[dependabot]

Bumps the all group with 10 updates in the / directory:

Package	From	To
@tabler/icons-svelte	3.48.0	3.49.0
@inlang/paraglide-js	2.25.4	2.29.0
@playwright/test	1.63.0	1.64.1
@types/node	24.19.1	24.19.2
eslint-plugin-svelte	3.23.0	3.23.1
prettier	3.9.9	3.9.10
svelte	5.57.1	5.57.2
svelte-check	4.7.6	4.7.7
typescript-eslint	8.71.0	8.71.2
vite	6.4.3	6.4.4

Updates @tabler/icons-svelte from 3.48.0 to 3.49.0

Release notes

Sourced from @​tabler/icons-svelte's releases.

Release 3.49.0

18 new icons:

• outline/alphabet-chinese
• outline/alphabet-devanagari
• outline/alphabet-ethiopic
• outline/alphabet-georgian
• outline/alphabet-japanese
• outline/blob-dashed
• outline/circle-heart
• outline/circle-pause
• outline/circle-play
• outline/circle-stop
• outline/file-lock
• outline/folder-lock
• outline/lens-concave
• outline/lens-convex
• outline/memory
• outline/square-dashed-top-solid
• outline/square-dashed-x
• outline/triangle-dashed

Fixes and improvements

• Add alphabet, arabic, typography and character tags to alphabet-arabic (#1643)
• Match brand-instagram size to other square brand icons (#1615)
• Fix square-dashed icon drawn as a solid square (#1614)
• Redraw square-dashed and table-dashed icons (#1640)
• Add squircle tag to all square-rounded icons (#1641)
• Webfont: Fix filled home webfont glyph having zero width in Chrome (#1616)
• Webfont: Fix sass and style fields in package.json to point to dist/, and stop publishing the intermediate SVG fonts, which the CSS never referenced (#1633)
• Webfont: Make webfont builds reproducible, so font files no longer change between builds of the same icons (#1624)
• Webfont: Drop the unused svgtofont dependency (#1620)
• Astro, Preact, React, React Native, SolidJS, Vue: Stop publishing source maps, which made up about 70% of the package size (#1634)
• Svelte, Svelte Runes: Add default export conditions and document per-icon imports (#1630)
• React Native: Stop passing extra props (testID, style, onPress, …) to every node of the icon, only the root Svg gets them. title is now exposed to screen readers via accessibility props (#1628)

Changelog

Sourced from @​tabler/icons-svelte's changelog.

3.49.0

Patch Changes

• #1630 6a24776 - Add default export conditions and document per-icon imports
• Updated dependencies [c3ca84f, c3ca84f, c3ca84f, c3ca84f, c3ca84f]:
  • @​tabler/icons@​3.49.0

Commits

• 009744c Release (#1647)
• 6a24776 Document per-icon imports in the Svelte packages and add default export con...
• 1b68ba3 Type-check build scripts and enable no-explicit-any (#1627)
• 9659394 Run Angular tests in CI, add React Native tests and lint Vue, Svelte and Astr...
• 1d8fd55 Add ESLint and Prettier checks and clean up .build/helpers.mjs (#1623)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tabler/icons-svelte since your current version.

Updates @inlang/paraglide-js from 2.25.4 to 2.29.0

Changelog

Sourced from @​inlang/paraglide-js's changelog.

2.29.0

Minor Changes

• 20c2ffe: Add the opt-in devErrorResponse Vite plugin option to return HTTP 500 while translation compilation or configuration is invalid, and resume serving after recovery.

  Wait for pending watch compilations when Vite closes, preventing writes after shutdown and interference with the next server in the same process.

Patch Changes

• da2ebab: Accept readonly URL inputs, including SvelteKit 3's page.url, in localizeUrl and deLocalizeUrl. URL-like inputs are normalized to native URLs so unmatched routes still return a mutable URL.

2.28.0

Minor Changes

• 17d1aed: Add cookieSameSite and cookieSecure compiler options for the locale cookie that setLocale() writes. Both attributes are omitted by default, so the cookie only changes when you opt in. cookieSecure: "auto" adds Secure only on https: pages, and cookieSameSite: "none" without cookieSecure throws when Paraglide compiles the runtime, because browsers drop that cookie.

  The runtime exports cookieSameSite and cookieSecure, so server code that writes the same cookie with Set-Cookie can reuse the policy. With "auto", the server has to resolve the protocol itself.

• b95a16b: Add redirect: "navigation" to paraglideMiddleware for GET and HEAD clients that omit Sec-Fetch-Dest but accept HTML. In this mode, form POST requests pass through to the resolve callback. The default "document" mode keeps its existing redirect behavior.

  The new mode adds Vary fields when needed to keep cached redirects and resolved responses separate. Mutable callback responses are updated in place to preserve their identity and runtime-specific state, including precompressed bodies on Cloudflare Workers. Immutable responses are rebuilt using the original response as the constructor options.

• b375894: Add an optional ESLint/Oxlint plugin at @inlang/paraglide-js/eslint. Enable paraglide/no-dynamic-message-access to report runtime indexing, computed destructuring, and whole-catalog spread/rest copies that can defeat tree-shaking. The rule recognizes generated message imports, aliases and local scope, while allowing static message references and application-owned maps. Custom generated module paths can be added with messageModules. No runtime, compiler output, or application behavior changes; the rule has no automatic fix because applications must choose their supported messages.

  Add optional lint setup to paraglide-js init with --lint eslint|oxlint|none, preserving existing lint configs via a dedicated lint:i18n script. Add --yes/--non-interactive, explicit project/output paths, and optional setup flags for unattended use. Closed input without an unattended flag fails before writes; headless mode skips optional editor/machine-translation prompts, protects dirty git trees unless explicitly allowed, reuses existing projects, preserves TypeScript config comments, and returns nonzero on setup/compile failures. No dependencies are installed automatically.

• 32b54a8: Show compilation and config errors in Vite's development overlay, including in newly opened tabs. Once compilation and config loading recover, the plugin requests a page reload to clear the overlay. The dev server keeps serving the last compiled output, as before.

Patch Changes

• 08ef4de: Fix extractLocaleFromHeader picking languages the client rejected with q=0 and ranking ranges by malformed weights. fr; q=0.5 and fr;Q=0.5 were read as unknown tags, and weights like q=abc or q=2 were sorted as NaN or out-of-range numbers.

  Ranges with q=0 are now skipped, as RFC 9110 defines a weight of 0 as "not acceptable". Ranges whose weight is not a valid qvalue are skipped too. The q parameter is matched case-insensitively, whitespace around ; and = is tolerated, and other parameters are ignored, including quoted values that contain , or ;. shouldRedirect() and paraglideMiddleware() reach this function through the preferredLanguage strategy, so their redirects follow the same rules.

• 4889802: Bound filesystem concurrency for generated output across message modules, locale modules, declarations, and additional files. Propagate write, directory creation, and required deletion errors instead of silently reporting successful compilation with incomplete output. Drain active operations before rejecting, close the loaded project on failure, and preserve unchanged generated files when cleaning during a partial update.

• bfdaecf: Cache Intl formatters used by compiled messages instead of constructing them on every call. Bound each formatter cache to 256 locale/options configurations, preserve direct-call option semantics, and include caching in middleware-injected messages.

  Date/time formatters are cached only with an explicit time zone, so messages using the host default follow device or process time zone changes.

• 4dedc3f: Keep canonical callback responses unchanged in navigation redirect mode when built-in URL routing determines the locale. Canonicalization redirects only vary by Accept and Sec-Fetch-Dest.

• bdb8f54: Reduce generated localization payloads by returning static text directly from locale dispatchers. Preserve locale switching, fallbacks, markup, middleware, and locale-specialized builds.

• b43abc2: Skip locale splitting for callback values without response headers or a body reader, and for consumed or locked bodies. Keep HTML injection working when the global Response constructor is replaced.

• ceaba90: Allow opt-in outputStructure: "message-modules" with experimental per-locale Vite builds. Direct physical message imports let Vite retain page-specific messages in lazy chunks while specializing each graph to its selected locale.

• ae63a90: Keep protocol-relative hrefs in localizeHref() and deLocalizeHref() instead of dropping their host. For example, with locale de, //cdn.example.com/docs now becomes //cdn.example.com/de/docs instead of /de/docs. This also handles /\ and separators containing tabs or newlines. Explicit ports are preserved, including default ports such as :80. Links keep their implicit protocol on the server outside the middleware, where getUrlOrigin() uses a fallback origin. Configured protocol or port changes still produce absolute URLs.

• 2ca1028: Cancel queued rebuilds when CLI watch mode shuts down, and ignore late watcher events or compile completions after shutdown. This prevents stopped watch sessions from recompiling or reopening file watchers.

• 2de79ed: getLocale(), setLocale() and extractLocaleFromCookie() no longer throw when document.cookie or localStorage throws, as both do with a SecurityError in sandboxed iframes without allow-same-origin and other documents with an opaque origin. A failed read falls through to the next strategy. A failed write is skipped, so setLocale() still navigates or reloads.

  The first getLocale() call writes the cookie, so a page whose locale came from the URL used to throw on its first message.

... (truncated)

Commits

• See full diff in compare view

Updates @playwright/test from 1.63.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

• #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
• #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
</tr></table>

... (truncated)

Commits

• cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
• 866cbb8 chore: mark v1.64.1 (#43354)
• 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
• 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
• 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• Additional commits viewable in compare view

Updates @types/node from 24.19.1 to 24.19.2

Commits

• See full diff in compare view

Updates eslint-plugin-svelte from 3.23.0 to 3.23.1

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.1

Patch Changes

• #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

• #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

• #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

• #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

• #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

• #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

• #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

• #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.1

Patch Changes

• #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

• #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

• #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

• #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

• #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

• #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

• #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

• #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Commits

• 24201e0 chore: release eslint-plugin-svelte (#1604)
• 90d7b09 fix(no-navigation-without-resolve): enable on SvelteKit 3 (#1599)
• 4607a2c fix: recognize SvelteKit 3 in rule conditions (#1598)
• af288cd fix(no-top-level-browser-globals): recognize app env browser guards (#1594)
• 4ad2c67 fix(require-each-key): highlight only the opening tag (#1593)
• ed67eb7 fix: omit deprecated rules from the all preset (#1592)
• ed49083 test: show fixture paths in rule test titles (#1591)
• a28563f fix(no-immutable-reactive-statements): handle globalReturn module scopes (#1590)
• 57863c5 docs: share extra file extensions across typed linting (#1589)
• 9814b51 docs: list all active extension rules in the extension table (#1588)
• See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

• Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits

• 1172b82 Release 3.9.10
• d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
• 953b908 Bump Prettier dependency to 3.9.9
• ad8a6bf Clean changelog_unreleased
• See full diff in compare view

Updates svelte from 5.57.1 to 5.57.2

Release notes

Sourced from svelte's releases.

svelte@5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Changelog

Sourced from svelte's changelog.

5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

• fix: read batch-local array on each-block commit (#18879)

• fix: error at compile time when a declaration in a snippet redeclares one of its parameters (#18842)

• fix: error when using let: directives on a component with a children snippet (#18873)

• fix: ignore stale boundary reset callbacks (#18886)

• fix: handle deferred transitions aborted before initialization (#18776)

• fix: prevent hydration mismatch recovery from being intercepted by error boundaries (#18841)

• fix: preserve dynamic element connections during hydration (#18855)

Commits

• 10fdca7 Version Packages (#18858)
• c580b38 fix: prevent duplicate derived subscriptions on reconnect (#18899)
• 3f885e3 fix: don't throw state_unsafe_mutation when the focused element is removed wi...
• fe4fb46 fix: error if {:else} is followed by another {:else} or {:else if ...} ...
• 179f66b fix: don't create async deriveds for a component destroyed while waiting for ...
• 79a0c0d fix: attach event handlers that are assigned after a top-level await in pro...
• 14136f8 fix: print {#await} blocks that only have a pending branch (#18908)
• 5cbdd34 fix: recover when an unexpected node replaces a nested boundary comment (#18925)
• 7e83327 fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)
• 020242d fix: ensure hydration state restoration for custom element attribute updates ...
• Additional commits viewable in compare view

Updates svelte-check from 4.7.6 to 4.7.7

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.7

Patch Changes

• fix: recognise modern CSS properties such as corner-shape by updating vscode-css-languageservice (#3122)

• fix: recognise the real <script> and <style> start tags when a matching token also appears inside the other tag (#3079)

• fix: resolve symlinked packages when importing their .svelte files, so their types are not duplicated (#3119)

• fix: align default tsconfig "include" logic with tsc/tsserver (#3110)

• fix: report a failed TypeScript compiler process and exit non-zero when a run fails (#3133)

• fix: ignore the .svelte-check cache directory in --watch with --tsgo / --incremental (#3128)

• fix: check all files with --tsgo / --incremental when the tsconfig has no include (#3138)

• fix: disallow --tsgo together with --tsgo-experimental-api (#3128)

• fix: type elements from Svelte's svelte-html.d.ts with --tsgo / --incremental, like the language server (#3141)

Commits

• b1ab063 Version Packages (#3107)
• 3f734db fix: config discovery under dot directories (#3121)
• 2a80d78 fix: check all files with --tsgo / --incremental when tsconfig has no include...
• 297b9e0 fix: type elements from svelte-html.d.ts with --tsgo / --incremental (#3141)
• 2394f19 fix: don't hide $props's type argument error (#3126)
• e549d19 fix(syntax): don't let comments inside \<template> swallow the file (#3137)
• af7c6a5 fix: report a failed TypeScript compiler process instead of a clean run (#3133)
• abaa1ee fix: ignore svelte-check cache directory in watch mode with --tsgo / --increm...
• 1d367d0 fix: ignore noEmitOnError and isolatedDeclarations in emitDts (#3129)
• 565abf9 Recognise modern CSS properties in svelte check (#3122)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.71.0 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

• eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
• eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
• eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
• eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
• type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

• Abraham Guo
• Brad Zacher @​bradzacher
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Vinccool96
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.71.1

8.71.1 (2026-10-05)

🩹 Fixes

• eslint-plugin: [no-misused-promises] skip argument checks for calls without arguments (#12923)
• eslint-plugin: [no-unused-vars] report usedOnlyAsType for partially exported merged declarations (#12892)
• eslint-plugin: [require-array-sort-compare] use array argument type constraint (#12919)
• eslint-plugin: [no-unsafe-enum-assignment] skip identical types and bound deep type walks (#12957)
• eslint-plugin: [no-confusing-void-expression] don't autofix when declared return type is unknown (#12930)
• eslint-plugin: [prefer-optional-chain] check the constrained type (#12953)
• eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type constraints (#12941)
• project-service: throttle cleanup when opening files (#12934)
• type-utils: match re-exports and global declarations in TypeOrValueSpecifier (#12943)

❤️ Thank You

• Diptajoy Mistry @​diptomistry
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Medhansh Poojari

See GitHub Releases for more information.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.71.1 (2026-10-05)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 7488d68 chore(release): publish 8.71.2
• d57b8da chore(release): publish 8.71.1
• See full diff in compare view

Updates vite from 6.4.3 to 6.4.4

Release notes

Sourced from vite's releases.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.4 (2026-10-06)

• fix(deps): update launch-editor to v2.14.2 (#23654) (8afec69), closes #23654
• fix(html): filename passed to transformIndexHtml should not include queries (#23653) (19902cf), closes #23653
• fix(server): check resolved ids for transform access (#20410) (eec6464), closes #20410
• fix(server): store ids to safeModulePaths rather than URLs (#23656) (e570d8d), closes #23656

Commits

• 5f0d9a4 release: v6.4.4
• eec6464 fix(server): check resolved ids for transform access (#20410)
• e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
• 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
• 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions