Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Package	Replacement PR?
npm	@types/cookie

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency @sveltejs/vite-plugin-svelte to v6
• chore(deps): update dependency @types/cookie to v1
• chore(deps): update dependency vite-imagetools to v10

Detected Dependencies

github-actions (8)

.github/actions/platform-test/action.yml (1)

• actions/upload-artifact v7

.github/actions/vercel-deploy/action.yml (3)

• pnpm/action-setup v4.3.0
• actions/setup-node v6
• node 24

.github/workflows/audit.yml (4)

• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• node 24.x

.github/workflows/autofix-lint.yml (5)

• actions/github-script v8
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• node 24

.github/workflows/ci.yml (31)

• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/upload-artifact v7
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/upload-artifact v7
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/upload-artifact v7
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• actions/upload-artifact v7
• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• denoland/setup-deno v2
• node 24
• node 24
• node 24
• node 24
• deno ^2.2.4

.github/workflows/platform-tests-all.yml

.github/workflows/platform-tests-vercel.yml (1)

• actions/checkout v6

.github/workflows/release.yml (5)

• actions/checkout v6
• pnpm/action-setup v4.3.0
• actions/setup-node v6
• changesets/action v1
• node 24.x

npm (14)

package.json (2)

• pnpm >=9.0.0
• pnpm 10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be

packages/adapter-auto/package.json (1)

• @sveltejs/kit ^2.0.0

packages/adapter-cloudflare/package.json (4)

• @cloudflare/workers-types ^4.20250507.0
• worktop 0.8.0-next.18
• @sveltejs/kit ^2.0.0
• wrangler ^4.0.0

packages/adapter-netlify/package.json (4)

• @iarna/toml ^2.2.5
• @netlify/node-cookies ^0.1.0
• @netlify/types ^2.1.0
• @sveltejs/kit ^2.31.0

packages/adapter-node/package.json (5)

• @rollup/plugin-commonjs ^29.0.0
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• sirv ^3.0.2
• @sveltejs/kit ^2.4.0

packages/adapter-static/package.json (2)

• sirv ^3.0.0
• @sveltejs/kit ^2.0.0

packages/adapter-vercel/package.json (3)

• @vercel/nft ^1.3.2
• @sveltejs/kit ^2.4.0
• node >=20.0

packages/amp/package.json (1)

• @sveltejs/kit ^1.0.0 || ^2.0.0

packages/enhanced-img/package.json (8)

• magic-string ^0.30.5
• sharp ^0.34.1
• svelte-parse-markup ^0.1.5
• vite-imagetools ^9.0.3 → [Updates: ^10.0.0]
• zimmerframe ^1.1.2
• @sveltejs/vite-plugin-svelte ^6.0.0
• svelte ^5.0.0
• vite ^6.3.0 || >=7.0.0

packages/kit/package.json (17)

• @standard-schema/spec ^1.0.0
• @sveltejs/acorn-typescript ^1.0.5
• @types/cookie ^0.6.0 → [Updates: ^1.0.0]
• acorn ^8.14.1
• devalue ^5.6.4
• esm-env ^1.2.2
• kleur ^4.1.5
• magic-string ^0.30.5
• mrmime ^2.0.0
• set-cookie-parser ^3.0.0
• sirv ^3.0.0
• @opentelemetry/api ^1.0.0
• @sveltejs/vite-plugin-svelte ^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0 || ^7.0.0
• @opentelemetry/api ^1.0.0
• svelte ^4.0.0 || ^5.0.0-next.0
• vite ^5.0.3 || ^6.0.0 || ^7.0.0-beta.0 || ^8.0.0
• node >=18.13

packages/package/package.json (7)

• chokidar ^5.0.0
• kleur ^4.1.5
• sade ^1.8.1
• semver ^7.5.4
• svelte2tsx ~0.7.33
• svelte ^3.44.0 || ^4.0.0 || ^5.0.0-next.1
• node ^16.14 || >=18

packages/test-redirect-importer/package.json

playgrounds/basic/package.json

pnpm-workspace.yaml (42)

• @changesets/cli ^2.29.6
• @fontsource/libre-barcode-128-text ^5.1.0
• @netlify/dev ^4.11.2
• @netlify/edge-functions ^3.0.0
• @netlify/functions ^5.0.0
• @opentelemetry/sdk-node ^0.213.0
• @opentelemetry/sdk-trace-node ^2.0.1
• @playwright/test 1.58.2
• @polka/url ^1.0.0-next.28
• @rollup/plugin-commonjs ^29.0.0
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• @sveltejs/eslint-config ^9.0.0
• @sveltejs/vite-plugin-svelte ^6.0.0-next.3
• @svitejs/changesets-changelog-github-compact ^1.2.0
• @types/connect ^3.4.38
• @types/estree ^1.0.5
• @types/semver ^7.5.6
• @types/set-cookie-parser ^2.4.7
• @vitest/browser-playwright ^4.0.0
• dropcss ^1.0.16
• dts-buddy ^0.7.0
• eslint ^10.0.0
• polka ^1.0.0-next.28
• publint ^0.3.0
• prettier ^3.8.1
• prettier-plugin-svelte ^3.5.1
• semver ^7.5.4
• sirv-cli ^3.0.0
• svelte ^5.53.5
• svelte-check ^4.4.1
• svelte-preprocess ^6.0.0
• valibot ^1.1.0
• vite ^6.3.5 → [Updates: ^7.0.0]
• vitest ^4.0.0
• wrangler ^4.14.3
• vite ^5.4.21 → [Updates: ^7.0.0]
• @sveltejs/vite-plugin-svelte ^4.0.0 → [Updates: ^6.0.0]
• vite ^8.0.0-beta.18
• @sveltejs/vite-plugin-svelte ^7.0.0-next.0
• vite ^6.0.0 → [Updates: ^7.0.0]
• @sveltejs/vite-plugin-svelte ^5.0.0 → [Updates: ^6.0.0]

---

• Check this box to trigger a request for Renovate to run again on this repository

[enBonnet]

Should we pin all our dependencies? @Rich-Harris @benmccann

[benmccann]

There's a pnpm-lock.yaml that acts as a lock file. We don't need or want to pin our dependencies beyond that. Please don't ping specific maintainers