Update all non-major dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@iconify-json/lucide	1.2.77 → 1.2.87
@iconify-json/simple-icons	1.2.60 → 1.2.68
@sveltejs/vite-plugin-svelte (source)	6.2.1 → 6.2.4
@unocss/preset-icons (source)	66.5.9 → 66.6.0
@unocss/preset-uno (source)	66.5.9 → 66.6.0
@unocss/preset-web-fonts (source)	66.5.9 → 66.6.0
@unocss/reset (source)	66.5.9 → 66.6.0
@unocss/transformer-directives (source)	66.5.9 → 66.6.0
@unocss/vite (source)	66.5.9 → 66.6.0
esbuild	0.27.0 → 0.27.2
pnpm (source)	10.24.0 → 10.28.2
prettier (source)	3.7.3 → 3.8.1
prettier-plugin-svelte	3.4.0 → 3.4.1
prettier-plugin-tailwindcss	0.7.1 → 0.7.2
remsg	1.1.0 → 1.1.1
svelte (source)	5.45.2 → 5.49.1
svelte-check	4.3.4 → 4.3.6
svelte-multiselect (source)	11.3.0 → 11.6.0
vite (source)	7.2.4 → 7.3.1

---

Release Notes

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v6.2.4

Compare Source

Patch Changes

• fix(hmr): ensure that svelte files are recompiled and updated css modules returned correctly when reported out of order (#​1258)

v6.2.3

Compare Source

Patch Changes

• fix(filter): ignore zero-tagged ids per rollup convention (#​1255)

v6.2.2

Compare Source

Patch Changes

• Update experimental support for rolldown-vite to vite 8 beta (#​1246)

• perf: switch from debug to obug (smaller, esm-only) (#​1241)

unocss/unocss (@​unocss/preset-icons)

v66.6.0

Compare Source

   🚀 Features

• core:
  • Add allLayers option to output all layer names  -  by @​zyyv in #​5057 (b55b4)
• preset-mini, preset-wind4:
  • Add stretch keyword for width/height  -  by @​zyyv in #​5048 (126d1)
  • Optimize contain-intrinsic-size rule close #​5045  -  by @​zyyv in #​5045 (d5346)

   🐞 Bug Fixes

• build: Remove tsconfig paths mapping and adjust bundle config  -  by @​Jungzl and @​zyyv in #​5052 (55748)
• cli: Avoid clearing cache early to prevent race condition in watch mode  -  by @​zyyv in #​5054 (6bf89)
• svelte-scoped: Explicit export of types to prevent node error  -  by @​henrikvilhelmberglund in #​5067 (42670)
• vscode: Not use catalog version of @types/vscode  -  by @​Jungzl in #​5034 (54769)

    View changes on GitHub

v66.5.12

Compare Source

   🚀 Features

• Enhance style injection logic to support custom root elements  -  by @​octavio1243 in #​5027 (70f1b)

   🐞 Bug Fixes

• playground: Mock invalidate function in fakePluginContext  -  by @​zyyv (5e93d)
• preset-mini: Correct tsdown external configuration  -  by @​zyyv in #​5031 (0107e)
• preset-wind3, preset-wind4: Update column generate value from container  -  by @​zyyv in #​5030 (46860)
• transformer-attributify-jsx: Falls back to regular expression when babel parse error  -  by @​zyyv and Copilot in #​5032 (38cc8)

    View changes on GitHub

v66.5.11

Compare Source

   🚀 Features

• Support Vite 8  -  by @​sxzz in #​5011 (115ee)

   🐞 Bug Fixes

• inspector: Prevent blinking after toggling dark  -  by @​liangmiQwQ in #​5023 (c9651)
• preset-mini: Resolve nested theme colors with dashed keys  -  by @​nlemoine in #​5021 (8e7db)

    View changes on GitHub

v66.5.10

Compare Source

   🚀 Features

• core: Allow postprocessors to append or remove rules  -  by @​Menci and @​zyyv in #​5010 (298de)
• vite: Add virtualModulePrefix option to support for custom virtual module prefix  -  by @​zyyv and @​liujiayii in #​5008 (1819f)

   🐞 Bug Fixes

• config: Should merge inlineConfig when load config  -  by @​zyyv (37452)
• preset-wind4: Support special color key with alpha close #​4998  -  by @​zyyv in #​4998 (e43d0)
• rule-utils: Escape rule prefix close Group descendant selectors and prefixes Fixes #​5004  -  by @​zyyv in #​5004 (dba52)

    View changes on GitHub

evanw/esbuild (esbuild)

v0.27.2

Compare Source

• Allow import path specifiers starting with #/ (#​4361)

  Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

  This change was contributed by @​hybrist.

