Skip to content

chore(deps): bump the minor-updates group across 1 directory with 5 updates - #611

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-minor-updates-8c14b6fe6c
Open

chore(deps): bump the minor-updates group across 1 directory with 5 updates#611
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot-npm_and_yarn-minor-updates-8c14b6fe6c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-updates group with 5 updates in the / directory:

Package From To
satteri 0.9.5 0.10.5
svelte 5.56.10 5.57.0
takumi-js 2.12.0 2.13.0
wrangler 4.125.0 4.127.1
subset-font 2.5.0 2.6.0

Updates satteri from 0.9.5 to 0.10.5

Release notes

Sourced from satteri's releases.

satteri-v0.10.5

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.4

Patch changes

  • Updated dependencies: satteri-mdxjs (Cargo)@​0.3.13

satteri-v0.10.3

Patch changes

  • 2cf9aef Added clobberPrefix option to footnotes, mirroring remark-rehype — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.3, satteri-mdxjs (Cargo)@​0.3.12, satteri-pulldown-cmark (Cargo)@​0.6.3

satteri-v0.10.2

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.2, satteri-mdxjs (Cargo)@​0.3.11, satteri-pulldown-cmark (Cargo)@​0.6.2

satteri-v0.10.1

Patch changes

  • Updated dependencies: satteri-ast (Cargo)@​0.5.1, satteri-mdxjs (Cargo)@​0.3.10, satteri-pulldown-cmark (Cargo)@​0.6.1

satteri-v0.10.0

Patch changes

  • 0d26ea6 Changed the minimum supported Rust version to 1.85, as these crates now build on the 2024 edition. — Thanks @​Princesseuh!
  • Updated dependencies: satteri-ast (Cargo)@​0.5.0, satteri-mdxjs (Cargo)@​0.3.9, satteri-pulldown-cmark (Cargo)@​0.6.0
Commits
  • b3d38e1 Release (main) (#276)
  • 393aed7 fix(release): fail the job when a native binding fails to publish (#275)
  • f2eb29a Release (main) (#273)
  • 72d4710 fix(mdx): key explicit JSX by node identity instead of span (#272)
  • f339a9c chore(website): update playground to satteri 0.10.3 (#269)
  • 5df21fc Release (main) (#268)
  • 1a052cf chore(changeset): collapse the pipeline performance changesets into one
  • 2cf9aef Revert "Release (main) (#267)"
  • a7132d2 Release (main) (#267)
  • d21f486 perf: cut per-call cost across the parser, renderer, and napi boundary (#257)
  • Additional commits viewable in compare view

Updates svelte from 5.56.10 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

  • fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

  • feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

  • feat: add has function to createContext (#18472)

  • feat: support defaultValue on <select> (#18591)

  • feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

  • fix: block template store subscriptions on the promise that assigns the store (#18582)

  • fix: route $derived teardown errors through invoke_error_boundary (#18486)

  • fix: track SvelteDate snapshots in reactions (#18700)

  • fix: remove <svelte:head> anchors on unmount (#18697)

  • fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

  • perf: reuse the cached value in the <option>/<select> value guard (#18713)

  • fix: prevent malformed AST output for <select> with static value attribute (#18449)

  • fix: apply ownership mutation ignores to binding assignments (#18718)

  • fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

  • fix: preserve whitespace after inline elements when printing (#18685)

  • perf: fold SSR block-open markers into the branch's first push (#18712)

  • fix: run onDestroy callbacks when a server render throws (#18585)

  • fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

  • fix: never apply class hash to elements inside <svelte:head> (#18160)

  • fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

  • fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

  • perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

  • fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits
  • 7bc0a70 Version Packages (#18682)
  • 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
  • 4ae5eb3 feat: add has function to createContext (#18472)
  • 5034b59 chore: bump playwright (#18729)
  • 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
  • edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
  • 05b6916 fix: omit bind:focused from SSR output (#18724)
  • 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
  • 2e8b57b fix: render selected options for \<select multiple> with an array value ...
  • 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
  • Additional commits viewable in compare view

Updates takumi-js from 2.12.0 to 2.13.0

Release notes

Sourced from takumi-js's releases.

takumi@2.13.0

  • @​takumi-rs/wasm@​2.13.0
  • @​takumi-rs/core@​2.13.0
  • @​takumi-rs/image-response@​2.13.0
  • takumi-js@2.13.0
  • @​takumi-rs/helpers@​2.13.0
  • takumi@2.13.0

Resolve tw utilities through CSS variables

Utilities now read the CSS variables Tailwind compiles them to, falling back to the built-in value. Define tokens in :root. --color-brand-500 makes bg-brand-500 work, and spacing, fonts, shadows, animations and breakpoints follow the same rule.

