[PR #14912] [CLOSED] build(deps): bump the npm_and_yarn group across 1 directory with 7 updates #23641

Closed
opened 2026-04-20 04:56:26 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/14912
Author: @dependabot[bot]
Created: 6/12/2025
Status: Closed

Base: mainHead: dependabot/npm_and_yarn/npm_and_yarn-ea229c9bb9


📝 Commits (1)

  • c11e376 build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

📊 Changes

2 files changed (+677 additions, -1018 deletions)

View changed files

📝 package-lock.json (+672 -1013)
📝 package.json (+5 -5)

📄 Description

Bumps the npm_and_yarn group with 7 updates in the / directory:

Package From To
undici 7.3.0 7.5.0
@sveltejs/kit 2.20.2 2.21.4
vite 5.4.15 5.4.19
brace-expansion 1.1.11 1.1.12
esbuild 0.21.5 0.25.1
@sveltejs/vite-plugin-svelte 3.1.1 5.1.0
vite 5.4.19 6.3.5
vitest 1.6.1 3.2.3

Updates undici from 7.3.0 to 7.5.0

Release notes

Sourced from undici's releases.

v7.5.0

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.4.0...v7.5.0

v7.4.0

What's Changed

New Contributors

Full Changelog: https://github.com/nodejs/undici/compare/v7.3.0...v7.4.0

Commits

Updates @sveltejs/kit from 2.20.2 to 2.21.4

Release notes

Sourced from @���sveltejs/kit's releases.

@​sveltejs/kit@​2.21.4

Patch Changes

  • fix: correctly access transport decoders on the client when building for a single or inline output app (#13871)

@​sveltejs/kit@​2.21.3

Patch Changes

  • fix: correctly invalidate static analysis cache of child nodes when modifying a universal +layout file during dev (#13793)

  • fix: correctly set sequential focus navigation starting point after navigation (#10856)

  • fix: suppress console spam for chrome devtools requests (#13830)

  • fix: avoid externalising packages that depend on @sveltejs/kit so that libraries can also use redirect and error helpers (#13843)

  • fix: correctly run deserialize on the server (#13686)

  • fix: handle non-semver-style dependency versions (#13850)

  • fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold (#13723)

@​sveltejs/kit@​2.21.2

Patch Changes

  • fix: omit stack when logging 404 errors (#13848)

@​sveltejs/kit@​2.21.1

Patch Changes

  • chore: clarify which functions handleFetch affects (#13788)

  • fix: ensure $env and $app/environment are correctly set while analysing server nodes (#13790)

@​sveltejs/kit@​2.21.0

Minor Changes

  • feat: allow running client-side code at the top-level of universal pages/layouts when SSR is disabled and page options are only boolean or string literals (#13684)

Patch Changes

  • chore: remove import-meta-resolve dependency (#13629)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.21.4

Patch Changes

  • fix: correctly access transport decoders on the client when building for a single or inline output app (#13871)

2.21.3

Patch Changes

  • fix: correctly invalidate static analysis cache of child nodes when modifying a universal +layout file during dev (#13793)

  • fix: correctly set sequential focus navigation starting point after navigation (#10856)

  • fix: suppress console spam for chrome devtools requests (#13830)

  • fix: avoid externalising packages that depend on @sveltejs/kit so that libraries can also use redirect and error helpers (#13843)

  • fix: correctly run deserialize on the server (#13686)

  • fix: handle non-semver-style dependency versions (#13850)

  • fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold (#13723)

2.21.2

Patch Changes

  • fix: omit stack when logging 404 errors (#13848)

2.21.1

Patch Changes

  • chore: clarify which functions handleFetch affects (#13788)

  • fix: ensure $env and $app/environment are correctly set while analysing server nodes (#13790)

2.21.0

Minor Changes

  • feat: allow running client-side code at the top-level of universal pages/layouts when SSR is disabled and page options are only boolean or string literals (#13684)

... (truncated)

Commits
  • ee3600d Version Packages (#13872)
  • b451705 fix: correctly access app.decoders in inline and single output apps (#13871)
  • 7fcbc5a Version Packages (#13854)
  • ab67874 fix: avoid setting sequential focus navigation starting point when using hash...
  • 6261a87 fix: hash link to new page focuses the correct element (#10856)
  • 408e1f5 fix: ensure redirect used in packages uses the same Redirect instance (#1...
  • 6c44239 fix: include components dynamically imported in the universal load function w...
  • 6a6538c fix: correctly invalidate static analysis cache of child nodes during dev (#1...
  • e7b57e7 fix: suppress console spam for chrome devtools requests (#13830)
  • c6cd8c3 fix: correctly deserialize on the server (#13686)
  • Additional commits viewable in compare view

Updates vite from 5.4.15 to 5.4.19

Release notes

Sourced from vite's releases.

v5.4.19

Please refer to CHANGELOG.md for details.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.19 (2025-04-30)

5.4.18 (2025-04-10)

5.4.17 (2025-04-03)

5.4.16 (2025-03-31)

Commits

Updates brace-expansion from 1.1.11 to 1.1.12

Release notes

Sourced from brace-expansion's releases.

v1.1.12

  • pkg: publish on tag 1.x c460dbd
  • fmt ccb8ac6
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) c3c73c8

https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12

Commits

Updates esbuild from 0.21.5 to 0.25.1

Release notes

Sourced from esbuild's releases.

v0.25.1

  • Fix incorrect paths in inline source maps (#4070, #4075, #4105)

    This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline sourceMappingURL data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the sourceMappingURL comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.

  • Fix invalid generated source maps (#4080, #4082, #4104, #4107)

    This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of "null" entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.

    This fix was contributed by @​jridgewell.

  • Fix a regression with non-file source map paths (#4078)

    The format of paths in source maps that aren't in the file namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from file paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a : character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.

  • Fix a crash with switch optimization (#4088)

    The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:

    switch (x) {
      case '':
        return y.map(z => z.value)
      case y.map(z => z.key).join(','):
        return []
    }
    
  • Update Go from 1.23.5 to 1.23.7 (#4076, #4077)

    This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.

    This PR was contributed by @​MikeWillCook.

v0.25.0

This release deliberately contains backwards-incompatible changes. To avoid automatically picking up releases like this, you should either be pinning the exact version of esbuild in your package.json file (recommended) or be using a version range syntax that only accepts patch upgrades such as ^0.24.0 or ~0.24.0. See npm's documentation about semver for more information.

  • Restrict access to esbuild's development server (GHSA-67mh-4wv8-2f99)

    This change addresses esbuild's first security vulnerability report. Previously esbuild set the Access-Control-Allow-Origin header to * to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in the report.

    Starting with this release, CORS will now be disabled, and requests will now be denied if the host does not match the one provided to --serve=. The default host is 0.0.0.0, which refers to all of the IP addresses that represent the local machine (e.g. both 127.0.0.1 and 192.168.0.1). If you want to customize anything about esbuild's development server, you can put a proxy in front of esbuild and modify the incoming and/or outgoing requests.

    In addition, the serve() API call has been changed to return an array of hosts instead of a single host string. This makes it possible to determine all of the hosts that esbuild's development server will accept.

    Thanks to @​sapphi-red for reporting this issue.

  • Delete output files when a build fails in watch mode (#3643)

    It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2024

This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).

0.24.2

  • Fix regression with --define and import.meta (#4010, #4012, #4013)

    The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

    This fix was contributed by @​sapphi-red.

0.24.1

  • Allow es2024 as a target in tsconfig.json (#4004)

    TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

    {
      "compilerOptions": {
        "target": "ES2024"
      }
    }
    

    As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

    This fix was contributed by @​billyjanitsch.

  • Allow automatic semicolon insertion after get/set

    This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

    class Foo {
      get
      *x() {}
      set
      *y() {}
    }
    

    The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

  • Allow quoted property names in --define and --pure (#4008)

    The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

... (truncated)

Commits

Updates @sveltejs/vite-plugin-svelte from 3.1.1 to 5.1.0

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​5.1.0

Minor Changes

  • scope css to js module to enable treeshaking scoped css from unused components. Requires vite 6.2 and svelte 5.26 (#1092)

Patch Changes

  • add svelte > clsx to optimizeDeps.include to avoid page reload when using vite6 and npm (#1124)

@​sveltejs/vite-plugin-svelte@​5.0.3

Patch Changes

  • fix errorhandling to work with errors that don't have a code property (#1054)

@​sveltejs/vite-plugin-svelte@​5.0.2

Patch Changes

  • adapt internal handling of warning and error code property to changes in svelte5 (#1044)

@​sveltejs/vite-plugin-svelte@​5.0.1

Patch Changes

  • Fix peer dependencies warning (#1038)

@​sveltejs/vite-plugin-svelte@​5.0.0

Major Changes

  • Handle Vite 6 breaking change and remove Vite 5 handling (#1020)

  • Support Vite 6 (#1026)

Minor Changes

  • Add esm-env to ssr.noExternal by default to resolve its conditions with Vite (#1020)

  • Support ?inline query on Svelte style virtual modules (#1024)

Patch Changes

  • remove vite6 beta from peer range (#1035)

  • Allow script tags to span multiple lines (0db95a9)

  • Updated dependencies [4fefbc2, e262266]:

    • @​sveltejs/vite-plugin-svelte-inspector@​4.0.0

@​sveltejs/vite-plugin-svelte@​5.0.0-next.0

... (truncated)

Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

5.1.0

Minor Changes

  • scope css to js module to enable treeshaking scoped css from unused components. Requires vite 6.2 and svelte 5.26 (#1092)

Patch Changes

  • add svelte > clsx to optimizeDeps.include to avoid page reload when using vite6 and npm (#1124)

5.0.3

Patch Changes

  • fix errorhandling to work with errors that don't have a code property (#1054)

5.0.2

Patch Changes

  • adapt internal handling of warning and error code property to changes in svelte5 (#1044)

5.0.1

Patch Changes

  • Fix peer dependencies warning (#1038)

5.0.0

Major Changes

  • Handle Vite 6 breaking change and remove Vite 5 handling (#1020)

  • Support Vite 6 (#1026)

Minor Changes

  • Add esm-env to ssr.noExternal by default to resolve its conditions with Vite (#1020)

  • Support ?inline query on Svelte style virtual modules (#1024)

Patch Changes

... (truncated)

Commits

Updates vite from 5.4.19 to 6.3.5

Release notes

Sourced from vite's releases.

v5.4.19

Please refer to CHANGELOG.md for details.

v5.4.18

Please refer to CHANGELOG.md for details.

v5.4.17

Please refer to CHANGELOG.md for details.

v5.4.16

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

5.4.19 (2025-04-30)

5.4.18 (2025-04-10)

5.4.17 (2025-04-03)

5.4.16 (2025-03-31)

Commits

Updates vitest from 1.6.1 to 3.2.3

Release notes

Sourced from vitest's releases.

v3.2.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.2.2

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.2.1

   🐞 Bug Fixes

    View changes on GitHub

v3.2.0

... (truncated)

Commits
  • b87ee3e chore: release v3.2.3
  • 83862d4 fix: run only the name plugin last, not all config plugins (#8130)
  • dc469f2 fix(runner): comments between fixture destructures (#8127)
  • 1d8ebf9 feat(browser): use base url instead of vitest (#8126)
  • dfe81a6 fix(pool): throw if user's tests use process.send() (#8125)
  • 0f33506 fix: rerun tests when project's setup file is changed (#8097)
  • 7ddcd33 chore: release v3.2.2
  • 33f7120 Revert "fix(browser): optimize build output and always prebundle vitest"
  • 00a3916 fix(browser): optimize build output and always prebundle vitest
  • 142c735 fix(browser): calculate prepare time from createTesters call on the main th...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can tr...

Description has been truncated


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/14912 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 6/12/2025 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/npm_and_yarn-ea229c9bb9` --- ### 📝 Commits (1) - [`c11e376`](https://github.com/open-webui/open-webui/commit/c11e3766f52ff99173229a920846ba17ed90cc37) build(deps): bump the npm_and_yarn group across 1 directory with 7 updates ### 📊 Changes **2 files changed** (+677 additions, -1018 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+672 -1013) 📝 `package.json` (+5 -5) </details> ### 📄 Description Bumps the npm_and_yarn group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [undici](https://github.com/nodejs/undici) | `7.3.0` | `7.5.0` | | [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.20.2` | `2.21.4` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.15` | `5.4.19` | | [brace-expansion](https://github.com/juliangruber/brace-expansion) | `1.1.11` | `1.1.12` | | [esbuild](https://github.com/evanw/esbuild) | `0.21.5` | `0.25.1` | | [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `3.1.1` | `5.1.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `5.4.19` | `6.3.5` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `1.6.1` | `3.2.3` | Updates `undici` from 7.3.0 to 7.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nodejs/undici/releases">undici's releases</a>.</em></p> <blockquote> <h2>v7.5.0</h2> <h2>What's Changed</h2> <ul> <li>feat(docs): button to switch dark and light mode by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4044">nodejs/undici#4044</a></li> <li>feat: add mock call history to access request configuration in test by <a href="https://github.com/blephy"><code>@​blephy</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4029">nodejs/undici#4029</a></li> <li>fix: Fix retry-handler.js when retry-after header is a Date by <a href="https://github.com/fgiova"><code>@​fgiova</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4084">nodejs/undici#4084</a></li> <li>Update Cache Tests by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4027">nodejs/undici#4027</a></li> <li>Allow disabling autoSelectFamily in an Agent by <a href="https://github.com/hitsthings"><code>@​hitsthings</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4070">nodejs/undici#4070</a></li> <li>Removed clients with unrecoverable errors from the Pool by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4088">nodejs/undici#4088</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/blephy"><code>@​blephy</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4029">nodejs/undici#4029</a></li> <li><a href="https://github.com/fgiova"><code>@​fgiova</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4084">nodejs/undici#4084</a></li> <li><a href="https://github.com/hitsthings"><code>@​hitsthings</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4070">nodejs/undici#4070</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.4.0...v7.5.0">https://github.com/nodejs/undici/compare/v7.4.0...v7.5.0</a></p> <h2>v7.4.0</h2> <h2>What's Changed</h2> <ul> <li>fix: apply byte offset on Buffer.from by <a href="https://github.com/ronag"><code>@​ronag</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4019">nodejs/undici#4019</a></li> <li>fix: fetch body fallback random number generation by <a href="https://github.com/Uzlopak"><code>@​Uzlopak</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4023">nodejs/undici#4023</a></li> <li>Add release instructions by <a href="https://github.com/mcollina"><code>@​mcollina</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4022">nodejs/undici#4022</a></li> <li>Update Cache Tests by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4020">nodejs/undici#4020</a></li> <li>Update WPT by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4011">nodejs/undici#4011</a></li> <li>docs: document about global dispatcher and errors (<a href="https://redirect.github.com/nodejs/undici/issues/3987">#3987</a>) by <a href="https://github.com/zuozp8"><code>@​zuozp8</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4014">nodejs/undici#4014</a></li> <li>docs: fix incorrect method signature of <code>onResponseError</code> by <a href="https://github.com/tmair"><code>@​tmair</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4030">nodejs/undici#4030</a></li> <li>feat(docs): copy to clipboard button by <a href="https://github.com/shivarm"><code>@​shivarm</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4037">nodejs/undici#4037</a></li> <li>don't check AbortSignal maxListeners on some node versions by <a href="https://github.com/KhafraDev"><code>@​KhafraDev</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4045">nodejs/undici#4045</a></li> <li>feat: mark <code>EnvHttpProxyAgent</code> as stable by <a href="https://github.com/aduh95"><code>@​aduh95</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4049">nodejs/undici#4049</a></li> <li>test: fix windows wpt by <a href="https://github.com/metcoder95"><code>@​metcoder95</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4050">nodejs/undici#4050</a></li> <li>fix: do not throw unhandled exception when data is undefined in interceptor.reply by <a href="https://github.com/frederikprijck"><code>@​frederikprijck</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4036">nodejs/undici#4036</a></li> <li>fix: handle missing vary header values by <a href="https://github.com/gurgunday"><code>@​gurgunday</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4031">nodejs/undici#4031</a></li> <li>Update WPT by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4028">nodejs/undici#4028</a></li> <li>Update WPT by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4062">nodejs/undici#4062</a></li> <li>fix: fix EnvHttpProxyAgent for the Node.js bundle by <a href="https://github.com/joyeecheung"><code>@​joyeecheung</code></a> in <a href="https://redirect.github.com/nodejs/undici/pull/4064">nodejs/undici#4064</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/zuozp8"><code>@​zuozp8</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4014">nodejs/undici#4014</a></li> <li><a href="https://github.com/tmair"><code>@​tmair</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4030">nodejs/undici#4030</a></li> <li><a href="https://github.com/shivarm"><code>@​shivarm</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4037">nodejs/undici#4037</a></li> <li><a href="https://github.com/frederikprijck"><code>@​frederikprijck</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4036">nodejs/undici#4036</a></li> <li><a href="https://github.com/joyeecheung"><code>@​joyeecheung</code></a> made their first contribution in <a href="https://redirect.github.com/nodejs/undici/pull/4064">nodejs/undici#4064</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/nodejs/undici/compare/v7.3.0...v7.4.0">https://github.com/nodejs/undici/compare/v7.3.0...v7.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/nodejs/undici/commit/a180465f3ae472d1cc860badcc36bda5566ff2a5"><code>a180465</code></a> Bumped v7.5.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4091">#4091</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/f317618ec28753a4218beccea048bcf89c36db25"><code>f317618</code></a> Removed clients with unrecoverable errors from the Pool (<a href="https://redirect.github.com/nodejs/undici/issues/4088">#4088</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/1e58b58523c59fa49ce5de61fefbae6825052633"><code>1e58b58</code></a> feat: Allow disabling autoSelectFamily in an Agent (<a href="https://redirect.github.com/nodejs/undici/issues/4070">#4070</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/2767d0e4e9214bf36e446f82675e758c8ef2f49e"><code>2767d0e</code></a> chore: update cache tests (<a href="https://redirect.github.com/nodejs/undici/issues/4027">#4027</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/ef276d4a296b99f547ed563a11e74ae71bc84bc1"><code>ef276d4</code></a> fix: Fix retry-handler.js when retry-after header is a Date (<a href="https://redirect.github.com/nodejs/undici/issues/4084">#4084</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/61797882f210e7e6f2b34158c0f25336ff72a751"><code>6179788</code></a> feat: add mock call history to access request configuration in test (<a href="https://redirect.github.com/nodejs/undici/issues/4029">#4029</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/f11ae944dab697d2dc22318403200b144b4b2b91"><code>f11ae94</code></a> feat(docs): button to switch dark and light mode (<a href="https://redirect.github.com/nodejs/undici/issues/4044">#4044</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/6bb527e9d768c5ca5b98765c28cf403ad8b250fb"><code>6bb527e</code></a> Bumped v7.4.0 (<a href="https://redirect.github.com/nodejs/undici/issues/4071">#4071</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/a217002369c403f5a84a870520294435632ef6eb"><code>a217002</code></a> fix: fix EnvHttpProxyAgent for the Node.js bundle (<a href="https://redirect.github.com/nodejs/undici/issues/4064">#4064</a>)</li> <li><a href="https://github.com/nodejs/undici/commit/782f06b1ec44043f858b8ad1f76225919ecd55db"><code>782f06b</code></a> chore: update WPT (<a href="https://redirect.github.com/nodejs/undici/issues/4062">#4062</a>)</li> <li>Additional commits viewable in <a href="https://github.com/nodejs/undici/compare/v7.3.0...v7.5.0">compare view</a></li> </ul> </details> <br /> Updates `@sveltejs/kit` from 2.20.2 to 2.21.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/releases"><code>@���sveltejs/kit</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.21.4</h2> <h3>Patch Changes</h3> <ul> <li>fix: correctly access transport decoders on the client when building for a single or inline output app (<a href="https://redirect.github.com/sveltejs/kit/pull/13871">#13871</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.21.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: correctly invalidate static analysis cache of child nodes when modifying a universal <code>+layout</code> file during dev (<a href="https://redirect.github.com/sveltejs/kit/pull/13793">#13793</a>)</p> </li> <li> <p>fix: correctly set sequential focus navigation starting point after navigation (<a href="https://redirect.github.com/sveltejs/kit/pull/10856">#10856</a>)</p> </li> <li> <p>fix: suppress console spam for chrome devtools requests (<a href="https://redirect.github.com/sveltejs/kit/pull/13830">#13830</a>)</p> </li> <li> <p>fix: avoid externalising packages that depend on <code>@sveltejs/kit</code> so that libraries can also use <code>redirect</code> and <code>error</code> helpers (<a href="https://redirect.github.com/sveltejs/kit/pull/13843">#13843</a>)</p> </li> <li> <p>fix: correctly run <code>deserialize</code> on the server (<a href="https://redirect.github.com/sveltejs/kit/pull/13686">#13686</a>)</p> </li> <li> <p>fix: handle non-semver-style dependency versions (<a href="https://redirect.github.com/sveltejs/kit/pull/13850">#13850</a>)</p> </li> <li> <p>fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold (<a href="https://redirect.github.com/sveltejs/kit/pull/13723">#13723</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.21.2</h2> <h3>Patch Changes</h3> <ul> <li>fix: omit stack when logging 404 errors (<a href="https://redirect.github.com/sveltejs/kit/pull/13848">#13848</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.21.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>chore: clarify which functions <code>handleFetch</code> affects (<a href="https://redirect.github.com/sveltejs/kit/pull/13788">#13788</a>)</p> </li> <li> <p>fix: ensure <code>$env</code> and <code>$app/environment</code> are correctly set while analysing server nodes (<a href="https://redirect.github.com/sveltejs/kit/pull/13790">#13790</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.21.0</h2> <h3>Minor Changes</h3> <ul> <li>feat: allow running client-side code at the top-level of universal pages/layouts when SSR is disabled and page options are only boolean or string literals (<a href="https://redirect.github.com/sveltejs/kit/pull/13684">#13684</a>)</li> </ul> <h3>Patch Changes</h3> <ul> <li>chore: remove <code>import-meta-resolve</code> dependency (<a href="https://redirect.github.com/sveltejs/kit/pull/13629">#13629</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md"><code>@​sveltejs/kit</code>'s changelog</a>.</em></p> <blockquote> <h2>2.21.4</h2> <h3>Patch Changes</h3> <ul> <li>fix: correctly access transport decoders on the client when building for a single or inline output app (<a href="https://redirect.github.com/sveltejs/kit/pull/13871">#13871</a>)</li> </ul> <h2>2.21.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: correctly invalidate static analysis cache of child nodes when modifying a universal <code>+layout</code> file during dev (<a href="https://redirect.github.com/sveltejs/kit/pull/13793">#13793</a>)</p> </li> <li> <p>fix: correctly set sequential focus navigation starting point after navigation (<a href="https://redirect.github.com/sveltejs/kit/pull/10856">#10856</a>)</p> </li> <li> <p>fix: suppress console spam for chrome devtools requests (<a href="https://redirect.github.com/sveltejs/kit/pull/13830">#13830</a>)</p> </li> <li> <p>fix: avoid externalising packages that depend on <code>@sveltejs/kit</code> so that libraries can also use <code>redirect</code> and <code>error</code> helpers (<a href="https://redirect.github.com/sveltejs/kit/pull/13843">#13843</a>)</p> </li> <li> <p>fix: correctly run <code>deserialize</code> on the server (<a href="https://redirect.github.com/sveltejs/kit/pull/13686">#13686</a>)</p> </li> <li> <p>fix: handle non-semver-style dependency versions (<a href="https://redirect.github.com/sveltejs/kit/pull/13850">#13850</a>)</p> </li> <li> <p>fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold (<a href="https://redirect.github.com/sveltejs/kit/pull/13723">#13723</a>)</p> </li> </ul> <h2>2.21.2</h2> <h3>Patch Changes</h3> <ul> <li>fix: omit stack when logging 404 errors (<a href="https://redirect.github.com/sveltejs/kit/pull/13848">#13848</a>)</li> </ul> <h2>2.21.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>chore: clarify which functions <code>handleFetch</code> affects (<a href="https://redirect.github.com/sveltejs/kit/pull/13788">#13788</a>)</p> </li> <li> <p>fix: ensure <code>$env</code> and <code>$app/environment</code> are correctly set while analysing server nodes (<a href="https://redirect.github.com/sveltejs/kit/pull/13790">#13790</a>)</p> </li> </ul> <h2>2.21.0</h2> <h3>Minor Changes</h3> <ul> <li>feat: allow running client-side code at the top-level of universal pages/layouts when SSR is disabled and page options are only boolean or string literals (<a href="https://redirect.github.com/sveltejs/kit/pull/13684">#13684</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/kit/commit/ee3600df203f784b5fe66e95f5ac56e2733bbbac"><code>ee3600d</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13872">#13872</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/b451705cdd3d61607b720852c378a94a6f70792c"><code>b451705</code></a> fix: correctly access <code>app.decoders</code> in inline and single output apps (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13871">#13871</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/7fcbc5af453df21b74099fb9fb6d6152e4815f45"><code>7fcbc5a</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13854">#13854</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/ab6787498c7c1d6a3431c516dabc5ae487fcf1e4"><code>ab67874</code></a> fix: avoid setting sequential focus navigation starting point when using hash...</li> <li><a href="https://github.com/sveltejs/kit/commit/6261a877ae97ff85d07277c51391d925ed1bd096"><code>6261a87</code></a> fix: hash link to new page focuses the correct element (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/10856">#10856</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/408e1f5c2ae593b460861098e8e01f945af395ab"><code>408e1f5</code></a> fix: ensure <code>redirect</code> used in packages uses the same <code>Redirect</code> instance (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/1">#1</a>...</li> <li><a href="https://github.com/sveltejs/kit/commit/6c442395a8e6656ff49ecd4041d8e12ed65e80dd"><code>6c44239</code></a> fix: include components dynamically imported in the universal load function w...</li> <li><a href="https://github.com/sveltejs/kit/commit/6a6538c4bd937667a56ef5f6673cdef3f2ea7a77"><code>6a6538c</code></a> fix: correctly invalidate static analysis cache of child nodes during dev (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/1">#1</a>...</li> <li><a href="https://github.com/sveltejs/kit/commit/e7b57e74bdea976ae070562bda76d4bb78cdb6da"><code>e7b57e7</code></a> fix: suppress console spam for chrome devtools requests (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13830">#13830</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/c6cd8c3a5ed96d423a65af5cb5468e3e963cfb54"><code>c6cd8c3</code></a> fix: correctly deserialize on the server (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13686">#13686</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.21.4/packages/kit">compare view</a></li> </ul> </details> <br /> Updates `vite` from 5.4.15 to 5.4.19 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v5.4.19</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.19/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.18</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.18/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.17</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.17/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.16</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v5.4.19/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->5.4.19 (2025-04-30)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965">#19965</a>, check static serve file inside sirv (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19966">#19966</a>) (<a href="https://github.com/vitejs/vite/commit/766947e7cbf1cdd07df9737394e8c870401b78b0">766947e</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19965">#19965</a> <a href="https://redirect.github.com/vitejs/vite/issues/19966">#19966</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.18 (2025-04-10)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>, reject requests with <code>#</code> in request-target (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831">#19831</a>) (<a href="https://github.com/vitejs/vite/commit/823675baff2bd6809c74ba2d9acca0327923a54f">823675b</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19830">#19830</a> <a href="https://redirect.github.com/vitejs/vite/issues/19831">#19831</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.17 (2025-04-03)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>) (<a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c">84b2b46</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19782">#19782</a> <a href="https://redirect.github.com/vitejs/vite/issues/19784">#19784</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.16 (2025-03-31)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>, fs check in transform middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19762">#19762</a>) (<a href="https://github.com/vitejs/vite/commit/b627c50d359f3bd9b602408fbbf462cf4a2f019c">b627c50</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19761">#19761</a> <a href="https://redirect.github.com/vitejs/vite/issues/19762">#19762</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/80a333a23103ced0442d4463d1191433d90f5e19"><code>80a333a</code></a> release: v5.4.19</li> <li><a href="https://github.com/vitejs/vite/commit/766947e7cbf1cdd07df9737394e8c870401b78b0"><code>766947e</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965">#19965</a>, check static serve file inside sirv (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19966">#19966</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/731b77d19d36f5682a5441b49cb2f6473389ad99"><code>731b77d</code></a> release: v5.4.18</li> <li><a href="https://github.com/vitejs/vite/commit/823675baff2bd6809c74ba2d9acca0327923a54f"><code>823675b</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>, reject requests with <code>#</code> in request-target (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831">#19831</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/0a2518a98d2354c61ee8ef51f7d00fa92aebb511"><code>0a2518a</code></a> release: v5.4.17</li> <li><a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c"><code>84b2b46</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/712cb71aa0e2a03dbf49db92043fb4ecbfc826b1"><code>712cb71</code></a> release: v5.4.16</li> <li><a href="https://github.com/vitejs/vite/commit/b627c50d359f3bd9b602408fbbf462cf4a2f019c"><code>b627c50</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>, fs check in transform middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19762">#19762</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite/commits/v5.4.19/packages/vite">compare view</a></li> </ul> </details> <br /> Updates `brace-expansion` from 1.1.11 to 1.1.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/juliangruber/brace-expansion/releases">brace-expansion's releases</a>.</em></p> <blockquote> <h2>v1.1.12</h2> <ul> <li>pkg: publish on tag 1.x c460dbd</li> <li>fmt ccb8ac6</li> <li>Fix potential ReDoS Vulnerability or Inefficient Regular Expression (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/65">#65</a>) c3c73c8</li> </ul> <hr /> <p><a href="https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12">https://github.com/juliangruber/brace-expansion/compare/v1.1.11...v1.1.12</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/juliangruber/brace-expansion/commit/c85b8ad3f53d1eb65f4996a495cae61949855f7c"><code>c85b8ad</code></a> 4.0.1</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/5a5cc176c080b2fde292a9815dc6ecd97c870d17"><code>5a5cc17</code></a> fmt</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/0b6a9781e18e9d2769bb2931f4856d1360243ed2"><code>0b6a978</code></a> Fix potential ReDoS Vulnerability or Inefficient Regular Expression (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/65">#65</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/6a39bdddcf944374b475d99b0e8292d3727c7ebe"><code>6a39bdd</code></a> 4.0.0</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/dd72a59047e30ea265c4a58695a00ea82e90a437"><code>dd72a59</code></a> fmt</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/278132b187d4418fe8163da5e81710222f47e3f6"><code>278132b</code></a> feat: use string replaces instead of splits (<a href="https://redirect.github.com/juliangruber/brace-expansion/issues/64">#64</a>)</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/70e4c1baf9b91c77b1fa303a0c07d35389e9c0a0"><code>70e4c1b</code></a> add <code>tea.yaml</code></li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/b01a637b0578a7c59acc7d8386f11f8d0710b512"><code>b01a637</code></a> 3.0.0</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/9e781e913fe323e69248d36acebe29008666ba72"><code>9e781e9</code></a> node 16 is EOL</li> <li><a href="https://github.com/juliangruber/brace-expansion/commit/6dad2093f84eac403fb3715a624fede524967cec"><code>6dad209</code></a> docs</li> <li>Additional commits viewable in <a href="https://github.com/juliangruber/brace-expansion/compare/1.1.11...v1.1.12">compare view</a></li> </ul> </details> <br /> Updates `esbuild` from 0.21.5 to 0.25.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/releases">esbuild's releases</a>.</em></p> <blockquote> <h2>v0.25.1</h2> <ul> <li> <p>Fix incorrect paths in inline source maps (<a href="https://redirect.github.com/evanw/esbuild/issues/4070">#4070</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4075">#4075</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4105">#4105</a>)</p> <p>This fixes a regression from version 0.25.0 where esbuild didn't correctly resolve relative paths contained within source maps in inline <code>sourceMappingURL</code> data URLs. The paths were incorrectly being passed through as-is instead of being resolved relative to the source file containing the <code>sourceMappingURL</code> comment, which was due to the data URL not being a file URL. This regression has been fixed, and this case now has test coverage.</p> </li> <li> <p>Fix invalid generated source maps (<a href="https://redirect.github.com/evanw/esbuild/issues/4080">#4080</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4082">#4082</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4104">#4104</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4107">#4107</a>)</p> <p>This release fixes a regression from version 0.24.1 that could cause esbuild to generate invalid source maps. Specifically under certain conditions, esbuild could generate a mapping with an out-of-bounds source index. It was introduced by code that attempted to improve esbuild's handling of &quot;null&quot; entries in source maps (i.e. mappings with a generated position but no original position). This regression has been fixed.</p> <p>This fix was contributed by <a href="https://github.com/jridgewell"><code>@​jridgewell</code></a>.</p> </li> <li> <p>Fix a regression with non-file source map paths (<a href="https://redirect.github.com/evanw/esbuild/issues/4078">#4078</a>)</p> <p>The format of paths in source maps that aren't in the <code>file</code> namespace was unintentionally changed in version 0.25.0. Path namespaces is an esbuild-specific concept that is optionally available for plugins to use to distinguish paths from <code>file</code> paths and from paths meant for other plugins. Previously the namespace was prepended to the path joined with a <code>:</code> character, but version 0.25.0 unintentionally failed to prepend the namespace. The previous behavior has been restored.</p> </li> <li> <p>Fix a crash with <code>switch</code> optimization (<a href="https://redirect.github.com/evanw/esbuild/issues/4088">#4088</a>)</p> <p>The new code in the previous release to optimize dead code in switch statements accidentally introduced a crash in the edge case where one or more switch case values include a function expression. This is because esbuild now visits the case values first to determine whether any cases are dead code, and then visits the case bodies once the dead code status is known. That triggered some internal asserts that guard against traversing the AST in an unexpected order. This crash has been fixed by changing esbuild to expect the new traversal ordering. Here's an example of affected code:</p> <pre lang="js"><code>switch (x) { case '': return y.map(z =&gt; z.value) case y.map(z =&gt; z.key).join(','): return [] } </code></pre> </li> <li> <p>Update Go from 1.23.5 to 1.23.7 (<a href="https://redirect.github.com/evanw/esbuild/issues/4076">#4076</a>, <a href="https://redirect.github.com/evanw/esbuild/pull/4077">#4077</a>)</p> <p>This should have no effect on existing code as this version change does not change Go's operating system support. It may remove certain reports from vulnerability scanners that detect which version of the Go compiler esbuild uses.</p> <p>This PR was contributed by <a href="https://github.com/MikeWillCook"><code>@​MikeWillCook</code></a>.</p> </li> </ul> <h2>v0.25.0</h2> <p><strong>This release deliberately contains backwards-incompatible changes.</strong> To avoid automatically picking up releases like this, you should either be pinning the exact version of <code>esbuild</code> in your <code>package.json</code> file (recommended) or be using a version range syntax that only accepts patch upgrades such as <code>^0.24.0</code> or <code>~0.24.0</code>. See npm's documentation about <a href="https://docs.npmjs.com/cli/v6/using-npm/semver/">semver</a> for more information.</p> <ul> <li> <p>Restrict access to esbuild's development server (<a href="https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99">GHSA-67mh-4wv8-2f99</a>)</p> <p>This change addresses esbuild's first security vulnerability report. Previously esbuild set the <code>Access-Control-Allow-Origin</code> header to <code>*</code> to allow esbuild's development server to be flexible in how it's used for development. However, this allows the websites you visit to make HTTP requests to esbuild's local development server, which gives read-only access to your source code if the website were to fetch your source code's specific URL. You can read more information in <a href="https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99">the report</a>.</p> <p>Starting with this release, <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS">CORS</a> will now be disabled, and requests will now be denied if the host does not match the one provided to <code>--serve=</code>. The default host is <code>0.0.0.0</code>, which refers to all of the IP addresses that represent the local machine (e.g. both <code>127.0.0.1</code> and <code>192.168.0.1</code>). If you want to customize anything about esbuild's development server, you can <a href="https://esbuild.github.io/api/#serve-proxy">put a proxy in front of esbuild</a> and modify the incoming and/or outgoing requests.</p> <p>In addition, the <code>serve()</code> API call has been changed to return an array of <code>hosts</code> instead of a single <code>host</code> string. This makes it possible to determine all of the hosts that esbuild's development server will accept.</p> <p>Thanks to <a href="https://github.com/sapphi-red"><code>@​sapphi-red</code></a> for reporting this issue.</p> </li> <li> <p>Delete output files when a build fails in watch mode (<a href="https://redirect.github.com/evanw/esbuild/issues/3643">#3643</a>)</p> <p>It has been requested for esbuild to delete files when a build fails in watch mode. Previously esbuild left the old files in place, which could cause people to not immediately realize that the most recent build failed. With this release, esbuild will now delete all output files if a rebuild fails. Fixing the build error and triggering another rebuild will restore all output files again.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md">esbuild's changelog</a>.</em></p> <blockquote> <h1>Changelog: 2024</h1> <p>This changelog documents all esbuild versions published in the year 2024 (versions 0.19.12 through 0.24.2).</p> <h2>0.24.2</h2> <ul> <li> <p>Fix regression with <code>--define</code> and <code>import.meta</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4010">#4010</a>, <a href="https://redirect.github.com/evanw/esbuild/issues/4012">#4012</a>, <a href="https://redirect.github.com/evanw/esbuild/pull/4013">#4013</a>)</p> <p>The previous change in version 0.24.1 to use a more expression-like parser for <code>define</code> values to allow quoted property names introduced a regression that removed the ability to use <code>--define:import.meta=...</code>. Even though <code>import</code> is normally a keyword that can't be used as an identifier, ES modules special-case the <code>import.meta</code> expression to behave like an identifier anyway. This change fixes the regression.</p> <p>This fix was contributed by <a href="https://github.com/sapphi-red"><code>@​sapphi-red</code></a>.</p> </li> </ul> <h2>0.24.1</h2> <ul> <li> <p>Allow <code>es2024</code> as a target in <code>tsconfig.json</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4004">#4004</a>)</p> <p>TypeScript recently <a href="https://devblogs.microsoft.com/typescript/announcing-typescript-5-7/#support-for---target-es2024-and---lib-es2024">added <code>es2024</code></a> as a compilation target, so esbuild now supports this in the <code>target</code> field of <code>tsconfig.json</code> files, such as in the following configuration file:</p> <pre lang="json"><code>{ &quot;compilerOptions&quot;: { &quot;target&quot;: &quot;ES2024&quot; } } </code></pre> <p>As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in <a href="https://esbuild.github.io/content-types/#tsconfig-json">the documentation</a>.</p> <p>This fix was contributed by <a href="https://github.com/billyjanitsch"><code>@​billyjanitsch</code></a>.</p> </li> <li> <p>Allow automatic semicolon insertion after <code>get</code>/<code>set</code></p> <p>This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:</p> <pre lang="ts"><code>class Foo { get *x() {} set *y() {} } </code></pre> <p>The above code will be considered valid starting with this release. This change to esbuild follows a <a href="https://redirect.github.com/microsoft/TypeScript/pull/60225">similar change to TypeScript</a> which will allow this syntax starting with TypeScript 5.7.</p> </li> <li> <p>Allow quoted property names in <code>--define</code> and <code>--pure</code> (<a href="https://redirect.github.com/evanw/esbuild/issues/4008">#4008</a>)</p> <p>The <code>define</code> and <code>pure</code> API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes <code>--define</code> and <code>--pure</code> consistent with <code>--global-name</code>, which already supported quoted property names. For example, the following is now possible:</p> <pre lang="js"><code></code></pre> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/evanw/esbuild/commit/6bfc1c13b4d986b86e8bc2035f00c337b0c1d007"><code>6bfc1c1</code></a> publish 0.25.1 to npm</li> <li><a href="https://github.com/evanw/esbuild/commit/f9b39529a328f513cd73b36e8488a4a624df5c36"><code>f9b3952</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4078">#4078</a>: prepend namespaces to source map paths</li> <li><a href="https://github.com/evanw/esbuild/commit/ccf3dd7889e7765a1d6f1596ada0f22b320d7174"><code>ccf3dd7</code></a> add &quot;contributed by&quot; in changelog</li> <li><a href="https://github.com/evanw/esbuild/commit/48cd7a9e26452f30345eb10a3d471f26de56d1ec"><code>48cd7a9</code></a> Update Go from 1.23.5 to 1.23.7 (<a href="https://redirect.github.com/evanw/esbuild/issues/4077">#4077</a>)</li> <li><a href="https://github.com/evanw/esbuild/commit/1f04fa4dc85ef4b1fa01e1938fa127a2cc170c35"><code>1f04fa4</code></a> fix absolute windows paths in source maps</li> <li><a href="https://github.com/evanw/esbuild/commit/9ca03f6ea8aa4c418cb66da876139eef4e2abb26"><code>9ca03f6</code></a> also add test case from <a href="https://redirect.github.com/evanw/esbuild/issues/4075">#4075</a></li> <li><a href="https://github.com/evanw/esbuild/commit/2f244c085a970b873e579ac2a0b1c054cf9c66ea"><code>2f244c0</code></a> add test case from <a href="https://redirect.github.com/evanw/esbuild/issues/4104">#4104</a></li> <li><a href="https://github.com/evanw/esbuild/commit/1dde994de8858d71fe0e9e128d22142b3c9d7de6"><code>1dde994</code></a> fix incorrect test names</li> <li><a href="https://github.com/evanw/esbuild/commit/9f008c59b628b65c00878d7673ed24317e911666"><code>9f008c5</code></a> fix <a href="https://redirect.github.com/evanw/esbuild/issues/4070">#4070</a>: <code>file</code> namespace for <code>sourceMappingURL</code></li> <li><a href="https://github.com/evanw/esbuild/commit/cbd5eb8c82089619f235b96be7b7b18c06fc10c0"><code>cbd5eb8</code></a> release notes and tests for <a href="https://redirect.github.com/evanw/esbuild/issues/4082">#4082</a></li> <li>Additional commits viewable in <a href="https://github.com/evanw/esbuild/compare/v0.21.5...v0.25.1">compare view</a></li> </ul> </details> <br /> Updates `@sveltejs/vite-plugin-svelte` from 3.1.1 to 5.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/vite-plugin-svelte/releases"><code>@​sveltejs/vite-plugin-svelte</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.1.0</h2> <h3>Minor Changes</h3> <ul> <li>scope css to js module to enable treeshaking scoped css from unused components. Requires vite 6.2 and svelte 5.26 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1092">#1092</a>)</li> </ul> <h3>Patch Changes</h3> <ul> <li>add <code>svelte &gt; clsx</code> to optimizeDeps.include to avoid page reload when using vite6 and npm (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1124">#1124</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.0.3</h2> <h3>Patch Changes</h3> <ul> <li>fix errorhandling to work with errors that don't have a code property (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1054">#1054</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.0.2</h2> <h3>Patch Changes</h3> <ul> <li>adapt internal handling of warning and error <code>code</code> property to changes in svelte5 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1044">#1044</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.0.1</h2> <h3>Patch Changes</h3> <ul> <li>Fix peer dependencies warning (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1038">#1038</a>)</li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.0.0</h2> <h3>Major Changes</h3> <ul> <li> <p>Handle Vite 6 breaking change and remove Vite 5 handling (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1020">#1020</a>)</p> </li> <li> <p>Support Vite 6 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1026">#1026</a>)</p> </li> </ul> <h3>Minor Changes</h3> <ul> <li> <p>Add <code>esm-env</code> to <code>ssr.noExternal</code> by default to resolve its conditions with Vite (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1020">#1020</a>)</p> </li> <li> <p>Support <code>?inline</code> query on Svelte style virtual modules (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1024">#1024</a>)</p> </li> </ul> <h3>Patch Changes</h3> <ul> <li> <p>remove vite6 beta from peer range (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1035">#1035</a>)</p> </li> <li> <p>Allow script tags to span multiple lines (<a href="https://github.com/sveltejs/vite-plugin-svelte/commit/0db95a9cbcd281b99b8b817c8eda8d9ff8fa2db2"><code>0db95a9</code></a>)</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/sveltejs/vite-plugin-svelte/commit/4fefbc24718953161ac7f86750df2dd539ca7978"><code>4fefbc2</code></a>, <a href="https://github.com/sveltejs/vite-plugin-svelte/commit/e2622664d9871558e03974524467968c7f906098"><code>e262266</code></a>]:</p> <ul> <li><code>@​sveltejs/vite-plugin-svelte-inspector</code><a href="https://github.com/4"><code>@​4</code></a>.0.0</li> </ul> </li> </ul> <h2><code>@​sveltejs/vite-plugin-svelte</code><a href="https://github.com/5"><code>@​5</code></a>.0.0-next.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md"><code>@​sveltejs/vite-plugin-svelte</code>'s changelog</a>.</em></p> <blockquote> <h2>5.1.0</h2> <h3>Minor Changes</h3> <ul> <li>scope css to js module to enable treeshaking scoped css from unused components. Requires vite 6.2 and svelte 5.26 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1092">#1092</a>)</li> </ul> <h3>Patch Changes</h3> <ul> <li>add <code>svelte &gt; clsx</code> to optimizeDeps.include to avoid page reload when using vite6 and npm (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1124">#1124</a>)</li> </ul> <h2>5.0.3</h2> <h3>Patch Changes</h3> <ul> <li>fix errorhandling to work with errors that don't have a code property (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1054">#1054</a>)</li> </ul> <h2>5.0.2</h2> <h3>Patch Changes</h3> <ul> <li>adapt internal handling of warning and error <code>code</code> property to changes in svelte5 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1044">#1044</a>)</li> </ul> <h2>5.0.1</h2> <h3>Patch Changes</h3> <ul> <li>Fix peer dependencies warning (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1038">#1038</a>)</li> </ul> <h2>5.0.0</h2> <h3>Major Changes</h3> <ul> <li> <p>Handle Vite 6 breaking change and remove Vite 5 handling (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1020">#1020</a>)</p> </li> <li> <p>Support Vite 6 (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1026">#1026</a>)</p> </li> </ul> <h3>Minor Changes</h3> <ul> <li> <p>Add <code>esm-env</code> to <code>ssr.noExternal</code> by default to resolve its conditions with Vite (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1020">#1020</a>)</p> </li> <li> <p>Support <code>?inline</code> query on Svelte style virtual modules (<a href="https://redirect.github.com/sveltejs/vite-plugin-svelte/pull/1024">#1024</a>)</p> </li> </ul> <h3>Patch Changes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/5e8f17395fa3cfaa9cb542c49b7f0353d6cad6c0"><code>5e8f173</code></a> Version Packages (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1111">#1111</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/0c1a7f6ceb43144c9ffc1b42e943d733eb2e5f7b"><code>0c1a7f6</code></a> fix: optimize &quot;svelte &gt; clsx&quot; by default (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1124">#1124</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/6e338f4a293dd4a1ef29a96f9362f9a7b36524e4"><code>6e338f4</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1114">#1114</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/a28f72e0e6941f6c1494e3b02b2f9adaba8c890b"><code>a28f72e</code></a> chore: updates (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1120">#1120</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/3589433cd19464c484f560516d41e670e5d40710"><code>3589433</code></a> update remaining deps and replace express/serve-static with polka/sirv (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1112">#1112</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/fc19a926ee59c57475b45a2be37caeada429c50f"><code>fc19a92</code></a> feat: scope css to js module to allow treeshaking it (requires vite 6.2) (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1092">#1092</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/876c1c5e00104211553b5eb2df77e7f03887d8fb"><code>876c1c5</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1103">#1103</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/45bd98c4ab9d4b943e4be24a9e67616d3064b3fa"><code>45bd98c</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1097">#1097</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/1644cd43d5852191c162cdc8ecc1a8c3780a4ea9"><code>1644cd4</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1093">#1093</a>)</li> <li><a href="https://github.com/sveltejs/vite-plugin-svelte/commit/29e25081deba3ee6a495b006f64877c01caf5ab3"><code>29e2508</code></a> fix(deps): update all non-major dependencies (<a href="https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte/issues/1088">#1088</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@5.1.0/packages/vite-plugin-svelte">compare view</a></li> </ul> </details> <br /> Updates `vite` from 5.4.19 to 6.3.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/releases">vite's releases</a>.</em></p> <blockquote> <h2>v5.4.19</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.19/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.18</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.18/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.17</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.17/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> <h2>v5.4.16</h2> <p>Please refer to <a href="https://github.com/vitejs/vite/blob/v5.4.16/packages/vite/CHANGELOG.md">CHANGELOG.md</a> for details.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/vitejs/vite/blob/v5.4.19/packages/vite/CHANGELOG.md">vite's changelog</a>.</em></p> <blockquote> <h2><!-- raw HTML omitted -->5.4.19 (2025-04-30)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965">#19965</a>, check static serve file inside sirv (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19966">#19966</a>) (<a href="https://github.com/vitejs/vite/commit/766947e7cbf1cdd07df9737394e8c870401b78b0">766947e</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19965">#19965</a> <a href="https://redirect.github.com/vitejs/vite/issues/19966">#19966</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.18 (2025-04-10)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>, reject requests with <code>#</code> in request-target (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831">#19831</a>) (<a href="https://github.com/vitejs/vite/commit/823675baff2bd6809c74ba2d9acca0327923a54f">823675b</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19830">#19830</a> <a href="https://redirect.github.com/vitejs/vite/issues/19831">#19831</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.17 (2025-04-03)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>) (<a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c">84b2b46</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19782">#19782</a> <a href="https://redirect.github.com/vitejs/vite/issues/19784">#19784</a></li> </ul> <h2><!-- raw HTML omitted -->5.4.16 (2025-03-31)<!-- raw HTML omitted --></h2> <ul> <li>fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>, fs check in transform middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19762">#19762</a>) (<a href="https://github.com/vitejs/vite/commit/b627c50d359f3bd9b602408fbbf462cf4a2f019c">b627c50</a>), closes <a href="https://redirect.github.com/vitejs/vite/issues/19761">#19761</a> <a href="https://redirect.github.com/vitejs/vite/issues/19762">#19762</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitejs/vite/commit/80a333a23103ced0442d4463d1191433d90f5e19"><code>80a333a</code></a> release: v5.4.19</li> <li><a href="https://github.com/vitejs/vite/commit/766947e7cbf1cdd07df9737394e8c870401b78b0"><code>766947e</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19965">#19965</a>, check static serve file inside sirv (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19966">#19966</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/731b77d19d36f5682a5441b49cb2f6473389ad99"><code>731b77d</code></a> release: v5.4.18</li> <li><a href="https://github.com/vitejs/vite/commit/823675baff2bd6809c74ba2d9acca0327923a54f"><code>823675b</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19830">#19830</a>, reject requests with <code>#</code> in request-target (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19831">#19831</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/0a2518a98d2354c61ee8ef51f7d00fa92aebb511"><code>0a2518a</code></a> release: v5.4.17</li> <li><a href="https://github.com/vitejs/vite/commit/84b2b46ed129be8215108e789a90adbb33a9c42c"><code>84b2b46</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19782">#19782</a>, fs check with svg and relative paths (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19784">#19784</a>)</li> <li><a href="https://github.com/vitejs/vite/commit/712cb71aa0e2a03dbf49db92043fb4ecbfc826b1"><code>712cb71</code></a> release: v5.4.16</li> <li><a href="https://github.com/vitejs/vite/commit/b627c50d359f3bd9b602408fbbf462cf4a2f019c"><code>b627c50</code></a> fix: backport <a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19761">#19761</a>, fs check in transform middleware (<a href="https://github.com/vitejs/vite/tree/HEAD/packages/vite/issues/19762">#19762</a>)</li> <li>See full diff in <a href="https://github.com/vitejs/vite/commits/v5.4.19/packages/vite">compare view</a></li> </ul> </details> <br /> Updates `vitest` from 1.6.1 to 3.2.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases">vitest's releases</a>.</em></p> <blockquote> <h2>v3.2.3</h2> <h3>   🚀 Features</h3> <ul> <li><strong>browser</strong>: Use base url instead of <strong>vitest</strong>  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8126">vitest-dev/vitest#8126</a> <a href="https://github.com/vitest-dev/vitest/commit/1d8ebf9ae"><!-- raw HTML omitted -->(1d8eb)<!-- raw HTML omitted --></a></li> <li><strong>ui</strong>: Show test annotations and metadata in the test report tab  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8093">vitest-dev/vitest#8093</a> <a href="https://github.com/vitest-dev/vitest/commit/c69be1fc1"><!-- raw HTML omitted -->(c69be)<!-- raw HTML omitted --></a></li> </ul> <h3>   🐞 Bug Fixes</h3> <ul> <li>Rerun tests when project's setup file is changed  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8097">vitest-dev/vitest#8097</a> <a href="https://github.com/vitest-dev/vitest/commit/0f3350667"><!-- raw HTML omitted -->(0f335)<!-- raw HTML omitted --></a></li> <li>Revert <code>expect.any</code> return type  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8129">vitest-dev/vitest#8129</a> <a href="https://github.com/vitest-dev/vitest/commit/4751436d5"><!-- raw HTML omitted -->(47514)<!-- raw HTML omitted --></a></li> <li>Run only the name plugin last, not all config plugins  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8130">vitest-dev/vitest#8130</a> <a href="https://github.com/vitest-dev/vitest/commit/83862d46e"><!-- raw HTML omitted -->(83862)<!-- raw HTML omitted --></a></li> <li><strong>pool</strong>: <ul> <li>Throw if user's tests use <code>process.send()</code>  -  by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8125">vitest-dev/vitest#8125</a> <a href="https://github.com/vitest-dev/vitest/commit/dfe81a67a"><!-- raw HTML omitted -->(dfe81)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>runner</strong>: <ul> <li>Fast sequential task updates missing  -  by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8121">vitest-dev/vitest#8121</a> <a href="https://github.com/vitest-dev/vitest/commit/7bd11a9b3"><!-- raw HTML omitted -->(7bd11)<!-- raw HTML omitted --></a></li> <li>Comments between fixture destructures  -  by <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8127">vitest-dev/vitest#8127</a> <a href="https://github.com/vitest-dev/vitest/commit/dc469f260"><!-- raw HTML omitted -->(dc469)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>vite-node</strong>: <ul> <li>Unable to handle errors where sourcemap mapping empty  -  by <a href="https://github.com/blake-newman"><code>@​blake-newman</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8071">vitest-dev/vitest#8071</a> <a href="https://github.com/vitest-dev/vitest/commit/8aa252121"><!-- raw HTML omitted -->(8aa25)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v3.2.2...v3.2.3">View changes on GitHub</a></h5> <h2>v3.2.2</h2> <h3>   🚀 Features</h3> <ul> <li>Support rolldown-vite  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> and <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/7509">vitest-dev/vitest#7509</a> <a href="https://github.com/vitest-dev/vitest/commit/c8d6264bf"><!-- raw HTML omitted -->(c8d62)<!-- raw HTML omitted --></a></li> </ul> <h3>   🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: <ul> <li>Calculate prepare time from <code>createTesters</code> call on the main thread  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8101">vitest-dev/vitest#8101</a> <a href="https://github.com/vitest-dev/vitest/commit/142c735e1"><!-- raw HTML omitted -->(142c7)<!-- raw HTML omitted --></a></li> <li>Optimize build output and always prebundle vitest  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> <a href="https://github.com/vitest-dev/vitest/commit/00a391656"><!-- raw HTML omitted -->(00a39)<!-- raw HTML omitted --></a></li> <li>Make custom locators available in <code>vitest-browser-*</code> packages  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8103">vitest-dev/vitest#8103</a> <a href="https://github.com/vitest-dev/vitest/commit/247ef5822"><!-- raw HTML omitted -->(247ef)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>expect</strong>: <ul> <li>Ensure we can always self <code>toEqual</code>  -  by <a href="https://github.com/dubzzz"><code>@​dubzzz</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8094">vitest-dev/vitest#8094</a> <a href="https://github.com/vitest-dev/vitest/commit/02ec89203"><!-- raw HTML omitted -->(02ec8)<!-- raw HTML omitted --></a></li> </ul> </li> <li><strong>reporter</strong>: <ul> <li>Allow <code>dot</code> reporter to work in non interactive terminals  -  by <a href="https://github.com/bstephen1"><code>@​bstephen1</code></a> and <a href="https://github.com/AriPerkkio"><code>@​AriPerkkio</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/7994">vitest-dev/vitest#7994</a> <a href="https://github.com/vitest-dev/vitest/commit/6db9f5207"><!-- raw HTML omitted -->(6db9f)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v3.2.1...v3.2.2">View changes on GitHub</a></h5> <h2>v3.2.1</h2> <h3>   🐞 Bug Fixes</h3> <ul> <li>Use sha1 instead of md5 for hashing  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> <a href="https://github.com/vitest-dev/vitest/commit/e4c73503e"><!-- raw HTML omitted -->(e4c73)<!-- raw HTML omitted --></a></li> <li><strong>expect</strong>: <ul> <li>Fix chai import in dts  -  by <a href="https://github.com/hi-ogawa"><code>@​hi-ogawa</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8077">vitest-dev/vitest#8077</a> <a href="https://github.com/vitest-dev/vitest/commit/a759347ff"><!-- raw HTML omitted -->(a7593)<!-- raw HTML omitted --></a></li> <li>Export <code>DeeplyAllowMatchers</code>  -  by <a href="https://github.com/sheremet-va"><code>@​sheremet-va</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/8078">vitest-dev/vitest#8078</a> <a href="https://github.com/vitest-dev/vitest/commit/30ab42c0f"><!-- raw HTML omitted -->(30ab4)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5>    <a href="https://github.com/vitest-dev/vitest/compare/v3.2.0...v3.2.1">View changes on GitHub</a></h5> <h2>v3.2.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/b87ee3ece20bc5fc61e179a36741d9d36d494ea7"><code>b87ee3e</code></a> chore: release v3.2.3</li> <li><a href="https://github.com/vitest-dev/vitest/commit/83862d46ea28290bc438259781b1d3bca48eb1ec"><code>83862d4</code></a> fix: run only the name plugin last, not all config plugins (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8130">#8130</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/dc469f260f589299c14f8a171f3512b7e19f605c"><code>dc469f2</code></a> fix(runner): comments between fixture destructures (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8127">#8127</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/1d8ebf9ae5afd71099194016243f9282c25ede4f"><code>1d8ebf9</code></a> feat(browser): use base url instead of <strong>vitest</strong> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8126">#8126</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/dfe81a67ac12b456fb1a7daef095cc271cd77308"><code>dfe81a6</code></a> fix(pool): throw if user's tests use <code>process.send()</code> (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8125">#8125</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/0f3350667254177a6dfe297bf74bfc5eb10d4dc9"><code>0f33506</code></a> fix: rerun tests when project's setup file is changed (<a href="https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest/issues/8097">#8097</a>)</li> <li><a href="https://github.com/vitest-dev/vitest/commit/7ddcd3363e2853a85273534d10a2ef1e3f905468"><code>7ddcd33</code></a> chore: release v3.2.2</li> <li><a href="https://github.com/vitest-dev/vitest/commit/33f71207fa7854d413d85616d69b1a7a3a6ea90e"><code>33f7120</code></a> Revert &quot;fix(browser): optimize build output and always prebundle vitest&quot;</li> <li><a href="https://github.com/vitest-dev/vitest/commit/00a391656c1246e37645abe21fc28c1994ad45bd"><code>00a3916</code></a> fix(browser): optimize build output and always prebundle vitest</li> <li><a href="https://github.com/vitest-dev/vitest/commit/142c735e16e3da04627e021d8428134ddd266082"><code>142c735</code></a> fix(browser): calculate prepare time from <code>createTesters</code> call on the main th...</li> <li>Additional commits viewable in <a href="https://github.com/vitest-dev/vitest/commits/v3.2.3/packages/vitest">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can tr... _Description has been truncated_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-20 04:56:26 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/open-webui#23641