Skip to content

Bump the minor-patch-updates group across 1 directory with 23 updates#153

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-patch-updates-017d66a9c6
Closed

Bump the minor-patch-updates group across 1 directory with 23 updates#153
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/minor-patch-updates-017d66a9c6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps the minor-patch-updates group with 23 updates in the / directory:

Package From To
@sentry/browser 10.34.0 10.39.0
@sentry/svelte 10.34.0 10.39.0
@sentry/sveltekit 10.34.0 10.39.0
@sentry/vite-plugin 4.6.2 4.9.1
firebase 12.8.0 12.9.0
tailwindcss 4.1.18 4.2.0
@playwright/test 1.57.0 1.58.2
@sveltejs/kit 2.50.0 2.53.0
@tailwindcss/vite 4.1.18 4.2.0
@tsconfig/svelte 5.0.6 5.0.8
@typescript-eslint/eslint-plugin 8.53.0 8.56.0
@typescript-eslint/parser 8.53.0 8.56.0
@vitest/coverage-v8 4.0.17 4.0.18
@vitest/ui 4.0.17 4.0.18
eslint-plugin-svelte 3.14.0 3.15.0
firebase-tools 15.3.1 15.7.0
msw 2.12.7 2.12.10
prettier 3.8.0 3.8.1
prettier-plugin-svelte 3.4.1 3.5.0
svelte 5.47.0 5.53.3
svelte-check 4.3.5 4.4.3
typescript-eslint 8.53.0 8.56.0
vitest 4.0.17 4.0.18

Updates @sentry/browser from 10.34.0 to 10.39.0

Release notes

Sourced from @​sentry/browser's releases.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/browser's changelog.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

... (truncated)

Commits
  • ab54c5c Make @sentry/opentelemetry not a peer dep in node-core
  • f822e69 chore: Lint lerna.json
  • c4708d2 release: 10.39.0
  • b5e3094 chore: Revert to lerna v8 (#19294)
  • 9dea581 Merge pull request #19281 from getsentry/prepare-release/10.39.0
  • 12e467f meta(changelog): Update changelog for 10.39.0
  • d7df7d4 ref(sveltekit): Use untrack to read route id without invalidation (#19272)
  • 24b2ef2 fix(sveltekit): Detect used adapter via svelte.config.js (#19270)
  • e051be4 feat(node-core): Add outgoing fetch trace propagation to light mode (#19262)
  • eaf297f ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#19258)
  • Additional commits viewable in compare view

Updates @sentry/svelte from 10.34.0 to 10.39.0

Release notes

Sourced from @​sentry/svelte's releases.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/svelte's changelog.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

... (truncated)

Commits
  • ab54c5c Make @sentry/opentelemetry not a peer dep in node-core
  • f822e69 chore: Lint lerna.json
  • c4708d2 release: 10.39.0
  • b5e3094 chore: Revert to lerna v8 (#19294)
  • 9dea581 Merge pull request #19281 from getsentry/prepare-release/10.39.0
  • 12e467f meta(changelog): Update changelog for 10.39.0
  • d7df7d4 ref(sveltekit): Use untrack to read route id without invalidation (#19272)
  • 24b2ef2 fix(sveltekit): Detect used adapter via svelte.config.js (#19270)
  • e051be4 feat(node-core): Add outgoing fetch trace propagation to light mode (#19262)
  • eaf297f ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#19258)
  • Additional commits viewable in compare view

Updates @sentry/sveltekit from 10.34.0 to 10.39.0

Release notes

Sourced from @​sentry/sveltekit's releases.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

Other Changes

... (truncated)

Changelog

Sourced from @​sentry/sveltekit's changelog.

10.39.0

Important Changes

  • feat(tanstackstart-react): Auto-instrument server function middleware (#19001)

    The sentryTanstackStart Vite plugin now automatically instruments middleware in createServerFn().middleware([...]) calls. This captures performance data without requiring manual wrapping with wrapMiddlewaresWithSentry().

  • feat(nextjs): New experimental automatic vercel cron monitoring (#19192)

    Setting _experimental.vercelCronMonitoring to true in your Sentry configuration will automatically create Sentry cron monitors for your Vercel Cron Jobs.

    Please note that this is an experimental unstable feature and subject to change.

    // next.config.ts
    export default withSentryConfig(nextConfig, {
      _experimental: {
        vercelCronMonitoring: true,
      },
    });
  • feat(node-core): Add node-core/light (#18502)

    This release adds a new light-weight @sentry/node-core/light export to @sentry/node-core. The export acts as a light-weight SDK that does not depend on OpenTelemetry and emits no spans.

    Use this SDK when:

    • You only need error tracking, logs or metrics without tracing data (no spans)
    • You want to minimize bundle size and runtime overhead
    • You don't need spans emitted by OpenTelemetry instrumentation

    It supports error tracking and reporting, logs, metrics, automatic request isolation (requires Node.js 22+) and basic tracing via our Sentry.startSpan* APIs.

    Install the SDK by running

    npm install @sentry/node-core

    and add Sentry at the top of your application's entry file:

    import * as Sentry from '@sentry/node-core/light';
    Sentry.init({
    dsn: 'DSN',
    });

... (truncated)

Commits
  • ab54c5c Make @sentry/opentelemetry not a peer dep in node-core
  • f822e69 chore: Lint lerna.json
  • c4708d2 release: 10.39.0
  • b5e3094 chore: Revert to lerna v8 (#19294)
  • 9dea581 Merge pull request #19281 from getsentry/prepare-release/10.39.0
  • 12e467f meta(changelog): Update changelog for 10.39.0
  • d7df7d4 ref(sveltekit): Use untrack to read route id without invalidation (#19272)
  • 24b2ef2 fix(sveltekit): Detect used adapter via svelte.config.js (#19270)
  • e051be4 feat(node-core): Add outgoing fetch trace propagation to light mode (#19262)
  • eaf297f ref(core): Move shouldPropagateTraceForUrl from opentelemetry to core (#19258)
  • Additional commits viewable in compare view

Updates @sentry/vite-plugin from 4.6.2 to 4.9.1

Release notes

Sourced from @​sentry/vite-plugin's releases.

4.9.1

New Features ✨

Internal Changes 🔧

4.9.0

New Features ✨

4.8.0

New Features ✨

4.7.0

  • docs: Add RELEASE.md to document release process (#834)
  • feat: Combine injection plugins (#844)
  • fix(plugin-manager): Enable "rejectOnError" in debug (#837)
  • fix(plugin-manager): Respect sourcemap.ignore values for injecting debugIDs (#836)
  • fix(vite): Skip HTML injection for MPA but keep it for SPA (#843)
  • chore: Use pull_request_target for changelog preview (#842)
  • ci(release): Switch from action-prepare-release to Craft (#831)
  • test: Ensure Debug IDs match (#840)
Changelog

Sourced from @​sentry/vite-plugin's changelog.

4.9.1

New Features ✨

Internal Changes 🔧

4.9.0

New Features ✨

4.8.0

New Features ✨

4.7.0

  • docs: Add RELEASE.md to document release process (#834)
  • feat: Combine injection plugins (#844)
  • fix(plugin-manager): Enable "rejectOnError" in debug (#837)
  • fix(plugin-manager): Respect sourcemap.ignore values for injecting debugIDs (#836)
  • fix(vite): Skip HTML injection for MPA but keep it for SPA (#843)
  • chore: Use pull_request_target for changelog preview (#842)
  • ci(release): Switch from action-prepare-release to Craft (#831)
  • test: Ensure Debug IDs match (#840)
Commits

Updates firebase from 12.8.0 to 12.9.0

Release notes

Sourced from firebase's releases.

firebase@12.9.0

For more detailed release notes, see Firebase JavaScript SDK Release Notes.

What's Changed

@​firebase/ai@​2.8.0

Minor Changes

  • 8123231 #9461 - AI Logic: Extend the LiveSession.receive() return types to include a LiveServiceGoingAwayNotice which signifies that the service will soon close the session.

  • f9254b6 #9475 - Remove "preview" tags from code execution and URL context documentation.

  • 2e74329 #9462 - Add params on UsageMetadata that provide cache-related usage data when the implicit caching feature is used.

Patch Changes

  • 691a506 #9469 - Internal: Add tag to log requests made to cloud while in hybrid mode.

firebase@12.9.0

Minor Changes

  • 8123231 #9461 - AI Logic: Extend the LiveSession.receive() return types to include a LiveServiceGoingAwayNotice which signifies that the service will soon close the session.

  • f9254b6 #9475 - Remove "preview" tags from code execution and URL context documentation.

  • 2e74329 #9462 - Add params on UsageMetadata that provide cache-related usage data when the implicit caching feature is used.

  • 08e3acd #9459 - Add support for regexFind and regexFindAll Pipeline expressions.

Patch Changes

@​firebase/firestore@​4.11.0

Minor Changes

  • 08e3acd #9459 - Add support for regexFind and regexFindAll Pipeline expressions.

Patch Changes

... (truncated)

Commits
  • 6f540dd Version Packages (#9481)
  • 988ff56 Merge main into release
  • f9254b6 feat(ai): Remove preview tags from code execution and URL context features (#...
  • 8123231 feat(ai) Live Service Going Away notifications (#9461)
  • 691a506 feat(ai): Add tag to log requests made to cloud models while in hybrid mode (...
  • 65a553b fix(firestore): log a warning when databaseId is not found (#9472)
  • 2e74329 feat(ai): implicit caching feature (#9462)
  • c4a3a56 test(firestore): silence stack trace output from run_tests.ts (#9454)
  • f9aaeca test(firestore): Accept grep as an argument to run_tests.ts (#9452)
  • 08e3acd feat(firestore): add support for regexFind and regexFindAll (#9459)
  • Additional commits viewable in compare view

Updates tailwindcss from 4.1.18 to 4.2.0

Release notes

Sourced from tailwindcss's releases.

v4.2.0

Added

  • Add mauve, olive, mist, and taupe color palettes to the default theme (#19627)
  • Add @tailwindcss/webpack package to run Tailwind CSS as a webpack plugin (#19610)
  • Add pbs-* and pbe-* utilities for padding-block-start and padding-block-end (#19601)
  • Add mbs-* and mbe-* utilities for margin-block-start and margin-block-end (#19601)
  • Add scroll-pbs-* and scroll-pbe-* utilities for scroll-padding-block-start and scroll-padding-block-end (#19601)
  • Add scroll-mbs-* and scroll-mbe-* utilities for scroll-margin-block-start and scroll-margin-block-end (#19601)
  • Add border-bs-* and border-be-* utilities for border-block-start and border-block-end (#19601)
  • Add inline-*, min-inline-*, max-inline-* utilities for inline-size, min-inline-size, and max-inline-size (#19612)
  • Add block-*, min-block-*, max-block-* utilities for block-size, min-block-size, and max-block-size (#19612)
  • Add inset-s-*, inset-e-*, inset-bs-*, inset-be-* utilities for inset-inline-start, inset-inline-end, inset-block-start, and inset-block-end (#19613)
  • Add font-features-* utility for font-feature-settings (#19623)

Fixed

  • Prevent double @supports wrapper for color-mix values (#19450)
  • Allow whitespace around @source inline() argument (#19461)
  • Emit comment when source maps are saved to files when using @tailwindcss/cli (#19447)
  • Detect utilities containing capital letters followed by numbers (#19465)
  • Fix class extraction for Rails' strict locals (#19525)
  • Align @utility name validation with Oxide scanner rules (#19524)
  • Fix infinite loop when using @variant inside @custom-variant (#19633)
  • Allow multiples of .25 in aspect-* fractions (e.g. aspect-8.5/11) (#19688)
  • Ensure changes to external files listed via @source trigger a full page reload when using @tailwindcss/vite (#19670)
  • Improve performance of Oxide scanner in bigger projects by reducing file system walks (#19632)
  • Ensure import aliases in Astro v5 work without crashing when using @tailwindcss/vite (#19677)
  • Allow escape characters in @utility names to improve support with formatters such as Biome (#19626)
  • Fix incorrect canonicalization results when canonicalizing multiple times (#19675)
  • Add .jj to default ignored content directories (#19687)

Deprecated

  • Deprecate start-* and end-* utilities in favor of inset-s-* and inset-e-* utilities (#19613)
Changelog

Sourced from tailwindcss's changelog.

[4.2.0] - 2026-02-18

Added

  • Add mauve, olive, mist, and taupe color palettes to the default theme (#19627)
  • Add @tailwindcss/webpack package to run Tailwind CSS as a webpack plugin (#19610)
  • Add pbs-* and pbe-* utilities for padding-block-start and padding-block-end (#19601)
  • Add mbs-* and mbe-* utilities for margin-block-start and margin-block-end (#19601)
  • Add scroll-pbs-* and scroll-pbe-* utilities for scroll-padding-block-start and scroll-padding-block-end (#19601)
  • Add scroll-mbs-* and scroll-mbe-* utilities for scroll-margin-block-start and scroll-margin-block-end (#19601)
  • Add border-bs-* and border-be-* utilities for border-block-start and border-block-end (#19601)
  • Add inline-*, min-inline-*, max-inline-* utilities for inline-size, min-inline-size, and max-inline-size (#19612)
  • Add block-*, min-block-*, max-block-* utilities for block-size, min-block-size, and max-block-size (#19612)
  • Add inset-s-*, inset-e-*, inset-bs-*, inset-be-* utilities for inset-inline-start, inset-inline-end, inset-block-start, and inset-block-end (#19613)
  • Add font-features-* utility for font-feature-settings (#19623)

Fixed

  • Prevent double @supports wrapper for color-mix values (#19450)
  • Allow whitespace around @source inline() argument (#19461)
  • Emit comment when source maps are saved to files when using @tailwindcss/cli (#19447)
  • Detect utilities containing capital letters followed by numbers (#19465)
  • Fix class extraction for Rails' strict locals (#19525)
  • Align @utility name validation with Oxide scanner rules (#19524)
  • Fix infinite loop when using @variant inside @custom-variant (#19633)
  • Allow multiples of .25 in aspect-* fractions (e.g. aspect-8.5/11) (#19688)
  • Ensure changes to external files listed via @source trigger a full page reload when using @tailwindcss/vite (#19670)
  • Improve performance of Oxide scanner in bigger projects by reducing file system walks (#19632)
  • Ensure import aliases in Astro v5 work without crashing when using @tailwindcss/vite (#19677)
  • Allow escape characters in @utility names to improve support with formatters such as Biome (#19626)
  • Fix incorrect canonicalization results when canonicalizing multiple times (#19675)
  • Add .jj to default ignored content directories (#19687)

Deprecated

  • Deprecate start-* and end-* utilities in favor of inset-s-* and inset-e-* utilities (#19613)
Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for tailwindcss since your current version.


Updates @playwright/test from 1.57.0 to 1.58.2

Release notes

Sourced from @​playwright/test's releases.

v1.58.2

Highlights

#39121 fix(trace viewer): make paths via stdin work #39129 fix: do not force swiftshader on chromium mac

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

v1.58.1

Highlights

#39036 fix(msedge): fix local network permissions #39037 chore: update cft download location #38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

v1.58.0

📣 Playwright CLI+SKILLs 📣

We are adding a new token-efficient CLI mode of operation to Playwright with the skills located at playwright-cli. This brings the long-awaited official SKILL-focused CLI mode to our story and makes it more coding agent-friendly.

It is the first snapshot with the essential command set (which is already larger than the original MCP!), but we expect it to grow rapidly. Unlike the token use, that one we expect to go down since snapshots are no longer forced into the LLM!

Timeline

If you're using merged reports, the HTML report Speedboard tab now shows the Timeline:

Timeline chart in the HTML report

UI Mode and Trace Viewer Improvements

  • New 'system' theme option follows your OS dark/light mode preference
  • Search functionality (Cmd/Ctrl+F) is now available in code editors
  • Network details panel has been reorganized for better usability
  • JSON responses are now automatically formatted for readability

Thanks to @​cpAdm for contributing these improvements!

Miscellaneous

browserType.connectOverCDP() now accepts an isLocal option. When set to true, it tells Playwright that it runs on the same host as the CDP server, enabling file system optimizations.

Breaking Changes ⚠️

  • Removed _react and _vue selectors. See locators guide for alternatives.

... (truncated)

Commits

Updates @sveltejs/kit from 2.50.0 to 2.53.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.53.0

Minor Changes

  • feat: support Vite 8 (#15024)

Patch Changes

  • fix: remove event listeners on form attachment cleanup (#15286)

  • fix: apply queries refreshed in a form remote function when a redirect is thrown (#15362)

@​sveltejs/kit@​2.52.2

Patch Changes

  • fix: validate form file information to prevent amplification attacks (3e607b3)

  • chore: upgrade devalue and svelte (#15339)

  • fix: parse file offset table more strictly (f47c01b)

@​sveltejs/kit

Bumps the minor-patch-updates group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@sentry/browser](https://github.com/getsentry/sentry-javascript) | `10.34.0` | `10.39.0` |
| [@sentry/svelte](https://github.com/getsentry/sentry-javascript) | `10.34.0` | `10.39.0` |
| [@sentry/sveltekit](https://github.com/getsentry/sentry-javascript) | `10.34.0` | `10.39.0` |
| [@sentry/vite-plugin](https://github.com/getsentry/sentry-javascript-bundler-plugins) | `4.6.2` | `4.9.1` |
| [firebase](https://github.com/firebase/firebase-js-sdk) | `12.8.0` | `12.9.0` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.1.18` | `4.2.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.57.0` | `1.58.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.50.0` | `2.53.0` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.1.18` | `4.2.0` |
| [@tsconfig/svelte](https://github.com/tsconfig/bases/tree/HEAD/bases) | `5.0.6` | `5.0.8` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.53.0` | `8.56.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.53.0` | `8.56.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.17` | `4.0.18` |
| [@vitest/ui](https://github.com/vitest-dev/vitest/tree/HEAD/packages/ui) | `4.0.17` | `4.0.18` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.14.0` | `3.15.0` |
| [firebase-tools](https://github.com/firebase/firebase-tools) | `15.3.1` | `15.7.0` |
| [msw](https://github.com/mswjs/msw) | `2.12.7` | `2.12.10` |
| [prettier](https://github.com/prettier/prettier) | `3.8.0` | `3.8.1` |
| [prettier-plugin-svelte](https://github.com/sveltejs/prettier-plugin-svelte) | `3.4.1` | `3.5.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.47.0` | `5.53.3` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.5` | `4.4.3` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.53.0` | `8.56.0` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.17` | `4.0.18` |



Updates `@sentry/browser` from 10.34.0 to 10.39.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.34.0...10.39.0)

Updates `@sentry/svelte` from 10.34.0 to 10.39.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.34.0...10.39.0)

Updates `@sentry/sveltekit` from 10.34.0 to 10.39.0
- [Release notes](https://github.com/getsentry/sentry-javascript/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript/blob/develop/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript@10.34.0...10.39.0)

Updates `@sentry/vite-plugin` from 4.6.2 to 4.9.1
- [Release notes](https://github.com/getsentry/sentry-javascript-bundler-plugins/releases)
- [Changelog](https://github.com/getsentry/sentry-javascript-bundler-plugins/blob/main/CHANGELOG.md)
- [Commits](getsentry/sentry-javascript-bundler-plugins@4.6.2...4.9.1)

Updates `firebase` from 12.8.0 to 12.9.0
- [Release notes](https://github.com/firebase/firebase-js-sdk/releases)
- [Changelog](https://github.com/firebase/firebase-js-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/firebase/firebase-js-sdk/compare/firebase@12.8.0...firebase@12.9.0)

Updates `tailwindcss` from 4.1.18 to 4.2.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.0/packages/tailwindcss)

Updates `@playwright/test` from 1.57.0 to 1.58.2
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.57.0...v1.58.2)

Updates `@sveltejs/kit` from 2.50.0 to 2.53.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.53.0/packages/kit)

Updates `@tailwindcss/vite` from 4.1.18 to 4.2.0
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.2.0/packages/@tailwindcss-vite)

Updates `@tsconfig/svelte` from 5.0.6 to 5.0.8
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `@typescript-eslint/eslint-plugin` from 8.53.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.53.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/parser)

Updates `@vitest/coverage-v8` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8)

Updates `@vitest/ui` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/ui)

Updates `eslint-plugin-svelte` from 3.14.0 to 3.15.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.15.0/packages/eslint-plugin-svelte)

Updates `firebase-tools` from 15.3.1 to 15.7.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v15.3.1...v15.7.0)

Updates `msw` from 2.12.7 to 2.12.10
- [Release notes](https://github.com/mswjs/msw/releases)
- [Changelog](https://github.com/mswjs/msw/blob/main/CHANGELOG.md)
- [Commits](mswjs/msw@v2.12.7...v2.12.10)

Updates `prettier` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.0...3.8.1)

Updates `prettier-plugin-svelte` from 3.4.1 to 3.5.0
- [Changelog](https://github.com/sveltejs/prettier-plugin-svelte/blob/v3.5.0/CHANGELOG.md)
- [Commits](sveltejs/prettier-plugin-svelte@v3.4.1...v3.5.0)

Updates `svelte` from 5.47.0 to 5.53.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.53.3/packages/svelte)

Updates `svelte-check` from 4.3.5 to 4.4.3
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.5...svelte-check@4.4.3)

Updates `typescript-eslint` from 8.53.0 to 8.56.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.56.0/packages/typescript-eslint)

Updates `vitest` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

---
updated-dependencies:
- dependency-name: "@sentry/browser"
  dependency-version: 10.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@sentry/svelte"
  dependency-version: 10.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@sentry/sveltekit"
  dependency-version: 10.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@sentry/vite-plugin"
  dependency-version: 4.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: firebase
  dependency-version: 12.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: tailwindcss
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@playwright/test"
  dependency-version: 1.58.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.53.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@tsconfig/svelte"
  dependency-version: 5.0.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: "@vitest/ui"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: firebase-tools
  dependency-version: 15.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: msw
  dependency-version: 2.12.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: prettier
  dependency-version: 3.8.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
- dependency-name: prettier-plugin-svelte
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: svelte
  dependency-version: 5.53.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: svelte-check
  dependency-version: 4.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: typescript-eslint
  dependency-version: 8.56.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-patch-updates
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 23, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 26, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 26, 2026
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/minor-patch-updates-017d66a9c6 branch February 26, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants