chore: bump the development-dependencies group across 1 directory with 15 updates

[dependabot]

Bumps the development-dependencies group with 15 updates in the / directory:

Package	From	To
@remix-run/route-pattern	0.23.0	0.24.0
@sveltejs/kit	2.70.2	2.70.3
@types/node	26.2.0	26.4.0
@vitest/browser-playwright	4.1.10	4.1.11
eslint-plugin-svelte	3.22.0	3.23.0
globals	17.9.0	17.11.0
marked	18.0.9	18.0.11
shiki	4.4.2	4.4.3
svelte	5.56.8	5.57.0
svelte-check	4.7.5	4.7.6
typescript	6.0.3	7.0.2
typescript-eslint	8.66.0	8.68.0
vite	8.2.1	8.2.2
vitest	4.1.10	4.1.11
wrangler	4.120.0	4.127.1

Updates @remix-run/route-pattern from 0.23.0 to 0.24.0

Release notes

Sourced from @​remix-run/route-pattern's releases.

route-pattern v0.24.0

Minor Changes

• BREAKING CHANGE: Route matching now uses delimiter-bounded params and a bounded state compiler (see #11651). Pathname params possessively capture through hyphens but stop at raw / or ., so UUIDs remain intact and createHref() percent-encodes dots in param values for round-tripping. Patterns such as /:year-:month must migrate to one inseparable param such as /:date, or place captures in separate delimiter-bounded segments.

  Patterns may contain any number of separated wildcards and optional groups without eagerly expanding variants or using backtracking regular expressions. Adjacent wildcards, empty optionals, params followed by non-delimiter text, and ambiguous adjacent optional capture schemas now throw ParseError. Repeated capture names remain valid: the last participating capture wins in params, while paramsMeta retains every capture in source order.

  Static pattern text is decoded during matching, while raw and percent-encoded / and . retain distinct structural meaning. Matchers also accept configurable pattern-size, matcher-size, and match-work limits through MatcherOptions.limits; exceeding a limit throws MatcherResourceError with structured details.

• BREAKING CHANGE: createHref(pattern, params, searchParams) now accepts an options object as its third argument. Move existing search parameters to createHref(pattern, params, { searchParams }).

  Matchers now accept relative URL strings when an absolute baseURL is provided to match() or matchAll(). createHref() accepts the same baseURL option and returns path-relative references for same-origin targets while leaving cross-origin targets absolute. The searchParams option accepts both typed plain objects and URLSearchParams; repeated URLSearchParams entries retain their order.

Changelog

Sourced from @​remix-run/route-pattern's changelog.

v0.24.0

Minor Changes

• BREAKING CHANGE: Route matching now uses delimiter-bounded params and a bounded state compiler (see #11651). Pathname params possessively capture through hyphens but stop at raw / or ., so UUIDs remain intact and createHref() percent-encodes dots in param values for round-tripping. Patterns such as /:year-:month must migrate to one inseparable param such as /:date, or place captures in separate delimiter-bounded segments.

  Patterns may contain any number of separated wildcards and optional groups without eagerly expanding variants or using backtracking regular expressions. Adjacent wildcards, empty optionals, params followed by non-delimiter text, and ambiguous adjacent optional capture schemas now throw ParseError. Repeated capture names remain valid: the last participating capture wins in params, while paramsMeta retains every capture in source order.

  Static pattern text is decoded during matching, while raw and percent-encoded / and . retain distinct structural meaning. Matchers also accept configurable pattern-size, matcher-size, and match-work limits through MatcherOptions.limits; exceeding a limit throws MatcherResourceError with structured details.

• BREAKING CHANGE: createHref(pattern, params, searchParams) now accepts an options object as its third argument. Move existing search parameters to createHref(pattern, params, { searchParams }).

  Matchers now accept relative URL strings when an absolute baseURL is provided to match() or matchAll(). createHref() accepts the same baseURL option and returns path-relative references for same-origin targets while leaving cross-origin targets absolute. The searchParams option accepts both typed plain objects and URLSearchParams; repeated URLSearchParams entries retain their order.

Commits

• 2949a59 Release (#11586)
• 89092ad Use stable TypeScript 7 compiler (#11666)
• c009802 route-pattern: support relative URL matching and href generation (#11657)
• fee6b40 route-pattern: replace variant expansion with bounded state matching (#11652)
• 3c9eb6c Refactor test runner CLI invocation (#11625)
• b7065c7 Migrate Prettier to Oxfmt (#11517)
• 016b562 Fix docs method links (#11582)
• See full diff in compare view

Updates @sveltejs/kit from 2.70.2 to 2.70.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.70.3

Patch Changes

• fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.70.3

Patch Changes

• fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

Commits

• 39e8e1f Version Packages (#16771)
• b61018d fix: avoid eagerly reading $app/state dependencies during module
• 1ad0d43 chore: get Vercel split platform tests running (#16666)
• See full diff in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

• See full diff in compare view

Updates @vitest/browser-playwright from 4.1.10 to 4.1.11

Release notes

Sourced from @​vitest/browser-playwright's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates eslint-plugin-svelte from 3.22.0 to 3.23.0

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.0

Minor Changes

• #1565 1ec3cf5 Thanks @​ColumbusLabs! - feat: add prefer-attribute-interpolation rule

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.0

Minor Changes

• #1565 1ec3cf5 Thanks @​ColumbusLabs! - feat: add prefer-attribute-interpolation rule

Commits

• a24a9bb chore: release eslint-plugin-svelte (#1576)
• 1ec3cf5 feat: report useless template literal mustaches (#1565)
• 41817f8 chore(deps): update dependency mocha to ~11.8.0 (#1572)
• See full diff in compare view

Updates globals from 17.9.0 to 17.11.0

Release notes

Sourced from globals's releases.

v17.11.0

• Add react-native globals (#337) 61eafbf

---

sindresorhus/globals@v17.10.0...v17.11.0

v17.10.0

• Add GM_cookie to Greasemonkey globals (#349) f468407

---

sindresorhus/globals@v17.9.0...v17.10.0

Commits

• 8c59927 17.11.0
• 61eafbf Add react-native globals (#337)
• 7bed4af 17.10.0
• f468407 Add GM_cookie to Greasemonkey globals (#349)
• See full diff in compare view

Updates marked from 18.0.9 to 18.0.11

Release notes

Sourced from marked's releases.

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

• do not nest a link inside a link (#4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#4059) (b699db3)

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

• keep the em/strong mask the same length as the source (#4044) (681373c)
• parse EOF backtick fences after paragraphs (#4039) (81bd750)
• place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

Commits

• 53cb13f chore(release): 18.0.11 [skip ci]
• 0c6b2a6 docs: add adaptable bullet point (#4058)
• c430a64 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#4069)
• b699db3 fix: keep emphasis in the text of a rejected reference link (#4059)
• 0653c24 fix: inlineTokens rebuilds the reflink-mask preamble per call (#4040)
• e250e31 fix: do not nest a link inside a link (#4051)
• 8698d35 chore(release): 18.0.10 [skip ci]
• 58367a5 chore(deps-dev): bump eslint from 10.8.0 to 10.8.1 (#4055)
• a426c4d chore(deps-dev): bump esbuild from 0.28.1 to 0.28.2 (#4056)
• a5cf277 chore(deps-dev): bump highlight.js from 11.11.1 to 11.12.0 (#4057)
• Additional commits viewable in compare view

Updates shiki from 4.4.2 to 4.4.3

Release notes

Sourced from shiki's releases.

v4.4.3

   🚀 Features

• Update deps and grammar  -  by @​antfu (72f26)

   🐞 Bug Fixes

• vitepress-twoslash: Delay twoslash tooltip show by 200ms  -  by @​antfubot in shikijs/shiki#1306 (9f2aa)

    View changes on GitHub

Commits

• 48cd2cc chore: release v4.4.3
• See full diff in compare view

Updates svelte from 5.56.8 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

• fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits

• 7bc0a70 Version Packages (#18682)
• 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
• 4ae5eb3 feat: add has function to createContext (#18472)
• 5034b59 chore: bump playwright (#18729)
• 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
• edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
• 05b6916 fix: omit bind:focused from SSR output (#18724)
• 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
• 2e8b57b fix: render selected options for \<select multiple> with an array value ...
• 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
• Additional commits viewable in compare view

Updates svelte-check from 4.7.5 to 4.7.6

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.6

Patch Changes

• fix: don't log an error for vite configs without a Svelte plugin (#3091)

• fix: handle SvelteKit 3 having its config merged at the top level (#3104)

Commits

• f436ec0 Version Packages (#3105)
• 97710db fix: handle SvelteKit 3 having its config merged at the top level (#3104)
• 820daab fix: handle SvelteKit 3 changed imports for zero types feature (#3106)
• 32018fd fix: don't log an error for vite configs without a Svelte plugin (#3091)
• 58b7731 Version Packages (#3102)
• 87ce367 fix: handle chdir throwing (#3103)
• 1b77fc6 chore: replace kit.svelte.dev links with the new site URL (#3100)
• a83093b fix: remove type dependency on magic-string (#3101)
• See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Release notes

Sourced from typescript's releases.

TypeScript 7.0.2

https://devblogs.microsoft.com/typescript/announcing-typescript-7-0/

This tag was originally released at: https://github.com/microsoft/typescript-go/releases/tag/typescript%2Fv7.0.2

Commits

• 1e4744d Merge branch 'main' into ts7-release
• a5a219cmicrosoft/typescript-go#4558
• ecfe30d Update status localization
• 5de25b5 Hide executable name in TypeScript status
• d7ce74a Show bundled TypeScript version for packaged servers
• 29be66a Correct TS 7 release version to 7.0.2
• ed2bd1b Merge branch 'main' into ts7-release
• 8873075 Bump the github-actions group across 1 directory with 3 updates (microsoft/ty...
• 9427131 Set up stable / nightly extension split, other prep (microsoft/typescript-go#...
• d4eaca5microsoft/typescript-go#4549
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript-eslint from 8.66.0 to 8.68.0

Release notes

Sourced from typescript-eslint's releases.

v8.68.0

8.68.0 (2026-08-24)

🚀 Features

• eslint-plugin: [strict-void-return] add fix suggestions (#12086)
• utils: support ESLint rule meta.languages (#12663)

🩹 Fixes

• eslint-plugin: [unified-signatures] deduplicate types in report (#12656)
• eslint-plugin: [return-await] prevent autofix from breaking code in arrow-functions (#12707)
• eslint-plugin: [unified-signatures] report identical signatures (#12678)
• eslint-plugin: [no-unnecessary-type-assertion] prevent stack overflow in recursive types (#12711)
• eslint-plugin: [no-floating-promises] setting ignoreVoid: false results in false negative in ArrowFunctionExpression (#12646)
• eslint-plugin: [no-empty-object-type] ignore suggestions that result in invalid interfaces and export defaults (#12739)
• website: playground crashes on extends configs (#12608)
• website: account for thanks.dev and out-of-band donors in sponsors list (#12735)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Hugo @​hugop95
• Josh Goldberg ✨
• Niki @​phaux
• Thiago Barbosa
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.67.0

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.68.0 (2026-08-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 8f4e00a chore(release): publish 8.68.0
• 55f6d5d chore: enable source maps (#12677)
• 20a261f chore(release): publish 8.67.0
• c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• See full diff in compare view

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
• css: don't pass empty targets to lightningcss (#23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
• deps: update all non-major dependencies (#23217) (ba958bd)
• deps: update rolldown-related dependencies (#23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
• use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#23231) (b4d66fe)
• module-runner: add TLA circular import case (#23299) (4a261f2)
• module-runner: simplify server-hmr tests (#23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

Commits

• de1111a release: v8.2.2
• cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
• 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
• 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
• 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
• 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
• 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
• 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
• 599b44b test(module-runner): simplify server-hmr tests (#23300)
• 4a261f2 test(module-runner): add TLA circular import case (#23299)
• Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in vitest-dev/vitest#10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in vitest-dev/vitest#10974 (fe5a1)

    View changes on GitHub

Commits

• 9bd8d46 chore: release v4.1.11 (#10995)
• 9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
• See full diff in compare view

Updates wrangler from 4.120.0 to 4.127.1

Release notes

Sourced from wrangler's releases.

wrangler@4.127.1

Patch Changes

• #15383 eb01850 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260826.1	^5.20260827.1
  workerd	1.20260826.1	1.20260827.1

• #15393 e1df91a Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260827.1	^5.20260828.1
  workerd	1.20260827.1	1.20260828.1

• Updated dependencies [eb01850, e1df91a, b23de74, 015550a, 015550a, 015550a, 3650d29, b23de74]:

  • miniflare@5.20260828.0-alpha

wrangler@4.127.0

Minor Changes

• #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

  The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

  {
    "workflows": [
      {
        "binding": "MY_WORKFLOW",
        "name": "my-workflow",
        "class_name": "MyWorkflow",
        "concurrency": { "limit": 10 }
      }
    ]
  }

Patch Changes

• <...

  Description has been truncated

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	esmodule-com	f848248	Commit Preview URL Branch Preview URL	Sep 02 2026, 09:01 AM