Skip to content

build(deps-dev): bump the npm group across 2 directories with 6 updates - #80

Merged
robo-monk merged 1 commit into
mainfrom
dependabot/npm_and_yarn/site/npm-6158f14f49
Nov 4, 2026
Merged

build(deps-dev): bump the npm group across 2 directories with 6 updates#80
robo-monk merged 1 commit into
mainfrom
dependabot/npm_and_yarn/site/npm-6158f14f49

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 4 updates in the /site directory: @sveltejs/adapter-static, @sveltejs/kit, marked and svelte.
Bumps the npm group with 5 updates in the /web directory:

Package From To
@sveltejs/adapter-static 4.0.0 4.0.1
@sveltejs/kit 3.1.0 3.1.1
svelte 5.57.2 5.57.3
@livekit/protocol 1.53.0 1.53.1
@types/node 26.6.5 26.6.6

Updates @sveltejs/adapter-static from 4.0.0 to 4.0.1

Release notes

Sourced from @​sveltejs/adapter-static's releases.

@​sveltejs/adapter-static@​4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Changelog

Sourced from @​sveltejs/adapter-static's changelog.

4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Commits
  • 3d85a7a Version Packages
  • 8a81718 fix: escape prerendered paths used in Vercel route patterns
  • 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
  • See full diff in compare view

Updates @sveltejs/kit from 3.1.0 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Commits
  • 3d85a7a Version Packages
  • 9ed55b4 only treat params as a client entrypoint with client-side route resolution
  • ae07803 fix: prevent server-only modules from being imported into browser code via sr...
  • a8f7c1e Merge commit from fork
  • 7993d5e Merge commit from fork
  • 24d8ee4 Merge commit from fork
  • 2c190fe Merge commit from fork
  • 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
  • a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
  • b378468 test: check service worker sourcemaps in options-3
  • Additional commits viewable in compare view

Updates marked from 18.1.1 to 18.1.2

Release notes

Sourced from marked's releases.

v18.1.2

18.1.2 (2026-10-26)

Bug Fixes

  • allow a tab or end of input after a type 6 html block tag name (#4128) (e09c40d)
  • apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145) (5d8e234)
  • cli: await config functions before parsing (#4138) (3a11ad1)
  • cli: create no-clobber output files atomically (#4135) (e7c4f64)
  • do not continue a block quote paragraph from a whitespace-only line (#4134) (42f34a8)
  • expand a tab after the block quote marker to the next tab stop (#4110) (2d3899b)
  • honor per-call async options when composing hooks (#4139) (379be9d)
  • keep a line starting with # but no space in the list item (#4127) (6b63189)
  • keep duplicate link definitions in the tokens (#4132) (2784acc)
  • keep lazy lines after a list in a nested blockquote (#4137) (38c7e55)
  • keep lazy setext underlines in list items as text (#4126) (398234c)
  • render nested image alt formatting as plain text (#4131) (15f59bb)
  • stop an unclosed inline raw tag from unescaping later blocks (#4130) (4562b6f)

Performance Improvements

  • ~16% faster parsing by skipping em/strong masking for runs without *, _ or ~ (#4142) (f0fd3e0)
Commits
  • 5beecae chore(release): 18.1.2 [skip ci]
  • c1e6ca1 chore(deps): update deps (#4168)
  • 3a01ac4 chore: test:redos -> test:recheck (#4167)
  • 15f59bb fix: render nested image alt formatting as plain text (#4131)
  • 2d3899b fix: expand a tab after the block quote marker to the next tab stop (#4110)
  • e09c40d fix: allow a tab or end of input after a type 6 html block tag name (#4128)
  • 398234c fix: keep lazy setext underlines in list items as text (#4126)
  • 6b63189 fix: keep a line starting with # but no space in the list item (#4127)
  • 5d8e234 fix: apply emphasis flanking and rules 9-10 to the whole delimiter run (#4145)
  • 3a11ad1 fix(cli): await config functions before parsing (#4138)
  • Additional commits viewable in compare view

Updates svelte from 5.57.2 to 5.57.3

Release notes

Sourced from svelte's releases.

svelte@5.57.3

Patch Changes

  • fix: use the first valid fallback role in role for a11y checks (#19045)

  • chore: remove obsolete code (#19051)

  • fix: keep creating state sources for property checks during component init (#18949)

  • fix: skip redundant attribute writes during hydration (#18869)

  • fix: track missing state property checks in unowned deriveds (#18944)

  • fix: devalue link in hydratable_serialization_failed error (#18999)

Changelog

Sourced from svelte's changelog.

