fix(deps): update non-major dependencies #3
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
2.70.2→2.70.37.3.0→7.3.14.13.0→4.16.04.17.02.0.9→2.0.123.0.4→3.0.63.9.6→3.9.100.8→0.95.56.9→5.57.28.2.1→8.3.41.1.0→1.1.2Release Notes
sveltejs/kit (@sveltejs/kit)
v2.70.3Compare Source
Patch Changes
$app/statedependencies during module initialization (b61018d)sveltejs/vite-plugin-svelte (@sveltejs/vite-plugin-svelte)
v7.3.1Compare Source
Patch Changes
vite/segment beforedist/(#1373)actix/actix-web (actix-web)
v4.16.0: actix-web: v4.16.0http2crate feature.TestRequestapp data retention by disabling its request pooling.prettier/prettier (prettier)
v3.9.10Compare Source
diff
Markdown: Update
micromark-extension-gfm-tableto fix the table parse issue on performance (#20266 by @fisker)See micromark/micromark-extension-gfm-table@
4f43eadfor details.v3.9.9Compare Source
diff
Markdown: Fix text with
$been incorrectly parsed as math syntax (#20140 by @fisker)v3.9.8Compare Source
diff
Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @seiyab)
v3.9.7Compare Source
diff
Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @Austin1serb, @giaBaoJS)
JavaScript: Fix embedded template literal idempotency (#19725 by @fisker)
Markdown: Preserve Liquid blocks after Markdown tables (#19730 by @wanxiankai, @seiyab)
Markdown: Preserve single tildes in Markdown (#19739 by @lazerg)
Since 3.9.0, single-tilde spans like
H~2~Owere rewritten to double tildes, turning subscript syntax into strike-through. Only double tildes are treated that way now, matching GitHub.Markdown: Fix Markdown blockquote containing
>characters (#19802 by @seiyab)Markdown: Strip blockquote markers from a setext heading's continuation lines (#19878 by @Kjubikstronk)
A setext heading spanning multiple lines inside a blockquote kept the
>marker of its continuation lines as literal text.Markdown: Fix HTML block indentation drift in markdown list items (#19987 by @lazerg)
Angular: Support
@boundaryerror boundaries (#20014 by @Yahiro025)launchbadge/sqlx (sqlx)
v0.9.0Compare Source
Important Announcements
New Github Organization
Shortly after this release is published, the SQLx repository will be transferred to a new GitHub organization:
https://github.com/transact-rs/
This is because SQLx has not been owned or maintained by LaunchBadge, LLC. for a few years now, and has since been
informally transferred to the collective ownership of its principal authors. Moving the repository to a new
organization makes this change more clear, and also allows for potentially inviting outside collaborators.
Cargo.lockRemoved from TrackingThe
Cargo.lockhas been removed from tracking in Git. CI should now always test with the latest versions ofall dependencies by default, alongside our pass that checks with
cargo generate-lockfile -Z minimal-versions.This should eliminate the need for any PRs that update dependencies to also update
Cargo.lockorcontend with an endless stream of merge conflicts against it.
N.B.
cargo install --locked sqlx-cliwill no longer work. However,cargo install sqlx-clihas alwaysused the latest dependencies by default, ignoring the lockfile, so most users should not be affected. For users
requiring reproducible builds, consider maintaining your own lockfile instead; historically, we only ran
cargo updatesporadically, so relying on SQLx's lockfile offered few guarantees anyway.
See the manual page for
cargo installfor details.Breaking
As per our MSRV policy, the supported Rust version for this release cycle is
1.94.0.sqlx.tomlformat [[@abonander]]sqlx-clinow support per-crate configuration files (sqlx.toml)DATABASE_URLfor a crate (for multi-database workspaces)_sqlx_migrationstable (for multiple crates using the same database)sqlx-tomlto use.sqlx-clihas it enabled by default, butsqlxdoes not.so it's better to keep the default feature set as limited as possible.
This is something we learned the hard way.
sqlx::_configmodule in documentation.DATABASE_URLrenaming and global type overrides: [Link]_sqlx_migrationsrenaming and multiple schemas: [Link]chronowhentimeis enabled (e.g. when usingtower-sessions-sqlx-store): [Link]bigdecimalwhenrust_decimalis enabled is also shown, but problems withchrono/timeare more common.Migratetraitsqlx::migrate::resolve_blocking()is now#[doc(hidden)]and thus SemVer-exempt.tracinglogs from SQLx will need to update the spelling.PgAdvisoryLockGuard[[@bonsairobo]]Migrator::set_ignore_missingandset_lockingnow return&mut Selfinstead of&Selfwhich may break code in rare circumstances.
query!()macros for certain queries in Postgres.RawSqllifetime issues [[@abonander]]DBtype parameter to all methods ofRawSqlDecode,EncodeandTypeforBox,Arc,CowandRc[[@joeydewaal]]impl Decode for Cownow always decodesCow::Owned, lifetime is unlinkedquery*()functions now takeimpl SqlSafeStrwhich is only implemented for
&'static strandAssertSqlSafe.For all others, wrap in
AssertSqlSafe(<query>).Query<'static, DB>.SqlSafeStrtrait is deliberately similar tostd::panic::UnwindSafe,serving as a speedbump to warn users about naïvely building queries with
format!()while allowing a workaround for advanced usage that is easy to spot on code review.
PgConnectOptions::options()are now automatically escaped.Manual escaping of options is no longer necessary and may cause incorrect behavior.
runtime-tokio-native-tls)TransactionManagertrait insqlx.#[doc(hidden)],but it will break SeaORM if not proactively fixed.
str[[@abonander]]Vec<u8>will be inferred to beString(this should ultimately fix more code than it breaks).
SET NAMES utf8mb4 COLLATE utf8_general_ciis no longer sent by default; instead,SET NAMES utf8mb4is sent toallow the server to select the appropriate default collation (since this is version- and configuration-dependent).
MySqlConnectOptions::charset()and::collation()now imply::set_names(true)because they don't do anything otherwise.charsetdoesn't change what's sent in theProtocol::HandshakeResponse41packet as that normally onlymatters for error messages before
SET NAMESis sent.The default collation if
set_names = falseisutf8mb4_general_ci.RawSql::fetch_optional()now returnssqlx::Result<Option<DB::Row>>instead of
sqlx::Result<DB::Row>. Whoops.libsqlite3-sysversioning, feature flags, safety changes [[@abonander]]libsqlite3-sysversion is now specified using a range.The maximum of the range may now be increased in any backwards-compatible release.
The minimum of the range may only be increased in major releases.
If you have
libsqlite3-sysin your dependencies, Cargo should choose a compatible version automatically.If otherwise unconstrained, Cargo should choose the latest version supported.
sqlx-tomlfeature) is nowunsafe.sqlite-deserializeenablingSqliteConnection::serialize()andSqliteConnection::deserialize()sqlite-load-extensionenablingSqliteConnectOptions::extension()and::extension_with_entrypoint()sqlite-unlock-notifyenables internal use ofsqlite3_unlock_notify()SqliteValueandSqliteValueRefchanges:sqlite3_value*interface reserves the right to be stateful.Without protection, any call could theoretically invalidate values previously returned, leading to dangling pointers.
SqliteValueis now!SyncandSqliteValueRefis!Sendto prevent data races from concurrent accesses.SqliteValueinMutex, or convert theSqliteValueRefto an owned value.SqliteValueand any derivedSqliteValueRefs now internally track if that value has been used to decode aborrowed
&[u8]or&strand errors if it's used to decode any other type.per
SqliteValue/SqliteValueRef.SqliteValuefor details.PgLTree::fromtoFrom<Vec<PgLTreeLabel>>implementation [[@JerryQ17]]SqliteArguments[[@iamjpotts]].pgpassfile handling did not process backslash-escapes in the password part.Now it does, which may change what password is sent to the server.
#[derive(sqlx::Type)]automatically generateimpl PgHasArrayTypeby default for newtype structs [[@papaj-na-wrotkach]]Delete the manual impl or add
#[sqlx(no_pg_array)]where conflicts occur.offlineoptional to allow building withoutserde[[@CathalMullan]]mysql-rsafeatureor an error will be generated at runtime. RSA encryption is only used for plaintext (non-TLS) connections.
