[dependabot]

Bumps the npm-minor-and-patch group with 3 updates in the / directory: @tauri-apps/cli, svelte and typescript.

Updates @tauri-apps/cli from 2.11.4 to 2.11.5

Release notes

Sourced from @​tauri-apps/cli's releases.

@​tauri-apps/cli v2.11.5

[2.11.5]

Security fixes

• 5a87bab12 Record the app version in the trusted comment of updater signatures, so a signed artifact is bound to the version it was released as.

  An update endpoint response is not signed, and the signature only covers the downloaded artifact, so the announced version on its own does not prove which release the url and signature point at. minisign covers the trusted comment with its global signature, which lets the updater plugin compare the two and reject a response that pairs a version number with a different release. Enable requireSignedVersion in the updater plugin configuration to enforce this.

  tauri build fills the version in automatically, and tauri plugin add updater now enables requireSignedVersion for the project it is adding the plugin to. tauri signer sign gains an --app-version flag for signing updater artifacts by hand, and warns when it is omitted.

Dependencies

• Upgraded to tauri-cli@2.11.5

Commits

• 9452dde fix audit
• 7c2fe9f run covector version
• 7d71a8a add publish-hotfix workflow
• 5a87bab Merge commit from fork
• e901f1d Merge commit from fork
• 7cd7136 apply version updates (#15632)
• 44594d6 Revert "fix(deps): pin time to <0.3.52" (#15631)
• ca90b46 apply version updates (#15621)
• ba865f2 fix(windows): dpi getter leaks HDC handles (#15614)
• 0299da0 fix(deps): pin time to <0.3.52 (#15616)
• Additional commits viewable in compare view

Updates svelte from 5.57.0 to 5.57.1

Release notes

Sourced from svelte's releases.

svelte@5.57.1

Patch Changes

• fix: cancel deferred event listeners during cleanup (#18749)

• fix: preserve global CSS in components without scopable elements (#18793)

• fix: reduce SSR render result garbage collection (#18798)

• fix: resolve the fallback of an each block in the enclosing scope (#18803)

• perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

• fix: prevent effect tree of batches from interfering with each other (#18508)

• fix: serialize input default values during server rendering (#18733)

• fix: remove WAS_MARKED flag in favor of Set (#18127)

• fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

• fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

• fix: keep $state.eager when used as a variable initializer (#18809)

• perf: avoid regex matching in parser where possible (#18736)

• fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

• fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

Changelog

Sourced from svelte's changelog.

5.57.1

Patch Changes

• fix: cancel deferred event listeners during cleanup (#18749)

• fix: preserve global CSS in components without scopable elements (#18793)

• fix: reduce SSR render result garbage collection (#18798)

• fix: resolve the fallback of an each block in the enclosing scope (#18803)

• perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

• fix: prevent effect tree of batches from interfering with each other (#18508)

• fix: serialize input default values during server rendering (#18733)

• fix: remove WAS_MARKED flag in favor of Set (#18127)

• fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

• fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

• fix: keep $state.eager when used as a variable initializer (#18809)

• perf: avoid regex matching in parser where possible (#18736)

• fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

• fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

Commits

• 636eaaa Version Packages (#18750)
• 8030ff2 fix: remove incorrect special handling of :export pseudo-selectors (#18839)
• a72dc8e fix: make Object.hasOwn reactive for state proxies (#18838)
• 6eb720a chore: scope.js stops importing from the analysis visitors (#18787)
• e6ae460 chore: analysis and transform stop importing each other (#18786)
• 5981c06 chore: move parser helpers next to their users (#18785)
• f2ad10e fix: preserve global CSS without scopable elements (#18793)
• a8a9b02 fix: reduce SSR render result garbage collection (#18798)
• 6be176d fix: resolve the fallback of an each block in the enclosing scope (#18803)
• 34b13ac fix: keep $state.eager when used as a variable initializer (#18809)
• Additional commits viewable in compare view

Updates typescript from 5.6.3 to 5.9.3

Release notes

Sourced from typescript's releases.

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)
• fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

• npm

TypeScript 5.9

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).
• No specific changes for TypeScript 5.9.2 (Stable)

Downloads are available on:

• npm

TypeScript 5.9 RC

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

• fixed issues query for Typescript 5.9.0 (Beta).
• fixed issues query for Typescript 5.9.1 (RC).

Downloads are available on:

• npm

TypeScript 5.9 Beta

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement.

• fixed issues query for Typescript 5.9.0 (Beta).

Downloads are available on:

• npm

TypeScript 5.8.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

... (truncated)

Commits

• c63de15 Bump version to 5.9.3 and LKG
• 8428ca4 🤖 Pick PR #62438 (Fix incorrectly ignored dts file fr...) into release-5.9 (#...
• a131cac 🤖 Pick PR #62351 (Add missing Float16Array constructo...) into release-5.9 (#...
• 0424333 🤖 Pick PR #62423 (Revert PR 61928) into release-5.9 (#62425)
• bdb641a 🤖 Pick PR #62311 (Fix parenthesizer rules for manuall...) into release-5.9 (#...
• 0d9b9b9 🤖 Pick PR #61978 (Restructure CI to prepare for requi...) into release-5.9 (#...
• 2dce0c5 Intentionally regress one buggy declaration output to an older version (#62163)
• 5be3346 Bump version to 5.9.2 and LKG
• ad825f2 Bump version to 5.9.1-rc and LKG
• 463a5bf Update LKG
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.