5.57.3

Patch Changes

  • fix: use the first valid fallback role in role for a11y checks (#19045)

  • chore: remove obsolete code (#19051)

  • fix: keep creating state sources for property checks during component init (#18949)

  • fix: skip redundant attribute writes during hydration (#18869)

  • fix: track missing state property checks in unowned deriveds (#18944)

  • fix: devalue link in hydratable_serialization_failed error (#18999)

Commits

Updates @sveltejs/adapter-static from 4.0.0 to 4.0.1

Release notes

Sourced from @​sveltejs/adapter-static's releases.

@​sveltejs/adapter-static@​4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Changelog

Sourced from @​sveltejs/adapter-static's changelog.

4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1
Commits
  • 3d85a7a Version Packages
  • 8a81718 fix: escape prerendered paths used in Vercel route patterns
  • 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
  • See full diff in compare view

Updates @sveltejs/kit from 3.1.0 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

Commits
  • 3d85a7a Version Packages
  • 9ed55b4 only treat params as a client entrypoint with client-side route resolution
  • ae07803 fix: prevent server-only modules from being imported into browser code via sr...
  • a8f7c1e Merge commit from fork
  • 7993d5e Merge commit from fork
  • 24d8ee4 Merge commit from fork
  • 2c190fe Merge commit from fork
  • 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
  • a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
  • b378468 test: check service worker sourcemaps in options-3
  • Additional commits viewable in compare view

Updates svelte from 5.57.2 to 5.57.3

Release notes

Sourced from svelte's releases.

svelte@5.57.3

Patch Changes

  • fix: use the first valid fallback role in role for a11y checks (#19045)

  • chore: remove obsolete code (#19051)

  • fix: keep creating state sources for property checks during component init (#18949)

  • fix: skip redundant attribute writes during hydration (#18869)

  • fix: track missing state property checks in unowned deriveds (#18944)

  • fix: devalue link in hydratable_serialization_failed error (#18999)

Changelog

Sourced from svelte's changelog.

5.57.3

Patch Changes

  • fix: use the first valid fallback role in role for a11y checks (#19045)

  • chore: remove obsolete code (#19051)

  • fix: keep creating state sources for property checks during component init (#18949)

  • fix: skip redundant attribute writes during hydration (#18869)

  • fix: track missing state property checks in unowned deriveds (#18944)

  • fix: devalue link in hydratable_serialization_failed error (#18999)

Commits

Updates @livekit/protocol from 1.53.0 to 1.53.1

Release notes

Sourced from @​livekit/protocol's releases.

@​livekit/protocol@​1.53.1

Patch Changes

  • Add agent_job_pending webhook event, JS_CANCELLED job status, and JobState.reason (including JSR_RETRYING) - #1860 (@​erikhortsch)

  • Add MigrateJobRequest.jobs, the jobs a reconnecting agent worker still runs, as they were assigned - #1893 (@​davidzhao)

  • Add livekit.agent.CloseReason, the agent session close reasons, for agent evals. - #1887 (@​jmcclanahan)

  • Add NodeStats.forward_scheduling_delay, the p90 time from arrival to dequeue for packets that found their forwarder idle - #1891 (@​boks1971)

  • Add session_summary to MetricsRecordingHeader, for agent evals. - #1884 (@​jmcclanahan)

  • SimulationRun.JobMetrics: how the call ended (end_reason), the simulated caller's languages (caller_language, caller_listen_language), the audio impairments applied to it (impairments), and conversation.backchannel_count. - #1867 (@​u9g)

  • SimulationRun.Job.failure_reason: a machine-readable cause for a failed simulation job, such as the agent never joining the room. - #1867 (@​u9g)

  • SimulationRun.JobMetrics.Turn.text: the words of each turn as the simulation's judges read them. - #1867 (@​u9g)

  • StreamDestination (id, url) on StreamOutput.destinations and UpdateStreamRequest.add_destinations, echoed as StreamInfo.id, so a client can tell its streams apart; RedactStreamKeys redacts destination URLs - #1873 (@​frostbyte73)

Changelog

Sourced from @​livekit/protocol's changelog.

1.53.1

Patch Changes

  • Add agent_job_pending webhook event, JS_CANCELLED job status, and JobState.reason (including JSR_RETRYING) - #1860 (@​erikhortsch)

  • Add MigrateJobRequest.jobs, the jobs a reconnecting agent worker still runs, as they were assigned - #1893 (@​davidzhao)

  • Add livekit.agent.CloseReason, the agent session close reasons, for agent evals. - #1887 (@​jmcclanahan)

  • Add NodeStats.forward_scheduling_delay, the p90 time from arrival to dequeue for packets that found their forwarder idle - #1891 (@​boks1971)

  • Add session_summary to MetricsRecordingHeader, for agent evals. - #1884 (@​jmcclanahan)

  • SimulationRun.JobMetrics: how the call ended (end_reason), the simulated caller's languages (caller_language, caller_listen_language), the audio impairments applied to it (impairments), and conversation.backchannel_count. - #1867 (@​u9g)

  • SimulationRun.Job.failure_reason: a machine-readable cause for a failed simulation job, such as the agent never joining the room. - #1867 (@​u9g)

  • SimulationRun.JobMetrics.Turn.text: the words of each turn as the simulation's judges read them. - #1867 (@​u9g)

Commits
  • 227e255 Version Packages (#1875)
  • 89b74d6 add job details in MigrateJobRequest to track jobs after reconnect (#1893)
  • 78ad907 Add NodeStats.forward_scheduling_delay (#1891)
  • b20af9b agent: add CloseReason enum for agent session close reasons (#1887)
  • ff86c83 metrics: add session_summary to MetricsRecordingHeader (#1884)
  • 46332a0 Add api_key to StartSession for session/key correlation (#1886)
  • 2224feb Update module github.com/go-jose/go-jose/v4 to v4.1.5 (#1809)
  • f1ed081 agent_simulation: report a job's failure_reason, how its call ran, and each t...
  • f09f87a Align server RPC caller timeouts with client SDK (#1879)
  • 78625f8 agent: add agent_job_pending webhook, JS_CANCELLED status and JobState.reason...
  • Additional commits viewable in compare view

Updates @types/node from 26.6.5 to 26.6.6

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps-dev): bump the npm group across 2 directories with 6 updates
8a04c45 
Bumps the npm group with 4 updates in the /site directory: [@sveltejs/adapter-static](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-static), [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit), [marked](https://github.com/markedjs/marked) and [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte).
Bumps the npm group with 5 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@sveltejs/adapter-static](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-static) | `4.0.0` | `4.0.1` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.1.0` | `3.1.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.57.2` | `5.57.3` |
| [@livekit/protocol](https://github.com/livekit/protocol) | `1.53.0` | `1.53.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.5` | `26.6.6` |



Updates `@sveltejs/adapter-static` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-static/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-static@4.0.1/packages/adapter-static)

Updates `@sveltejs/kit` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.1/packages/kit)

Updates `marked` from 18.1.1 to 18.1.2
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.1.1...v18.1.2)

Updates `svelte` from 5.57.2 to 5.57.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte)

Updates `@sveltejs/adapter-static` from 4.0.0 to 4.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-static/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-static@4.0.1/packages/adapter-static)

Updates `@sveltejs/kit` from 3.1.0 to 3.1.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.1/packages/kit)

Updates `svelte` from 5.57.2 to 5.57.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte)

Updates `@livekit/protocol` from 1.53.0 to 1.53.1
- [Release notes](https://github.com/livekit/protocol/releases)
- [Changelog](https://github.com/livekit/protocol/blob/main/CHANGELOG.md)
- [Commits](https://github.com/livekit/protocol/compare/@livekit/protocol@1.53.0...@livekit/protocol@1.53.1)

Updates `@types/node` from 26.6.5 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@sveltejs/adapter-static"
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: marked
  dependency-version: 18.1.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: svelte
  dependency-version: 5.57.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@sveltejs/adapter-static"
  dependency-version: 4.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: svelte
  dependency-version: 5.57.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@livekit/protocol"
  dependency-version: 1.53.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@robo-monk
robo-monk merged commit c633265 into main Nov 4, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/site/npm-6158f14f49 branch November 4, 2026 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@robo-monk