Skip to content

chore(deps): bump the npm-minor-and-patch group across 1 directory with 19 updates - #184

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-223691e0e0
Closed

chore(deps): bump the npm-minor-and-patch group across 1 directory with 19 updates#184
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-223691e0e0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 19 updates in the / directory:

Package From To
supabase 2.101.0 2.109.0
turbo 2.10.0 2.10.3
@supabase/ssr 0.6.1 0.12.0
@supabase/supabase-js 2.106.1 2.110.0
@vercel/microfrontends 2.3.3 2.3.6
svelte 5.55.9 5.56.4
@playwright/test 1.59.1 1.61.1
@sveltejs/kit 2.61.1 2.69.1
@tailwindcss/vite 4.2.2 4.3.2
svelte-check 4.4.6 4.7.1
@crxjs/vite-plugin 2.4.0 2.7.1
@types/chrome 0.0.287 0.2.2
globals 17.4.0 17.7.0
prettier 3.8.1 3.9.4
tailwindcss 4.2.2 4.3.2
tsx 4.21.0 4.23.0
typescript-eslint 8.58.1 8.62.1
@sveltejs/package 2.5.7 2.5.8
svelte2tsx 0.7.54 0.7.57

Updates supabase from 2.101.0 to 2.109.0

Release notes

Sourced from supabase's releases.

v2.109.0

Supabase CLI v2.109.0 — 2026-06-30

v2.109.0 moves migration commands to TypeScript with a critical fix for pipeline-incompatible SQL statements, adds db reset --sql-paths for CI workflows, and resolves several database operation bugs.

Highlights

  • Migration files with pipeline-incompatible statements now apply correctlymigration up/down now handle CREATE INDEX CONCURRENTLY, VACUUM CONCURRENTLY, REINDEX CONCURRENTLY, ALTER SYSTEM, CLUSTER without failing. (#5671)

New features

  • db reset --sql-paths — Override seed SQL patterns per-reset without editing config.toml. (#5691)

Bug fixes

  • Declarative schema sync detects stale local Postgres images and suggests restart instead of silently generating broken migrations. (#5646)
  • db diff no longer fails when schema_paths glob patterns match no files, enabling gradual adoption of declarative schema. (#5702)
  • Fixed db diff, db pull, and db schema push crashing when supabase/migrations directory already exists (Windows OneDrive, etc.). (#5724)
  • Fixed supabase functions serve crashing with "name too long" error on Windows when runtime bootstrap is large. (#5712)
  • Fixed config push failing when remote Storage config is missing the optional databasePoolMode setting. (#5729)

TypeScript port progress

  • Now served by the TypeScript shell: migration new, migration list, migration fetch, migration repair, migration up, migration down. Behavior matches the Go CLI. (#5671)

Plus 20 internal improvements and dependency updates.

Full changelog: supabase/cli@v2.108.0...v2.109.0

v2.109.0-beta.11

2.109.0-beta.11 (2026-06-30)

Features

v2.109.0-beta.10

2.109.0-beta.10 (2026-06-30)

Bug Fixes

v2.109.0-beta.9

2.109.0-beta.9 (2026-06-30)

Bug Fixes

  • docker: bump supabase/postgres from 17.6.1.139 to 17.6.1.140 in /apps/cli-go/pkg/config/templates (#5733) (f26ae4e)

... (truncated)

Commits
  • 25a9aae ci: auto-mirror template image updates to registries (#5739)
  • b48fad6 feat(cli): port migration commands to native TypeScript (CLI-1312) (#5671)
  • e3ed7d4 fix(cli): storage config (#5729)
  • d879cf8 chore(deps): bump the npm-major group with 4 updates (#5731)
  • 8d2e6d6 fix(cli): handle AlreadyExists errors in directory creation (#5724)
  • 44705df chore(deps): bump the npm-major group with 26 updates (#5720)
  • 279d0c0 fix(cli): shorten serve argv (#5712)
  • 2abc6f0 fix(realtime): unblock and bump realtime to v2.111.8 (#5701)
  • a4a2530 test(cli): supabox-backed live test suite + cli-e2e-ci dispatch (#5699)
  • 229493c fix(cli): detect stale local postgres before declarative sync (#5646)
  • Additional commits viewable in compare view

Updates turbo from 2.10.0 to 2.10.3

Release notes

Sourced from turbo's releases.

Turborepo v2.10.3

What's Changed

Changelog

... (truncated)

Commits
  • 9980449 publish 2.10.3 to registry
  • bc32fcc fix: Correct gitignore precedence in untracked walk and memoize matcher chain...
  • dccab93 fix: Harden TUI terminal restore during shutdown (#13220)
  • 65efe27 fix: Remove devtools feature flag (#13219)
  • c2115dc refactor: Use upstream libghostty-vt crates instead of vendored bindings (#13...
  • c3c91ab fix: Include untracked symlinks in repo-index dirty hash (#13218)
  • b521d32 perf: Derive dirty hash from repo index (#13213)
  • 28d1871 perf: Replace per-package graph traversals in scope filtering (#13212)
  • 148b1dd perf: Cache env wildcard matches across tasks during hashing (#13210)
  • 61d6013 feat: Automatically copy TUI selection to clipboard on mouse release (#13208)
  • Additional commits viewable in compare view

Updates @supabase/ssr from 0.6.1 to 0.12.0

Release notes

Sourced from @​supabase/ssr's releases.

v0.12.0

0.12.0 (2026-06-09)

Features

  • adds cookies.encode option allowing minimal cookie sizes (#126) (cf38b22)
  • bump cookie to 1.0.2 (#113) (b4a77b4)
  • cookies: add clearAuthCookiesAtScopes migration helper (#240) (4e47249)
  • full rewrite using getAll and setAll cookie methods (#1) (b6ae192)
  • improve cookie chunk handling via base64url+length encoding (#90) (6deb687)
  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)
  • publish SSR under deprecated auth-helpers package names (#127) (e8b6102)
  • release workflow RC versioning and publish reliability (#164) (81e68f4)
  • update CI so it runs on release as well (#33) (4517996)
  • update supabase-js to latest (#133) (d65044d)
  • update supabase-js to latest (#145) (08bf7d6)
  • upgrade cookie dependency and cleanup imports (#77) (9524528)

Bug Fixes

  • add @​types/cookies to dependencies (#63) (47e5f16)
  • add create*Client string in x-client-info (#85) (f271acc)
  • allow cookies encode without getAll/setAll on browser client (#213) (89f3f28), closes #170
  • allow use of createBrowserClient without window present (#20) (27d868d)
  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)
  • check chunkedCookie is string in server client (#57) (549fe62)
  • ci: remove packageManager field (#197) (6bf0226)
  • cookies console warnings (#136) (64ff6b3)
  • deprecate parse, serialize exports for more useful functions (#14) (0b5f881)
  • enable tree-shaking for browser bundles (#216) (f009d71)
  • fix createBrowserClient deprecation tsdoc (#17) (1df70ad)
  • force release (#98) (66710e8)
  • re-apply update CI so it runs on release as well (#49) (51d5a43)
  • release: pin npm to 11.5.2 so OIDC trusted publisher works (#249) (4af89f7)
  • remove optional dependencies (#41) (a48fe6f)
  • remove usage of internal type params (#123) (8f3e89e)
  • revert "update CI so it runs on release as well" (#44) (9d0e859)
  • revert: "feat: improve cookie chunk handling via base64url+length encoding (#90)" (#100) (2ea8e23)
  • set max-age default cookie option to 400 days (#54) (f4ed2e0)
  • set cookies for password recovery event (#32) (7dc1837)
  • set cookies when mfa challenge is verified (#27) (c217f53)
  • tsconfig: set explicit rootDir to silence TS6059 in consumer IDEs (#211) (a77ee8a), closes #209
  • update conventional commits ci to use main instead of master (#31) (bebce89)
  • update README session docs (#159) (b859905)
  • update type, remove unused imports, define AuthEvent type (#47) (4f4a375)
  • use skipAutoInitialize to prevent SSR token refresh race condition (#131) (0b7be28)
  • validate base64-prefixed chunked cookies decode to valid JSON (#210) (302cc0e)

... (truncated)

Changelog

Sourced from @​supabase/ssr's changelog.

0.12.0 (2026-06-09)

Features

  • adds cookies.encode option allowing minimal cookie sizes (#126) (cf38b22)
  • bump cookie to 1.0.2 (#113) (b4a77b4)
  • cookies: add clearAuthCookiesAtScopes migration helper (#240) (4e47249)
  • full rewrite using getAll and setAll cookie methods (#1) (b6ae192)
  • improve cookie chunk handling via base64url+length encoding (#90) (6deb687)
  • pass cache headers to setAll to prevent CDN caching of auth responses (#176) (14962d2)
  • publish SSR under deprecated auth-helpers package names (#127) (e8b6102)
  • release workflow RC versioning and publish reliability (#164) (81e68f4)
  • update CI so it runs on release as well (#33) (4517996)
  • update supabase-js to latest (#133) (d65044d)
  • update supabase-js to latest (#145) (08bf7d6)
  • upgrade cookie dependency and cleanup imports (#77) (9524528)

Bug Fixes

  • add @​types/cookies to dependencies (#63) (47e5f16)
  • add create*Client string in x-client-info (#85) (f271acc)
  • allow cookies encode without getAll/setAll on browser client (#213) (89f3f28), closes #170
  • allow use of createBrowserClient without window present (#20) (27d868d)
  • auth: respect user-provided auth options in createBrowserClient (#167) (5f04837)
  • check chunkedCookie is string in server client (#57) (549fe62)
  • ci: remove packageManager field (#197) (6bf0226)
  • cookies console warnings (#136) (64ff6b3)
  • deprecate parse, serialize exports for more useful functions (#14) (0b5f881)
  • enable tree-shaking for browser bundles (#216) (f009d71)
  • fix createBrowserClient deprecation tsdoc (#17) (1df70ad)
  • force release (#98) (66710e8)
  • re-apply update CI so it runs on release as well (#49) (51d5a43)
  • release: pin npm to 11.5.2 so OIDC trusted publisher works (#249) (4af89f7)
  • remove optional dependencies (#41) (a48fe6f)
  • remove usage of internal type params (#123) (8f3e89e)
  • revert "update CI so it runs on release as well" (#44) (9d0e859)
  • revert: "feat: improve cookie chunk handling via base64url+length encoding (#90)" (#100) (2ea8e23)
  • set max-age default cookie option to 400 days (#54) (f4ed2e0)
  • set cookies for password recovery event (#32) (7dc1837)
  • set cookies when mfa challenge is verified (#27) (c217f53)
  • tsconfig: set explicit rootDir to silence TS6059 in consumer IDEs (#211) (a77ee8a), closes #209
  • update conventional commits ci to use main instead of master (#31) (bebce89)
  • update README session docs (#159) (b859905)
  • update type, remove unused imports, define AuthEvent type (#47) (4f4a375)
  • use skipAutoInitialize to prevent SSR token refresh race condition (#131) (0b7be28)
  • validate base64-prefixed chunked cookies decode to valid JSON (#210) (302cc0e)

0.11.0 (2026-06-05)

... (truncated)

Commits
  • d8c9b60 chore(main): release 0.12.0 (#247)
  • 4af89f7 fix(release): pin npm to 11.5.2 so OIDC trusted publisher works (#249)
  • 164c7ab build(deps-dev): bump vitest from 1.6.1 to 4.1.0 in the npm_and_yarn group ac...
  • 2fd3333 chore: update @​supabase/supabase-js to v2.108.0 (#248)
  • dd766c4 chore(main): release 0.11.0 (#244)
  • 932931e build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#245)
  • 4e47249 feat(cookies): add clearAuthCookiesAtScopes migration helper (#240)
  • 34f2b6a chore: update @​supabase/supabase-js to v2.107.0 (#243)
  • 4292d04 chore: update @​supabase/supabase-js to v2.106.1 (#236)
  • a6896b1 chore: update @​supabase/supabase-js to v2.106.0 (#232)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​supabase/ssr since your current version.


