chore(deps): Update non-major dependencies

This MR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@atproto/api (source)	^0.20.34 → ^0.20.41
@sveltejs/vite-plugin-svelte (source)	^7.2.0 → ^7.3.0
@types/luxon (source)	^3.7.2 → ^3.7.4
axios (source)	^1.18.1 → ^1.19.0
eslint (source)	^10.8.0 → ^10.8.1
eslint-plugin-svelte (source)	^3.22.0 → ^3.23.0
fast-xml-parser	^5.10.1 → ^5.11.0
globals	^17.8.0 → ^17.11.0
puppeteer (source)	^25.3.0 → ^25.8.0
svelte (source)	^5.56.8 → ^5.56.9
typescript-eslint (source)	^8.65.0 → ^8.67.0
vite (source)	^8.1.5 → ^8.2.1

---

Release Notes

bluesky-social/atproto (@​atproto/api)

v0.20.41

Compare Source

Patch Changes

• #​5350 1f3f67c Thanks @​mary-ext! - Remove the maxGraphemes and maxLength constraints from the alt field of app.bsky.embed.video, matching app.bsky.embed.images

v0.20.40

Compare Source

Patch Changes

• #​5384 c26b463 Thanks @​blackmichael! - Add multipart video upload lexicons and document all video processing job states.

• #​5372 05305a7 Thanks @​vineyardbovines! - Add the app.bsky.actor.contentVisibilityDeclaration lexicon.

v0.20.39

Compare Source

Patch Changes

• #​5373 b2de0ee Thanks @​blackmichael! - Increase video embed size limits from 100MB to 300MB

v0.20.38

Compare Source

Patch Changes

• #​5293 675953e Thanks @​foysalit! - Add recommended policy keys to ozone queue configuration and generated API types

• Updated dependencies [8b55a4a]:

  • @​atproto/syntax@​0.7.4
  • @​atproto/common-web@​0.5.9
  • @​atproto/lexicon@​0.7.11
  • @​atproto/xrpc@​0.8.10

v0.20.37

Compare Source

Patch Changes

• #​5118 ee4a0cf Thanks @​estrattonbailey! - Add support for muting reposts and quote-posts (or a combination) when muting other users.

• #​5249 29dcbc0 Thanks @​estrattonbailey! - Add OP thread numbering to getPostThreadV2

• #​5303 a8186e7 Thanks @​rafaeleyng! - update chat lexicons

• #​5301 8c07338 Thanks @​43081j! - Switch from destructured default imports to named imports of CommonJS dependencies.

• Updated dependencies [6a3d607]:

  • @​atproto/syntax@​0.7.3
  • @​atproto/common-web@​0.5.8
  • @​atproto/lexicon@​0.7.10
  • @​atproto/xrpc@​0.8.9

v0.20.36

Compare Source

Patch Changes

• Updated dependencies []:
  • @​atproto/common-web@​0.5.7
  • @​atproto/lexicon@​0.7.9
  • @​atproto/xrpc@​0.8.8

v0.20.35

Compare Source

Patch Changes

• #​5284 84781a9 Thanks @​blackmichael! - add failureCodes field to app.bsky.video.defs#jobStatus lexicon

• #​5203 ccb57ef Thanks @​arjxnt! - Mark app.bsky.draft.createDraft output IDs as TIDs.

• Updated dependencies [d3bbeb5]:

  • @​atproto/lexicon@​0.7.8
  • @​atproto/xrpc@​0.8.7

sveltejs/vite-plugin-svelte (@​sveltejs/vite-plugin-svelte)

v7.3.0

Compare Source

Minor Changes

• feat: pass environment to dynamicCompileOptions (#​1386)

Patch Changes

• fix: don't log inline config when encountering unexpected options (#​1376)

axios/axios (axios)

v1.19.0

Compare Source

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

eslint/eslint (eslint)

v10.8.1

Compare Source

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#​21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#​21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#​21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#​21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#​20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#​21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#​21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#​21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#​21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#​20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#​21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#​21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#​21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot MRs (#​21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#​21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#​21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#​21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#​21151) (JIYEON)
• d086293 test: add error locations to no-undef (#​21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#​21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#​21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#​21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#​21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#​21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#​21138) (dongkyu lee)

sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)

v3.23.0

Compare Source

Minor Changes

• #​1565 1ec3cf5 Thanks @​ColumbusLabs! - feat: add prefer-attribute-interpolation rule

NaturalIntelligence/fast-xml-parser (fast-xml-parser)

v5.11.0

Compare Source

What's Changed

• add support for endIndex in node metadata (5.x edition) by @​Wain-PC in #​850
• fix: don't crash on a closing tag with no matching opening tag by @​hdimer in #​861

New Contributors

• @​Wain-PC made their first contribution in #​850
• @​hdimer made their first contribution in #​861

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/compare/v5.10.1...v5.11.0

sindresorhus/globals (globals)

v17.11.0

Compare Source

• Add react-native globals (#​337) 61eafbf

---

v17.10.0

Compare Source

• Add GM_cookie to Greasemonkey globals (#​349) f468407

---

v17.9.0

Compare Source

• Update globals (2026-08-01) (#​348) 5a958ed

---

puppeteer/puppeteer (puppeteer)

v25.8.0

Compare Source

🎉 Features

• support followSymlinks option (#​15335) (af6a23d)

🛠️ Fixes

• computeSystemExecutablePath support validatePath (#​15340) (73da9a4)
• launch browsers in detached mode on Windows to fix flakiness (#​15339) (8e1022b)
• remove redundant overwrite and file access from ScreenRecorder (#​15352) (61a1675)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.2.0 to 3.2.1

v25.7.0

Compare Source

🎉 Features

• roll to Chrome 152.0.7977.42 (#​15330) (0c187db)
• tracing: support bufferSize option in tracing.start (#​15328) (987f146)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.6.0 to 25.7.0

🛠️ Fixes

• logger calling causing crashes (#​15338) (eb874a5)
• roll to Firefox 153.0.4 (#​15329) (df5a524)

🏗️ Refactor

• use Desposable stacks to track listeners (#​15332) (df2d719)

v25.6.0

Compare Source

🎉 Features

• roll to Chrome 152.0.7977.42 (#​15330) (0c187db)
• tracing: support bufferSize option in tracing.start (#​15328) (987f146)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.6.0 to 25.7.0

🛠️ Fixes

• logger calling causing crashes (#​15338) (eb874a5)
• roll to Firefox 153.0.4 (#​15329) (df5a524)

🏗️ Refactor

• use Desposable stacks to track listeners (#​15332) (df2d719)

v25.5.0

Compare Source

♻️ Chores

• puppeteer: Synchronize puppeteer versions

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​puppeteer/browsers bumped from 3.0.6 to 3.1.0

🎉 Features

• roll to Firefox 153.0 (#​15258) (6a54140)
• track dialog status (#​15266) (9a6f646)

🛠️ Fixes

• disable WebUIOmniboxPopup and WebUIOmniboxAimPopup features (#​15278) (5dc2964)
• do not override the user agent when nothing is emulated (#​15274) (39c4653)
• forward headers to browserURL HTTP discovery and WebSocket connection (#​15238) (948d870)
• reject PWA access if network conditions are configured (#​15271) (6eb2b8c)
• roll to Chrome 151.0.7922.71 (#​15272) (a7f07db)
• roll to Firefox 153.0.1 (#​15269) (dd365cc)

📄 Documentation

• document units in page.metrics() (#​15221) (eae2b9a)

🏗️ Refactor

• move some of the logger to constructor (#​15282) (67d1467)
• use a enum to manage the prefixes (#​15281) (c8faa53)

v25.4.0

Compare Source

🎉 Features

• add browser-level PWA install/launch/uninstall APIs (#​15235) (4a48c8a)
• expose Explicit Resource Management (using) (#​15027) (a1ca86b)
• expose handled getter on Dialog (#​15225) (be6f726)
• roll to Chrome 151.0.7922.47 (#​15237) (06442ae)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • puppeteer-core bumped from 25.3.0 to 25.4.0

🛠️ Fixes

• combine duplicate BiDi response headers instead of overwriting (#​15203) (16ec165)
• don't throw in checkVisibility for a detached text node (#​15197) (89683ac)
• roll to Chrome 150.0.7871.115 (#​15223) (3232cd4)
• roll to Chrome 150.0.7871.46 (#​15196) (30d4100)
• roll to Chrome 150.0.7871.49 (#​15220) (633d55d)
• roll to Firefox 152.0.5 (#​15219) (5de975a)

sveltejs/svelte (svelte)

v5.56.9

Compare Source

Patch Changes

• fix: skip controlled each fast path while another batch is pending (#​18625)

• fix: better whitespace handling inside printer (#​18638)

• fix: don't duplicate comments in attributes (#​18636)

• fix: preserve CSS comments in the AST printer (#​18637)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.67.0

Compare Source

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#​12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.66.0

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.2.1

Compare Source

Bug Fixes

• build: make client chunkImportMap work with sharedPlugins: true (#​23184) (15f0307)
• bundled-dev: inject client script tag before chunk scripts (#​23161) (eac0cc8)
• css: don't re-run lightningcss visitor during minify (fix #​23146) (#​23147) (de041a7)
• deps: update all non-major dependencies (#​23136) (14454fd)
• deps: update rolldown-related dependencies (#​23070) (7ac6f7f)
• don't mutate the user config when resolving the lib entry from the top-level input (#​23135) (b4bf596)
• handle shebang ending with uncommon line terminators (#​23038) (17f7b2f)
• server: use a random port when port is 0 (#​23158) (fddf4ea)

Performance Improvements

• css: look up pure CSS chunks through a Set (#​23114) (1331b0b)

Documentation

• build: fix incomplete @default for build.minify (#​23177) (ef02435)

Miscellaneous Chores

• deps: update dependency rolldown-plugin-dts to ^0.28.0 (#​23137) (4adc1e7)
• deps: update dependency strip-literal to v4 (#​23140) (9db65ce)

Code Refactoring

• bundled-dev: avoid injecting server values in the bundle (#​22967) (23b8a08)
• bundled-dev: remove rolldown lazy stub module workaround (#​23129) (e72036e)

Tests

• bundled-dev: enable sourcemap playgrounds (#​23080) (c2155fe)
• reduce logs (#​23138) (7673c02)

v8.2.0

Compare Source

Features

• add input to server.fs.allow (#​23035) (95a3cda)
• bundled-dev: reload once after rebuild instead of via the fallback page (#​23106) (b24381d)
• bundled-dev: support worker file update accepted by HMR (#​23068) (0d04351)
• config: include column in config incompatibility location (#​23064) (8a24572)
• dev: resolve interface name for explicit host in network URLs (#​22965) (3ac77d9)

Bug Fixes

• bundledDev: print build errors to the terminal when an HMR update fails (#​23024) (41c4658)
• deps: update all non-major dependencies (#​23069) (4c07b74)
• hmr: preserve environment snapshot during server restart (#​22992) (b1186c3)
• importAnalysis: interop imports injected into optimized dep files by plugins (#​23029) (8c2a87d)
• module-runner: keep stack trace interception working when Object.prototype is frozen (#​23073) (599c5b0)
• server: strip base in indexHtml module graph lookup (#​22932) (fa005d1)
• support resolving top-level input option with plugins (#​23101) (41df81a)

Documentation

• config: correct cacheDir default fallback description (#​23060) (aafa103)

Tests

• config CJS module vars in ESM case (#​23010) (d8cd388)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Mend Renovate CLI.