Gradients now match Tailwind on two counts. Stops alone no longer paint without bg-linear-*, bg-radial or bg-conic, and a missing to stop fades to transparent.

Let stylesheet rules win over tw utilities

Utilities now sit in the last cascade layer, below unlayered CSS and above rules in a named @layer. Important reverses that order. An important utility beats unlayered important CSS but loses to one in a named layer. Inline important declarations stay on top. A template that relied on tw beating a matching rule needs a fix. Move that rule into a layer, or mark the utility !.

Parse @theme blocks as :root rules

A Tailwind v4 source stylesheet now works in css without compiling it first. @theme declarations land on :root, and @keyframes inside the block register. Modifiers like reference read the same way. The prefix() modifier is not supported.

Compose filters and transforms through custom properties

Filter, translate, scale and grid-line utilities now compose through --tw-* variables like Tailwind's compiled CSS. Stacked filters follow Tailwind's fixed chain order instead of class order.

Write a css entry as an object

A css entry can be a rule, { selector, style, rules }, or an animation, { keyframes, steps }. Takumi checks the selector and every value before the entry reaches the parser, so a token that comes from application data cannot escape the rule it was written for. The keyframes option is deprecated and goes away in v3.

Turn on Preflight through @import "tailwindcss"

The import line at the top of a Tailwind v4 stylesheet now works. Preflight replaces the UA preset. Margins and padding go, lists lose their markers, and h1 through h6 drop their font sizing. It also brings the universal border reset, link and table resets, block-level images, and hidden on any element. Author rules outrank Preflight, apart from hidden, which it marks important. Other @import targets stay unsupported.

Write a group of css entries as an object

A css entry can be { media, rules }, { supports, rules }, or { layer, rules }. A layer without rules declares its order alone. Takumi reads each prelude with the grammar its rule takes, so it cannot close the rule and open another.

Expand @apply inside stylesheet rules

.card { @apply mt-4 bg-brand-500; } now expands through the tw parser where it is written, ! suffix included. Variants like md: are rejected. A static render has nothing for them to gate on.

Rename the stylesheets render option to css

css takes inline CSS as one string or a list. The old stylesheets name still works everywhere and warns once on takumi-js and takumi-pdf.

Render <text> elements in SVG image sources

SVG images with <text>, <tspan> and textPath now draw their text using the registered fonts instead of dropping it. Glyphs render from font outlines;

... (truncated)

Changelog

Sourced from takumi-js's changelog.

takumi-js@2.13.0

Write a css entry as an object

A css entry can be a rule, { selector, style, rules }, or an animation, { keyframes, steps }. Takumi checks the selector and every value before the entry reaches the parser, so a token that comes from application data cannot escape the rule it was written for. The keyframes option is deprecated and goes away in v3.

Write a group of css entries as an object

A css entry can be { media, rules }, { supports, rules }, or { layer, rules }. A layer without rules declares its order alone. Takumi reads each prelude with the grammar its rule takes, so it cannot close the rule and open another.

Rename the stylesheets render option to css

css takes inline CSS as one string or a list. The old stylesheets name still works everywhere and warns once on takumi-js and takumi-pdf.

Render <text> elements in SVG image sources

SVG images with <text>, <tspan> and textPath now draw their text using the registered fonts instead of dropping it. Glyphs render from font outlines; color emoji glyphs inside SVG text are not supported.

takumi-js@2.9.0

Load the wasm binary in a browser bundle

Vite, webpack and Turbopack set the same export conditions for a browser build. All three resolved the Vite entry, whose ?url import only works in Vite. Each package now exports wasm-url, which resolves the binary through new URL(specifier, import.meta.url), the call Vite, webpack and Turbopack rewrite to the asset they emit. Pair it with takumi-pdf/no-init, or with the new takumi-js/wasm/no-init, which keeps the auto-init entry out of the bundle.

takumi-js@2.5.0

Add setGlyphCacheMaxBytes

The resolved-glyph and glyph-mask caches share an 8 MiB budget that no binding exposed. cacheMaxBytes looks like the knob for it but covers a different set of caches: decoded images, SVG rasters, and parsed stylesheets.

setGlyphCacheMaxBytes sets the glyph budget. It is a module-level function rather than a Renderer option because those caches live in the module and are shared by every renderer, and the budget is read the first time a cache is used, so the call has to come before the first render.

The default suits Latin text. A CJK outline runs a few kilobytes, so 8 MiB holds on the order of a thousand of them and a page of Chinese re-rasterizes glyphs it evicted a moment earlier.

takumi-js forwards it too. That one records the budget and hands it to the backend as it loads, so it stays synchronous and cannot race the resolution.

takumi-js@2.3.0

Accept raw RGBA pixels as an image source

An image node's src takes { width, height, data, premultiplied? } and renders the pixels without decoding; the Bitmap JSX helper wraps it as an <img>.

takumi-js@2.1.1

Bundle the WebContainer fallback instead of @takumi-rs/wasm/auto

The node backend's fallback pulled in auto, whose conditions resolve against the host bundler: Turbopack sets module and got Vite's ?url import of the

... (truncated)

Commits

Updates wrangler from 4.125.0 to 4.127.1

Release notes

Sourced from wrangler's releases.

wrangler@4.127.1

Patch Changes

wrangler@4.127.0

Minor Changes

  • #15356 fe265f8 Thanks @​rubuy-74! - Add support for configuring a per-workflow max concurrency limit via workflows[].concurrency.limit in your Wrangler config.

    The limit is the maximum number of Workflow instances that can run concurrently. It is validated as a positive integer and persisted on deploy; the ceiling is enforced server-side. Concurrency is ignored in local development.

    {
  "workflows": [
    {
      "binding": "MY_WORKFLOW",
      "name": "my-workflow",
      "class_name": "MyWorkflow",
      "concurrency": { "limit": 10 }
    }
  ]
}

Patch Changes

  • #15367 412c79e Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

... (truncated)

Commits

Updates subset-font from 2.5.0 to 2.6.0

Changelog

Sourced from subset-font's changelog.

v2.6.0 (2026-08-28)

Commits
  • 18444b1 2.6.0
  • 376d78c Merge pull request #30 from csantos1113/codespace-potential-space-computing-m...
  • 846e43c Initial commit
  • 430d074 feat: add keepFeatures option for layout features
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
@dependabot
chore(deps): bump the minor-updates group across 1 directory with 5 u…
cae1d56 
…pdates

Bumps the minor-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [satteri](https://github.com/bruits/satteri) | `0.9.5` | `0.10.5` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.56.10` | `5.57.0` |
| [takumi-js](https://github.com/kane50613/takumi/tree/HEAD/takumi-js) | `2.12.0` | `2.13.0` |
| [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler) | `4.125.0` | `4.127.1` |
| [subset-font](https://github.com/papandreou/subset-font) | `2.5.0` | `2.6.0` |



Updates `satteri` from 0.9.5 to 0.10.5
- [Release notes](https://github.com/bruits/satteri/releases)
- [Commits](bruits/satteri@satteri-v0.9.5...satteri-v0.10.5)

Updates `svelte` from 5.56.10 to 5.57.0
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.0/packages/svelte)

Updates `takumi-js` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/kane50613/takumi/releases)
- [Changelog](https://github.com/kane50613/takumi/blob/master/takumi-js/CHANGELOG.md)
- [Commits](https://github.com/kane50613/takumi/commits/takumi@2.13.0/takumi-js)

Updates `wrangler` from 4.125.0 to 4.127.1
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.127.1/packages/wrangler)

Updates `subset-font` from 2.5.0 to 2.6.0
- [Changelog](https://github.com/papandreou/subset-font/blob/master/CHANGELOG.md)
- [Commits](papandreou/subset-font@v2.5.0...v2.6.0)

---
updated-dependencies:
- dependency-name: satteri
  dependency-version: 0.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: svelte
  dependency-version: 5.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: takumi-js
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: wrangler
  dependency-version: 4.127.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: subset-font
  dependency-version: 2.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying firefly with  Cloudflare Pages  Cloudflare Pages

Latest commit: cae1d56
Status: ✅  Deploy successful!
Preview URL: https://24f832db.firefly-6lp.pages.dev
Branch Preview URL: https://dependabot-npm-and-yarn-mino-dqlu.firefly-6lp.pages.dev

View logs
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 1, 2026
@netlify

netlify Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for demo-firefly ready!

Name Link
🔨 Latest commit cae1d56
🔍 Latest deploy log https://app.netlify.com/projects/demo-firefly/deploys/6a9669497975a50008d256f9
😎 Deploy Preview https://deploy-preview-611--demo-firefly.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

0 participants