fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@eslint/js (source)	^9.21.0 -> ^9.22.0
@rollup/plugin-commonjs (source)	^28.0.2 -> ^28.0.3
@tailwindcss/postcss (source)	^4.0.9 -> ^4.0.12
@tailwindcss/vite (source)	^4.0.9 -> ^4.0.12
@types/node (source)	^22.13.6 -> ^22.13.10
@types/ws (source)	^8.5.14 -> ^8.18.0
acorn	^8.14.0 -> ^8.14.1
autoprefixer	^10.4.20 -> ^10.4.21
axios (source)	^1.8.1 -> ^1.8.2
eslint (source)	^9.21.0 -> ^9.22.0
eslint-plugin-n	^17.16.1 -> ^17.16.2
lightningcss	^1.29.1 -> ^1.29.2
miniflare (source)	^3.20250214.1 -> ^3.20250224.0
nanoid	^5.1.2 -> ^5.1.3
playwright-chromium (source)	^1.50.1 -> ^1.51.0
pnpm (source)	10.5.2 -> 10.6.1
svelte (source)	^5.20.5 -> ^5.22.6
svelte-check	^4.1.4 -> ^4.1.5
tailwindcss (source)	^4.0.9 -> ^4.0.12
typescript-eslint (source)	^8.25.0 -> ^8.26.0
vite (source)	^6.2.0 -> ^6.2.1
vitest (source)	^3.0.7 -> ^3.0.8

---

Release Notes

eslint/eslint (@​eslint/js)

v9.22.0

Compare Source

rollup/plugins (@​rollup/plugin-commonjs)

v28.0.3

2025-03-06

Bugfixes

• fix: fix error when bundle contains require() of module with falsy __esModule export (#​1850)

tailwindlabs/tailwindcss (@​tailwindcss/postcss)

v4.0.12

Compare Source

Fixed

• Vite: Fix url(…) rebasing in transitively imported CSS files (#​16965)
• PostCSS: Rebase url(…)s in imported CSS files (#​16965)
• Ensure utilities are sorted based on their actual property order (#​16995)
• Ensure strings in Pug and Slim templates are handled correctly (#​17000)
• Ensure classes between } and { are properly extracted (#​17001)
• Fix razor/cshtml pre-processing (#​17027)
• Ensure extracting candidates from JS embedded in a PHP string works as expected (#​17031)

v4.0.11

Compare Source

Fixed

• Ensure classes containing -- are extracted correctly (#​16972)
• Ensure classes containing numbers followed by dash or underscore are extracted correctly (#​16980)
• Ensure arbitrary container queries are extracted correctly (#​16984)
• Ensure classes ending in [ are extracted in Slim templating language (#​16985)
• Ensure arbitrary variables with data types are extracted correctly (#​16986)

v4.0.10

Compare Source

Added

• Add col-<number> and row-<number> utilities for grid-column and grid-row (#​15183)

Fixed

• Ensure not-* does not remove :is(…) from variants (#​16825)
• Ensure @keyframes are correctly emitted when using a prefix (#​16850)
• Don't swallow @utility declarations when @apply is used in nested rules (#​16940)
• Ensure outline-hidden behaves like outline-none outside of forced colors mode (#​16943)
• Allow !important on CSS variables again (#​16873)
• Vite: Do not crash when encountering an .svg file with # or ? in the filename (#​16957)
• Ensure utilities are properly detected within square brackets (#​16306)
• Ensure utilities are properly detected using Angular's conditional class binding syntax (#​16306)
• Ensure utilities starting with numbers are properly extracted from Slim templates (#​16306)
• Discard arbitrary property candidates that have guaranteed-invalid property names (#​16306)

Changed

• Removed max-w-auto and max-h-auto utilities as they generate invalid CSS (#​16917)
• Replaced the existing candidate extractor with a brand new extractor to improve maintainability, correctness, and performance (#​16306)

acornjs/acorn (acorn)

v8.14.1

Compare Source

postcss/autoprefixer (autoprefixer)

v10.4.21

Compare Source

• Fixed old -moz- prefix for :placeholder-shown (by @​Marukome0743).

axios/axios (axios)

v1.8.2

Compare Source

Bug Fixes

• http-adapter: add allowAbsoluteUrls to path building (#​6810) (fb8eec2)

Contributors to this release

• Fasoro-Joseph Alexander

eslint/eslint (eslint)

v9.22.0

Compare Source

eslint-community/eslint-plugin-n (eslint-plugin-n)

v17.16.2

Compare Source

🩹 Fixes

• Revert "feat: add support for ignoring sync methods from certain locations" (#​416) (0779e2f)

parcel-bundler/lightningcss (lightningcss)

v1.29.2

Compare Source

• Update detect-libc for better compatibility by @​nicksrandall in https://github.com/parcel-bundler/lightningcss/pull/923
• Fix broken minification for non-opaque oklab colors by @​lfesp in https://github.com/parcel-bundler/lightningcss/pull/901
• Bump browserslist-rs 0.17.0 by @​chenjiahan in https://github.com/parcel-bundler/lightningcss/pull/912
• Add wasm compilation cfg for Browsers::load_browserslist by @​CPunisher in https://github.com/parcel-bundler/lightningcss/pull/895
• Fix parsing style container queries without a value – 2284653

cloudflare/workers-sdk (miniflare)

v3.20250224.0

Compare Source

Patch Changes

• #​8338 2d40989 Thanks @​GregBrimble! - feat: Upload _headers and _redirects if present with Workers Assets as part of wrangler deploy and wrangler versions upload.

• #​8251 da568e5 Thanks @​dependabot! - chore: update dependencies of "miniflare" package

  The following dependency versions have been updated:

  Dependency	From	To
  workerd	1.20250214.0	1.20250224.0
  @​cloudflare/workers-types	^4.20250214.0	^4.20250224.0

• #​8288 cf14e17 Thanks @​CarmenPopoviciu! - feat: Add assets Proxy Worker skeleton in miniflare

  This commit implements a very basic Proxy Worker skeleton, and wires it in the "pipeline" miniflare creates for assets. This Worker will be incrementally worked on, but for now, the current implementation will forward all incoming requests to the Router Worker, thus leaving the current assets behaviour in local dev, the same.

  This is an experimental feature available under the --x-assets-rpc flag: wrangler dev --x-assets-rpc.

• #​8355 79c7810 Thanks @​GregBrimble! - fix: Add default empty router config for assets in Miniflare

v3.20250214.2

Compare Source

Patch Changes

• #​8274 fce642d Thanks @​emily-shen! - fix bindings to entrypoints on the same worker in workers with assets

• #​8289 a4909cb Thanks @​penalosa! - Add the experimental --x-assets-rpc flag to gate feature work to support JSRPC with Workers + Assets projects.

ai/nanoid (nanoid)

v5.1.3

Compare Source

• Fixed React Native support (by @​steida).

microsoft/playwright (playwright-chromium)

v1.51.0

Compare Source

pnpm/pnpm (pnpm)

v10.6.1

Compare Source

Patch Changes

• The pnpm CLI process should not stay hanging, when --silent reporting is used.
• When --loglevel is set to error, don't show installation summary, execution time, and big tarball download progress.
• Don't ignore pnpm.patchedDependencies from package.json #​9226.
• When executing the approve-builds command, if package.json contains onlyBuiltDependencies or ignoredBuiltDependencies, the selected dependency package will continue to be written into package.json.
• When a package version cannot be found in the package metadata, print the registry from which the package was fetched.

v10.6.0

Compare Source

Minor Changes

• pnpm-workspace.yaml can now hold all the settings that .npmrc accepts. The settings should use camelCase #​9211.

  pnpm-workspace.yaml example:

  verifyDepsBeforeRun: install
  optimisticRepeatInstall: true
  publicHoistPattern:
    - "*types*"
    - "!@​types/react"

• Projects using a file: dependency on a local tarball file (i.e. .tgz, .tar.gz, .tar) will see a performance improvement during installation. Previously, using a file: dependency on a tarball caused the lockfile resolution step to always run. The lockfile will now be considered up-to-date if the tarball is unchanged.

Patch Changes

• pnpm self-update should not leave a directory with a broken pnpm installation if the installation fails.
• fast-glob replace with tinyglobby to reduce the size of the pnpm CLI dependencies #​9169.
• pnpm deploy should not remove fields from the deployed package's package.json file #​9215.
• pnpm self-update should not read the pnpm settings from the package.json file in the current working directory.
• Fix pnpm deploy creating a package.json without the imports and license field #​9193.
• pnpm update -i should list only packages that have newer versions #​9206.
• Fix a bug causing entries in the catalogs section of the pnpm-lock.yaml file to be removed when dedupe-peer-dependents=false on a filtered install. #​9112

sveltejs/svelte (svelte)

v5.22.6

Compare Source

Patch Changes

• fix: skip log_if_contains_state if only logging literals (#​15468)

• fix: Add closedby property to HTMLDialogAttributes type (#​15458)

• fix: null and warnings for local handlers (#​15460)

v5.22.5

Compare Source

Patch Changes

• fix: memoize clsx calls (#​15456)

• fix: respect svelte-ignore hydration_attribute_changed on elements with spread attributes (#​15443)

• fix: always use setAttribute when setting style (#​15323)

• fix: make style: directive and CSS handling more robust (#​15418)

v5.22.4

Compare Source

Patch Changes

• fix: never deduplicate expressions in templates (#​15451)

v5.22.3

Compare Source

Patch Changes

• fix: run effect roots in tree order (#​15446)

v5.22.2

Compare Source

Patch Changes

• fix: correctly set is_updating before flushing root effects (#​15442)

v5.22.1

Compare Source

Patch Changes

• chore: switch acorn-typescript plugin (#​15393)

v5.22.0

Compare Source

Minor Changes

• feat: Add idPrefix option to render (#​15428)

Patch Changes

• fix: make dialog element and role interactive (#​15429)

v5.21.0

Compare Source

Minor Changes

• chore: Reduce hydration comment for {:else if} (#​15250)

Patch Changes

• fix: disallow bind:group to snippet parameters (#​15401)

sveltejs/language-tools (svelte-check)

v4.1.5

Compare Source

• fix: take other snippets into account when checking for hoistability (#​2668)
• fix: disambiguate render in module script (#​2667)
• fix: properly transform $props.id when $props is assigned to props (#​2694)
• fix: handle booleanish popover (#​2702)
• chore: bump vscode-html/css-language-service (#​2677)
• fix: use referenced project's compiler option to get resolution mode (#​2676)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.26.0

Compare Source

🚀 Features

• support TypeScript 5.8 (#​10903)

❤️ Thank You

• Dirk Luijk @​dirkluijk

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v6.2.1

Compare Source

• refactor: remove isBuild check from preAliasPlugin (#​19587) (c9e086d), closes #​19587
• refactor: restore endsWith usage (#​19554) (6113a96), closes #​19554
• refactor: use applyToEnvironment in internal plugins (#​19588) (f678442), closes #​19588
• fix(css): stabilize css module hashes with lightningcss in dev mode (#​19481) (92125b4), closes #​19481
• fix(deps): update all non-major dependencies (#​19555) (f612e0f), closes #​19555
• fix(reporter): fix incorrect bundle size calculation with non-ASCII characters (#​19561) (437c0ed), closes #​19561
• fix(sourcemap): combine sourcemaps with multiple sources without matched source (#​18971) (e3f6ae1), closes #​18971
• fix(ssr): named export should overwrite export all (#​19534) (2fd2fc1), closes #​19534
• feat: add *?url&no-inline type and warning for .json?inline / .json?no-inline (#​19566) (c0d3667), closes #​19566
• test: add glob import test case (#​19516) (aa1d807), closes #​19516
• test: convert config playground to unit tests (#​19568) (c0e68da), closes #​19568
• test: convert resolve-config playground to unit tests (#​19567) (db5fb48), closes #​19567
• perf: flush compile cache after 10s (#​19537) (6c8a5a2), closes #​19537
• chore(css): move environment destructuring after condition check (#​19492) (c9eda23), closes #​19492
• chore(html): remove unnecessary value check (#​19491) (797959f), closes #​19491

vitest-dev/vitest (vitest)

v3.0.8

Compare Source

   🐞 Bug Fixes

• Fix fetch cache multiple writes  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7546 (1a8b4)
• Use browser.isolate instead of config.isolate  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7560 (4b5ed)
• Remove vestigial spy stub, import directly from @vitest/spy  -  by @​mrginglymus in https://github.com/vitest-dev/vitest/issues/7575 (7f7ff)
• Correctly split the argv string  -  by @​btea in https://github.com/vitest-dev/vitest/issues/7533 (4325a)
• browser:
  • Remove @​testing-library/dom from dependencies  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7555 (5387a)
  • Improve source map handling for bundled files  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7534 (e2c57)
  • Print related test file and potential test in unhandled errors  -  by @​sheremet-va in https://github.com/vitest-dev/vitest/issues/7564 (fee90)
• runner:
  • Fix beforeEach/All cleanup callback timeout  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7500 (0c292)
  • Fix and simplify Task.suite initialization  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7414 (ca9ff)
• snapshot:
  • Allow inline snapshot calls on same location with same snapshot  -  by @​jycouet and @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7464 (d5cb8)
• vite-node:
  • Fix buildStart on Vite 6  -  by @​hi-ogawa in https://github.com/vitest-dev/vitest/issues/7480 (c0f47)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[sapphi-red]

Downgraded playwright as it seems to be affected by a bug in chrome (https://issues.chromium.org/issues/401927511).