Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/cookie

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency cookie to ^0.7.0 [security]

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v4
• chore(deps): update dependency @types/cookie to v1
• chore(deps): update dependency svelte to v5

Detected dependencies

github-actions

.github/workflows/audit.yml

• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4

.github/workflows/ci.yml

• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4
• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4

.github/workflows/docs-preview-create-request.yml

• peter-evans/repository-dispatch v3

.github/workflows/docs-preview-delete-request.yml

• peter-evans/repository-dispatch v3

.github/workflows/release.yml

• actions/checkout v4
• pnpm/action-setup v4.0.0
• actions/setup-node v4
• changesets/action v1

.github/workflows/sync-request.yml

• peter-evans/repository-dispatch v3

npm

package.json

• @changesets/cli ^2.27.8
• @sveltejs/eslint-config ^8.1.0
• @svitejs/changesets-changelog-github-compact ^1.1.0
• eslint ^9.6.0
• playwright ^1.44.1
• prettier ^3.1.1
• prettier-plugin-svelte ^3.1.2
• typescript-eslint ^8.0.0
• pnpm ^9.0.0
• pnpm 9.12.3

packages/adapter-auto/package.json

• import-meta-resolve ^4.1.0
• @sveltejs/vite-plugin-svelte ^3.0.1
• @sveltejs/kit ^2.0.0

packages/adapter-cloudflare-workers/package.json

• @cloudflare/workers-types ^4.20231121.0
• @iarna/toml ^2.2.5
• @cloudflare/kv-asset-handler ^0.3.0
• @sveltejs/kit ^2.0.0
• wrangler ^3.28.4

packages/adapter-cloudflare/package.json

• @cloudflare/workers-types ^4.20231121.0
• worktop 0.8.0-next.18
• @types/ws ^8.5.10
• @sveltejs/kit ^2.0.0
• wrangler ^3.28.4

packages/adapter-netlify/package.json

• @iarna/toml ^2.2.5
• set-cookie-parser ^2.6.0
• @netlify/functions ^2.4.1
• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^15.3.0
• @sveltejs/vite-plugin-svelte ^3.0.1
• @types/set-cookie-parser ^2.4.7
• vitest ^2.0.1
• @sveltejs/kit ^2.4.0

packages/adapter-node/package.json

• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^15.3.0
• @polka/url ^1.0.0-next.28
• @sveltejs/vite-plugin-svelte ^3.0.1
• polka ^1.0.0-next.28
• sirv ^3.0.0
• vitest ^2.0.1
• @sveltejs/kit ^2.4.0

packages/adapter-static/package.json

• @playwright/test ^1.44.1
• @sveltejs/vite-plugin-svelte ^3.0.1
• sirv ^3.0.0
• svelte ^4.2.10
• vite ^5.3.2
• @sveltejs/kit ^2.0.0

packages/adapter-static/test/apps/prerendered/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• sirv-cli ^3.0.0
• svelte ^4.2.10
• vite ^5.3.2

packages/adapter-static/test/apps/spa/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• sirv-cli ^3.0.0
• svelte ^4.2.10
• vite ^5.3.2

packages/adapter-vercel/package.json

• @vercel/nft ^0.27.1
• @sveltejs/vite-plugin-svelte ^3.0.1
• vitest ^2.0.1
• @sveltejs/kit ^2.4.0

packages/amp/package.json

• @sveltejs/kit ^1.0.0 || ^2.0.0

packages/create-svelte/package.json

packages/enhanced-img/package.json

• magic-string ^0.30.5
• svelte-parse-markup ^0.1.5
• vite-imagetools ^7.0.1
• zimmerframe ^1.1.2
• @types/estree ^1.0.5
• svelte ^5.0.0
• vite ^5.3.2
• vitest ^2.0.1
• svelte ^5.0.0
• vite >= 5.0.0

packages/kit/package.json

• @types/cookie ^0.6.0
• cookie ^0.6.0
• devalue ^5.1.0
• esm-env ^1.0.0
• import-meta-resolve ^4.1.0
• kleur ^4.1.5
• magic-string ^0.30.5
• mrmime ^2.0.0
• sade ^1.8.1
• set-cookie-parser ^2.6.0
• sirv ^3.0.0
• tiny-glob ^0.2.9
• @playwright/test ^1.44.1
• @sveltejs/vite-plugin-svelte ^3.0.1
• @types/connect ^3.4.38
• @types/set-cookie-parser ^2.4.7
• dts-buddy ^0.5.3
• svelte ^4.2.10
• svelte-preprocess ^6.0.0
• vite ^5.3.2
• vitest ^2.0.1
• @sveltejs/vite-plugin-svelte ^3.0.0 || ^4.0.0-next.1
• svelte ^4.0.0 || ^5.0.0-next.0
• vite ^5.0.3
• node >=18.13

packages/kit/test/apps/amp/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• dropcss ^1.0.16
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/basics/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/dev-only/_test_dependencies/cjs-only/package.json

packages/kit/test/apps/dev-only/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/embed/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/no-ssr/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/options-2/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/options/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/apps/writes/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/prerender-entry-generator-mismatch/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/prerenderable-incorrect-fragment/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/prerenderable-not-prerendered/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/private-dynamic-env-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/private-dynamic-env/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/private-static-env-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/private-static-env/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• cross-env ^7.0.3
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/server-only-folder-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/server-only-folder/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/server-only-module-dynamic-import/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/server-only-module/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/service-worker-dynamic-public-env/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/service-worker-private-env/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/apps/syntax-error/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2

packages/kit/test/build-errors/package.json

• vitest ^2.0.1

packages/kit/test/prerendering/basics/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2
• vitest ^2.0.1

packages/kit/test/prerendering/options/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2
• vitest ^2.0.1

packages/kit/test/prerendering/paths-base/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2
• vitest ^2.0.1

packages/package/package.json

• chokidar ^4.0.0
• kleur ^4.1.5
• sade ^1.8.1
• semver ^7.5.4
• svelte2tsx ~0.7.16
• @sveltejs/vite-plugin-svelte ^3.0.1
• @types/semver ^7.5.6
• prettier ^3.1.1
• svelte ^4.2.10
• svelte-preprocess ^6.0.0
• uvu ^0.5.6
• svelte ^3.44.0 || ^4.0.0 || ^5.0.0-next.1
• node ^16.14 || >=18

packages/package/test/errors/no-lib-folder/package.json

packages/package/test/fixtures/assets/package.json

• svelte ^4.0.0

packages/package/test/fixtures/emitTypes-false/package.json

• svelte ^4.0.0

packages/package/test/fixtures/javascript/package.json

• svelte ^4.0.0

packages/package/test/fixtures/resolve-alias/package.json

• svelte ^4.0.0

packages/package/test/fixtures/svelte-3-types/package.json

• svelte ^3.0.0 || ^4.0.0

packages/package/test/fixtures/svelte-kit/package.json

• svelte ^4.0.0

packages/package/test/fixtures/tsconfig-specified/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-esnext/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-nodenext/package.json

• svelte ^4.0.0

packages/package/test/watch/package.json

• svelte ^4.0.0

playgrounds/basic/package.json

• @sveltejs/vite-plugin-svelte ^3.0.1
• publint ^0.2.0
• svelte ^4.2.10
• svelte-check ^4.0.1
• vite ^5.3.2
• svelte ^4.0.0

---

• Check this box to trigger a request for Renovate to run again on this repository

[enBonnet]

Should we pin all our dependencies? @Rich-Harris @benmccann

[benmccann]

There's a pnpm-lock.yaml that acts as a lock file. We don't need or want to pin our dependencies beyond that. Please don't ping specific maintainers