build(deps-dev): bump the npm-development-minor-patch group with 4 updates - #332
Merged
cursor[bot] merged 1 commit intoSep 10, 2026
Conversation
…dates Bumps the npm-development-minor-patch group with 4 updates: [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt), [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint), [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler). Updates `oxfmt` from 0.65.0 to 0.66.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.66.0/npm/oxfmt) Updates `oxlint` from 1.80.0 to 1.81.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.81.0/npm/oxlint) Updates `svelte` from 5.56.10 to 5.57.0 - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte) Updates `wrangler` from 4.127.0 to 4.128.0 - [Release notes](https://github.com/cloudflare/workers-sdk/releases) - [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.128.0/packages/wrangler) --- updated-dependencies: - dependency-name: oxfmt dependency-version: 0.66.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development-minor-patch - dependency-name: oxlint dependency-version: 1.81.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development-minor-patch - dependency-name: svelte dependency-version: 5.57.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development-minor-patch - dependency-name: wrangler dependency-version: 4.128.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-development-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying podnotes with
|
| Latest commit: |
f8673f0
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://5ce5d6f3.podnotes.pages.dev |
| Branch Preview URL: | https://dependabot-npm-and-yarn-npm-8jkh.podnotes.pages.dev |
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependabot review
build(deps-dev) group bump of four development tools. Diff is package.json + package-lock.json only. Title will not cut a plugin release.
| Package | From | To |
|---|---|---|
oxfmt |
0.65.0 | 0.66.0 |
oxlint |
1.80.0 | 1.81.0 |
svelte |
5.56.10 | 5.57.0 |
wrangler |
4.127.0 | 4.128.0 |
Changelog / surface
- oxlint 1.81.0 — Next.js typo suggestion plus lint/plugin bugfixes. No new rules enabled in
.oxlintrc.json.oxlint --deny-warningsis clean. - oxfmt 0.66.0 — CSS/comment/sort-imports formatter fixes.
format:checkstill passes on 232 files with no rewrites. - svelte 5.57.0 — Additive (
createContext.has,SvelteMap.getOrInsert*,<select defaultValue>,svelte/servertypes) plus compile/runtime bugfixes. PodNotes dropdowns use ObsidianDropdownComponent, not native<select>. Compiler output is already inbuild/main.js; svelte-check is clean. - wrangler 4.128.0 — The advertised break is
unstable_printBindings/@cloudflare/deploy-helpersexport moves. This repo only runswrangler pages deploywith a staticwrangler.jsonc. CLI help still exposes that command; GitHub Cloudflare Pages is green on this SHA.
Verification
npm cion Node 22.22.2 — lockfile unchangednpm run lint,format:check,typecheck,build,test(svelte-check + 1152 Vitest tests) — pass- GitHub Test — pass
- GitHub Cloudflare Pages — pass
npm audit --omit=dev— 0
Residual (not introduced here)
npm audit still reports four high-severity dev findings published 2026-09-08:
js-yaml@4.3.1viaeslint-plugin-obsidianmd→eslint(GHSA-2883-xcg3-v3hh)sharp@0.35.2viawrangler→miniflare(GHSA-rgj7-g3m4-5g8c)
Same versions are already on master. Neither is in the plugin bundle. npm audit fix --force would downgrade wrangler to 4.15.2; do not do that on this PR.
Obsidian GUI E2E was not run (Cloud Agent has no desktop app). Unit/component coverage plus a clean compile is sufficient for this deps-dev group.
No regressions found. Approving and squash-merging.
Sent by Cursor Automation: Dependabot PRs
cursor
Bot
deleted the
dependabot/npm_and_yarn/npm-development-minor-patch-9ecca482ae
branch
September 10, 2026 12:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the npm-development-minor-patch group with 4 updates: oxfmt, oxlint, svelte and wrangler.
Updates
oxfmtfrom 0.65.0 to 0.66.0Commits
0b4e2e6release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)5ff57f8fix(formatter/sort-imports): handle custom side effect groups (#26217)63bc313chore(npm): update funding URL (#26066)Updates
oxlintfrom 1.80.0 to 1.81.0Release notes
Sourced from oxlint's releases.
... (truncated)
Changelog
Sourced from oxlint's changelog.
... (truncated)
Commits
0b4e2e6release(apps): oxlint v1.81.0 && oxfmt v0.66.0 (#26199)d5be037docs(linter/typescript/switch-exhaustiveness-check): clarify default case com...63bc313chore(npm): update funding URL (#26066)Updates
sveltefrom 5.56.10 to 5.57.0Release notes
Sourced from svelte's releases.
... (truncated)
Changelog
Sourced from svelte's changelog.
... (truncated)
Commits
7bc0a70Version Packages (#18682)6374a2achore: move@types/trusted-typesto devDependencies (#18730)4ae5eb3feat: add has function to createContext (#18472)5034b59chore: bump playwright (#18729)74197ccfeat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)edbe11efix: properly apply static textarea value attribute during CSR (#18727)05b6916fix: omit bind:focused from SSR output (#18724)7c6f36afix: keep boolean attributes with an empty string value when rendering attrib...2e8b57bfix: renderselectedoptions for\<select multiple>with an arrayvalue...864de81fix: keep the current selection of a\<select>when itsdefaultValueis ap...Updates
wranglerfrom 4.127.0 to 4.128.0Release notes
Sourced from wrangler's releases.
... (truncated)
Commits
b7b4ff8Version Packages (#15450)ea28cc3[wrangler] Add observability query string redaction (#15379)1809c5e[wrangler] Stop publishing build metafile (#15398)10d6bfbSupport partial manifests in build output (#15388)dbbb795Move binding utilities into workers-utils (#15454)b3f2628[wrangler] Preserve tree-shaking across workspace package boundaries (#15406)b3fb2bffix(wrangler): do not query the GitHub skills API when telemetry is disabled ...87a7acf[wrangler] Add date filters to workflows instances list (#15353)707cb6f[wrangler] Add bundle sizes to structured output (#14915)f808554Version Packages (#15385)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions