From 9c5a44dec59d9f2d7c57800501b93cd83696b0d6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 26 Jan 2026 09:36:44 +0000 Subject: [PATCH] chore(deps): update dependency svelte [security] --- pnpm-lock.yaml | 112 +++++++++++++++---------------------- rspack/svelte/package.json | 2 +- 2 files changed, 46 insertions(+), 68 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index ddfa9897..ffae6a41 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -805,14 +805,14 @@ importers: dependencies: svelte: specifier: ^5.46.1 - version: 5.46.1 + version: 5.46.4 devDependencies: '@rsbuild/core': specifier: ^1.7.2 version: 1.7.2 '@rsbuild/plugin-svelte': specifier: ^1.0.12 - version: 1.0.12(@babel/core@7.28.6)(@rsbuild/core@1.7.2)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.1)(typescript@5.9.3) + version: 1.0.12(@babel/core@7.28.6)(@rsbuild/core@1.7.2)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.4)(typescript@5.9.3) typescript: specifier: ^5.9.3 version: 5.9.3 @@ -3188,17 +3188,17 @@ importers: specifier: 6.0.1 version: 6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1) svelte: - specifier: ^3.59.2 - version: 3.59.2 + specifier: ^4.0.0 + version: 5.46.4 svelte-check: specifier: ^4.3.5 - version: 4.3.5(picomatch@4.0.3)(svelte@3.59.2)(typescript@5.9.3) + version: 4.3.5(picomatch@4.0.3)(svelte@5.46.4)(typescript@5.9.3) svelte-loader: specifier: ^3.2.4 - version: 3.2.4(svelte@3.59.2) + version: 3.2.4(svelte@5.46.4) svelte-preprocess: specifier: ^6.0.3 - version: 6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@3.59.2)(typescript@5.9.3) + version: 6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.4)(typescript@5.9.3) tslib: specifier: ^2.8.1 version: 2.8.1 @@ -5619,6 +5619,9 @@ packages: '@jridgewell/gen-mapping@0.3.12': resolution: {integrity: sha512-OuLGC46TjB5BbN1dH8JULVVZY4WTdkF7tV9Ys6wLL1rubZnCMstOhNHueU5bLCrnRuDhKPDM4g6sw4Bel5Gzqg==} + '@jridgewell/gen-mapping@0.3.13': + resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==} + '@jridgewell/remapping@2.3.5': resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==} @@ -7483,8 +7486,8 @@ packages: '@surma/rollup-plugin-off-main-thread@2.2.3': resolution: {integrity: sha512-lR8q/9W7hZpMWweNiAKU7NQerBnzQQLvi8qnTDU/fxItPhtZVMbPV3lbCwjhIlNBe9Bbr5V+KHshvWmVSG9cxQ==} - '@sveltejs/acorn-typescript@1.0.6': - resolution: {integrity: sha512-4awhxtMh4cx9blePWl10HRHj8Iivtqj+2QdDCSMDzxG+XKa9+VCNupQuCuvzEhYPzZSrX+0gC+0lHA/0fFKKQQ==} + '@sveltejs/acorn-typescript@1.0.8': + resolution: {integrity: sha512-esgN+54+q0NjB0Y/4BomT9samII7jGwNy/2a3wNZbT2A2RpmXsXwUt24LvLhx6jUq2gVk4cWEvcRO6MFQbOfNA==} peerDependencies: acorn: ^8.9.0 @@ -10033,8 +10036,8 @@ packages: detect-node@2.1.0: resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==} - devalue@5.5.0: - resolution: {integrity: sha512-69sM5yrHfFLJt0AZ9QqZXGCPfJ7fQjvpln3Rq5+PS03LD32Ost1Q9N+eEnaQwGRIriKkMImXD56ocjQmfjbV3w==} + devalue@5.6.2: + resolution: {integrity: sha512-nPRkjWzzDQlsejL1WVifk5rvcFi/y1onBRxjaFMjZeR9mFpqu2gmAZ9xUB9/IEanEP/vBtGeGganC/GO1fmufg==} devlop@1.1.0: resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==} @@ -10417,8 +10420,8 @@ packages: resolution: {integrity: sha512-YQLXUplAwJgCydQ78IMJywZCceoqk1oH01OERdSAJc/7U2AylwjhSCLDEtqwg811idIS/9fIU5GjG73IgjKMVg==} engines: {node: '>=0.10'} - esrap@2.2.1: - resolution: {integrity: sha512-GiYWG34AN/4CUyaWAgunGt0Rxvr1PTMlGC0vvEov/uOQYWne2bpN03Um+k8jT+q3op33mKouP2zeJ6OlM+qeUg==} + esrap@2.2.2: + resolution: {integrity: sha512-zA6497ha+qKvoWIK+WM9NAh5ni17sKZKhbS5B3PoYbBvaYHZWoS33zmFybmyqpn07RLUxSmn+RCls2/XF+d0oQ==} esrecurse@4.3.0: resolution: {integrity: sha512-KmfKL3b6G+RXvP8N1vr3Tq1kL/oCFgn2NYXEtqP8/L3pKapUA4G8cFVaoF3SU323CD4XypR/ffioHmkti6/Tag==} @@ -15008,12 +15011,8 @@ packages: typescript: optional: true - svelte@3.59.2: - resolution: {integrity: sha512-vzSyuGr3eEoAtT/A6bmajosJZIUWySzY2CzB3w2pgPvnkUjGqlDnsNnA0PMO+mMAhuyMul6C2uuZzY6ELSkzyA==} - engines: {node: '>= 8'} - - svelte@5.46.1: - resolution: {integrity: sha512-ynjfCHD3nP2el70kN5Pmg37sSi0EjOm9FgHYQdC4giWG/hzO3AatzXXJJgP305uIhGQxSufJLuYWtkY8uK/8RA==} + svelte@5.46.4: + resolution: {integrity: sha512-VJwdXrmv9L8L7ZasJeWcCjoIuMRVbhuxbss0fpVnR8yorMmjNDwcjIH08vS6wmSzzzgAG5CADQ1JuXPS2nwt9w==} engines: {node: '>=18'} svg-parser@2.0.4: @@ -18173,16 +18172,21 @@ snapshots: '@jridgewell/sourcemap-codec': 1.5.5 '@jridgewell/trace-mapping': 0.3.31 + '@jridgewell/gen-mapping@0.3.13': + dependencies: + '@jridgewell/sourcemap-codec': 1.5.5 + '@jridgewell/trace-mapping': 0.3.31 + '@jridgewell/remapping@2.3.5': dependencies: - '@jridgewell/gen-mapping': 0.3.12 + '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/resolve-uri@3.1.2': {} '@jridgewell/source-map@0.3.5': dependencies: - '@jridgewell/gen-mapping': 0.3.12 + '@jridgewell/gen-mapping': 0.3.13 '@jridgewell/trace-mapping': 0.3.31 '@jridgewell/sourcemap-codec@1.5.5': {} @@ -19400,11 +19404,11 @@ snapshots: optionalDependencies: '@rsbuild/core': 1.7.2 - '@rsbuild/plugin-svelte@1.0.12(@babel/core@7.28.6)(@rsbuild/core@1.7.2)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.1)(typescript@5.9.3)': + '@rsbuild/plugin-svelte@1.0.12(@babel/core@7.28.6)(@rsbuild/core@1.7.2)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.4)(typescript@5.9.3)': dependencies: '@rsbuild/core': 1.7.2 - svelte-loader: 3.2.4(svelte@5.46.1) - svelte-preprocess: 6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.1)(typescript@5.9.3) + svelte-loader: 3.2.4(svelte@5.46.4) + svelte-preprocess: 6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.4)(typescript@5.9.3) transitivePeerDependencies: - '@babel/core' - coffeescript @@ -20683,7 +20687,7 @@ snapshots: magic-string: 0.25.9 string.prototype.matchall: 4.0.11 - '@sveltejs/acorn-typescript@1.0.6(acorn@8.15.0)': + '@sveltejs/acorn-typescript@1.0.8(acorn@8.15.0)': dependencies: acorn: 8.15.0 @@ -21330,7 +21334,7 @@ snapshots: '@types/webpack@5.28.5(webpack-cli@6.0.1)': dependencies: - '@types/node': 24.10.9 + '@types/node': 25.0.10 tapable: 2.3.0 webpack: 5.104.1(webpack-cli@6.0.1) transitivePeerDependencies: @@ -23460,7 +23464,7 @@ snapshots: detect-node@2.1.0: {} - devalue@5.5.0: {} + devalue@5.6.2: {} devlop@1.1.0: dependencies: @@ -24077,7 +24081,7 @@ snapshots: dependencies: estraverse: 5.3.0 - esrap@2.2.1: + esrap@2.2.2: dependencies: '@jridgewell/sourcemap-codec': 1.5.5 @@ -30167,45 +30171,34 @@ snapshots: supports-preserve-symlinks-flag@1.0.0: {} - svelte-check@4.3.5(picomatch@4.0.3)(svelte@3.59.2)(typescript@5.9.3): + svelte-check@4.3.5(picomatch@4.0.3)(svelte@5.46.4)(typescript@5.9.3): dependencies: '@jridgewell/trace-mapping': 0.3.31 chokidar: 4.0.3 fdir: 6.5.0(picomatch@4.0.3) picocolors: 1.1.1 sade: 1.8.1 - svelte: 3.59.2 + svelte: 5.46.4 typescript: 5.9.3 transitivePeerDependencies: - picomatch svelte-dev-helper@1.1.9: {} - svelte-hmr@0.14.12(svelte@3.59.2): - dependencies: - svelte: 3.59.2 - - svelte-hmr@0.14.12(svelte@5.46.1): - dependencies: - svelte: 5.46.1 - - svelte-loader@3.2.4(svelte@3.59.2): + svelte-hmr@0.14.12(svelte@5.46.4): dependencies: - loader-utils: 2.0.4 - svelte: 3.59.2 - svelte-dev-helper: 1.1.9 - svelte-hmr: 0.14.12(svelte@3.59.2) + svelte: 5.46.4 - svelte-loader@3.2.4(svelte@5.46.1): + svelte-loader@3.2.4(svelte@5.46.4): dependencies: loader-utils: 2.0.4 - svelte: 5.46.1 + svelte: 5.46.4 svelte-dev-helper: 1.1.9 - svelte-hmr: 0.14.12(svelte@5.46.1) + svelte-hmr: 0.14.12(svelte@5.46.4) - svelte-preprocess@6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@3.59.2)(typescript@5.9.3): + svelte-preprocess@6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.4)(typescript@5.9.3): dependencies: - svelte: 3.59.2 + svelte: 5.46.4 optionalDependencies: '@babel/core': 7.28.6 less: 4.5.1 @@ -30216,34 +30209,19 @@ snapshots: stylus: 0.64.0 typescript: 5.9.3 - svelte-preprocess@6.0.3(@babel/core@7.28.6)(less@4.5.1)(postcss-load-config@6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1))(postcss@8.5.6)(pug@3.0.2)(sass@1.97.3)(stylus@0.64.0)(svelte@5.46.1)(typescript@5.9.3): - dependencies: - svelte: 5.46.1 - optionalDependencies: - '@babel/core': 7.28.6 - less: 4.5.1 - postcss: 8.5.6 - postcss-load-config: 6.0.1(jiti@2.6.1)(postcss@8.5.6)(tsx@4.19.2)(yaml@2.8.1) - pug: 3.0.2 - sass: 1.97.3 - stylus: 0.64.0 - typescript: 5.9.3 - - svelte@3.59.2: {} - - svelte@5.46.1: + svelte@5.46.4: dependencies: '@jridgewell/remapping': 2.3.5 '@jridgewell/sourcemap-codec': 1.5.5 - '@sveltejs/acorn-typescript': 1.0.6(acorn@8.15.0) + '@sveltejs/acorn-typescript': 1.0.8(acorn@8.15.0) '@types/estree': 1.0.8 acorn: 8.15.0 aria-query: 5.3.2 axobject-query: 4.1.0 clsx: 2.1.1 - devalue: 5.5.0 + devalue: 5.6.2 esm-env: 1.2.2 - esrap: 2.2.1 + esrap: 2.2.2 is-reference: 3.0.3 locate-character: 3.0.0 magic-string: 0.30.21 diff --git a/rspack/svelte/package.json b/rspack/svelte/package.json index e2334307..48094839 100644 --- a/rspack/svelte/package.json +++ b/rspack/svelte/package.json @@ -16,7 +16,7 @@ "cross-env": "^10.1.0", "html-rspack-plugin": "^6.1.6", "postcss-load-config": "6.0.1", - "svelte": "^3.59.2", + "svelte": "^4.0.0", "svelte-check": "^4.3.5", "svelte-loader": "^3.2.4", "svelte-preprocess": "^6.0.3",