chore(deps-dev): bump svelte from 3.50.1 to 5.51.5 in /examples/svelte/localized-sveltekit#4282
Conversation
Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 3.50.1 to 5.51.5. - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG-pre-5.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.51.5/packages/svelte) --- updated-dependencies: - dependency-name: svelte dependency-version: 5.51.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
![cursor[bot]](https://cdn.statically.io/img/avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.
| "prettier": "^2.6.2", | ||
| "prettier-plugin-svelte": "^2.7.0", | ||
| "svelte": "^3.44.0", | ||
| "svelte": "^5.51.5", |
There was a problem hiding this comment.
Svelte 5 incompatible with sdk-svelte peer dependency
High Severity
Bumping svelte from 3 to 5 breaks compatibility with @builder.io/sdk-svelte ^1.0.27, which declares a peer dependency of "svelte": "^4.1.2". This is a runtime dependency used in the page component to render Builder content via the Content and isPreviewing imports. The SDK was built against Svelte 4 APIs and is unlikely to function correctly with Svelte 5's fundamentally different internals.
Additional Locations (1)
| "prettier": "^2.6.2", | ||
| "prettier-plugin-svelte": "^2.7.0", | ||
| "svelte": "^3.44.0", | ||
| "svelte": "^5.51.5", |
There was a problem hiding this comment.
eslint-plugin-svelte3 incompatible with Svelte 5
Medium Severity
Bumping svelte to 5 breaks eslint-plugin-svelte3, which declares a peer dependency of "svelte": "^3.2.0". This package is deprecated and specific to Svelte 3. The project's .eslintrc.cjs actively uses the svelte3/svelte3 processor, so the lint script will fail or produce incorrect results when parsing Svelte 5 syntax.
|
View your CI Pipeline Execution ↗ for commit da4bd6d
☁️ Nx Cloud last updated this comment at |
|
Superseded by #4324. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/examples/svelte/localized-sveltekit/svelte-5.51.5
branch
Bumps svelte from 3.50.1 to 5.51.5.
Release notes
Sourced from svelte's releases.
... (truncated)
Changelog
Sourced from svelte's changelog.
... (truncated)
Commits
8ea33bfVersion Packages (#17740)f855a0bfix: misc option escaping and backwards compatibility (#17741)781052echore: upgradedevalue(#17739)f7c80daMerge commit from forka0c7f28Merge commit from fork73098bbMerge commit from forkf89c7ddMerge commit from forkb8f2b86Version Packages (#17733)c83aa06chore: proactively defer effects in pending boundary (#17734)2287ad0fix: detect and error on non-idempotent each block keys in dev mode (#17732)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Major framework upgrade (Svelte 3→5) plus a looser
@sveltejs/kitversion in the lockfile can introduce build/runtime incompatibilities in the example and require Node 18+.Overview
Updates the
examples/svelte/localized-sveltekitexample to use Svelte 5 by bumpingsveltefrom3.50.1to5.51.5inpackage.jsonand refreshingpackage-lock.jsonto pull in Svelte 5’s new dependency tree.The lockfile also loosens
@sveltejs/kitfromnextto*, which can change which Kit prerelease gets installed for this example.Written by Cursor Bugbot for commit da4bd6d. This will update automatically on new commits. Configure here.