Skip to content

chore(deps-dev): Bump the development-dependencies group with 8 updates - #119

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-1601b3cc78
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-dependencies-1601b3cc78

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the development-dependencies group with 8 updates:

Package From To
@inlang/paraglide-js 2.25.4 2.27.0
@playwright/test 1.63.0 1.64.0
eslint-plugin-svelte 3.23.0 3.23.1
playwright 1.63.0 1.64.0
svelte 5.57.1 5.57.2
svelte-meta-tags 5.0.2 5.0.3
typescript-eslint 8.71.0 8.71.1
vite 8.3.2 8.3.4

Updates @inlang/paraglide-js from 2.25.4 to 2.27.0

Changelog

Sourced from @​inlang/paraglide-js's changelog.

2.27.0

Minor Changes

  • 45c276c: Upgrade note: compilation now fails with … references the variable "count" in the local variable "countPlural", but "count" is not declared when a local variable that the message uses reads a variable that has no input declaration, such as local countPlural = count: plural without input count. The inlang message format plugin before 4.4.1 imports such a local without adding the input. These messages used to compile, and worked at runtime as long as the message had another input. Fix: add the missing input count declaration, or update the inlang message format plugin to 4.4.1 or later, which adds it.

    Fix local variable compilation and support ICU plural offsets.

    • A message function now declares only the local variables it reads, through match conditions, its patterns, or other locals it reads. Unread locals and an unread inputs parameter no longer fail TypeScript's noUnusedLocals and noUnusedParameters in checked projects.
    • Local variables are emitted in dependency order, so a local that reads a local declared after it no longer throws a ReferenceError at runtime. Locals that reference each other in a cycle now fail compilation with an error that names the message, the locale and the cycle.
    • A message that reads an undeclared variable, for example through .local e = {$count} without .input {$count}, now fails compilation with an error that names the message, the locale and the variable. It used to compile to code that threw ReferenceError: i is not defined or read an input missing from the message's type. Undeclared variables in patterns already failed compilation.
    • plural supports the offset option that ICU MessageFormat 1 {count, plural, offset:1 …} imports as: the category is selected for count - offset, while exact matches like =1 compare count itself.
  • 6e5cfc5: Fix exact number matches on un-annotated local variables, and select variants in MessageFormat 2 preference order.

    • A literal match on a local that aliases an input, such as .local countPluralExact = {$count} from ICU {count, plural, =0 {…} one {…} other {…}} imports, now compares like a match on the input itself, so =0 matches the number 0 (and the string "0"). Annotated locals (:plural, :number, …) still match their result as a string.
    • Variants are now tried in preference order: literal keys before catchalls, selector by selector, instead of in storage order. An exact =0 variant now wins over a plural category like French one, and a catchall stored first no longer hides later variants. The =0 variant wins only when its selector comes before the plural selector, countPluralExact, countPlural, as the ICU MessageFormat 1 plugin imports them. The inlang message format plugin up to 4.4.5 exports selectors alphabetically, countPlural, countPluralExact, so in files it wrote French 0 still selects one: put the exact selector first in selectors.

    Behavior change: a message whose variants relied on storage order may now select a different variant. The new choice is the one the MessageFormat 2 spec selects. For example, with selectors platform, gender and the variants * male, android *, * *, the input android + male used to select * male and now selects android *.

  • 8921567: paraglide-js init sets up translation checks.

    • New projects use @inlang/plugin-message-format 4.5.0 and @inlang/plugin-m-function-matcher 2.3.0.
    • init adds @inlang/cli ^3.4.0 to the devDependencies (unless it's there) and a check:i18n script that runs inlang check --project ./project.inlang (unless a script of that name exists). It warns if an existing @inlang/cli is older than 3.4.0, which has no inlang check.
    • At the end, init prints a localization section you can add to your AGENTS.md, with your project path, message files and output directory. It doesn't write AGENTS.md.
  • d58a9d6: Import the registry only where a message calls it, and format ICU #.

    • A message file imported registry.js whenever its text contained registry., including message text such as "Open the registry. Now.", which failed TypeScript's noUnusedLocals in checked projects. The compiler now records which registry functions each message calls and imports the registry only when one is called.
    • ICU MessageFormat 1 # (imported as {$count :icu:pound}) was an unknown formatter and printed the raw value. It now displays the number formatted for the locale like :number, minus the plural offset when the import carries one ({$count :icu:pound offset=1}, see opral/inlang#4441). {count, plural, offset:1 … other {You and # others}} renders "You and 1,233 others" for count 1234 in English, instead of "You and 1234 others". Only numbers and numeric strings are formatted. Anything else is displayed as is, like {count}, without subtracting the offset: "abc", "1,234" and "" display unchanged, null and undefined display "null" and "undefined", and a bigint displays its digits unformatted, so it keeps its precision. The plural category is still selected on Number(count) minus the offset, so without an offset "" and null select the category of 0 (with offset:1, the category of -1), and a bigint beyond Number.MAX_SAFE_INTEGER loses precision there, as before.
    • With experimentalMiddlewareLocaleSplitting, the messages the middleware injects into the page threw ReferenceError: registry is not defined on the client when they called a registry function (:plural, :number, #, …). The injected script now declares the registry functions those messages call.
    • An offset from a variable (:plural offset=$offset, :icu:pound offset=$offset) no longer fails checkJs. Both functions type it as unknown and convert it with Number().
    • An unknown formatter on a local variable (.local y = {$x :custom}) compiled to registry.custom(...), which failed checkJs and threw "registry.custom is not a function". It now interpolates the raw value with a warning, like an unknown formatter in a pattern.
    • .parts() of a markup message failed checkJs (Property 'parts' does not exist) when a locale's message had no markup of its own: a fallback to another locale, a message without markup, or the bundle id fallback. The bundle function now reads .parts through a type that declares it optional.

    Behavior change: # in messages imported with the ICU MessageFormat 1 plugin now renders locale-formatted numbers, as ICU does: 1234 renders as "1,234" in English and "1.234" in German, and fractions are rounded to at most three digits like :number.

  • 8ee34b6: Requires @inlang/sdk 4.

    Paraglide now depends on @inlang/sdk ^4.0.0. Projects and plugins need no changes: plugins still exchange camelCase bundleId and messageId, and the compiled output is the same. If you call compileProject() with an InlangProject you load yourself, load it with @inlang/sdk 4. Code that writes to project.db directly uses the SDK 4 table and column names (inlang_bundle, bundle_id, message_id), see "Migrating to 4.0" in the SDK README.

Patch Changes

  • ffabe0a: The README.md in the compiled output is shorter and written for coding agents. It says to edit the translation files instead of the generated output, shows the compile command, explains what inlang owns versus Paraglide JS, and links to the inlang CLI (check, machine translate), Fink, Parrot and Sherlock.

  • ba2ee63: Format datetime without options in MessageFormat 2's default style, dateStyle=medium timeStyle=short.

    Without options that pick what to show (dateStyle, timeStyle, or fields like year, month, hour), datetime used the default of Intl.DateTimeFormat, a numeric date like "10/9/2026". It now formats like dateStyle=medium timeStyle=short, the default of MessageFormat 2 (LDML 47), e.g. "Oct 9, 2026, 4:30 PM". Options that pick nothing, like timeZone and hour12, keep the default. For the defaults of ICU {d, date} and {d, time}, see "Format ICU MessageFormat 1 number, date and time styles".

    Behavior change: datetime without options, such as local formattedDate = date: datetime, renders "Oct 9, 2026, 4:30 PM" instead of "10/9/2026". Pass year=numeric month=numeric day=numeric for the previous output.

  • 6a797cc: Format ICU MessageFormat 1 number, date and time styles.

    The ICU MessageFormat 1 plugin imports {n, number, integer} as {n: number style=integer}, {d, date, short} as {d: date style=short} and {d, time, short} as {d: time style=short}.

    • date and time were unknown formatters and printed the raw value, e.g. "Fri Oct 09 2026 16:30:00 GMT+0200 (…)". They now format like datetime with dateStyle and timeStyle (short, medium, long, full). {d, date} formats like dateStyle=medium and {d, time} like timeStyle=medium, ICU's defaults: "Oct 9, 2026" and "4:30:00 PM" in English.

... (truncated)

Commits

Updates @playwright/test from 1.63.0 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
  • 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
  • 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
  • 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
  • dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
  • Additional commits viewable in compare view

Updates eslint-plugin-svelte from 3.23.0 to 3.23.1

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.1

Patch Changes

  • #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

  • #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

  • #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

  • #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

  • #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

  • #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

  • #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

  • #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.1

Patch Changes

  • #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

  • #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

  • #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

  • #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

  • #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

  • #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

  • #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

  • #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Commits
  • 24201e0 chore: release eslint-plugin-svelte (#1604)
  • 90d7b09 fix(no-navigation-without-resolve): enable on SvelteKit 3 (#1599)
  • 4607a2c fix: recognize SvelteKit 3 in rule conditions (#1598)
  • af288cd fix(no-top-level-browser-globals): recognize app env browser guards (#1594)
  • 4ad2c67 fix(require-each-key): highlight only the opening tag (#1593)
  • ed67eb7 fix: omit deprecated rules from the all preset (#1592)
  • ed49083 test: show fixture paths in rule test titles (#1591)
  • a28563f fix(no-immutable-reactive-statements): handle globalReturn module scopes (#1590)
  • 57863c5 docs: share extra file extensions across typed linting (#1589)
  • 9814b51 docs: list all active extension rules in the extension table (#1588)
  • See full diff in compare view

Updates playwright from 1.63.0 to 1.64.0

Release notes

Sourced from playwright's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits
  • 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
  • e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
  • f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
  • e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
  • d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
  • a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
  • 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
  • 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
  • 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
  • dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
  • Additional commits viewable in compare view

Updates svelte from 5.57.1 to 5.57.2

Release notes

Sourced from svelte's releases.

svelte@5.57.2

Patch Changes

  • fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

  • fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

  • fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

  • fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

  • fix: restore hydration state when custom element attribute updates throw (#18467)

  • fix: attach event handlers that are assigned after a top-level await in production (#18933)

  • fix: flush anything pending before invoking flushSync callback function (#18878)

  • fix: preserve location information for await wrappers (#18859)

  • fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

  • fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

  • fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

  • fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

  • fix: print {#await} blocks that only have a pending branch (#18908)

  • fix: don't warn about a redundant link role on <area> elements without an href (#18872)

  • fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

  • fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

  • fix: read batch-local array on each-block commit (#18879)

  • fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

  • fix: error when using let: directives on a component with a children snippet (#18873)

  • fix: ignore stale boundary reset callbacks (#18886)

  • fix: handle deferred transitions aborted before initialization (#18776)

  • fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

  • fix: preserve dynamic element connections during hydration (#18855)

Changelog

Sourced from svelte's changelog.

5.57.2

Patch Changes

  • fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

  • fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

  • fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

  • fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

  • fix: restore hydration state when custom element attribute updates throw (#18467)

  • fix: attach event handlers that are assigned after a top-level await in production (#18933)

  • fix: flush anything pending before invoking flushSync callback function (#18878)

  • fix: preserve location information for await wrappers (#18859)

  • fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

  • fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

  • fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

  • fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

  • fix: print {#await} blocks that only have a pending branch (#18908)

  • fix: don't warn about a redundant link role on <area> elements without an href (#18872)

  • fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

  • fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

  • fix: read batch-local array on each-block commit (#18879)

  • fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

  • fix: error when using let: directives on a component with a children snippet (#18873)

  • fix: ignore stale boundary reset callbacks (#18886)

  • fix: handle deferred transitions aborted before initialization (#18776)

  • fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

  • fix: preserve dynamic element connections during hydration (#18855)

Commits
  • 10fdca7 Version Packages (#18858)
  • c580b38 fix: prevent duplicate derived subscriptions on reconnect (#18899)
  • 3f885e3 fix: don't throw state_unsafe_mutation when the focused element is removed wi...
  • fe4fb46 fix: error if {:else} is followed by another {:else} or {:else if ...} ...
  • 179f66b fix: don't create async deriveds for a component destroyed while waiting for ...
  • 79a0c0d fix: attach event handlers that are assigned after a top-level await in pro...
  • 14136f8 fix: print {#await} blocks that only have a pending branch (#18908)
  • 5cbdd34 fix: recover when an unexpected node replaces a nested boundary comment (#18925)
  • 7e83327 fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)
  • 020242d fix: ensure hydration state restoration for custom element attribute updates ...
  • Additional commits viewable in compare view

Updates svelte-meta-tags from 5.0.2 to 5.0.3

Release notes

Sourced from svelte-meta-tags's releases.

svelte-meta-tags@5.0.3

Patch Changes

  • a3f9700: fix: update schema-dts to ^2.1.0. The schema prop of JsonLd now accepts the schema.org v30.1 types, and typescript is no longer required as a peer dependency (via schema-dts-lib), so projects without TypeScript no longer need to add it under strict peer-dependency enforcement.
Changelog

Sourced from svelte-meta-tags's changelog.

5.0.3

Patch Changes

  • a3f9700: fix: update schema-dts to ^2.1.0. The schema prop of JsonLd now accepts the schema.org v30.1 types, and typescript is no longer required as a peer dependency (via schema-dts-lib), so projects without TypeScript no longer need to add it under strict peer-dependency enforcement.
Commits

Updates typescript-eslint from 8.71.0 to 8.71.1

Release notes

Sourced from typescript-eslint's releases.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

  • eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
  • eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
  • eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
  • eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
  • eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
  • eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
  • project-service: throttle cleanup when opening files (#12934)
  • type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vite from 8.3.2 to 8.3.4

Release notes

Sourced from vite's releases.

v8.3.4

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (#23646) (3d67486)

Code Refactoring

  • bundled-dev: import CSS HMR helpers from /@vite/client (#23674) (182f5b2)

v8.3.3

Bug Fixes

  • deps: update launch-editor to v2.14.2 (#23654) (22fd1d5)
  • html: filename passed to transformIndexHtml should not include queries (#23653) (7dafd8e)
  • server: check fs.serve for ?vite-wasm-instance (#23655) (ba8b7ab)
  • server: store ids to safeModulePaths rather than URLs (#23656) (c3e06f9)
Changelog

Sourced from vite's changelog.

8.3.4 (2026-10-08)

Features

  • bundled-dev: support import.meta.hot.acceptExports (#23463) (bc0f21c)

Bug Fixes

  • avoid mutating hmr defaults (fix #23575) (#23576) (574d5e3)
  • build: correct preloads when chunkImportMap is enabled with non-root base (#23698) (2a8c0f0)
  • build: wait for in-flight stylesheets in preload helper (fix #23652) (#23662) (036b745)
  • bundled-dev: serve /@vite/client and stub @vite/env (#23664) (5afc5a8)
  • client: skip rewriting unchanged adopted styles (#23697) (fa71469)
  • css: resolve imported preprocessors from their file path with lightningcss (#23688) (cf52011)
  • deps: update all non-major dependencies (#23648) (8a4c19c)
  • deps: update rolldown-related dependencies (#23649) (794516d)
  • dev: a restart requested during a restart used to be dropped (fix #23392) (#23484) (70d56ea)
  • don't treat modules ending with js-like query as js (#23687) (fcb6f12)
  • html: avoid adding filesystem root to watcher (#23689) (3a7f2ae)
  • html: skip caching CSS of chunks in a cycle (fix #23628) (#23636) (15d82f7)
  • optimizer: scan deep imports with custom extensions (#23678) (8579189)
  • remove input option unescaping for now (#23694) (facc2fb)
  • server: match static aliases on path boundaries (#23643) (b28db28)
  • watcher: normalize file before root check in ensureWatchedFile (#23673) (12bb28c)

Performance Improvements

  • module-runner: skip cloning call sites that have no source map (

Bumps the development-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [@inlang/paraglide-js](https://github.com/opral/paraglide-js) | `2.25.4` | `2.27.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.23.0` | `3.23.1` |
| [playwright](https://github.com/microsoft/playwright) | `1.63.0` | `1.64.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.57.1` | `5.57.2` |
| [svelte-meta-tags](https://github.com/oekazuma/svelte-meta-tags/tree/HEAD/packages/svelte-meta-tags) | `5.0.2` | `5.0.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.0` | `8.71.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.2` | `8.3.4` |


Updates `@inlang/paraglide-js` from 2.25.4 to 2.27.0
- [Changelog](https://github.com/opral/paraglide-js/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opral/paraglide-js/commits)

Updates `@playwright/test` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

Updates `eslint-plugin-svelte` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.23.1/packages/eslint-plugin-svelte)

Updates `playwright` from 1.63.0 to 1.64.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.63.0...v1.64.0)

Updates `svelte` from 5.57.1 to 5.57.2
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.2/packages/svelte)

Updates `svelte-meta-tags` from 5.0.2 to 5.0.3
- [Release notes](https://github.com/oekazuma/svelte-meta-tags/releases)
- [Changelog](https://github.com/oekazuma/svelte-meta-tags/blob/main/packages/svelte-meta-tags/CHANGELOG.md)
- [Commits](https://github.com/oekazuma/svelte-meta-tags/commits/svelte-meta-tags@5.0.3/packages/svelte-meta-tags)

Updates `typescript-eslint` from 8.71.0 to 8.71.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.1/packages/typescript-eslint)

Updates `vite` from 8.3.2 to 8.3.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.4/packages/vite)

---
updated-dependencies:
- dependency-name: "@inlang/paraglide-js"
  dependency-version: 2.27.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: "@playwright/test"
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: playwright
  dependency-version: 1.64.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: svelte
  dependency-version: 5.57.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: svelte-meta-tags
  dependency-version: 5.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.71.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: vite
  dependency-version: 8.3.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@vercel

vercel Bot commented Oct 13, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
qa-studio Ready Ready Preview Oct 13, 2026 3:05am UTC

Request Review

@dependabot @github

dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: QAStudio-Dev/studio/.coderabbit.yaml
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 5053b9a1-a6d9-487c-94e0-5f5cacd00431

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Oct 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/development-dependencies-1601b3cc78 branch October 19, 2026 09:22

This branch was successfully deployed

1 active deployment
Preview — bcc481ab Deployed Oct 13, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants