Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/cookie

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update pnpm to v10.12.1

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency cookie to ^0.7.0 [security]
• chore(deps): update dependency @types/cookie to v1
• chore(deps): update dependency svelte to v5

Detected dependencies

github-actions

.github/workflows/audit.yml

• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• node 22.x

.github/workflows/ci.yml

• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4

.github/workflows/release.yml

• actions/checkout v4
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• changesets/action v1
• node 22.x

npm

package.json

• @changesets/cli ^2.27.11
• @sveltejs/eslint-config ^8.1.0
• @svitejs/changesets-changelog-github-compact ^1.1.0
• eslint ^9.6.0
• prettier ^3.1.1
• prettier-plugin-svelte ^3.1.2
• typescript-eslint ^8.24.0
• pnpm >=9.0.0
• pnpm 10.11.1

packages/adapter-auto/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• @sveltejs/kit ^2.0.0

packages/adapter-cloudflare/package.json

• @cloudflare/workers-types ^4.20250507.0
• worktop 0.8.0-next.18
• @sveltejs/kit ^2.0.0
• wrangler ^4.0.0

packages/adapter-cloudflare/test/apps/pages/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• vite ^6.2.7
• wrangler ^4.14.3

packages/adapter-cloudflare/test/apps/pages/server-side-dep/package.json

packages/adapter-cloudflare/test/apps/workers/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• vite ^6.2.7
• wrangler ^4.14.3

packages/adapter-cloudflare/test/apps/workers/server-side-dep/package.json

packages/adapter-netlify/package.json

• @iarna/toml ^2.2.5
• set-cookie-parser ^2.6.0
• @netlify/functions ^4.0.0
• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• @sveltejs/vite-plugin-svelte ^5.0.1
• @types/set-cookie-parser ^2.4.7
• @sveltejs/kit ^2.4.0

packages/adapter-node/package.json

• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• @polka/url ^1.0.0-next.28
• @sveltejs/vite-plugin-svelte ^5.0.1
• polka ^1.0.0-next.28
• sirv ^3.0.0
• @sveltejs/kit ^2.4.0

packages/adapter-static/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• sirv ^3.0.0
• svelte ^5.23.1
• vite ^6.2.7
• @sveltejs/kit ^2.0.0

packages/adapter-static/test/apps/prerendered/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• sirv-cli ^3.0.0
• svelte ^5.23.1
• vite ^6.2.7

packages/adapter-static/test/apps/spa/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• sirv-cli ^3.0.0
• svelte ^5.23.1
• vite ^6.2.7

packages/adapter-vercel/package.json

• @vercel/nft ^0.29.2
• @sveltejs/vite-plugin-svelte ^5.0.1
• @sveltejs/kit ^2.4.0

packages/amp/package.json

• @sveltejs/kit ^1.0.0 || ^2.0.0

packages/create-svelte/package.json

packages/enhanced-img/package.json

• magic-string ^0.30.5
• sharp ^0.34.1
• svelte-parse-markup ^0.1.5
• vite-imagetools ^7.1.0
• zimmerframe ^1.1.2
• @sveltejs/vite-plugin-svelte ^5.0.1
• @types/estree ^1.0.5
• svelte ^5.23.1
• vite ^6.2.7
• @sveltejs/vite-plugin-svelte ^5.0.0
• svelte ^5.0.0
• vite >= 5.0.0

packages/kit/package.json

• @sveltejs/acorn-typescript ^1.0.5
• @types/cookie ^0.6.0
• acorn ^8.14.1
• cookie ^0.6.0
• devalue ^5.1.0
• esm-env ^1.2.2
• kleur ^4.1.5
• magic-string ^0.30.5
• mrmime ^2.0.0
• sade ^1.8.1
• set-cookie-parser ^2.6.0
• sirv ^3.0.0
• vitefu ^1.0.6
• @sveltejs/vite-plugin-svelte ^5.0.1
• @types/connect ^3.4.38
• @types/set-cookie-parser ^2.4.7
• dts-buddy ^0.6.1
• svelte ^5.23.1
• svelte-preprocess ^6.0.0
• vite ^6.2.7
• @sveltejs/vite-plugin-svelte ^3.0.0 || ^4.0.0-next.1 || ^5.0.0
• svelte ^4.0.0 || ^5.0.0-next.0
• vite ^5.0.3 || ^6.0.0
• node >=18.13

packages/kit/src/core/sync/write_types/test/package.json

packages/kit/test/apps/amp/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• dropcss ^1.0.16
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/basics/_test_dependencies/redirect-pkg/package.json

packages/kit/test/apps/basics/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/dev-only/_test_dependencies/cjs-only/package.json

packages/kit/test/apps/dev-only/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/embed/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/hash-based-routing/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/no-ssr/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/options-2/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/options/package.json

• @fontsource/libre-barcode-128-text ^5.1.0
• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/prerendered-app-error-pages/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/apps/writes/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/prerender-entry-generator-mismatch/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/prerenderable-incorrect-fragment/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/prerenderable-not-prerendered/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/private-dynamic-env-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/private-dynamic-env/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/private-static-env-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/private-static-env/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• cross-env ^7.0.3
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/server-only-folder-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/server-only-folder/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/server-only-module-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/server-only-module/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/service-worker-dynamic-public-env/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/service-worker-private-env/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/apps/syntax-error/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/build-errors/package.json

packages/kit/test/prerendering/basics/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/prerendering/options/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/kit/test/prerendering/paths-base/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

packages/package/package.json

• chokidar ^4.0.3
• kleur ^4.1.5
• sade ^1.8.1
• semver ^7.5.4
• svelte2tsx ~0.7.33
• @sveltejs/vite-plugin-svelte ^5.0.1
• @types/semver ^7.5.6
• prettier ^3.1.1
• svelte ^5.23.1
• svelte-preprocess ^6.0.0
• uvu ^0.5.6
• svelte ^3.44.0 || ^4.0.0 || ^5.0.0-next.1
• node ^16.14 || >=18

packages/package/test/errors/no-lib-folder/package.json

packages/package/test/fixtures/assets/package.json

• svelte ^4.0.0

packages/package/test/fixtures/emitTypes-false/package.json

• svelte ^4.0.0

packages/package/test/fixtures/javascript/package.json

• svelte ^4.0.0

packages/package/test/fixtures/resolve-alias/package.json

• svelte ^4.0.0

packages/package/test/fixtures/svelte-3-types/package.json

• svelte ^3.0.0 || ^4.0.0

packages/package/test/fixtures/svelte-kit/package.json

• svelte ^4.0.0

packages/package/test/fixtures/tsconfig-specified/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-declaration-map/package.json

• svelte ^5.0.0

packages/package/test/fixtures/typescript-esnext/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-nodenext/package.json

• svelte ^4.0.0

packages/package/test/watch/expected/package.json

packages/package/test/watch/package.json

• svelte ^4.0.0

playgrounds/basic/package.json

• @sveltejs/vite-plugin-svelte ^5.0.1
• prettier ^3.3.2
• prettier-plugin-svelte ^3.2.6
• publint ^0.3.0
• svelte ^5.23.1
• svelte-check ^4.1.1
• vite ^6.2.7

pnpm-workspace.yaml

• @playwright/test ^1.51.1
• vitest ^3.2.3

---

• Check this box to trigger a request for Renovate to run again on this repository

[enBonnet]

Should we pin all our dependencies? @Rich-Harris @benmccann

[benmccann]

There's a pnpm-lock.yaml that acts as a lock file. We don't need or want to pin our dependencies beyond that. Please don't ping specific maintainers