Updates @supabase/supabase-js from 2.106.1 to 2.110.0

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.110.0

2.110.0 (2026-06-30)

🚀 Features

  • repo: drop Node.js 20 support (#2482)

❤️ Thank You

v2.110.0-canary.0

2.110.0-canary.0 (2026-06-30)

🚀 Features

  • repo: drop Node.js 20 support (#2482)

❤️ Thank You

v2.109.0

2.109.0 (2026-06-30)

🚀 Features

  • auth: add custom_claims_allowlist to custom providers admin API (#2473)
  • realtime: add postgres_changes filter builder, new operators and select (#2463)
  • storage: expose purgeCache for buckets and single objects (#2429)

🩹 Fixes

  • functions: honor a caller's Content-Type override regardless of casing (#2455)
  • realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)
  • realtime: add replication connection system message option (#2470)
  • storage: keep sortBy defaults when list() is given a partial sortBy (#2454)

❤️ Thank You

v2.108.3-canary.2

2.108.3-canary.2 (2026-06-19)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.110.0 (2026-06-30)

🚀 Features

  • repo: drop Node.js 20 support (#2482)

❤️ Thank You

2.109.0 (2026-06-30)

🩹 Fixes

  • realtime: pin @​supabase/phoenix and browser test CDN deps (#2457)

❤️ Thank You

2.108.2 (2026-06-15)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.108.0 (2026-06-08)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.107.0 (2026-06-02)

🚀 Features

  • auth: remove navigator.locks-based mutex; introduce commit guard + dispose() (#2392)
  • supabase: update X-Client-Info to structured metadata format (#2359)
  • realtime: allow httpSend to send binary payload (#2400)

❤️ Thank You

2.106.2 (2026-05-25)

🩹 Fixes

  • misc: add react-native export condition for Hermes-safe resolution (#2393)

... (truncated)

Commits
  • c3d5e6d feat(repo): drop Node.js 20 support (#2482)
  • b2e02b9 chore(release): version 2.109.0 changelogs (#2481)
  • dd2d4c2 fix(realtime): pin @​supabase/phoenix and browser test CDN deps (#2457)
  • a25062e chore(release): version 2.108.2 changelogs (#2449)
  • b3e5f2d chore(ci): unpin realtime version (#2432)
  • 76f3f02 test(auth): add passkey unit and e2e coverage (#2442)
  • 65fafe5 chore(release): version 2.108.0 changelogs (#2433)
  • 57014e1 chore(release): version 2.107.0 changelogs (#2421)
  • 54ec2b6 feat(auth): remove navigator.locks-based mutex; introduce commit guard + disp...
  • 3397c92 feat(supabase): update X-Client-Info to structured metadata format (#2359)
  • Additional commits viewable in compare view

Updates @vercel/microfrontends from 2.3.3 to 2.3.6

Release notes

Sourced from @​vercel/microfrontends's releases.

@​vercel/microfrontends@​2.3.6

Patch Changes

  • e6deb57: Prevent the local development proxy from crashing on mid-stream upstream errors

    The HTTPS fallback path piped the upstream (production) response to the client without attaching an error handler. When that upstream connection reset mid-stream — common when many requests fan out to a production fallback — the unhandled error event surfaced as an uncaught exception and crashed the proxy process. The upstream response and client request/response streams now have error handlers that tear down the affected request instead of throwing.

@​vercel/microfrontends@​2.3.5

Patch Changes

  • 5fbc4e3: Preserve absolute URLs in query parameters when the local proxy normalizes request URLs and rewrites redirect Location headers.
  • 9a01e16: Route Vercel Toolbar well-known requests through the local proxy to the locally running application that served the page. This supports @vercel/toolbar@0.2.6+, which uses /.well-known/vercel-toolbar/* for local dev server access.

@​vercel/microfrontends@​2.3.4

Patch Changes

  • 7af3542: Prevent local proxy crashes when upstream errors occur after response headers have already been sent.
Changelog

Sourced from @​vercel/microfrontends's changelog.

2.3.6

Patch Changes

  • e6deb57: Prevent the local development proxy from crashing on mid-stream upstream errors

    The HTTPS fallback path piped the upstream (production) response to the client without attaching an error handler. When that upstream connection reset mid-stream — common when many requests fan out to a production fallback — the unhandled error event surfaced as an uncaught exception and crashed the proxy process. The upstream response and client request/response streams now have error handlers that tear down the affected request instead of throwing.

2.3.5

Patch Changes

  • 5fbc4e3: Preserve absolute URLs in query parameters when the local proxy normalizes request URLs and rewrites redirect Location headers.
  • 9a01e16: Route Vercel Toolbar well-known requests through the local proxy to the locally running application that served the page. This supports @vercel/toolbar@0.2.6+, which uses /.well-known/vercel-toolbar/* for local dev server access.

2.3.4

Patch Changes

  • 7af3542: Prevent local proxy crashes when upstream errors occur after response headers have already been sent.
Commits
  • c541600 chore: update package versions (#63)
  • e6deb57 fix(local-proxy): handle mid-stream upstream errors to prevent crash (#62)
  • 6025fa0 chore: update package versions (#61)
  • 5fbc4e3 fix: preserve absolute URLs in local proxy query params (#60)
  • 9a01e16 fix: route toolbar well-known requests locally (#59)
  • 31dff1f chore: update package versions (#58)
  • 583a173 [microfrontends] Guard local proxy error responses after headers sent (#56)
  • See full diff in compare view

Updates svelte from 5.55.9 to 5.56.4

Release notes

Sourced from svelte's releases.

svelte@5.56.4

Patch Changes

  • fix: include wrapping parentheses in {@const} declarator end position (#18436)

  • fix: always unset reactivity context after restoring it (#18453)

  • fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

  • fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

svelte@5.56.3

Patch Changes

  • fix: ignore errors that occur in destroyed effects (#18384)

  • fix: type BigInts in $state.snapshot(...) return values (#18388)

svelte@5.56.2

Patch Changes

  • fix: properly track effect end node for async sibling component (#18371)

  • fix: prevent false-positive reactivity loss warning (#18373)

  • chore: bump esrap dependency (#18372)

  • fix: ignore declaration tags for animation directive (#18366)

  • fix: reject pending async deriveds on discard (#18308)

svelte@5.56.1

Patch Changes

  • fix: error at compile time on duplicate snippet/declaration tag definitions (#18351)

  • fix: parse declaration tag contents more robustly (#18353)

  • fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#18348)

  • fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#18348)

  • fix: tolerate whitespace before let/const in declaration tags (#18348)

  • fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#18350)

  • fix: more robust parsing of declaration tags with regards to type (#18330)

  • fix: preserve newlines in spread input values when the type attribute is applied after value (#18345)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.4

Patch Changes

  • fix: include wrapping parentheses in {@const} declarator end position (#18436)

  • fix: always unset reactivity context after restoring it (#18453)

  • fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#18425)

  • fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#18448)

5.56.3

Patch Changes

  • fix: ignore errors that occur in destroyed effects (#18384)

  • fix: type BigInts in $state.snapshot(...) return values (#18388)

5.56.2

Patch Changes

  • fix: properly track effect end node for async sibling component (#18371)

  • fix: prevent false-positive reactivity loss warning (

…th 19 updates

Bumps the npm-minor-and-patch group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [supabase](https://github.com/supabase/cli/tree/HEAD/apps/cli) | `2.101.0` | `2.109.0` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.0` | `2.10.3` |
| [@supabase/ssr](https://github.com/supabase/ssr) | `0.6.1` | `0.12.0` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.106.1` | `2.110.0` |
| [@vercel/microfrontends](https://github.com/vercel/microfrontends/tree/HEAD/packages/microfrontends) | `2.3.3` | `2.3.6` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.9` | `5.56.4` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.59.1` | `1.61.1` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.61.1` | `2.69.1` |
| [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.2.2` | `4.3.2` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.6` | `4.7.1` |
| [@crxjs/vite-plugin](https://github.com/crxjs/chrome-extension-tools/tree/HEAD/packages/vite-plugin) | `2.4.0` | `2.7.1` |
| [@types/chrome](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/chrome) | `0.0.287` | `0.2.2` |
| [globals](https://github.com/sindresorhus/globals) | `17.4.0` | `17.7.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.9.4` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.2.2` | `4.3.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.58.1` | `8.62.1` |
| [@sveltejs/package](https://github.com/sveltejs/kit/tree/HEAD/packages/package) | `2.5.7` | `2.5.8` |
| [svelte2tsx](https://github.com/sveltejs/language-tools) | `0.7.54` | `0.7.57` |



Updates `supabase` from 2.101.0 to 2.109.0
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/apps/cli/docs/release-process.md)
- [Commits](https://github.com/supabase/cli/commits/v2.109.0/apps/cli)

Updates `turbo` from 2.10.0 to 2.10.3
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.0...v2.10.3)

Updates `@supabase/ssr` from 0.6.1 to 0.12.0
- [Release notes](https://github.com/supabase/ssr/releases)
- [Changelog](https://github.com/supabase/ssr/blob/main/CHANGELOG.md)
- [Commits](supabase/ssr@v0.6.1...v0.12.0)

Updates `@supabase/supabase-js` from 2.106.1 to 2.110.0
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.110.0/packages/core/supabase-js)

Updates `@vercel/microfrontends` from 2.3.3 to 2.3.6
- [Release notes](https://github.com/vercel/microfrontends/releases)
- [Changelog](https://github.com/vercel/microfrontends/blob/main/packages/microfrontends/CHANGELOG.md)
- [Commits](https://github.com/vercel/microfrontends/commits/@vercel/microfrontends@2.3.6/packages/microfrontends)

Updates `svelte` from 5.55.9 to 5.56.4
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.4/packages/svelte)

Updates `@playwright/test` from 1.59.1 to 1.61.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.59.1...v1.61.1)

Updates `@sveltejs/kit` from 2.61.1 to 2.69.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/HEAD/packages/kit)

Updates `@tailwindcss/vite` from 4.2.2 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/@tailwindcss-vite)

Updates `svelte-check` from 4.4.6 to 4.7.1
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.6...svelte-check@4.7.1)

Updates `@crxjs/vite-plugin` from 2.4.0 to 2.7.1
- [Release notes](https://github.com/crxjs/chrome-extension-tools/releases)
- [Changelog](https://github.com/crxjs/chrome-extension-tools/blob/main/packages/vite-plugin/CHANGELOG.md)
- [Commits](https://github.com/crxjs/chrome-extension-tools/commits/HEAD/packages/vite-plugin)

Updates `@types/chrome` from 0.0.287 to 0.2.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/chrome)

Updates `globals` from 17.4.0 to 17.7.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v17.4.0...v17.7.0)

Updates `prettier` from 3.8.1 to 3.9.4
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.9.4)

Updates `tailwindcss` from 4.2.2 to 4.3.2
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.2/packages/tailwindcss)

Updates `tsx` from 4.21.0 to 4.23.0
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.21.0...v4.23.0)

Updates `typescript-eslint` from 8.58.1 to 8.62.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.62.1/packages/typescript-eslint)

Updates `@sveltejs/package` from 2.5.7 to 2.5.8
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/package/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/package@2.5.8/packages/package)

Updates `svelte2tsx` from 0.7.54 to 0.7.57
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte2tsx@0.7.54...svelte2tsx@0.7.57)

---
updated-dependencies:
- dependency-name: supabase
  dependency-version: 2.109.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: turbo
  dependency-version: 2.10.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/ssr"
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.110.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@vercel/microfrontends"
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: svelte
  dependency-version: 5.56.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@playwright/test"
  dependency-version: 1.61.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.69.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@tailwindcss/vite"
  dependency-version: 4.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: svelte-check
  dependency-version: 4.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@crxjs/vite-plugin"
  dependency-version: 2.7.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@types/chrome"
  dependency-version: 0.2.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: globals
  dependency-version: 17.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tailwindcss
  dependency-version: 4.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: typescript-eslint
  dependency-version: 8.62.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: "@sveltejs/package"
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: svelte2tsx
  dependency-version: 0.7.57
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 5, 2026
@vercel

vercel Bot commented Jul 5, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
pulse Ready Ready Preview, Comment Jul 5, 2026 9:18pm
pulse-dashboard Ready Ready Preview, Comment Jul 5, 2026 9:18pm

@guyghost

guyghost commented Jul 9, 2026

Copy link
Copy Markdown
Owner

Consolidated into #202 (chore(deps): consolidate all dependabot updates) which applies all version bumps directly on develop to avoid lockfile conflicts. Closing in favor of #202.

@guyghost guyghost closed this Jul 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/npm-minor-and-patch-223691e0e0 branch July 9, 2026 17:06
guyghost added a commit that referenced this pull request Jul 9, 2026
Consolide sur `develop` les 9 PR Dependabot qui ciblaient `main`
(46 commits derrière develop) afin d'éviter les conflits de lockfile.

GitHub Actions (PR #167, #168, #169, #170, #171):
- softprops/action-gh-release v2 -> v3
- actions/github-script v7 -> v9
- actions/upload-artifact v4 -> v7
- actions/download-artifact v4 -> v8
- mnao305/chrome-extension-upload v5.0.0 -> v6.0.0

npm (PR #173, #174, #175, #176, #184):
- @crxjs/vite-plugin 2.0.0-beta.28 -> 2.7.1
- @types/chrome 0.0.287 -> 0.2.2
- eslint 9.0.0 -> 10.6.0
- jsdom 28.1.0 -> 29.1.1
- lint-staged 16.4.0 -> 17.0.8
- prettier 3.4.0 -> 3.9.4
- prettier-plugin-svelte 3.3.0 -> 4.1.1
- svelte 5.55.9 -> 5.56.4
- @sveltejs/kit 2.61.1 -> 2.69.1
- @supabase/ssr 0.6.1 -> 0.12.0
- @supabase/supabase-js 2.106.1 -> 2.110.0
- tailwindcss / @tailwindcss/vite 4.0.0 -> 4.3.2
- svelte-check 4.0.0 -> 4.7.1
- @playwright/test 1.49.0 -> 1.61.1
- typescript-eslint 8.58.1 -> 8.62.1
- tsx 4.19.0 -> 4.23.0
- globals 17.4.0 -> 17.7.0
- @sveltejs/package 2.3.0 -> 2.5.8
- svelte2tsx 0.7.54 -> 0.7.57
- @vercel/microfrontends 2.3.3 -> 2.3.6
- supabase 2.101.0 -> 2.109.0
- turbo 2.10.0 -> 2.10.3

Régressions corrigées:
- @types/chrome 0.2.2: `chrome.storage.local.get()` retourne un type
  plus strict ; ajout de casts typés (sans `any`) dans `favorites.ts`
  et `seen-missions.ts`.
- prettier 3.9.4 + prettier-plugin-svelte 4.1.1: reformatage de 11
  fichiers préexistants (`pnpm format`).

Vérifié: `pnpm ci:check` (format:check && lint && typecheck && test && build)
au vert sur l'ensemble du monorepo.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant