelteMap incorrectly handles keys with undefined values (#17826)

  • fix: SvelteURL search setter now returns the normalized value, matching native URL behavior (#17828)

  • fix: visit synthetic value node during ssr (#17824)

  • fix: always case insensitive event handlers during ssr (#17822)

  • chore: more efficient effect scheduling (#17808)

  • perf: optimize compiler analysis phase (#17823)

  • fix: skip redundant batch.apply (#17816)

  • chore: null out current_batch before committing branches (#17809)

svelte@5.53.5

Patch Changes

svelte@5.53.4

Patch Changes

  • fix: set server context after async transformError (#17799)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.53.7

Patch Changes

  • fix: correctly add __svelte_meta after else-if chains (#17830)

  • perf: cache element interactivity and source line splitting in compiler (#17839)

  • chore: avoid rescheduling effects during branch commit (#17837)

  • perf: optimize CSS selector pruning (#17846)

  • fix: preserve original boundary errors when keyed each rows are removed during async updates (#17843)

  • perf: avoid O(n²) name scanning in scope generate and unique (#17844)

  • fix: preserve each items that are needed by pending batches (#17819)

5.53.6

Patch Changes

  • perf: optimize parser hot paths for faster compilation (#17811)

  • fix: SvelteMap incorrectly handles keys with undefined values (#17826)

  • fix: SvelteURL search setter now returns the normalized value, matching native URL behavior (#17828)

  • fix: visit synthetic value node during ssr (#17824)

  • fix: always case insensitive event handlers during ssr (#17822)

  • chore: more efficient effect scheduling (#17808)

  • perf: optimize compiler analysis phase (#17823)

  • fix: skip redundant batch.apply (#17816)

  • chore: null out current_batch before committing branches (#17809)

5.53.5

Patch Changes

5.53.4

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.


Updates @storybook/addon-svelte-csf from 4.2.0 to 5.0.11

Release notes

Sourced from @​storybook/addon-svelte-csf's releases.

v5.0.11

🐛 Bug Fix

Authors: 2

v5.0.10

🐛 Bug Fix

Authors: 1

v5.0.9

🐛 Bug Fix

Authors: 1

v5.0.8

🐛 Bug Fix

Authors: 1

v5.0.7

🐛 Bug Fix

Authors: 1

v5.0.6

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​storybook/addon-svelte-csf's changelog.

v5.0.11 (Fri Feb 13 2026)

🐛 Bug Fix

Authors: 2

v5.0.10 (Fri Oct 03 2025)

🐛 Bug Fix

Authors: 1

v5.0.9 (Thu Oct 02 2025)

🐛 Bug Fix

Authors: 1

v5.0.8 (Wed Aug 20 2025)

🐛 Bug Fix

Authors: 1

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​storybook/addon-svelte-csf since your current version.


Updates @sveltejs/vite-plugin-svelte from 3.1.2 to 6.2.4

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​6.2.4

Patch Changes

  • fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#1258)

@​sveltejs/vite-plugin-svelte@​6.2.3

Patch Changes

  • fix(filter): ignore zero-tagged ids per rollup convention (#1255)

@​sveltejs/vite-plugin-svelte@​6.2.2

Patch Changes

  • Update experimental support for rolldown-vite to vite 8 beta (#1246)

  • perf: switch from debug to obug (smaller, esm-only) (#1241)

@​sveltejs/vite-plugin-svelte@​6.2.1

Patch Changes

  • fix: remove unscopable global styles warning (#1223)

  • Remove automatic configuration for rolldownOptions.optimization.inlineConst because latest version of rolldown-vite has it enabled by default. (#1225)

@​sveltejs/vite-plugin-svelte@​6.2.0

Minor Changes

  • feat(rolldown-vite): enable optimization.inlineConst by default to ensure treeshaking works with esm-env in svelte (#1207)

@​sveltejs/vite-plugin-svelte@​6.1.4

Patch Changes

  • fix: allow preprocess plugin to run twice (#1206)

  • fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

  • replace kleur dependency with builtin node:utils styleText (#1210)

@​sveltejs/vite-plugin-svelte@​6.1.3

Patch Changes

  • fix(api): add api.filter and deprecate api.idFilter to avoid confusing filter.id = idFilter.id assignments when used as hybrid filter in other plugins (#1199)

@​sveltejs/vite-plugin-svelte@​6.1.2

Patch Changes

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

6.2.4

Patch Changes

  • fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#1258)

6.2.3

Patch Changes

  • fix(filter): ignore zero-tagged ids per rollup convention (#1255)

6.2.2

Patch Changes

  • Update experimental support for rolldown-vite to vite 8 beta (#1246)

  • perf: switch from debug to obug (smaller, esm-only) (#1241)

6.2.1

Patch Changes

  • fix: remove unscopable global styles warning (#1223)

  • Remove automatic configuration for rolldownOptions.optimization.inlineConst because latest version of rolldown-vite has it enabled by default. (#1225)

6.2.0

Minor Changes

  • feat(rolldown-vite): enable optimization.inlineConst by default to ensure treeshaking works with esm-env in svelte (#1207)

6.1.4

Patch Changes

  • fix: allow preprocess plugin to run twice (#1206)

  • fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

  • replace kleur dependency with builtin node:utils styleText (#1210)

6.1.3

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​sveltejs/vite-plugin-svelte since your current version.


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 3, 2026
@dependabot dependabot Bot mentioned this pull request Mar 3, 2026
Closed
@github-actions github-actions Bot added P2 security This issue has something to do with the security of the package labels Mar 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-566575f126 branch 3 times, most recently from c4fa821 to 8f8f433 Compare March 12, 2026 17:04
@mihaiplesa
Copy link
Copy Markdown
Contributor

mihaiplesa commented Mar 30, 2026

@dependabot rebase

@dependabot
Bump svelte, @storybook/addon-svelte-csf and @sveltejs/vite-plugin-sv…
43432ec 
…elte

Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte), [@storybook/addon-svelte-csf](https://github.com/storybookjs/addon-svelte-csf) and [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte). These dependencies needed to be updated together.

Updates `svelte` from 4.2.20 to 5.53.7
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.7/packages/svelte)

Updates `@storybook/addon-svelte-csf` from 4.2.0 to 5.0.11
- [Release notes](https://github.com/storybookjs/addon-svelte-csf/releases)
- [Changelog](https://github.com/storybookjs/addon-svelte-csf/blob/main/CHANGELOG.md)
- [Commits](storybookjs/addon-svelte-csf@v4.2.0...v5.0.11)

Updates `@sveltejs/vite-plugin-svelte` from 3.1.2 to 6.2.4
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@6.2.4/packages/vite-plugin-svelte)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.53.7
  dependency-type: direct:production
- dependency-name: "@storybook/addon-svelte-csf"
  dependency-version: 5.0.11
  dependency-type: direct:development
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 6.2.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-566575f126 branch from 8f8f433 to 43432ec Compare March 30, 2026 15:04
@AlanBreck
Copy link
Copy Markdown
Collaborator

AlanBreck commented Mar 30, 2026

This one definitely can't be merged. We're working on updating here: #1078

@mihaiplesa mihaiplesa closed this Apr 16, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 16, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-566575f126 branch April 16, 2026 23:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@petemill petemill Awaiting requested review from petemill

@fallaciousreasoning fallaciousreasoning Awaiting requested review from fallaciousreasoning

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code P2 security This issue has something to do with the security of the package

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mihaiplesa @AlanBreck