Skip to content

deps(frontend): bump the npm-minor-patch group across 1 directory with 10 updates#23

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/npm-minor-patch-549a3e4dae
Open

deps(frontend): bump the npm-minor-patch group across 1 directory with 10 updates#23
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/npm-minor-patch-549a3e4dae

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Feb 9, 2026 •
edited
Loading

Bumps the npm-minor-patch group with 10 updates in the /frontend directory:

Package From To
axios 1.13.2 1.13.5
@sveltejs/vite-plugin-svelte 6.2.1 6.2.4
@testing-library/svelte 5.2.10 5.3.1
@tsconfig/svelte 5.0.6 5.0.7
happy-dom 20.0.11 20.5.3
jsdom 27.3.0 27.4.0
svelte 5.45.5 5.50.0
svelte-check 4.3.4 4.3.6
vite 7.2.6 7.3.1
vitest 4.0.16 4.0.18

Updates axios from 1.13.2 to 1.13.5

Release notes

Sourced from axios's releases.

v1.13.5

Release 1.13.5

Highlights

  • Security: Fixed a potential Denial of Service issue involving the __proto__ key in mergeConfig. (PR #7369)
  • Bug fix: Resolved an issue where AxiosError could be missing the status field on and after v1.13.3. (PR #7368)

Changes

Security

  • Fix Denial of Service via __proto__ key in mergeConfig. (PR #7369)

Fixes

  • Fix/5657. (PR #7313)
  • Ensure status is present in AxiosError on and after v1.13.3. (PR #7368)

Features / Improvements

  • Add input validation to isAbsoluteURL. (PR #7326)
  • Refactor: bump minor package versions. (PR #7356)

Documentation

  • Clarify object-check comment. (PR #7323)
  • Fix deprecated Buffer constructor usage and README formatting. (PR #7371)

CI / Maintenance

  • Chore: fix issues with YAML. (PR #7355)
  • CI: update workflow YAMLs. (PR #7372)
  • CI: fix run condition. (PR #7373)
  • Dev deps: bump karma-sourcemap-loader from 0.3.8 to 0.4.0. (PR #7360)
  • Chore(release): prepare release 1.13.5. (PR #7379)

New Contributors

Full Changelog: axios/axios@v1.13.4...v1.13.5

v1.13.4

Overview

The release addresses issues discovered in v1.13.3 and includes significant CI/CD improvements.

Full Changelog: v1.13.3...v1.13.4

What's New in v1.13.4

Bug Fixes

  • fix: issues with version 1.13.3 (#7352) (ee90dfc)
    • Fixed issues discovered in v1.13.3 release

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

1.13.3 (2026-01-20)

Bug Fixes

  • http2: Use port 443 for HTTPS connections by default. (#7256) (d7e6065)
  • interceptor: handle the error in the same interceptor (#6269) (5945e40)
  • main field in package.json should correspond to cjs artifacts (#5756) (7373fbf)
  • package.json: add 'bun' package.json 'exports' condition. Load the Node.js build in Bun instead of the browser build (#5754) (b89217e)
  • silentJSONParsing=false should throw on invalid JSON (#7253) (#7257) (7d19335)
  • turn AxiosError into a native error (#5394) (#5558) (1c6a86d)
  • types: add handlers to AxiosInterceptorManager interface (#5551) (8d1271b)
  • types: restore AxiosError.cause type from unknown to Error (#7327) (d8233d9)
  • unclear error message is thrown when specifying an empty proxy authorization (#6314) (6ef867e)

Features

Reverts

  • Revert "fix: silentJSONParsing=false should throw on invalid JSON (#7253) (#7…" (#7298) (a4230f5), closes #7253 #7 #7298
  • deps: bump peter-evans/create-pull-request from 7 to 8 in the github-actions group (#7334) (2d6ad5e)

Contributors to this release

... (truncated)

Commits
  • 29f7542 chore(release): prepare release 1.13.5 (#7379)
  • 431c3a3 ci: fix run condition (#7373)
  • 9ff3a78 ci: update ymls (#7372)
  • 265b712 docs: fix deprecated Buffer constructor and formatting issues in README (#7371)
  • 475e75a feat: add input validation to isAbsoluteURL (#7326)
  • 28c7215 fix: Denial of Service via proto Key in mergeConfig (#7369)
  • 04cf019 docs: clarify object check comment (#7323)
  • 696fa75 fix: status is missing in AxiosError on and after v1.13.3 (#7368)
  • 569f028 fix: added a option to choose between legacy and the new request/response int...
  • 44b7c9f chore(deps-dev): bump karma-sourcemap-loader (#7360)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for axios since your current version.