• Automatically add the -webkit-mask prefix (#​4357, #​4358)

  This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:

  /* Original code */
  main {
    mask: url(x.png) center/5rem no-repeat
  }
  
  /* Old output (with --target=chrome110) */
  main {
    mask: url(x.png) center/5rem no-repeat;
  }
  
  /* New output (with --target=chrome110) */
  main {
    -webkit-mask: url(x.png) center/5rem no-repeat;
    mask: url(x.png) center/5rem no-repeat;
  }

  This change was contributed by @​BPJEnnova.

• Additional minification of switch statements (#​4176, #​4359)

  This release contains additional minification patterns for reducing switch statements. Here is an example:

  // Original code
  switch (x) {
    case 0:
      foo()
      break
    case 1:
    default:
      bar()
  }
  
  // Old output (with --minify)
  switch(x){case 0:foo();break;case 1:default:bar()}
  
  // New output (with --minify)
  x===0?foo():bar();

• Forbid using declarations inside switch clauses (#​4323)

  This is a rare change to remove something that was previously possible. The Explicit Resource Management proposal introduced using declarations. These were previously allowed inside case and default clauses in switch statements. This had well-defined semantics and was already widely implemented (by V8, SpiderMonkey, TypeScript, esbuild, and others). However, it was considered to be too confusing because of how scope works in switch statements, so it has been removed from the specification. This edge case will now be a syntax error. See tc39/proposal-explicit-resource-management#215 and rbuckton/ecma262#14 for details.

  Here is an example of code that is no longer allowed:

  switch (mode) {
    case 'read':
      using readLock = db.read()
      return readAll(readLock)
  
    case 'write':
      using writeLock = db.write()
      return writeAll(writeLock)
  }

  That code will now have to be modified to look like this instead (note the additional { and } block statements around each case body):

  switch (mode) {
    case 'read': {
      using readLock = db.read()
      return readAll(readLock)
    }
    case 'write': {
      using writeLock = db.write()
      return writeAll(writeLock)
    }
  }

  This is not being released in one of esbuild's breaking change releases since this feature hasn't been finalized yet, and esbuild always tracks the current state of the specification (so esbuild's previous behavior was arguably incorrect).

v0.27.1

Compare Source

• Fix bundler bug with var nested inside if (#​4348)

  This release fixes a bug with the bundler that happens when importing an ES module using require (which causes it to be wrapped) and there's a top-level var inside an if statement without being wrapped in a { ... } block (and a few other conditions). The bundling transform needed to hoist these var declarations outside of the lazy ES module wrapper for correctness. See the issue for details.

• Fix minifier bug with for inside try inside label (#​4351)

  This fixes an old regression from version v0.21.4. Some code was introduced to move the label inside the try statement to address a problem with transforming labeled for await loops to avoid the await (the transformation involves converting the for await loop into a for loop and wrapping it in a try statement). However, it introduces problems for cross-compiled JVM code that uses all three of these features heavily. This release restricts this transform to only apply to for loops that esbuild itself generates internally as part of the for await transform. Here is an example of some affected code:

  // Original code
  d: {
    e: {
      try {
        while (1) { break d }
      } catch { break e; }
    }
  }
  
  // Old output (with --minify)
  a:try{e:for(;;)break a}catch{break e}
  
  // New output (with --minify)
  a:e:try{for(;;)break a}catch{break e}

• Inline IIFEs containing a single expression (#​4354)

  Previously inlining of IIFEs (immediately-invoked function expressions) only worked if the body contained a single return statement. Now it should also work if the body contains a single expression statement instead:

  // Original code
  const foo = () => {
    const cb = () => {
      console.log(x())
    }
    return cb()
  }
  
  // Old output (with --minify)
  const foo=()=>(()=>{console.log(x())})();
  
  // New output (with --minify)
  const foo=()=>{console.log(x())};

• The minifier now strips empty finally clauses (#​4353)

  This improvement means that finally clauses containing dead code can potentially cause the associated try statement to be removed from the output entirely in minified builds:

  // Original code
  function foo(callback) {
    if (DEBUG) stack.push(callback.name);
    try {
      callback();
    } finally {
      if (DEBUG) stack.pop();
    }
  }
  
  // Old output (with --minify --define:DEBUG=false)
  function foo(a){try{a()}finally{}}
  
  // New output (with --minify --define:DEBUG=false)
  function foo(a){a()}

• Allow tree-shaking of the Symbol constructor

  With this release, calling Symbol is now considered to be side-effect free when the argument is known to be a primitive value. This means esbuild can now tree-shake module-level symbol variables:

  // Original code
  const a = Symbol('foo')
  const b = Symbol(bar)
  
  // Old output (with --tree-shaking=true)
  const a = Symbol("foo");
  const b = Symbol(bar);
  
  // New output (with --tree-shaking=true)
  const b = Symbol(bar);

pnpm/pnpm (pnpm)

v10.28.2

Compare Source

v10.28.1

Compare Source

v10.28.0

Compare Source

v10.27.0

Compare Source

v10.26.2: pnpm 10.26.2

Compare Source

Patch Changes

• Improve error message when a package version exists but does not meet the minimumReleaseAge constraint. The error now clearly states that the version exists and shows a human-readable time since release (e.g., "released 6 hours ago") #​10307.

• Fix installation of Git dependencies using annotated tags #​10335.

  Previously, pnpm would store the annotated tag object's SHA in the lockfile instead of the actual commit SHA. This caused ERR_PNPM_GIT_CHECKOUT_FAILED errors because the checked-out commit hash didn't match the stored tag object hash.

• Binaries of runtime engines (Node.js, Deno, Bun) are written to node_modules/.bin before lifecycle scripts (install, postinstall, prepare) are executed #​10244.

• Try to avoid making network calls with preferOffline #​10334.

Platinum Sponsors

Gold Sponsors

v10.26.1: pnpm 10.26.1

Compare Source

Patch Changes

• Don't fail on pnpm add, when blockExoticSubdeps is set to true #​10324.
• Always resolve git references to full commits and ensure HEAD points to the commit after checkout #​10310.

Platinum Sponsors

Gold Sponsors

v10.26.0

Compare Source

v10.25.0

Compare Source

prettier/prettier (prettier)

v3.8.1

Compare Source

v3.8.0

Compare Source

diff

🔗 Release note

v3.7.4

Compare Source

diff

LWC: Avoid quote around interpolations (#​18383 by @​kovsu)

<!-- Input -->
<div foo={bar}>   </div>

<!-- Prettier 3.7.3 (--embedded-language-formatting off) -->
<div foo="{bar}"></div>

<!-- Prettier 3.7.4 (--embedded-language-formatting off) -->
<div foo={bar}></div>

TypeScript: Fix comment inside union type gets duplicated (#​18393 by @​fisker)

// Input
type Foo = (/** comment */ a | b) | c;

// Prettier 3.7.3
type Foo = /** comment */ (/** comment */ a | b) | c;

// Prettier 3.7.4
type Foo = /** comment */ (a | b) | c;

TypeScript: Fix unstable comment print in union type comments (#​18395 by @​fisker)

// Input
type X = (A | B) & (
  // comment
  A | B
);

// Prettier 3.7.3 (first format)
type X = (A | B) &
  (// comment
  A | B);

// Prettier 3.7.3 (second format)
type X = (
  | A
  | B // comment
) &
  (A | B);

// Prettier 3.7.4
type X = (A | B) &
  // comment
  (A | B);

sveltejs/prettier-plugin-svelte (prettier-plugin-svelte)

v3.4.1

Compare Source

tailwindlabs/prettier-plugin-tailwindcss (prettier-plugin-tailwindcss)

v0.7.2

Compare Source

Fixed

• Load compatible plugins sequentially to work around race conditions in Node.js (#​412)
• Fix compatibility with prettier-plugin-svelte when using Prettier v3.7+ (#​418)

beeequeue/remsg (remsg)

v1.1.1

Compare Source

Patch Changes

• #​41 3396d37 - Basic maintenance work. Replaced build tool.

• #​41 3396d37 - Enabled trusted publishing.

• #​41 3396d37 - Unbundled binary-util

sveltejs/svelte (svelte)

v5.49.1

Compare Source

Patch Changes

• fix: merge consecutive large text nodes (#​17587)

• fix: only create async functions in SSR output when necessary (#​17593)

• fix: properly separate multiline html blocks from each other in print() (#​17319)

• fix: prevent unhandled exceptions arising from dangling promises in <script> (#​17591)

v5.49.0

Compare Source

Minor Changes

• feat: allow passing ShadowRootInit object to custom element shadow option (#​17088)

Patch Changes

• fix: throw for unset createContext get on the server (#​17580)

• fix: reset effects inside skipped branches (#​17581)

• fix: preserve old dependencies when updating reaction inside fork (#​17579)

• fix: more conservative assignment_value_stale warnings (#​17574)

• fix: disregard popover elements when determining whether an element has content (#​17367)

• fix: fire introstart/outrostart events after delay, if specified (#​17567)

• fix: increment signal versions when discarding forks (#​17577)

v5.48.5

Compare Source

Patch Changes

• fix: run boundary onerror callbacks in a microtask, in case they result in the boundary's destruction (#​17561)

• fix: prevent unintended exports from namespaces (#​17562)

• fix: each block breaking with effects interspersed among items (#​17550)

v5.48.4

Compare Source

Patch Changes

• fix: avoid duplicating escaped characters in CSS AST (#​17554)

v5.48.3

Compare Source

Patch Changes

• fix: hydration failing with settled async blocks (#​17539)

• fix: add pointer and touch events to a11y_no_static_element_interactions warning (#​17551)

• fix: handle false dynamic components in SSR (#​17542)

• fix: avoid unnecessary block effect re-runs after async work completes (#​17535)

• fix: avoid using dev-mode array.includes wrapper on internal array checks (#​17536)

v5.48.2

Compare Source

Patch Changes

• fix: export wait function from internal client index (#​17530)

v5.48.1

Compare Source

Patch Changes

• fix: hoist snippets above const in same block (#​17516)

• fix: properly hydrate await in {@​html} (#​17528)

• fix: batch resolution of async work (#​17511)

• fix: account for empty statements when visiting in transform async (#​17524)

• fix: avoid async overhead for already settled promises (#​17461)

• fix: better code generation for const tags with async dependencies (#​17518)

v5.48.0

Compare Source

Minor Changes

• feat: export parseCss from svelte/compiler (#​17496)

Patch Changes

• fix: handle non-string values in svelte:element this attribute (#​17499)

• fix: faster deduplication of dependencies (#​17503)

v5.47.1

Compare Source

Patch Changes

• fix: trigger selectedcontent reactivity (#​17486)

v5.47.0

Compare Source

Minor Changes

• feat: customizable <select> elements (#​17429)

Patch Changes

• fix: mark subtree of svelte boundary as dynamic (#​17468)

• fix: don't reset static elements with debug/snippets (#​17477)

v5.46.4

Compare Source

Patch Changes

• fix: use devalue.uneval to serialize hydratable keys (ef81048e238844b729942441541d6dcfe6c8ccca)

v5.46.3

Compare Source

Patch Changes

• fix: reconnect clean deriveds when they are read in a reactive context (#​17362)

• fix: don't transform references of function declarations in legacy mode (#​17431)

• fix: notify deriveds of changes to sources inside forks (#​17437)

• fix: always reconnect deriveds in get, when appropriate (#​17451)

• fix: prevent derives without dependencies from ever re-running (286b40c4526ce9970cb81ddd5e65b93b722fe468)

• fix: correctly update writable deriveds inside forks (#​17437)

• fix: remove $inspect calls after await expressions when compiling for production server code (#​17407)

• fix: clear batch between runs (#​17424)

• fix: adjust loc property of Program nodes created from <script> elements (#​17428)

• fix: don't revert source to UNINITIALIZED state when time travelling (#​17409)

v5.46.1

Compare Source

Patch Changes

• fix: type currentTarget in on function (#​17370)

• fix: skip static optimisation for stateless deriveds after await (#​17389)

• fix: prevent infinite loop when HMRing a component with an await (#​17380)

v5.46.0

Compare Source

Minor Changes

• feat: Add csp option to render(...), and emit hashes when using hydratable (#​17338)

v5.45.10

Compare Source

Patch Changes

• fix: race condition when importing AsyncLocalStorage (#​17350)

v5.45.9

Compare Source

Patch Changes

• fix: correctly reschedule deferred effects when reviving a batch after async work (#​17332)

• fix: correctly print !doctype during print (#​17341)

v5.45.8

Compare Source

Patch Changes

• fix: set AST root.start to 0 and root.end to template.length (#​17125)

• fix: prevent erroneous state_referenced_locally warnings on prop fallbacks (#​17329)

v5.45.7

Compare Source

Patch Changes

• fix: Add <textarea wrap="off"> as a valid attribute value (#​17326)

• fix: add more css selectors to print() (#​17330)

• fix: don't crash on hydratable serialization failure (#​17315)

v5.45.6

Compare Source

Patch Changes

• fix: don't issue a11y warning for <video> without captions if it has no src (#​17311)

• fix: add srcObject to permitted <audio>/<video> attributes (#​17310)

v5.45.5

Compare Source

Patch Changes

• fix: correctly reconcile each blocks after outroing branches are resumed (#​17258)

• fix: destroy each items after siblings are resumed (#​17258)

v5.45.4

Compare Source

Patch Changes

• chore: move DOM-related effect properties to effect.nodes (#​17293)

• fix: allow $props.id() to occur after an await (#​17285)

• fix: keep reactions up to date even when read outside of effect (#​17295)

v5.45.3

Compare Source

Patch Changes

• add props to state_referenced_locally (#​17266)

• fix: preserve node locations for better sourcemaps (#​17269)

• fix: handle cross-realm Promises in hydratable (#​17284)

sveltejs/language-tools (svelte-check)

v4.3.6

Compare Source

Patch Changes

• fix: don't hoist type/snippet referencing $store (#​2926)

v4.3.5

Compare Source

Patch Changes

• fix: ensure await-block type is preserved in the latest Svelte version (#​2895)

janosh/svelte-multiselect (svelte-multiselect)

v11.6.0

Compare Source

25 January 2026

• Add fallback for crypto.randomUUID to prevent crash in non-secure contexts by @​AlessioBugetti in #​386
• Add pinned dropdown feature to Nav component by @​janosh in #​387
• Add selection history with undo/redo support by @​janosh in #​388
• Reduce live-examples dependencies by 4 packages by @​janosh in #​390

v11.5.2

Compare Source

What's Changed

• Enhance tooltip attachment with new options and accessibility by @​janosh in #​378
• Use :where() for user-overridable CSS selectors by @​janosh in #​381
• Add heading-anchors module for SSR-compatible heading links by @​janosh in #​382
• Add 4 new event callbacks for user feedback and analytics by @​janosh in #​383

Full Changelog: janosh/svelte-multiselect@v11.5.0...v11.5.2

v11.5.1

Compare Source

18 January 2026

• Enhance tooltip attachment with new options and accessibility by @​janosh in #​378
• Use :where() for user-overridable CSS selectors by @​janosh in #​381
• Add heading-anchors module for SSR-compatible heading links by @​janosh in #​382
• Add 4 new event callbacks for user feedback and analytics by @​janosh in #​383
• Enhance Nav component with extended route configuration by @​janosh in #​384

v11.5.0

Compare Source

4 January 2026

• Add MultiSelect onreorder event and fire onchange event on drag-drop reordering by @​janosh in #​373
• fix: prevent extra binding updates on init and selection by @​janosh in #​374
• Option grouping with collapsible headers and per-group select all by @​janosh in #​375
• resizable attachment + MultiSelect keyboard shortcuts + more test coverage by @​janosh in [#​376](https:/

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.