AnyTypeInfo[[@abonander]]Added
Arc<str>andArc<[u8]>(andRcequivalents) [[@joeydewaal]]runtime-smolandruntime-async-global-executorfeatures to replace usages of the deprecatedasync-stdcrate.no_txmigration support [[@AlexTMjugador]]Migrator::with_migrations()constructor [[@xb284524239]]sqlx.toml, update SQLite extension example [[@supleed2]]Json::into_inner()[[@chrxn1c]]SqlStr[[@joeydewaal]]PgNotificationstruct clone [[@michaelvanstraten]]Changed
OnceCell/Lazywith stdOnceLock/LazyLock[[@paolobarbolini]]Debugimplementations acrossPgRow,MySqlRowandSqliteRow[[@davidcornu]]QueryLoggerback [[@joeydewaal]].bind()inREADME.md[[@sobolevn]]randetceterato0.11.0libsqlite3-sysversion range to<0.38.0Fixed
futuresandfutures-util[[@paolobarbolini]]Pool.close: close all connections before returning [[@jpmelos]]ROLLBACKtransaction when dropped duringBEGIN. [[@kevincox]].envloading, caching, and invalidation [[@abonander]]which served as a useful comparison.
Command::cargo_bin()[[@abonander]]SASLprep[[@var4yn]]from_utf8_uncheckedwithfrom_utf8in SQLite column name handling [[@barry3406]]StdSocket::poll_ready()[[@abonander]]sveltejs/svelte (svelte)
v5.57.2Compare Source
Patch Changes
fix: don't create async deriveds for a component destroyed while waiting for its top-level
await(#18931)fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)
fix: error if
{:else}is followed by another{:else}or{:else if ...}(#18900)fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)
fix: restore hydration state when custom element attribute updates throw (#18467)
fix: attach event handlers that are assigned after a top-level
awaitin production (#18933)fix: flush anything pending before invoking flushSync callback function (#18878)
fix: preserve location information for
awaitwrappers (#18859)fix: keep a reactive assignment with no dependencies when
migratecannot turn it into a declaration (#18817)fix: don't hang
migrateon a declaration that shares a line with its script tag (#18816)fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)
fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)
fix: print
{#await}blocks that only have a pending branch (#18908)fix: don't warn about a redundant
linkrole on<area>elements without anhref(#18872)fix: don't throw
state_unsafe_mutationwhen the focused element is removed whilebind:activeElementis used (#18921)fix: don't overwrite an unchanged spread
value, preserving incomplete number input (#18864)fix: read batch-local array on each-block commit (#18879)
fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)
fix: error when using
let:directives on a component with achildrensnippet (#18873)fix: ignore stale boundary reset callbacks (#18886)
fix: handle deferred transitions aborted before initialization (#18776)
fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)
fix: preserve dynamic element connections during hydration (#18855)
v5.57.1Compare Source
Patch Changes
fix: cancel deferred event listeners during cleanup (#18749)
fix: preserve global CSS in components without scopable elements (#18793)
fix: reduce SSR render result garbage collection (#18798)
fix: resolve the fallback of an each block in the enclosing scope (#18803)
perf: speed up parser interactions with Acorn or avoid them where possible (#18740)
fix: prevent effect tree of batches from interfering with each other (#18508)
fix: serialize input default values during server rendering (#18733)
fix: remove
WAS_MARKEDflag in favor ofSet(#18127)fix: throw
set_context_after_initwhensetContextis called after anawaitduring SSR (#18739)fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)
fix: keep
$state.eagerwhen used as a variable initializer (#18809)perf: avoid regex matching in parser where possible (#18736)
fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)
fix: recognise
aria-braillelabelandaria-brailleroledescriptionas known ARIA attributes (#18765)v5.57.0Compare Source
Minor Changes
feat: export
RenderOutput,SyncRenderOutput,CspandSha256Sourcefromsvelte/server(#18648)feat: add
hasfunction tocreateContext(#18472)feat: support
defaultValueon<select>(#18591)feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
Patch Changes
fix: block template store subscriptions on the promise that assigns the store (#18582)
fix: route $derived teardown errors through invoke_error_boundary (#18486)
fix: track SvelteDate snapshots in reactions (#18700)
fix: remove
<svelte:head>anchors on unmount (#18697)fix: warn on undeclared shorthand event handlers on
<svelte:window>,<svelte:document>and<svelte:body>(#18480)perf: reuse the cached value in the
<option>/<select>value guard (#18713)fix: prevent malformed AST output for
<select>with staticvalueattribute (#18449)fix: apply ownership mutation ignores to binding assignments (#18718)
fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)
fix: preserve whitespace after inline elements when printing (#18685)
perf: fold SSR block-open markers into the branch's first push (#18712)
fix: run
onDestroycallbacks when a server render throws (#18585)fix: report
derived_invalid_exportforexport let x = $derived(...)in runes mode (#18692)fix: never apply class hash to elements inside
<svelte:head>(#18160)fix: keep
defaultCheckedon hydrated radio inputs with spread attributes (#18701)fix: accept
onfocusin/onfocusoutina11y_mouse_events_have_key_events(#18689)perf: O(n²)→O(n) Map lookups for legacy
$:reactive statement ordering (#18602)fix: distinct memoizer on style/class directives (#18466)
fix: measure nested transitions before applying their starting styles (#18647)
fix: don't turn component instances stored in
$stateinto state proxies (#18646)perf: emit
$.only_childfor elements with a single child (#18717)fix: omit
bind:focusedfrom SSR output (it has no HTML attribute) (#18724)fix: more robust rendering of Svelte custom element slots (#18710)
perf: optimize simple object destructuring in
@consttags (#18390)fix: properly apply static textarea value attribute during CSR (#18727)
fix: end a restored reaction context at the end of its synchronous segment (#18694)
fix: keep the dependencies of a reaction that throws, so deriveds it read are neither leaked nor stuck in their error (#18703)
fix: don't resurrect outroing elements when an ancestor block is paused and resumed (#18431)
perf: use
$.comment()for single-comment templates (#18714)chore: move
@types/trusted-typesto devDependencies (#18730)perf: store setters cache as
Setinstead ofArray(#18251)fix: transform derived assignments and select function bindings correctly during server-side rendering (#18669)
fix: keep boolean attributes with an empty string value when rendering attribute objects on the server (#18721)
fix: sync
SvelteURLport signal when the protocol setter clears the port (#18705)fix: block declaration tags and
{@const}on async values read inside closures (#18533)fix: avoid css tree-shaking for exported Snippet (#18540)
perf: treat
<img loading>as a static element again (#18711)fix: prevent
selectedcontentmutation from changing the selected option (#18495)fix: avoid
NaNkeyframe values inslidetransition for elements without a layout box (#18430)fix: preserve line feed character references in attribute values (#18691)
fix: decode uppercase-
Xhex numeric character references (&#X...;) (#18708)chore: clarify when
$effect.preruns relative to DOM updates (#18534)fix: scope SSR boundary failed snippets to their boundary (#18593)
v5.56.10Compare Source
Patch Changes
fix: preserve CSS escape sequences when printing selectors (#18667)
fix: parse
:nth-child(2n of.foo)whereofis not followed by whitespace (#18611)fix: transform expressions inside labeled statements during server compilation (#18617)
docs: clarify that context lookup includes the current component and all ancestors (#18581)
fix: apply CSS custom properties with falsy values on components (#18634)
fix: correctly print
{#await ... catch x}et al (#18645)fix: ignore comments of Program node during migration script (#18656)
fix: reliably resolve append_style to its correct root (#18614)
fix: clean up removed capture event handlers from spread attributes (#18618)
fix: don't corrupt renderer type during SSR's legacy
bind:retry loop (#18616)fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)
fix: give effect teardowns the value from before the first write in a flush (#18620)
fix: avoid double-calling a derived reference when destructuring
$derivedof another$derivedduring server-side rendering (#18668)fix: preserve namespaces in CSS type selectors (#18678)
fix: increment private state fields through a non-
thisreceiver (#18622)chore: deduplicate client and server context helpers (#18580)
fix: release
last_propagated_eventafter event propagation settles so it no longer retains the last event's target subtree (#18569)fix: allow custom elements to receive async values as props (#18661)
fix: strip comments from inline
stylevalues in linear time (#18553)fix: prevent declaration comments from breaking server derived references (#18641)
perf: make async blocker analysis scale linearly with the number of top-level references (#18549)
fix: preserve short-circuiting for logical assignments to private state fields (#18594)
vitejs/vite (vite)
v8.3.4Compare Source
Features
import.meta.hot.acceptExports(#23463) (bc0f21c)Bug Fixes
/@vite/clientand stub@vite/env(#23664) (5afc5a8)ensureWatchedFile(#23673) (12bb28c)Performance Improvements
Code Refactoring
/@vite/client(#23674) (182f5b2)v8.3.3Compare Source
Bug Fixes
fs.servefor?vite-wasm-instance(#23655) (ba8b7ab)safeModulePathsrather than URLs (#23656) (c3e06f9)v8.3.2Compare Source
Bug Fixes
renderBuiltUrlreturns URLs with queries (#23611) (64e0a21)forwardConsole(#23565) (e64a587)build.rolldownOptions.output.minifycorrectly (#23536) (bba3bb8)renderBuiltUrl(#23586) (744269e)Performance Improvements
Documentation
Miscellaneous Chores
Code Refactoring
tinyexecinstead ofcross-spawn(#23583) (db915e5)Tests
v8.3.1Compare Source
Bug Fixes
server.ws: falsein mergeConfig (#23511) (f68c0d5)build.rolldownOptions.output.commentscorrectly (#23514) (4aba8d8)Miscellaneous Chores
optimizeDeps.includecomment (#23489) (6a84c72)Code Refactoring
findwithsome(#23554) (af7cdf6)v8.3.0Compare Source
Features
server.watch(#23133) (1b5cfe3)tsconfigoption (#23310) (93164c3)applyToEnvironmenthook (#23191) (fdef04f)import.meta.ROLLDOWN_FILE_URL_*for assets in JS (#22888) (4366ac4)import.meta.ROLLDOWN_FILE_URL_*for other plugins (#22894) (e38f29e)Bug Fixes
node_modulespath segments as dependencies (fix #17467) (#23437) (ef0dc17)resolveFileUrlhook (#23422) (e8d6a4d)import.meta.hot.invalidatein virtual module (#23171) (6162968)Performance Improvements
Miscellaneous Chores
@e18e/eslint-plugin(#23357) (f794133)PluginContainerOptions(#23382) (ee64401)sortImports(#23319) (97ad042)Code Refactoring
esbuildPlugin(#23381) (f40efef)__VITE_ASSET__(#22886) (a6c08e1)urlIdofimport.meta.ROLLDOWN_FILE_URLin wasm plugin (#22962) (92bd2a7)Tests
renderBuiltUrlchange changes hash (#23118) (0291408)Beta Changelogs
8.3.0-beta.1 (2026-09-07)
See 8.3.0-beta.1 changelog
8.3.0-beta.0 (2026-09-02)
See 8.3.0-beta.0 changelog
v8.2.4Compare Source
Please refer to CHANGELOG.md for details.
v8.2.2Compare Source
Features
server.watch(#23133) (1b5cfe3)tsconfigoption (#23310) (93164c3)applyToEnvironmenthook (#23191) (fdef04f)import.meta.ROLLDOWN_FILE_URL_*for assets in JS (#22888) (4366ac4)import.meta.ROLLDOWN_FILE_URL_*for other plugins (#22894) (e38f29e)Bug Fixes
node_modulespath segments as dependencies (fix #17467) (#23437) (ef0dc17)resolveFileUrlhook (#23422) (e8d6a4d)import.meta.hot.invalidatein virtual module (#23171) (6162968)Performance Improvements
Miscellaneous Chores
@e18e/eslint-plugin(#23357) (f794133)PluginContainerOptions(#23382) (ee64401)sortImports(#23319) (97ad042)Code Refactoring
esbuildPlugin(#23381) (f40efef)__VITE_ASSET__(#22886) (a6c08e1)urlIdofimport.meta.ROLLDOWN_FILE_URLin wasm plugin (#22962) (92bd2a7)Tests
renderBuiltUrlchange changes hash (#23118) (0291408)Beta Changelogs
8.3.0-beta.1 (2026-09-07)
See 8.3.0-beta.1 changelog
8.3.0-beta.0 (2026-09-02)
See 8.3.0-beta.0 changelog
ChromeDevTools/vite-plugin-devtools-json (vite-plugin-devtools-json)
v1.1.2Compare Source
First release published via npm Trusted Publishing with provenance
v1.1.1Compare Source
Configuration
📅 Schedule: (in timezone Europe/Berlin)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.
bbcbc555a1d33a0bb1c3d33a0bb1c32a387dc98e2a387dc98ef725ff2da0f725ff2da0293fee1732293fee1732501df6f1cd501df6f1cd6e52bfb0446e52bfb044d48fe07f3dd48fe07f3d168ec5255f168ec5255f474cd4276aView command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.