Updates @sveltejs/vite-plugin-svelte from 6.2.1 to 6.2.4

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​6.2.4

Patch Changes

  • fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#1258)

@​sveltejs/vite-plugin-svelte@​6.2.3

Patch Changes

  • fix(filter): ignore zero-tagged ids per rollup convention (#1255)

@​sveltejs/vite-plugin-svelte@​6.2.2

Patch Changes

  • Update experimental support for rolldown-vite to vite 8 beta (#1246)

  • perf: switch from debug to obug (smaller, esm-only) (#1241)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

6.2.4

Patch Changes

  • fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#1258)

6.2.3

Patch Changes

  • fix(filter): ignore zero-tagged ids per rollup convention (#1255)

6.2.2

Patch Changes

  • Update experimental support for rolldown-vite to vite 8 beta (#1246)

  • perf: switch from debug to obug (smaller, esm-only) (#1241)

Commits

Updates @testing-library/svelte from 5.2.10 to 5.3.1

Release notes

Sourced from @​testing-library/svelte's releases.

@​testing-library/svelte@​5.3.1

@​testing-library/svelte 5.3.1 (2025-12-25)

Bug Fixes

@​testing-library/svelte@​5.3.0

@​testing-library/svelte 5.3.0 (2025-12-23)

Features

@​testing-library/svelte@​5.3.0-next.3

@​testing-library/svelte 5.3.0-next.3 (2025-12-23)

Features

  • polish types, bring back pure export (#465) (fb45051)

Dependencies

  • @​testing-library/svelte-core: upgraded to 1.0.0-next.5

@​testing-library/svelte@​5.3.0-next.2

@​testing-library/svelte 5.3.0-next.2 (2025-12-22)

Dependencies

  • @​testing-library/svelte-core: upgraded to 1.0.0-next.4

@​testing-library/svelte@​5.3.0-next.1

@​testing-library/svelte 5.3.0-next.1 (2025-12-20)

Features

Dependencies

  • @​testing-library/svelte-core: upgraded to 1.0.0-next.3
Commits

Updates @tsconfig/svelte from 5.0.6 to 5.0.7

Commits

Updates happy-dom from 20.0.11 to 20.5.3

Release notes

Sourced from happy-dom's releases.

v20.5.3

👷‍♂️ Patch fixes

  • Node.replaceWith does not throw w/o parent - By @​lukeed

v20.5.2

👷‍♂️ Patch fixes

v20.5.1

👷‍♂️ Patch fixes

  • Fixes logic in HTMLInputElement.stepUp() and HTMLInputElement.stepDown() to work according to spec - By @​stevematney in task #1955

v20.5.0

👷‍♂️ Patch fixes

  • Removes circular dependencies internally - By @​capricorn86 in task #2055
    • Compilers can handle simpler circular dependencies, but warnings may be outputted
  • Changes naming of types used internally to follow a consistent pattern - By @​capricorn86 in task #2055
  • Enforces use of the "type" modifier internally in the source code (e.g. import type and export type) - By @​capricorn86 in task #2055

v20.4.0

🎨 Features

v20.3.9

👷‍♂️ Patch fixes

  • Accept Document nodes as valid boundary points in Selection API - By @​skoch13 in task #1952

v20.3.8

👷‍♂️ Patch fixes

  • The getters for the properties focusNode and focusOffset in the Selection API returned incorrect values - By @​skoch13 in task #1850

v20.3.7

👷‍♂️ Patch fixes

  • Updates README.md for the "@​happy-dom/server-renderer" package - By @​capricorn86 in task #2035

v20.3.6

👷‍♂️ Patch fixes

  • Fixes issue where it wasn't possible to toggle the "open" attribute of <details> by clicking on a child of the <summary> element - By @​Nxooah in task #1928

v20.3.5

👷‍♂️ Patch fixes

  • Use internal property for "location" in BrowserFrameURL to avoid mock interference - By @​marchaos in task #1964
  • Add optional chaining to the "hostname" and pathname" properties to check if they are undefined in CookieURLUtility - By @​marchaos in task #1968

v20.3.4

👷‍♂️ Patch fixes

... (truncated)

Commits
  • 273ad6c fix: Node.replaceWith does not throw w/o parent (#1969)
  • 7c44f48 chore: #1947 Adds unit tests for decode ' / numeric character referenc...
  • 560589c fix: #1947 Use entities package for HTML/XML encoding/decoding (#2016)
  • ce559c3 fix: #1955 Fixes stepUp and stepDown on HTMLInputElement according to spec ...
  • f070566 feat: #2055 Changes internal types to follow a consistent pattern (#2056)
  • 18e56d0 feat: #2049 Adds support for caching the compiled code of EcmaScript module...
  • d8a50dc fix: #1952 Accept Document nodes as valid boundary points in Selection API ...
  • 77a6cd0 fix: #1850 Selection API focusNode and focusOffset returning incorrect valu...
  • aa2dbb8 fix: #2035 Updates README.md for the server-renderer package (#2037)
  • 4d1c023 fix: #1928 Support details click firing the onToggle event handler (#1929)
  • Additional commits viewable in compare view

Updates jsdom from 27.3.0 to 27.4.0

Release notes

Sourced from jsdom's releases.

Version 27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.
Changelog

Sourced from jsdom's changelog.

27.4.0

  • Added TextEncoder and TextDecoder.
  • Improved decoding of HTML bytes by using the new @exodus/bytes package; it is now much more correct. (ChALkeR)
  • Improved decoding of XML bytes to use UTF-8 more often, instead of sniffing for <meta charset> or using the parent frame's encoding.
  • Fixed a memory leak when Ranges were used and then the elements referred to by those ranges were removed.
Commits
  • 098d16d Version 27.4.0
  • 1cd029e Improve asciiLowercase/asciiUppercase performance
  • 83fcb62 Implement TextEncoder and TextDecoder; improve XML decoding
  • ddad97d Switch from iconv-lite to exodus/bytes for decoding
  • 25cb2a1 Use weak references for ranges
  • ed4f5ed Add currently-failing CSS regression tests
  • See full diff in compare view

Updates svelte from 5.45.5 to 5.50.0

Release notes

Sourced from svelte's releases.

svelte@5.50.0

Minor Changes

  • feat: allow use of createContext when instantiating components programmatically (#17575)

Patch Changes

  • fix: ensure infinite effect loops are cleared after flushing (#17601)

  • fix: allow {#key NaN} (#17642)

  • fix: detect store in each block expression regardless of AST shape (#17636)

  • fix: treat <menu> like <ul>/<ol> for a11y role checks (#17638)

  • fix: add vite-ignore comment inside dynamic crypto import (#17623)

  • chore: wrap JSDoc URLs in @see and @link tags (#17617)

  • fix: properly hydrate already-resolved async blocks (#17641)

  • fix: emit each_key_duplicate error in production (#16724)

  • fix: exit resolved async blocks on correct node when hydrating (#17640)

svelte@5.49.2

Patch Changes

  • chore: remove SvelteKit data attributes from elements.d.ts (#17613)

  • fix: avoid erroneous async derived expressions for blocks (#17604)

  • fix: avoid Cloudflare warnings about not having the "node:crypto" module (#17612)

  • fix: reschedule effects inside unskipped branches (#17604)

svelte@5.49.1

Patch Changes

  • fix: merge consecutive large text nodes (#17587)

  • fix: only create async functions in SSR output when necessary (#17593)

  • fix: properly separate multiline html blocks from each other in print() (#17319)

  • fix: prevent unhandled exceptions arising from dangling promises in (#17591)

svelte@5.49.0

Minor Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

5.50.0

Minor Changes

  • feat: allow use of createContext when instantiating components programmatically (#17575)

Patch Changes

  • fix: ensure infinite effect loops are cleared after flushing (#17601)

  • fix: allow {#key NaN} (#17642)

  • fix: detect store in each block expression regardless of AST shape (#17636)

  • fix: treat <menu> like <ul>/<ol> for a11y role checks (#17638)

  • fix: add vite-ignore comment inside dynamic crypto import (#17623)

  • chore: wrap JSDoc URLs in @see and @link tags (#17617)

  • fix: properly hydrate already-resolved async blocks (#17641)

  • fix: emit each_key_duplicate error in production (#16724)

  • fix: exit resolved async blocks on correct node when hydrating (#17640)

5.49.2

Patch Changes

  • chore: remove SvelteKit data attributes from elements.d.ts (#17613)

  • fix: avoid erroneous async derived expressions for blocks (#17604)

  • fix: avoid Cloudflare warnings about not having the "node:crypto" module (#17612)

  • fix: reschedule effects inside unskipped branches (#17604)

5.49.1

Patch Changes

  • fix: merge consecutive large text nodes (#17587)

  • fix: only create async functions in SSR output when necessary (#17593)

  • fix: properly separate multiline html blocks from each other in print() (#17319)

  • fix: prevent unhandled exceptions arising from dangling promises in (#17591)

... (truncated)

Commits

Updates svelte-check from 4.3.4 to 4.3.6

Release notes

Sourced from svelte-check's releases.

svelte-check@4.3.6

Patch Changes

  • fix: don't hoist type/snippet referencing $store (#2926)

svelte-check@4.3.5

Patch Changes

  • fix: ensure await-block type is preserved in the latest Svelte version (#2895)
Commits
  • 6b83202 Version Packages (#2919)
  • 9c05c1a fix: compatibility with prettier-plugin-tailwindcss in monorepo (#2925)
  • e2f09eb fix: don't hoist type/snippet referencing $store (#2926)
  • e891ace perf: only parse html once in a batch update (#2923)
  • 8c11665 fix: remove outdated documentation with --ignore (#2920)
  • fb00777 feat: support emmet.extensionsPath config (#2918)
  • eb2fa2a feat: Use custom element's JSDoc as doc for completion/hover (#2879)
  • f8f40c5 fix: add tokenTypes config for JSDoc completion (#2916)
  • 63a22b8 Version Packages (#2896)
  • d0562f9 perf: only create objects for completion items for svelte syntax once (#2900)
  • Additional commits viewable in compare view

Updates vite from 7.2.6 to 7.3.1

Release notes

Sourced from vite's releases.

v7.3.1

Please refer to CHANGELOG.md for details.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.3.1 (2026-01-07)

Features

  • add ignoreOutdatedRequests option to optimizeDeps (#21364) (9d39d37)

7.3.0 (2025-12-15)

Features

  • deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

Commits

Updates vitest from 4.0.16 to 4.0.18

Release notes

Sourced from vitest's releases.

v4.0.18

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub

v4.0.17

   🚀 Experimental Features

   🐞 Bug Fixes

@dependabot
deps(frontend): bump the npm-minor-patch group across 1 directory wit…
731cec0 
…h 10 updates

Bumps the npm-minor-patch group with 10 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.13.2` | `1.13.5` |
| [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `6.2.1` | `6.2.4` |
| [@testing-library/svelte](https://github.com/testing-library/svelte-testing-library/tree/HEAD/packages/svelte) | `5.2.10` | `5.3.1` |
| [@tsconfig/svelte](https://github.com/tsconfig/bases/tree/HEAD/bases) | `5.0.6` | `5.0.7` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.0.11` | `20.5.3` |
| [jsdom](https://github.com/jsdom/jsdom) | `27.3.0` | `27.4.0` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.45.5` | `5.50.0` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.3.4` | `4.3.6` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `7.2.6` | `7.3.1` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.16` | `4.0.18` |



Updates `axios` from 1.13.2 to 1.13.5
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.13.2...v1.13.5)

Updates `@sveltejs/vite-plugin-svelte` from 6.2.1 to 6.2.4
- [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@6.2.4/packages/vite-plugin-svelte)

Updates `@testing-library/svelte` from 5.2.10 to 5.3.1
- [Release notes](https://github.com/testing-library/svelte-testing-library/releases)
- [Changelog](https://github.com/testing-library/svelte-testing-library/blob/main/CHANGELOG.md)
- [Commits](https://github.com/testing-library/svelte-testing-library/commits/@testing-library/svelte@5.3.1/packages/svelte)

Updates `@tsconfig/svelte` from 5.0.6 to 5.0.7
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `happy-dom` from 20.0.11 to 20.5.3
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.0.11...v20.5.3)

Updates `jsdom` from 27.3.0 to 27.4.0
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Changelog](https://github.com/jsdom/jsdom/blob/main/Changelog.md)
- [Commits](jsdom/jsdom@27.3.0...27.4.0)

Updates `svelte` from 5.45.5 to 5.50.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.50.0/packages/svelte)

Updates `svelte-check` from 4.3.4 to 4.3.6
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.3.4...svelte-check@4.3.6)

Updates `vite` from 7.2.6 to 7.3.1
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.1/packages/vite)

Updates `vitest` from 4.0.16 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@sveltejs/vite-plugin-svelte"
  dependency-version: 6.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: "@testing-library/svelte"
  dependency-version: 5.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: "@tsconfig/svelte"
  dependency-version: 5.0.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: happy-dom
  dependency-version: 20.5.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: jsdom
  dependency-version: 27.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: svelte
  dependency-version: 5.50.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: svelte-check
  dependency-version: 4.3.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
- dependency-name: vite
  dependency-version: 7.3.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-patch
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Feb 9, 2026

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants