Skip to content

chore(deps): bump the all-dependencies group across 1 directory with 10 updates - #516

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-all-dependencies-07b460605c
Closed

chore(deps): bump the all-dependencies group across 1 directory with 10 updates#516
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-npm_and_yarn-all-dependencies-07b460605c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 10 updates in the / directory:

Package From To
@iconify/json 2.2.525 2.2.528
@sveltejs/kit 3.0.0-next.25 3.0.0-next.27
@types/node 26.4.1 26.5.1
bits-ui 2.19.0 2.19.2
isomorphic-dompurify 3.23.0 4.2.0
rolldown 1.2.7 1.2.8
tailwind-merge 3.6.0 3.7.0
unplugin-icons 23.0.1 24.0.0
wrangler 4.129.0 4.131.2
vite-plus 0.3.0 0.3.2

Updates @iconify/json from 2.2.525 to 2.2.528

Commits

Updates @sveltejs/kit from 3.0.0-next.25 to 3.0.0-next.27

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.0.0-next.27

Major Changes

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

  • breaking: remove Server constructor and SSRManifest from public types (#16876)

  • breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

Minor Changes

  • feat: allow adapters to receive the Svelte config as a function argument when adding Vite plugins (#16986)

  • feat: allow adapters to override getRequest and setResponse during vite dev and vite preview (#16753)

Patch Changes

  • fix: respect paths.relative during development for client files (#17053)

  • fix: clarify circular imports from src/env (#17014)

  • breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

  • fix: record a history traversal before resolving its route (#16959)

  • fix: support coordinate objects from image inputs in remote forms (#16944)

  • fix: walk and copy directories without a stat per file (#16995)

  • fix: widen remote form fields for union schemas and string enums (#16937)

  • fix: respond to HEAD requests without a body (#17036)

  • chore: replace deprecated Vite dev server APIs (#16961)

  • fix: settle a query's pending request in place when its value arrives through set() (#16958)

  • fix: prevent await_reactivity_loss warning and state_unsafe_mutation error when the new version detector runs after an await (#16915)

  • chore: parse page options and remote modules with Vite's parseSync instead of acorn (#16947)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.0.0-next.27

Major Changes

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

  • breaking: remove Server constructor and SSRManifest from public types (#16876)

  • breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

Minor Changes

  • feat: allow adapters to receive the Svelte config as a function argument when adding Vite plugins (#16986)

  • feat: allow adapters to override getRequest and setResponse during vite dev and vite preview (#16753)

Patch Changes

  • fix: respect paths.relative during development for client files (#17053)

  • fix: clarify circular imports from src/env (#17014)

  • breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

  • fix: record a history traversal before resolving its route (#16959)

  • fix: support coordinate objects from image inputs in remote forms (#16944)

  • fix: walk and copy directories without a stat per file (#16995)

  • fix: widen remote form fields for union schemas and string enums (#16937)

  • fix: respond to HEAD requests without a body (#17036)

  • chore: replace deprecated Vite dev server APIs (#16961)

  • fix: settle a query's pending request in place when its value arrives through set() (#16958)

  • fix: prevent await_reactivity_loss warning and state_unsafe_mutation error when the new version detector runs after an await (#16915)

  • chore: parse page options and remote modules with Vite's parseSync instead of acorn (#16947)

3.0.0-next.26

Patch Changes

  • fix: only require the svelte-trusted-html trusted-types policy when client-side code is shipped, allowing builds where all pages have csr: false (#16928)

  • chore: stop externalizing cookie dependency during build (#16936)

... (truncated)

Commits
  • 090d77f Version Packages (next) (#16943)
  • 38c90bf chore: move scroll restoration and focus reset out of client.js (#16980)
  • 9a4b343 fix: make rendered client paths relative during development (#17053)
  • c3b2e8f test: reproduce relative dev proxy failure (#17051)
  • c9f54b5 fix: respond to HEAD requests without a body (#17036)
  • ee2f55b fix: identify circular imports from src/env (#17014)
  • d0cdd2c chore: walk the output once when replacing manifest placeholders (#16997)
  • 81835da chore: stop stat'ing assets whose sizes nothing reads (#16996)
  • 0876d63 fix: walk and copy directories without a stat per file (#16995)
  • b81c8ca chore: derive the fetch cache url in one place (#17001)
  • Additional commits viewable in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

Updates bits-ui from 2.19.0 to 2.19.2

Release notes

Sourced from bits-ui's releases.

bits-ui@2.19.2

Patch Changes

  • fix: render the id attribute on Popper-based content elements (Tooltip, Popover, Select, Combobox, DropdownMenu, ContextMenu, Menubar, LinkPreview) so aria-describedby on triggers resolves correctly (#2094)

  • fix: restore body styles on the captured document when delayed scroll-lock cleanup runs after the global document is torn down or replaced (#2133)

  • fix: respect an explicit Tabs.Content tabindex while preserving the default panel tab stop (#2132)

bits-ui@2.19.1

Patch Changes

  • fix(Avatar): detach image handlers on destroy and actually apply the load cleanup - #2050 (#2128)

  • fix(Menu): Menu.GroupHeading no longer sets role="group", Menu.Separator now sets role="separator" (#2091)

  • fix(DismissibleLayer): guard the deferred focus handler against teardown - #2080 (#2126)

  • fix(DateField): apply date segments in year/month/day order so a valid day isn't clamped by the placeholder's month in day-first locales (#2123)

  • fix(Select): keep the user's scroll position when the scroll down button remounts. The button unmounts at the bottom of the list and remounts as soon as the viewport leaves it, and its mount effect realigned the viewport onto the highlighted item, so a small scroll up from the bottom jumped back to the highlighted item. (#2109)

  • fix(DismissibleLayer): outside clicks shortly after a layer opens no longer fail to dismiss it (#2111)

    DismissibleLayerState reset its per-interaction state through a 20ms debounce. Because the layer's watch runs its cleanup once on every open, each layer scheduled a reset 20ms into its own lifetime. An outside pointerdown landing 10-20ms after that cleanup had its "responsible layer" flag cleared by the stale reset before the debounced interact-outside handler ran, so the handler bailed and the layer stayed open. The reset is now synchronous.

  • fix(ScrollArea): prevent resize work from reading destroyed state after unmount (#2122)

  • fix(Combobox): highlight the first matching item after custom filtering updates the rendered items. (#2129)

  • fix(Accordion): cancel deferred content work on destroy to avoid derived_inert (#2127)

Commits
  • f041ec8 Version Packages (#2131)
  • 867485d fix: capture document for delayed body scroll cleanup (#2133)
  • 013ff88 fix(Tabs): respect explicit content tabindex (#2132)
  • 1358b4e fix: render id on Popper-based content elements (#2094)
  • 4c9bfc6 Version Packages (#2130)
  • 5627d18 fix(Menu): correct roles on GroupHeading and Separator (#2091)
  • 5bcee90 fix(Avatar): detach image handlers on destroy and apply the load cleanup (#2128)
  • d6188dd fix(Combobox): Avoid race condition between highlighting and filtering items ...
  • 2f31f98 fix(Accordion): cancel deferred content work on destroy (#2127)
  • 5760a04 fix(DismissibleLayer): guard the deferred focus handler against teardown (#2126)
  • Additional commits viewable in compare view

Updates isomorphic-dompurify from 3.23.0 to 4.2.0

Release notes

Sourced from isomorphic-dompurify's releases.

4.2.0: Updated dependencies

  • dompurify 3.4.14 -> 3.4.15
  • vitest 4.1.11 -> 5.0.0 (dev)
  • @​biomejs/biome 2.5.11 -> 2.5.12 (dev)
  • pnpm/action-setup 6.0.10 -> 6.1.0 (CI)

4.1.0: Align Requirements table with the 4.x Node.js floor

  • README Requirements table: the raised Node.js floor is now listed under >=4.0.0 (was >=3.20.0)
  • lefthook 2.1.10 -> 2.1.12 (dev)

4.0.0: Semver correction for the Node.js floor bump

This is a major version bump with no functional code changes relative to 3.23.0.

v3.20.0 raised the minimum Node.js version (inherited from jsdom 30) - a breaking change that should have been a major release. 4.0.0 corrects that: the same code as 3.23.0, now on a proper major so ^3.x consumers are not silently upgraded onto a build that dropped their Node.js version.

  • Node.js requirement: ^22.22.2 || ^24.15.0 || >=26.0.0 (Node 20 no longer supported)
  • Versions 3.20.0-3.23.0 are deprecated on npm - use 4.x, or pin 3.19.0 for Node < 22.22.2 (also available via the node20 dist-tag)
  • @​biomejs/biome 2.5.10 -> 2.5.11 (dev)
Commits
  • a8a319f chore: Updated deps. Prepared for the release.
  • 02b0888 chore(deps): bump pnpm/action-setup from 6.0.10 to 6.1.0
  • e4c04a8 chore(deps): bump dompurify from 3.4.14 to 3.4.15
  • 41934c0 chore(deps-dev): bump vitest from 4.1.11 to 5.0.0
  • 84ae734 chore(deps-dev): bump @​biomejs/biome from 2.5.11 to 2.5.12
  • e7b5f69 chore: release 4.1.0 (align README Requirements table with the 4.x Node.js fl...
  • c67da50 chore(deps-dev): bump lefthook from 2.1.10 to 2.1.12
  • 285264e chore: release 4.0.0 (correct semver for the Node.js floor bump)
  • 438d244 chore(deps-dev): bump @​biomejs/biome from 2.5.10 to 2.5.11
  • See full diff in compare view

Updates rolldown from 1.2.7 to 1.2.8

Release notes

Sourced from rolldown's releases.

v1.2.8

[1.2.8] - 2026-09-09

🚀 Features

🐛 Bug Fixes

  • dev: clean stale dynamic entry references after partial scans (#10846) by @​shulaoda
  • include external wildcard re-exports in OutputChunk.imports (#10845) by @​isker

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

Co-authored-by: shulaoda 165626830+shulaoda@users.noreply.github.com

Changelog

Sourced from rolldown's changelog.

[1.2.8] - 2026-09-09

🚀 Features

🐛 Bug Fixes

  • dev: clean stale dynamic entry references after partial scans (#10846) by @​shulaoda
  • include external wildcard re-exports in OutputChunk.imports (#10845) by @​isker

📚 Documentation

⚡ Performance

🧪 Testing

⚙️ Miscellaneous Tasks

❤️ New Contributors

Commits

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

  • Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
    • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
    • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Documentation

Other

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits
  • 511d68a tailwind-merge@3.7.0
  • 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
  • 9d41508 add changelog for tailwind-merge@3.7.0
  • c78a80f Configurator: Reuse runtime lookups during pruning
  • 49c317d Monorepo: Fix contributing link and include package coverage
  • 7b565ca Configurator: prune a generated config to a project's used classes (core step)
  • d83e013 Releases: auto-re-pin tag-pinned links on every version bump
  • b71fd41 Docs: pin every in-repo file link to a release tag instead of main
  • ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
  • 9521b10 Releases: per-package pipeline with namespaced tags
  • Additional commits viewable in compare view

Updates unplugin-icons from 23.0.1 to 24.0.0

Release notes

Sourced from unplugin-icons's releases.

v24.0.0

   🚨 Breaking Changes

   🚀 Features

    View changes on GitHub
Commits

Updates wrangler from 4.129.0 to 4.131.2

Release notes

Sourced from wrangler's releases.

wrangler@4.131.2

Patch Changes

wrangler@4.131.1

Patch Changes

  • #15592 945aaa3 Thanks @​WillTaylorDev! - Add a provisioning delay note when custom domain Preview URLs change

    Wrangler now explains that DNS and TLS certificate provisioning may continue after a deploy adds a custom domain or enables its Preview URLs. Stable redeploys don't repeat the note.

    This assumes that a request which matches the stored custom domain state doesn't restart provisioning. The client infers this from the API changeset and current domain record because this repository can't verify the backend behavior.

  • #15592 945aaa3 Thanks @​WillTaylorDev! - Clarify production status labels for custom domain routes

    Wrangler now prefixes explicit custom domain production states with production: so they match Preview labels. The updated labels appear in deployed trigger output and WRANGLER_OUTPUT_FILE_PATH.

  • #15602 47d906f Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

    Dependency From To
    @​cloudflare/workers-types ^5.20260910.1 ^5.20260911.1
    workerd 1.20260910.1 1.20260911.1

  • #15592 945aaa3 Thanks @​WillTaylorDev! - Avoid replacement prompts for custom domains already on the Worker

    Wrangler now updates Preview settings without asking to replace a custom domain when that domain already belongs to the deployed Worker. It still asks before replacing domains attached to another Worker.

  • #15592 945aaa3 Thanks @​WillTaylorDev! - Explain how to enable Preview URLs when a Preview deployment has none

    wrangler preview now shows URL shapes and configuration snippets for Workers.dev and custom domains. The custom domain snippet preserves every configured route, and the guidance distinguishes missing settings from disabled ones.

    This changes a private beta feature. The warning also makes clear that wrangler deploy publishes code from the current checkout.

  • Updated dependencies [47d906f, c2699bf]:

wrangler@4.131.0

Minor Changes

  • #15480 36aed7f Thanks @​skepticfx! - Add Durable Object-managed Containers to top-level container configuration

    Wrangler now accepts scheduling_policy: "durable_object" in the top-level containers array and creates its namespace-backed application after the Worker upload resolves the Durable Object namespace ID. The namespace ID is also the application ID, so repeated deploys idempotently ensure the same application without name-based lookup, modification, or a Containers rollout.

    Durable Object-managed entries accept class_name, scheduling_policy, an optional name, and an optional named images map. Scheduler-only fields are rejected. Each image provides either a local dockerfile or a digest-pinned managed-registry image. Wrangler builds or resolves each image, waits while Cloudflare prepares it for the Containers runtime, and uploads the resulting references with the Worker version for access through ctx.container.images and env.EXPERIMENTAL_CLOUDFLARE_CONTAINER_IMAGES. Local development support for these entries is deferred to a follow-up.

... (truncated)

Commits

Updates vite-plus from 0.3.0 to 0.3.2

Release notes

Sourced from vite-plus's releases.

vite-plus v0.3.2: independent package-manager versions and Oxlint plugin APIs

vp env use now sets each package manager's version independently. This release also adds Oxlint plugin APIs and fixes migration, installation, and template extraction.

Breaking Changes

Package-manager overrides

Direct package-manager commands no longer use VP_PACKAGE_MANAGER. Use the matching version variable in shell profiles, CI jobs, and Dockerfiles:

Previous override for a direct command New override
VP_PACKAGE_MANAGER=npm@<version> VP_NPM_VERSION=<version>
VP_PACKAGE_MANAGER=pnpm@<version> VP_PNPM_VERSION=<version>
VP_PACKAGE_MANAGER=yarn@<version> VP_YARN_VERSION=<version>
VP_PACKAGE_MANAGER=bun@<version> VP_BUN_VERSION=<version>

VP_PACKAGE_MANAGER still selects the manager and version for vp install and related commands. vp env use pnpm@10 now changes only the direct pnpm commands. To override vp install, set VP_PACKAGE_MANAGER explicitly.

The old .session-package-manager file is no longer read or migrated. Run vp env use again to create the new session files. Projects that use only project pins or global defaults need no changes. See the environment guide (#2658, #2659), by @​liangmiQwQ.

Installer preferences

VP_NODE_MANAGER now controls only Node.js. Existing installations retain saved preferences during upgrades, so vp upgrade needs no configuration changes. For scripted installations, set VP_PM_MANAGER to apply the same choice to package managers:

Previous combined setting New combined setting
VP_NODE_MANAGER=no VP_NODE_MANAGER=no VP_PM_MANAGER=no
VP_NODE_MANAGER=yes VP_NODE_MANAGER=yes VP_PM_MANAGER=yes

Update installer commands in CI jobs and Dockerfiles. Use VP_NPM_MANAGER, VP_PNPM_MANAGER, VP_YARN_MANAGER, or VP_BUN_MANAGER for individual preferences. The interactive prompt retains its combined choice. See the installer variables guide (#2681), by @​liangmiQwQ.

Vite DevTools

Projects that install @vitejs/devtools must update its dependency range from ^0.4.0 || ^0.5.0 to ^0.7.1. Projects without this optional dependency need no changes. This requirement comes with the Vite upgrade listed below.

Highlights

  • Installers and vp upgrade share setup behavior across platforms, which simplifies maintenance. The installers retain support for older releases (#2611), by @​liangmiQwQ.
  • Custom Oxlint rules can import their APIs from vite-plus/lint/plugins and vite-plus/lint/plugins-dev. vp migrate updates supported existing imports (#2328), by @​fengmk2.
  • vp install and vp add now honor --ignore-scripts for named packages and managed global installations (#2682), by @​jong-kyung.

Features

  • The bundled tools update from vite@8.2.2 to vite@8.3.0 and from rolldown@1.2.7 to rolldown@1.2.8. They also update from oxlint@1.81.0 to oxlint@1.82.0 and from oxfmt@0.66.0 to oxfmt@0.67.0. The new linter and formatter can flag code that passed before. Run vp fmt after the upgrade if CI runs vp check (#2670), by @​fengmk2.

Fixes & Enhancements

  • vp create rejects malformed registry versions that could place organization template files outside the cache directory (#2665), by @​fengmk2.
  • vp env pin updates an active local .nvmrc and preserves its comments. Use --target nvmrc to select this file explicitly (#2676), by @​ywenhao.
  • vp migrate reports unsupported ESLint rules that it skips, so users can review the missing checks (#2689), by @​yusuke99.

... (truncated)

Commits
  • 9fd0d0a release: v0.3.2: independent package-manager versions and Oxlint plugin APIs ...
  • 5b30ff0 revert(migrate): stop merging Oxc configs in existing projects (#2696)
  • ace6ceb fix(migrate): report skipped ESLint rules (#2689)
  • a011a0d chore(deps): update dependency voidzero-dev/setup-vp to v1.20.0 (#2686)
  • ee90e39 fix(create): honor non-interactive mode in scaffolded generators (#2677)
  • 342bebf feat(deps): upgrade upstream dependencies (#2670)
  • e992de3 fix(cli): reuse the current Node runtime for built-in tools (#2673)
  • e3bd9db fix(migrate): finish leftover Oxc config migration (#2654)
  • 316dd7b fix(create): reject non-semver versions in org-template manifests (#2665)
  • 22d5642 docs(readme): use the supported task env field (#2653)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all-dependencies group across 1 directory with …
09a796a 
…10 updates

Bumps the all-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@iconify/json](https://github.com/iconify/icon-sets) | `2.2.525` | `2.2.528` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.0.0-next.25` | `3.0.0-next.27` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.5.1` |
| [bits-ui](https://github.com/huntabyte/bits-ui) | `2.19.0` | `2.19.2` |
| [isomorphic-dompurify](https://github.com/kkomelin/isomorphic-dompurify) | `3.23.0` | `4.2.0` |
| [rolldown](https://github.com/rolldown/rolldown/tree/HEAD/packages/rolldown) | `1.2.7` | `1.2.8` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` |
| [unplugin-icons](https://github.com/unplugin/unplugin-icons) | `23.0.1` | `24.0.0` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.129.0` | `4.131.2` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.3.0` | `0.3.2` |



Updates `@iconify/json` from 2.2.525 to 2.2.528
- [Commits](iconify/icon-sets@2.2.525...2.2.528)

Updates `@sveltejs/kit` from 3.0.0-next.25 to 3.0.0-next.27
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/version-3/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.0.0-next.27/packages/kit)

Updates `@types/node` from 26.4.1 to 26.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `bits-ui` from 2.19.0 to 2.19.2
- [Release notes](https://github.com/huntabyte/bits-ui/releases)
- [Commits](https://github.com/huntabyte/bits-ui/compare/bits-ui@2.19.0...bits-ui@2.19.2)

Updates `isomorphic-dompurify` from 3.23.0 to 4.2.0
- [Release notes](https://github.com/kkomelin/isomorphic-dompurify/releases)
- [Commits](kkomelin/isomorphic-dompurify@3.23.0...4.2.0)

Updates `rolldown` from 1.2.7 to 1.2.8
- [Release notes](https://github.com/rolldown/rolldown/releases)
- [Changelog](https://github.com/rolldown/rolldown/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rolldown/rolldown/commits/v1.2.8/packages/rolldown)

Updates `tailwind-merge` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge)

Updates `unplugin-icons` from 23.0.1 to 24.0.0
- [Release notes](https://github.com/unplugin/unplugin-icons/releases)
- [Commits](unplugin/unplugin-icons@v23.0.1...v24.0.0)

Updates `wrangler` from 4.129.0 to 4.131.2
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.131.2/packages/wrangler)

Updates `vite-plus` from 0.3.0 to 0.3.2
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.2/packages/cli)

---
updated-dependencies:
- dependency-name: "@iconify/json"
  dependency-version: 2.2.528
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.0.0-next.27
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: "@types/node"
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: bits-ui
  dependency-version: 2.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: isomorphic-dompurify
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: rolldown
  dependency-version: 1.2.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: unplugin-icons
  dependency-version: 24.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: wrangler
  dependency-version: 4.131.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: vite-plus
  dependency-version: 0.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 17, 2026
@dependabot
dependabot Bot deleted the dependabot-npm_and_yarn-all-dependencies-07b460605c branch September 17, 2026 01:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants