fix(deps): update patch updates (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@sveltejs/kit (source)	^2.12.1 -> ^2.12.2
@types/node (source)	18.19.68 -> 18.19.70
@visulima/find-cache-dir (source)	^1.0.16 -> ^1.0.18
@visulima/package (source)	^3.2.0 -> ^3.2.2
@visulima/packem (source)	^1.10.0 -> ^1.10.4
caniuse-lite	^1.0.30001689 -> ^1.0.30001690
esbuild	^0.24.0 -> ^0.24.2
favicons	^7.0.1 -> ^7.0.2
pnpm (source)	9.15.0 -> 9.15.3
rollup (source)	^3 -> ^3.0.1
unplugin	^2.1.0 -> ^2.1.2
vite (source)	^6.0.3 -> ^6.0.7

---

Release Notes

sveltejs/kit (@​sveltejs/kit)

v2.12.2

Compare Source

Patch Changes

• fix: correctly resolve no hooks file when a similarly named directory exists (#​13188)

• fix: correctly resolve $app/state on the server with Vite 5 (#​13192)

visulima/visulima (@​visulima/find-cache-dir)

v1.0.18

Compare Source

Dependencies

• @​visulima/fs: upgraded to 2.3.3
• @​visulima/path: upgraded to 1.2.0

v1.0.17

Compare Source

Miscellaneous Chores

• updated dev dependencies (9de2eab)

Dependencies

• @​visulima/fs: upgraded to 2.3.2

visulima/visulima (@​visulima/package)

v3.2.2

Compare Source

Dependencies

• @​visulima/fs: upgraded to 2.3.3
• @​visulima/path: upgraded to 1.2.0

v3.2.1

Compare Source

Bug Fixes

• fs: added missing yaml to dependencies (210b995)

Miscellaneous Chores

• updated dev dependencies (9de2eab)

Dependencies

• @​visulima/fs: upgraded to 2.3.2

visulima/packem (@​visulima/packem)

v1.10.4

Compare Source

Bug Fixes

• do not replace NODE_ENV by default (a1e4ade)

v1.10.3

Compare Source

Bug Fixes

• dont throw a error if the files filed is missing in the package.json (c84a359)
• updated dependencies, @​visulima/*, rollup v4.30.1, rollup-plugin-visualizer v5.14.0, tinyexec v0.3.2 (048bc64)

v1.10.2

Compare Source

Bug Fixes

• fixed broken regex on dynamic imports (7f1ca89)

v1.10.1

Compare Source

Bug Fixes

• fixed default export from jiti stub (59d3186)
• updated dependencies, @​clack/prompts, @​rollup/plugin-commonjs, @​rollup/plugin-node-resolve, @​rollup/plugin-replace, @​rollup/pluginutils, @​visulima/*, es-module-lexer, jiti, magic-string, oxc-parser, oxc-resolver, rollup, rollup-plugin-visualizer (119e4f5)

browserslist/caniuse-lite (caniuse-lite)

v1.0.30001690

Compare Source

evanw/esbuild (esbuild)

v0.24.2

Compare Source

• Fix regression with --define and import.meta (#​4010, #​4012, #​4013)

  The previous change in version 0.24.1 to use a more expression-like parser for define values to allow quoted property names introduced a regression that removed the ability to use --define:import.meta=.... Even though import is normally a keyword that can't be used as an identifier, ES modules special-case the import.meta expression to behave like an identifier anyway. This change fixes the regression.

  This fix was contributed by @​sapphi-red.

v0.24.1

Compare Source

• Allow es2024 as a target in tsconfig.json (#​4004)

  TypeScript recently added es2024 as a compilation target, so esbuild now supports this in the target field of tsconfig.json files, such as in the following configuration file:

  {
    "compilerOptions": {
      "target": "ES2024"
    }
  }

  As a reminder, the only thing that esbuild uses this field for is determining whether or not to use legacy TypeScript behavior for class fields. You can read more in the documentation.

  This fix was contributed by @​billyjanitsch.

• Allow automatic semicolon insertion after get/set

  This change fixes a grammar bug in the parser that incorrectly treated the following code as a syntax error:

  class Foo {
    get
    *x() {}
    set
    *y() {}
  }

  The above code will be considered valid starting with this release. This change to esbuild follows a similar change to TypeScript which will allow this syntax starting with TypeScript 5.7.

• Allow quoted property names in --define and --pure (#​4008)

  The define and pure API options now accept identifier expressions containing quoted property names. Previously all identifiers in the identifier expression had to be bare identifiers. This change now makes --define and --pure consistent with --global-name, which already supported quoted property names. For example, the following is now possible:

  // The following code now transforms to "return true;\n"
  console.log(esbuild.transformSync(
    `return process.env['SOME-TEST-VAR']`,
    { define: { 'process.env["SOME-TEST-VAR"]': 'true' } },
  ))

  Note that if you're passing values like this on the command line using esbuild's --define flag, then you'll need to know how to escape quote characters for your shell. You may find esbuild's JavaScript API more ergonomic and portable than writing shell code.

• Minify empty try/catch/finally blocks (#​4003)

  With this release, esbuild will now attempt to minify empty try blocks:

  // Original code
  try {} catch { foo() } finally { bar() }
  
  // Old output (with --minify)
  try{}catch{foo()}finally{bar()}
  
  // New output (with --minify)
  bar();

  This can sometimes expose additional minification opportunities.

• Include entryPoint metadata for the copy loader (#​3985)

  Almost all entry points already include a entryPoint field in the outputs map in esbuild's build metadata. However, this wasn't the case for the copy loader as that loader is a special-case that doesn't behave like other loaders. This release adds the entryPoint field in this case.

• Source mappings may now contain null entries (#​3310, #​3878)

  With this change, sources that result in an empty source map may now emit a null source mapping (i.e. one with a generated position but without a source index or original position). This change improves source map accuracy by fixing a problem where minified code from a source without any source mappings could potentially still be associated with a mapping from another source file earlier in the generated output on the same minified line. It manifests as nonsensical files in source mapped stack traces. Now the null mapping "resets" the source map so that any lookups into the minified code without any mappings resolves to null (which appears as the output file in stack traces) instead of the incorrect source file.

  This change shouldn't affect anything in most situations. I'm only mentioning it in the release notes in case it introduces a bug with source mapping. It's part of a work-in-progress future feature that will let you omit certain unimportant files from the generated source map to reduce source map size.

• Avoid using the parent directory name for determinism (#​3998)

  To make generated code more readable, esbuild includes the name of the source file when generating certain variable names within the file. Specifically bundling a CommonJS file generates a variable to store the lazily-evaluated module initializer. However, if a file is named index.js (or with a different extension), esbuild will use the name of the parent directory instead for a better name (since many packages have files all named index.js but have unique directory names).

  This is problematic when the bundle entry point is named index.js and the parent directory name is non-deterministic (e.g. a temporary directory created by a build script). To avoid non-determinism in esbuild's output, esbuild will now use index instead of the parent directory in this case. Specifically this will happen if the parent directory is equal to esbuild's outbase API option, which defaults to the lowest common ancestor of all user-specified entry point paths.

• Experimental support for esbuild on NetBSD (#​3974)

  With this release, esbuild now has a published binary executable for NetBSD in the @esbuild/netbsd-arm64 npm package, and esbuild's installer has been modified to attempt to use it when on NetBSD. Hopefully this makes installing esbuild via npm work on NetBSD. This change was contributed by @​bsiegert.

  ⚠️ Note: NetBSD is not one of Node's supported platforms, so installing esbuild may or may not work on NetBSD depending on how Node has been patched. This is not a problem with esbuild. ⚠️

itgalaxy/favicons (favicons)

v7.0.2

Compare Source

• Allow to specify which icons to generate and their options simultaneously #​407
• Opt-in support of SVG icons #​401
• Throw an error if background is not specified and Windows icon is generated #​408
• Update dependencies to their latest versions

pnpm/pnpm (pnpm)

v9.15.3

Compare Source

v9.15.2: pnpm 9.15.2

Compare Source

Patch Changes

• Fixed publish/pack error with workspace dependencies with relative paths #​8904. It was broken in v9.4.0 (398472c).
• Use double quotes in the command suggestion by pnpm patch on Windows #​7546.
• Do not fall back to SSH, when resolving a git-hosted package if git ls-remote works via HTTPS #​8906.
• Improve how packages with blocked lifecycle scripts are reported during installation. Always print the list of ignored scripts at the end of the output. Include a hint about how to allow the execution of those packages.

Platinum Sponsors

Gold Sponsors

v9.15.1

Compare Source

rollup/rollup (rollup)

v3.0.1

Compare Source

2022-10-12

Bug Fixes

• Fix installation on Windows (#​4662)
• Avoid missing parameters that are only used in a destructuring initializer (#​4663)

Pull Requests

• #​4661: Enforce type imports (@​lukastaegert)
• #​4662: fix: missing "node" causes run script error (@​c0dedance)
• #​4663: Ensure the initializer of a destructuring declaration is always included if the id is included (@​lukastaegert)
• #​4664: fix: remove lint:js:nofix script redundancy options (@​c0dedance)

unjs/unplugin (unplugin)

v2.1.2

Compare Source

   🐞 Bug Fixes

• esbuild: Fix again 9f85a26  -  by @​sxzz (4abab)

    View changes on GitHub

v2.1.1

Compare Source

   🐞 Bug Fixes

• esbuild: Pass original build for custom esbuild setup  -  by @​sxzz (9f85a)

    View changes on GitHub

vitejs/vite (vite)

v6.0.7

Compare Source

• fix: fix minify when builder.sharedPlugins: true (#​19025) (f7b1964), closes #​19025
• fix: skip the plugin if it has been called before with the same id and importer (#​19016) (b178c90), closes #​19016
• fix(html): error while removing vite-ignore attribute for inline script (#​19062) (a492253), closes #​19062
• fix(ssr): fix semicolon injection by ssr transform (#​19097) (1c102d5), closes #​19097
• perf: skip globbing for static path in warmup (#​19107) (677508b), closes #​19107
• feat(css): show lightningcss warnings (#​19076) (b07c036), closes #​19076

v6.0.6

Compare Source

• fix: replace runner-side path normalization with fetchModule-side resolve (#​18361) (9f10261), closes #​18361
• fix(css): resolve style tags in HTML files correctly for lightningcss (#​19001) (afff05c), closes #​19001
• fix(css): show correct error when unknown placeholder is used for CSS modules pattern in lightningcs (9290d85), closes #​19070
• fix(resolve): handle package.json with UTF-8 BOM (#​19000) (902567a), closes #​19000
• fix(ssrTransform): preserve line offset when transforming imports (#​19004) (1aa434e), closes #​19004
• chore: fix typo in comment (#​19067) (eb06ec3), closes #​19067
• chore: update comment about build.target (#​19047) (0e9e81f), closes #​19047
• revert: unpin esbuild version (#​19043) (8bfe247), closes #​19043
• test(ssr): test virtual module with query (#​19044) (a1f4b46), closes #​19044

v6.0.5

Compare Source

• fix: esbuild regression (pin to 0.24.0) (#​19027) (4359e0d), closes #​19027

v6.0.4

Compare Source

• fix: this.resolve skipSelf should not skip for different id or import (#​18903) (4727320), closes #​18903
• fix: fallback terser to main thread when function options are used (#​18987) (12b612d), closes #​18987
• fix: merge client and ssr values for pluginContainer.getModuleInfo (#​18895) (258cdd6), closes #​18895
• fix(css): escape double quotes in url() when lightningcss is used (#​18997) (3734f80), closes #​18997
• fix(css): root relative import in sass modern API on Windows (#​18945) (c4b532c), closes #​18945
• fix(css): skip non css in custom sass importer (#​18970) (21680bd), closes #​18970
• fix(deps): update all non-major dependencies (#​18967) (d88d000), closes #​18967
• fix(deps): update all non-major dependencies (#​18996) (2b4f115), closes #​18996
• fix(optimizer): keep NODE_ENV as-is when keepProcessEnv is true (#​18899) (8a6bb4e), closes #​18899
• fix(ssr): recreate ssrCompatModuleRunner on restart (#​18973) (7d6dd5d), closes #​18973
• chore: better validation error message for dts build (#​18948) (63b82f1), closes #​18948
• chore(deps): update all non-major dependencies (#​18916) (ef7a6a3), closes #​18916
• chore(deps): update dependency @​rollup/plugin-node-resolve to v16 (#​18968) (62fad6d), closes #​18968
• refactor: make internal invoke event to use the same interface with handleInvoke (#​18902) (27f691b), closes #​18902
• refactor: simplify manifest plugin code (#​18890) (1bfe21b), closes #​18890
• test: test ModuleRunnerTransport invoke API (#​18865) (e5f5301), closes #​18865
• test: test output hash changes (#​18898) (bfbb130), closes #​18898

---

Configuration

📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks

[github-actions]

Thank you for following the naming conventions! 🙏

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@sveltejs/kit@2.15.2	environment, eval	+2	804 kB	svelte-admin
npm/@types/node@18.19.70	None	0	2.03 MB	types

🚮 Removed packages: npm/@types/node@18.19.68, npm/@types/ssri@7.1.5, npm/@visulima/find-cache-dir@1.0.16, npm/@visulima/package@3.2.0, npm/@visulima/packem@1.10.0

View full report↗︎