Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	@types/cookie

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update dependency cookie to ^0.7.0 [security]
• chore(deps): update dependency @types/cookie to v1
• chore(deps): update dependency svelte to v5

Detected dependencies

github-actions

.github/workflows/audit.yml

• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• node 22.x

.github/workflows/ci.yml

• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• actions/upload-artifact v4
• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• node 22
• node 22
• node 22

.github/workflows/release.yml

• actions/checkout v5
• pnpm/action-setup v4.1.0
• actions/setup-node v4
• changesets/action v1
• node 22.x

npm

package.json

• @changesets/cli ^2.29.5
• @sveltejs/eslint-config ^8.2.0
• @svitejs/changesets-changelog-github-compact ^1.2.0
• eslint ^9.29.0
• prettier ^3.6.0
• prettier-plugin-svelte ^3.4.0
• typescript-eslint ^8.39.0
• pnpm >=9.0.0
• pnpm 10.14.0

packages/adapter-auto/package.json

• @sveltejs/kit ^2.0.0

packages/adapter-cloudflare/package.json

• @cloudflare/workers-types ^4.20250507.0
• worktop 0.8.0-next.18
• @sveltejs/kit ^2.0.0
• wrangler ^4.0.0

packages/adapter-cloudflare/test/apps/pages/package.json

• svelte ^5.35.5
• wrangler ^4.14.3

packages/adapter-cloudflare/test/apps/pages/server-side-dep/package.json

packages/adapter-cloudflare/test/apps/workers/package.json

• svelte ^5.35.5
• wrangler ^4.14.3

packages/adapter-cloudflare/test/apps/workers/server-side-dep/package.json

packages/adapter-netlify/package.json

• @iarna/toml ^2.2.5
• set-cookie-parser ^2.6.0
• @netlify/edge-functions ^2.15.1
• @netlify/functions ^4.0.0
• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• @types/set-cookie-parser ^2.4.7
• @sveltejs/kit ^2.4.0

packages/adapter-netlify/test/apps/basic/package.json

• netlify-cli ^23.0.0
• svelte ^5.23.1

packages/adapter-netlify/test/apps/edge/package.json

• netlify-cli ^23.0.0
• svelte ^5.23.1

packages/adapter-node/package.json

• @rollup/plugin-commonjs ^28.0.1
• @rollup/plugin-json ^6.1.0
• @rollup/plugin-node-resolve ^16.0.0
• @polka/url ^1.0.0-next.28
• polka ^1.0.0-next.28
• sirv ^3.0.0
• @sveltejs/kit ^2.4.0

packages/adapter-static/package.json

• sirv ^3.0.0
• svelte ^5.35.5
• @sveltejs/kit ^2.0.0

packages/adapter-static/test/apps/prerendered/package.json

• sirv-cli ^3.0.0
• svelte ^5.35.5

packages/adapter-static/test/apps/spa/package.json

• sirv-cli ^3.0.0
• svelte ^5.35.5

packages/adapter-vercel/package.json

• @vercel/nft ^0.30.0
• @sveltejs/kit ^2.4.0

packages/amp/package.json

• @sveltejs/kit ^1.0.0 || ^2.0.0

packages/enhanced-img/package.json

• magic-string ^0.30.5
• sharp ^0.34.1
• svelte-parse-markup ^0.1.5
• vite-imagetools ^8.0.0
• zimmerframe ^1.1.2
• @types/estree ^1.0.5
• svelte ^5.35.5
• @sveltejs/vite-plugin-svelte ^6.0.0
• svelte ^5.0.0
• vite ^6.3.0 || >=7.0.0

packages/kit/package.json

• @standard-schema/spec ^1.0.0
• @sveltejs/acorn-typescript ^1.0.5
• @types/cookie ^0.6.0
• acorn ^8.14.1
• cookie ^0.6.0
• devalue ^5.1.0
• esm-env ^1.2.2
• kleur ^4.1.5
• magic-string ^0.30.5
• mrmime ^2.0.0
• sade ^1.8.1
• set-cookie-parser ^2.6.0
• sirv ^3.0.0
• @opentelemetry/api ^1.0.0
• @types/connect ^3.4.38
• @types/set-cookie-parser ^2.4.7
• dts-buddy ^0.6.2
• svelte ^5.35.5
• svelte-preprocess ^6.0.0
• @sveltejs/vite-plugin-svelte ^3.0.0 || ^4.0.0-next.1 || ^5.0.0 || ^6.0.0-next.0
• @opentelemetry/api ^1.0.0
• svelte ^4.0.0 || ^5.0.0-next.0
• vite ^5.0.3 || ^6.0.0 || ^7.0.0-beta.0
• node >=18.13

packages/kit/src/core/sync/write_types/test/actions/package.json

packages/kit/src/core/sync/write_types/test/app-types/package.json

packages/kit/src/core/sync/write_types/test/layout-advanced/package.json

packages/kit/src/core/sync/write_types/test/layout/package.json

packages/kit/src/core/sync/write_types/test/param-type-inference/package.json

packages/kit/src/core/sync/write_types/test/simple-page-server-and-shared/package.json

packages/kit/src/core/sync/write_types/test/simple-page-server-only/package.json

packages/kit/src/core/sync/write_types/test/simple-page-shared-only/package.json

packages/kit/src/core/sync/write_types/test/slugs-layout-not-all-pages-have-load/package.json

packages/kit/src/core/sync/write_types/test/slugs/package.json

packages/kit/test/apps/amp/package.json

• dropcss ^1.0.16
• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/basics/package.json

• @opentelemetry/api ^1.9.0
• @opentelemetry/sdk-node ^0.203.0
• @opentelemetry/sdk-trace-node ^2.0.1
• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/dev-only/_test_dependencies/cjs-only/package.json

packages/kit/test/apps/dev-only/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/embed/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/hash-based-routing/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/no-ssr/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/options-2/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/options/package.json

• @fontsource/libre-barcode-128-text ^5.1.0
• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/prerendered-app-error-pages/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/apps/writes/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/prerender-entry-generator-mismatch/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/prerenderable-incorrect-fragment/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/prerenderable-not-prerendered/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/private-dynamic-env-dynamic-import/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/private-dynamic-env/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/private-static-env-dynamic-import/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/private-static-env/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/server-only-folder-dynamic-import/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/server-only-folder/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/server-only-module-dynamic-import/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/server-only-module/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/service-worker-dynamic-public-env/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/service-worker-private-env/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/apps/syntax-error/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/build-errors/package.json

packages/kit/test/prerendering/basics/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/prerendering/options/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/kit/test/prerendering/paths-base/package.json

• svelte ^5.35.5
• svelte-check ^4.1.1

packages/package/package.json

• chokidar ^4.0.3
• kleur ^4.1.5
• sade ^1.8.1
• semver ^7.5.4
• svelte2tsx ~0.7.33
• @types/semver ^7.5.6
• prettier ^3.1.1
• svelte ^5.35.5
• svelte-preprocess ^6.0.0
• svelte ^3.44.0 || ^4.0.0 || ^5.0.0-next.1
• node ^16.14 || >=18

packages/package/test/errors/no-lib-folder/package.json

packages/package/test/fixtures/assets/package.json

• svelte ^4.0.0

packages/package/test/fixtures/emitTypes-false/package.json

• svelte ^4.0.0

packages/package/test/fixtures/javascript/package.json

• svelte ^4.0.0

packages/package/test/fixtures/resolve-alias/package.json

• svelte ^4.0.0

packages/package/test/fixtures/svelte-3-types/package.json

• svelte ^3.0.0 || ^4.0.0

packages/package/test/fixtures/svelte-kit/package.json

• svelte ^4.0.0

packages/package/test/fixtures/tsconfig-specified/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-declaration-map/package.json

• svelte ^5.0.0

packages/package/test/fixtures/typescript-esnext/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-nodenext/package.json

• svelte ^4.0.0

packages/package/test/fixtures/typescript-svelte-config/package.json

• svelte ^4.0.0

packages/package/test/watch/expected/package.json

packages/package/test/watch/package.json

• svelte ^4.0.0

packages/test-redirect-importer/package.json

playgrounds/basic/package.json

• prettier ^3.3.2
• prettier-plugin-svelte ^3.2.6
• publint ^0.3.0
• svelte ^5.35.5
• svelte-check ^4.1.1

pnpm-workspace.yaml

• @playwright/test ^1.51.1
• @sveltejs/vite-plugin-svelte ^6.0.0-next.3
• vitest ^3.2.3
• vite ^6.3.5

---

• Check this box to trigger a request for Renovate to run again on this repository

[enBonnet]

Should we pin all our dependencies? @Rich-Harris @benmccann

[benmccann]

There's a pnpm-lock.yaml that acts as a lock file. We don't need or want to pin our dependencies beyond that. Please don't ping specific maintainers