Skip to content

chore(deps): bump the svelte group across 1 directory with 4 updates#893

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/svelte-2b0c17f722
Open

chore(deps): bump the svelte group across 1 directory with 4 updates#893
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/svelte-2b0c17f722

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2026 •
edited
Loading

Bumps the svelte group with 4 updates in the / directory: svelte-outclick, svelte-time, @sveltejs/vite-plugin-svelte and svelte.

Updates svelte-outclick from 3.7.1 to 4.2.0

Changelog

Sourced from svelte-outclick's changelog.

4.2.0

  • [feature] Use ClassValue for class attribute type instead of string.

4.1.0

  • [feature] Added tag prop and rest props type suggestion support with generic type support based on the tag prop.

4.0.1

  • Fixed "svelte" "peerDependencies" version by changing it to ">= 5".

4.0.0

[!IMPORTANT] There are breaking changes in this version.

  • [breaking] Use e.target instead of e.detail.target.
  • [breaking] OutClickEvent now returns pointerdown or pointerup or keydown, depending on how the outclick event is fired.
  • [breaking] Also, take a look at the migration guide below.
  • Exports OutClickEvent type.

Migration guide

Before:

<script>
    import OutClick from "svelte-outclick"
</script>

After:

<script>
    import { OutClick } from "svelte-outclick"
</script>

Before:

<OutClick on:outclick={() => {}}></OutClick>

After:

... (truncated)

Commits

Updates svelte-time from 1.1.0 to 2.1.0

Release notes

Sourced from svelte-time's releases.

v2.1.0

Features

  • add withoutSuffix prop to remove "ago" suffix from relative time (e.g., "2 hours" instead of "2 hours ago") (7b64399, #73)
  • add locale prop to support internationalization with multiple locales (8d8a0b1, #60)

v2.0.2

Fixes

  • restore reactivity for Time component and svelteTime action (bf3d93c, #67)

v2.0.1

Fixes

  • fix svelteTime import in TypeScript definitions (554596b, #57)

v2.0.0

The library is modernized to only support Svelte 5 (Runes mode). There are no component API changes.

Use svelte-time@1.0.0 for Svelte 3/4 support. v1 is also compatible with Svelte 5 (non-Runes mode).

Breaking Changes

f98694303f31160215b710390d83d07020a78f29, #51 contributed by @​kvangrae, @​niemyjski, @​metonym

  • update Time.svelte to use Runes
  • update svelteTime action to use Runes
  • update TypeScript definitions to replace deprecated SvelteComponentTyped with Component
Changelog

Sourced from svelte-time's changelog.

2.1.0 - 2026-01-12

Features

  • add withoutSuffix prop to remove "ago" suffix from relative time (e.g., "2 hours" instead of "2 hours ago")
  • add locale prop to support internationalization with multiple locales

2.0.2 - 2025-10-23

Fixes

  • restore reactivity for Time component and svelteTime action

2.0.1 - 2025-02-24

Fixes

  • fix svelteTime import in TypeScript definitions

2.0.0 - 2025-01-23

The library is modernized to only support Svelte 5 (Runes mode). There are no component API changes.

Use svelte-time@1.0.0 for Svelte 3/4 support. v1 is also compatible with Svelte 5 (non-Runes mode).

Breaking Changes

  • update Time.svelte to use Runes
  • update svelteTime action to use Runes
  • update TypeScript definitions to replace deprecated SvelteComponentTyped with Component

1.0.0 - 2025-01-23

Features

  • establish a stable release before upgrading to Svelte 5

Fixes

  • upgrade dayjs to v1.11.13

0.9.0 - 2024-04-19

Features

  • allow title attribute to be overridden

0.8.2 - 2023-12-16

Fixes

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 3.1.2 to 7.0.0

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​7.0.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(options): remove deprecated options (#1274)

    • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
    • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
    • api.idFilter of vite-plugin-svelte:api use api.filter instead
    • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

  • breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

  • breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

@​sveltejs/vite-plugin-svelte@​7.0.0-next.1

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

@​sveltejs/vite-plugin-svelte@​7.0.0-next.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

7.0.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

  • breaking(options): remove deprecated options (#1274)

    • vitePlugin.hot in svelte.config.js use compilerOptions.hmr instead
    • vitePlugin.ignorePluginPreprocessors in svelte.config.js no longer needed
    • api.idFilter of vite-plugin-svelte:api use api.filter instead
    • plugin.api.sveltePreprocess of other vite plugins Update affected plugins to a newer version or remove them. See docs for more information.

  • breaking(dev): no longer overrides compilerOptions.cssHash because Svelte now produces a stable css hash by itself (#1271)

  • breaking(inspector): integrate vite-plugin-svelte-inspector into vite-plugin-svelte to avoid circular dependency (#1270)

  • breaking(deps): require svelte 5.46.4 or later (#1271)

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.1

Patch Changes

  • chore: upgrade vitefu to compatible peer dependency range (#1286)

  • remove author field from package.json (#1281)

7.0.0-next.0

Major Changes

  • breaking(deps): require vite 8 (#1266)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​sveltejs/vite-plugin-svelte since your current version.


Updates svelte from 4.2.20 to 5.55.2

Release notes

Sourced from svelte's releases.

svelte@5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

  • fix: skip rebase logic in non-async mode (#18040)

  • fix: don't reset status of uninitialized deriveds (#18054)

svelte@5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

svelte@5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)

svelte@5.54.1

Patch Changes

  • fix: hydration comments during hmr (#17975)

  • fix: null out effect.b in destroy_effect (#17980)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

  • fix: skip rebase logic in non-async mode (#18040)

  • fix: don't reset status of uninitialized deriveds (#18054)

5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)

5.54.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 8, 2026
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 8, 2026 •
edited
Loading

❌ Deploy Preview for btcmap failed. Why did it fail? →

Name Link
🔨 Latest commit 234fd84
🔍 Latest deploy log https://app.netlify.com/projects/btcmap/deploys/69da1836b208e500088e28ca

@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 8, 2026 •
edited
Loading

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatedsvelte-outclick@​3.7.1 ⏵ 4.2.075 +910099 +4287 +6100
Updated@​sveltejs/​vite-plugin-svelte@​3.1.2 ⏵ 7.0.0100 +110081 +192100
Updatedsvelte-time@​1.1.0 ⏵ 2.1.08510010089 +1100
Updatedsvelte@​4.2.20 ⏵ 5.55.388 -6100 +688 +198100

View full report

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/svelte-2b0c17f722 branch from 710a714 to 9329c91 Compare April 8, 2026 04:45
@dependabot
chore(deps): bump the svelte group across 1 directory with 4 updates
234fd84 
Bumps the svelte group with 4 updates in the / directory: [svelte-outclick](https://github.com/babakfp/svelte-outclick), [svelte-time](https://github.com/metonym/svelte-time), [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) and [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte).


Updates `svelte-outclick` from 3.7.1 to 4.2.0
- [Changelog](https://github.com/babakfp/svelte-outclick/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babakfp/svelte-outclick/commits)

Updates `svelte-time` from 1.1.0 to 2.1.0
- [Release notes](https://github.com/metonym/svelte-time/releases)
- [Changelog](https://github.com/metonym/svelte-time/blob/master/CHANGELOG.md)
- [Commits](metonym/svelte-time@v1.1.0...v2.1.0)

Updates `@sveltejs/vite-plugin-svelte` from 3.1.2 to 7.0.0
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@7.0.0/packages/vite-plugin-svelte)

Updates `svelte` from 4.2.20 to 5.55.2
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.2/packages/svelte)

---
updated-dependencies:
- dependency-name: svelte-outclick
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: svelte
- dependency-name: svelte-time
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: svelte
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 7.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: svelte
- dependency-name: svelte
  dependency-version: 5.55.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: svelte
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/svelte-2b0c17f722 branch from 9329c91 to 234fd84 Compare April 11, 2026 09:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants