An open index of dependabot pull requests across open source projects.

chore(deps): bump the npm-version-updates group across 1 directory with 16 updates

Open
Number: #7
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 2
Created: September 08, 2025 at 04:41 PM UTC
(25 days ago)
Updated: September 22, 2025 at 05:11 PM UTC
(11 days ago)
Labels:
dependencies javascript
Description:

Bumps the npm-version-updates group with 15 updates in the / directory:

Package From To
openid-client 6.6.2 6.7.1
@eslint/compat 1.3.1 1.3.2
@eslint/js 9.32.0 9.35.0
@sveltejs/adapter-auto 6.0.1 6.1.0
@sveltejs/kit 2.26.1 2.37.1
@sveltejs/vite-plugin-svelte 6.1.0 6.1.4
@tailwindcss/vite 4.1.11 4.1.13
@types/node 20.19.9 24.3.1
eslint 9.32.0 9.35.0
eslint-plugin-svelte 3.11.0 3.12.2
svelte 5.37.1 5.38.7
svelte-check 4.3.0 4.3.1
typescript 5.8.3 5.9.2
typescript-eslint 8.38.0 8.42.0
vite 7.0.6 7.1.5

Updates openid-client from 6.6.2 to 6.7.1

Release notes

Sourced from openid-client's releases.

v6.7.1

Fixes

  • passport: include req.host from express@5 for ease of use in express@4 (81f6c12)

v6.7.0

Features

  • support for the ML-DSA Algorithm Identifiers (9543da5)

v6.6.4

Fixes

  • recognize N_A in the token exchange grant (770b177)

v6.6.3

Documentation

  • fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

  • passport: allow custom logic to drive initiating auth requests (0b57115), closes #811
Changelog

Sourced from openid-client's changelog.

6.7.1 (2025-08-29)

Fixes

  • passport: include req.host from express@5 for ease of use in express@4 (81f6c12)

6.7.0 (2025-08-27)

Features

  • support for the ML-DSA Algorithm Identifiers (9543da5)

6.6.4 (2025-08-12)

Fixes

  • recognize N_A in the token exchange grant (770b177)

6.6.3 (2025-08-05)

Documentation

  • fix TokenEndpointResponseHelpers.claims() note (b77c786)

Refactor

  • passport: allow custom logic to drive initiating auth requests (0b57115), closes #811
Commits
  • 8639d5e chore(release): 6.7.1
  • 81f6c12 fix(passport): include req.host from express@5 for ease of use in express@4
  • 6c42f9c chore: cleanup after release
  • 74ffce5 chore(release): 6.7.0
  • 9543da5 feat: support for the ML-DSA Algorithm Identifiers
  • c3ee73b test: speedup CIBA tests
  • a1e4a4f chore: cleanup after release
  • 9876fa8 chore(release): 6.6.4
  • 770b177 fix: recognize N_A in the token exchange grant
  • 2af5eb8 test: more discovery coverage
  • Additional commits viewable in compare view

Updates @eslint/compat from 1.3.1 to 1.3.2

Release notes

Sourced from @​eslint/compat's releases.

migrate-config: v1.3.2

1.3.2 (2024-10-18)

Dependencies

  • The following workspace dependencies were updated
    • dependencies
      • @​eslint/compat bumped from ^1.2.0 to ^1.2.1

compat: v1.3.2

1.3.2 (2025-08-05)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​eslint/core bumped from ^0.15.1 to ^0.15.2
Changelog

Sourced from @​eslint/compat's changelog.

1.3.2 (2025-08-05)

Dependencies

  • The following workspace dependencies were updated
    • devDependencies
      • @​eslint/core bumped from ^0.15.1 to ^0.15.2
Commits

Updates @eslint/js from 9.32.0 to 9.35.0

Release notes

Sourced from @​eslint/js's releases.

v9.35.0

Features

  • 42761fa feat: implement suggestions for no-empty-function (#20057) (jaymarvelz)
  • 102f444 feat: implement suggestions for no-empty-static-block (#20056) (jaymarvelz)
  • e51ffff feat: add preserve-caught-error rule (#19913) (Amnish Singh Arora)

Bug Fixes

  • 10e7ae2 fix: update uncloneable options error message (#20059) (soda-sorcery)
  • bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#20045) (jaymarvelz)
  • dfd11de fix: add before and after to test case types (#20049) (Francesco Trotta)
  • dabbe95 fix: correct types for no-restricted-imports rule (#20034) (Milos Djermanovic)
  • ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#20032) (sethamus)

Documentation

  • d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#20074) (jjangga0214)
  • a355a0e docs: invert comparison logic for example in no-var doc page (#20064) (OTonGitHub)
  • 5082fc2 docs: Update README (GitHub Actions Bot)
  • 99cfd7e docs: add missing "the" in rule deprecation docs (#20050) (Josh Goldberg ✨)
  • 6ad8973 docs: update --no-ignore and --ignore-pattern documentation (#20036) (Francesco Trotta)
  • 8033b19 docs: add documentation for --no-config-lookup (#20033) (Francesco Trotta)

Chores

  • da87f2f chore: upgrade @​eslint/js@​9.35.0 (#20077) (Milos Djermanovic)
  • af2a087 chore: package.json update for @​eslint/js release (Jenkins)
  • 7055764 test: remove tests/lib/eslint/eslint.config.js (#20065) (Milos Djermanovic)
  • 84ffb96 chore: update @eslint-community/eslint-utils (#20069) (Francesco Trotta)
  • d5ef939 refactor: remove deprecated context.parserOptions usage across rules (#20060) (sethamus)
  • 1b3881d chore: remove redundant word (#20058) (pxwanglu)

v9.34.0

Features

  • 0bb777a feat: multithread linting (#19794) (Francesco Trotta)
  • 43a5f9e feat: add eslint-plugin-regexp to eslint-config-eslint base config (#19951) (Pixel998)

Bug Fixes

  • 9b89903 fix: default value of accessor-pairs option in rule.d.ts file (#20024) (Tanuj Kanti)
  • 6c07420 fix: fix spurious failure in neostandard integration test (#20023) (Kirk Waiblinger)
  • 676f4ac fix: allow scientific notation with trailing zeros matching exponent (#20002) (Sweta Tanwar)

Documentation

  • 0b4a590 docs: make rulesdir deprecation clearer (#20018) (Domenico Gemoli)
  • 327c672 docs: Update README (GitHub Actions Bot)
  • bf26229 docs: Fix typo in core-concepts/index.md (#20009) (Tobias Hernstig)
  • 2309327 docs: fix typo in the "Configuring Rules" section (#20001) (ghazi-git)
  • 2b87e21 docs: [no-else-return] clarify sample code. (#19991) (Yuki Takada (Yukinosuke Takada))
  • c36570c docs: Update README (GitHub Actions Bot)

Chores

  • f19ad94 chore: upgrade to @eslint/js@9.34.0 (#20030) (Francesco Trotta)
  • b48fa20 chore: package.json update for @​eslint/js release (Jenkins)

... (truncated)

Changelog

Sourced from @​eslint/js's changelog.

v9.35.0 - September 5, 2025

  • da87f2f chore: upgrade @​eslint/js@​9.35.0 (#20077) (Milos Djermanovic)
  • af2a087 chore: package.json update for @​eslint/js release (Jenkins)
  • d265515 docs: improve phrasing - "if" → "even if" from getting-started section (#20074) (jjangga0214)
  • 7055764 test: remove tests/lib/eslint/eslint.config.js (#20065) (Milos Djermanovic)
  • 10e7ae2 fix: update uncloneable options error message (#20059) (soda-sorcery)
  • 42761fa feat: implement suggestions for no-empty-function (#20057) (jaymarvelz)
  • 102f444 feat: implement suggestions for no-empty-static-block (#20056) (jaymarvelz)
  • 84ffb96 chore: update @eslint-community/eslint-utils (#20069) (Francesco Trotta)
  • a355a0e docs: invert comparison logic for example in no-var doc page (#20064) (OTonGitHub)
  • e51ffff feat: add preserve-caught-error rule (#19913) (Amnish Singh Arora)
  • 5082fc2 docs: Update README (GitHub Actions Bot)
  • d5ef939 refactor: remove deprecated context.parserOptions usage across rules (#20060) (sethamus)
  • 1b3881d chore: remove redundant word (#20058) (pxwanglu)
  • 99cfd7e docs: add missing "the" in rule deprecation docs (#20050) (Josh Goldberg ✨)
  • bfa4601 fix: ignore empty switch statements with comments in no-empty rule (#20045) (jaymarvelz)
  • dfd11de fix: add before and after to test case types (#20049) (Francesco Trotta)
  • 6ad8973 docs: update --no-ignore and --ignore-pattern documentation (#20036) (Francesco Trotta)
  • dabbe95 fix: correct types for no-restricted-imports rule (#20034) (Milos Djermanovic)
  • 8033b19 docs: add documentation for --no-config-lookup (#20033) (Francesco Trotta)
  • ea789c7 fix: no-loss-of-precision false positive with uppercase exponent (#20032) (sethamus)

v9.34.0 - August 22, 2025

  • f19ad94 chore: upgrade to @eslint/js@9.34.0 (#20030) (Francesco Trotta)
  • b48fa20 chore: package.json update for @​eslint/js release (Jenkins)
  • 4bce8a2 chore: package.json update for eslint-config-eslint release (Jenkins)
  • 0c9999c refactor: prefer default options in grouped-accessor-pairs (#20028) (루밀LuMir)
  • 0b4a590 docs: make rulesdir deprecation clearer (#20018) (Domenico Gemoli)
  • 9b89903 fix: default value of accessor-pairs option in rule.d.ts file (#20024) (Tanuj Kanti)
  • 6c07420 fix: fix spurious failure in neostandard integration test (#20023) (Kirk Waiblinger)
  • 676f4ac fix: allow scientific notation with trailing zeros matching exponent (#20002) (Sweta Tanwar)
  • 327c672 docs: Update README (GitHub Actions Bot)
  • d503f19 ci: fix stale.yml (#20010) (루밀LuMir)
  • 0bb777a feat: multithread linting (#19794) (Francesco Trotta)
  • bf26229 docs: Fix typo in core-concepts/index.md (#20009) (Tobias Hernstig)
  • 43a5f9e feat: add eslint-plugin-regexp to eslint-config-eslint base config (#19951) (Pixel998)
  • e2dc67d ci: centralize stale.yml (#19994) (루밀LuMir)
  • 7093cb8 ci: bump actions/checkout from 4 to 5 (#20005) (dependabot[bot])
  • 2309327 docs: fix typo in the "Configuring Rules" section (#20001) (ghazi-git)
  • 2b87e21 docs: [no-else-return] clarify sample code. (#19991) (Yuki Takada (Yukinosuke Takada))
  • c36570c docs: Update README (GitHub Actions Bot)

v9.33.0 - August 8, 2025

  • 4258046 chore: update dependency @​eslint/js to v9.33.0 (#19998) (renovate[bot])
  • ad28371 chore: package.json update for @​eslint/js release (Jenkins)
  • 06a22f1 test: resolve flakiness in --mcp flag test (#19993) (Pixel998)
  • 732433c fix: allow any type for meta.docs.recommended in custom rules (#19995) (Francesco Trotta)

... (truncated)

Commits
  • af2a087 chore: package.json update for @​eslint/js release
  • 84ffb96 chore: update @eslint-community/eslint-utils (#20069)
  • b48fa20 chore: package.json update for @​eslint/js release
  • ad28371 chore: package.json update for @​eslint/js release
  • See full diff in compare view

Updates @sveltejs/adapter-auto from 6.0.1 to 6.1.0

Release notes

Sourced from @​sveltejs/adapter-auto's releases.

@​sveltejs/adapter-auto@​6.1.0

Minor Changes

  • feat: add Deno as a supported package manager (#14163)

Patch Changes

@​sveltejs/adapter-auto@​6.0.2

Patch Changes

  • chore: add .git to the end of package.json repository url (#14134)

  • Updated dependencies [c968aef]:

    • @​sveltejs/kit@​2.27.3
Changelog

Sourced from @​sveltejs/adapter-auto's changelog.

6.1.0

Minor Changes

  • feat: add Deno as a supported package manager (#14163)

Patch Changes

6.0.2

Patch Changes

  • chore: add .git to the end of package.json repository url (#14134)

  • Updated dependencies [c968aef]:

    • @​sveltejs/kit@​2.27.3
Commits

Updates @sveltejs/kit from 2.26.1 to 2.37.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.37.1

Patch Changes

  • fix: serialize server load data before passing to universal load, to handle mutations and promises (#14298)

  • fix: resolve_route prevent dropping a trailing slash of id (#14294)

  • fix: assign correct status code to form submission error on the client (#14345)

  • fix: un-proxy form.result (#14346)

@​sveltejs/kit@​2.37.0

Minor Changes

  • feat: automatically resolve query.refresh() promises on the server (#14332)

  • feat: allow query.set() to be called on the server (#14304)

Patch Changes

  • fix: disable CSRF checks in dev (#14335)

  • fix: allow redirects to external URLs from within form functions (#14329)

  • fix: add type definitions for query.set() method to override the value of a remote query function (#14303)

  • fix: ensure uniqueness of form.for(...) across form functions (#14327)

@​sveltejs/kit@​2.36.3

Patch Changes

  • fix: bump devalue (#14323)

  • chore: consolidate dev checks to use esm-env instead of a __SVELTEKIT_DEV__ global (#14308)

  • fix: reset form inputs by default when using remote form functions (#14322)

@​sveltejs/kit@​2.36.2

Patch Changes

  • chore: make config deprecation warnings more visible (#14281)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.37.1

Patch Changes

  • fix: serialize server load data before passing to universal load, to handle mutations and promises (#14298)

  • fix: resolve_route prevent dropping a trailing slash of id (#14294)

  • fix: assign correct status code to form submission error on the client (#14345)

  • fix: un-proxy form.result (#14346)

2.37.0

Minor Changes

  • feat: automatically resolve query.refresh() promises on the server (#14332)

  • feat: allow query.set() to be called on the server (#14304)

Patch Changes

  • fix: disable CSRF checks in dev (#14335)

  • fix: allow redirects to external URLs from within form functions (#14329)

  • fix: add type definitions for query.set() method to override the value of a remote query function (#14303)

  • fix: ensure uniqueness of form.for(...) across form functions (#14327)

2.36.3

Patch Changes

  • fix: bump devalue (#14323)

  • chore: consolidate dev checks to use esm-env instead of a __SVELTEKIT_DEV__ global (#14308)

  • fix: reset form inputs by default when using remote form functions (#14322)

... (truncated)

Commits
  • dd19f91 Version Packages (#14342)
  • 4f883d1 chore(deps): update dependency @​opentelemetry/sdk-node to ^0.204.0 (#14373)
  • b216e47 fix: assign correct status code to form submission error on the client (#14345)
  • fb0f5dd fix: resolve_route prevent dropping a trailing slash of id (#14294)
  • 86d3889 fix: un-proxy form.result (#14346)
  • b2e921c chore: windows-compatible rm -rf (#14344)
  • 1c416bc fix: serialize server load data before passing to universal load alternativ...
  • f3a0dda chore: get rid of AbortController when calling queries on server (#14338)
  • c0a9d9a Version Packages (#14326)
  • f457eca feat: Server-side version of query.set() to avoid re-calling the query func...
  • Additional commits viewable in compare view

Updates @sveltejs/vite-plugin-svelte from 6.1.0 to 6.1.4

Release notes

Sourced from @​sveltejs/vite-plugin-svelte's releases.

@​sveltejs/vite-plugin-svelte@​6.1.4

Patch Changes

  • fix: allow preprocess plugin to run twice (#1206)

  • fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

  • replace kleur dependency with builtin node:utils styleText (#1210)

@​sveltejs/vite-plugin-svelte@​6.1.3

Patch Changes

  • fix(api): add api.filter and deprecate api.idFilter to avoid confusing filter.id = idFilter.id assignments when used as hybrid filter in other plugins (#1199)

@​sveltejs/vite-plugin-svelte@​6.1.2

Patch Changes

  • fix: ensure compiled css is returned when reloading during dev with ssr (e.g. SvelteKit) (#1194)

@​sveltejs/vite-plugin-svelte@​6.1.1

Patch Changes

  • fix: ensure compiled svelte css is loaded correctly when rebuilding in build --watch (#1189)
Changelog

Sourced from @​sveltejs/vite-plugin-svelte's changelog.

6.1.4

Patch Changes

  • fix: allow preprocess plugin to run twice (#1206)

  • fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

  • replace kleur dependency with builtin node:utils styleText (#1210)

6.1.3

Patch Changes

  • fix(api): add api.filter and deprecate api.idFilter to avoid confusing filter.id = idFilter.id assignments when used as hybrid filter in other plugins (#1199)

6.1.2

Patch Changes

  • fix: ensure compiled css is returned when reloading during dev with ssr (e.g. SvelteKit) (#1194)

6.1.1

Patch Changes

  • fix: ensure compiled svelte css is loaded correctly when rebuilding in build --watch (#1189)
Commits

Updates @tailwindcss/vite from 4.1.11 to 4.1.13

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.1.13

Changed

  • Drop warning from browser build (#18731)
  • Drop exact duplicate declarations when emitting CSS (#18809)

Fixed

  • Don't transition visibility when using transition (#18795)
  • Discard matched variants with unknown named values (#18799)
  • Discard matched variants with non-string values (#18799)
  • Show suggestions for known matchVariant values (#18798)
  • Replace deprecated clip with clip-path in sr-only (#18769)
  • Hide internal fields from completions in matchUtilities (#18820)
  • Ignore .vercel folders by default (can be overridden by @source … rules) (#18855)
  • Consider variants starting with @- to be invalid (e.g. @-2xl:flex) (#18869)
  • Do not allow custom variants to start or end with a - or _ (#18867, #18872)
  • Upgrade: Migrate aria theme keys to @custom-variant (#18815)
  • Upgrade: Migrate data theme keys to @custom-variant (#18816)
  • Upgrade: Migrate supports theme keys to @custom-variant (#18817)

v4.1.12

Fixed

  • Don't consider the global important state in @apply (#18404)
  • Add missing suggestions for flex-<number> utilities (#18642)
  • Fix trailing ) from interfering with extraction in Clojure keywords (#18345)
  • Detect classes inside Elixir charlist, word list, and string sigils (#18432)
  • Track source locations through @plugin and @config (#18345)
  • Allow boolean values of process.env.DEBUG in @tailwindcss/node (#18485)
  • Ignore consecutive semicolons in the CSS parser (#18532)
  • Center the dropdown icon added to an input with a paired datalist by default (#18511)
  • Extract candidates in Slang templates (#18565)
  • Improve error messages when encountering invalid functional utility names (#18568)
  • