chore(deps): update non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
@sveltejs/kit (source)	^2.49.0 -> ^2.49.1			devDependencies	patch	2.49.2
eslint-plugin-svelte (source)	^3.13.0 -> ^3.13.1			devDependencies	patch
peter-evans/create-pull-request (changelog)	84ae59a -> 22a9089			action	digest
prettier (source)	^3.7.1 -> ^3.7.4			devDependencies	patch
svelte (source)	^5.45.2 -> ^5.45.6			devDependencies	patch	5.45.8 (+1)
turbo (source)	^2.6.1 -> ^2.6.3			devDependencies	patch
typescript-eslint (source)	^8.48.0 -> ^8.48.1			devDependencies	patch	8.49.0
vite (source)	^7.2.4 -> ^7.2.7			devDependencies	patch
vitest (source)	^4.0.14 -> ^4.0.15			devDependencies	patch

---

Release Notes

sveltejs/kit (@​sveltejs/kit)

v2.49.1

Compare Source

Patch Changes

• fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#​15013)

• fix: TypeError when doing response.clone() in page load (#​15005)

sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)

v3.13.1

Compare Source

Patch Changes

• #​1437 89d030d Thanks @​ota-meshi! - fix(svelte/indent): crash when using ts import type

• #​1440 a87e40b Thanks @​baseballyama! - fix(prefer-destructured-store-props): handle runes properly

• #​1438 817b137 Thanks @​baseballyama! - fix: Support experimental.async compiler option

prettier/prettier (prettier)

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

sveltejs/svelte (svelte)

v5.45.6

Compare Source

Patch Changes

• fix: don't issue a11y warning for <video> without captions if it has no src (#​17311)

• fix: add srcObject to permitted <audio>/<video> attributes (#​17310)

v5.45.5

Compare Source

Patch Changes

• fix: correctly reconcile each blocks after outroing branches are resumed (#​17258)

• fix: destroy each items after siblings are resumed (#​17258)

v5.45.4

Compare Source

Patch Changes

• chore: move DOM-related effect properties to effect.nodes (#​17293)

• fix: allow $props.id() to occur after an await (#​17285)

• fix: keep reactions up to date even when read outside of effect (#​17295)

v5.45.3

Compare Source

Patch Changes

• add props to state_referenced_locally (#​17266)

• fix: preserve node locations for better sourcemaps (#​17269)

• fix: handle cross-realm Promises in hydratable (#​17284)

vercel/turborepo (turbo)

v2.6.3

Compare Source

v2.6.2

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.48.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v7.2.7

Compare Source

vitest-dev/vitest (vitest)

v4.0.15

Compare Source

   🚀 Experimental Features

• cache: Add opt-out on a plugin level, fix internal root cache  -  by @​sheremet-va in #​9154 (a68f7)
• reporters: Print import duration breakdown  -  by @​sheremet-va in #​9105 (122ff)

   🐞 Bug Fixes

• Keep built-in id as is in bun and deno  -  by @​sheremet-va in #​9117 (075ab)
• Use optimizeDeps.rolldownOptions to fix depreated warning + fix ssr.external: true  -  by @​hi-ogawa in #​9121 (fd8bd)
• Fix external behavior with deps.optimizer  -  by @​hi-ogawa in #​9125 (4c754)
• Very minor typo in "Chrome DevTools Protocol"  -  by @​HowToTestFrontend in #​9146 (20997)
• browser: Run toMatchScreenshot only once when used with expect.element  -  by @​macarie in #​9132 (0d2e7)
• coverage: Istanbul provider to not break source maps  -  by @​AriPerkkio in #​9040 (e4ca9)
• deps: Update dependency tinyexec to v1  -  in #​9122 (fd786)
• docs: Remove --browser.provider from docs  -  by @​sheremet-va in #​9115 (120b3)
• expect: Preserve currentTestName in extended matchers  -  by @​macarie in #​9106 (e4345)
• pool: Terminate workers on CTRL+c forceful exits  -  by @​AriPerkkio in #​9140 (d57d8)
• reporters: Show project in github reporter  -  by @​sheremet-va in #​9138 (bb65e)
• spy: Do not mock overriden method, if parent was automocked  -  by @​sheremet-va in #​9116 (1a246)
• web-worker: MessagePort objects passed to Worker.postMessage work when clone === "native"  -  by @​whitphx in #​9118 (deee8)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
sanity-sveltekit	Ready	Preview	Comment	Dec 11, 2025 5:09am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​typescript-eslint@​8.48.0 ⏵ 8.49.0
	npm/​vitest@​4.0.14 ⏵ 4.0.15	-1		+1	-1
	npm/​@​sveltejs/​kit@​2.49.0 ⏵ 2.49.2	+1		+1	+2
	npm/​vite@​7.2.6 ⏵ 7.2.7	+1		+1	+1
	npm/​turbo@​2.6.1 ⏵ 2.6.3			-1	+2
	npm/​svelte@​5.45.2 ⏵ 5.45.8	+1		+1
	npm/​prettier@​3.7.3 ⏵ 3.7.4	+1		+1	-1
	npm/​eslint-plugin-svelte@​3.13.0 ⏵ 3.13.1				+4

View full report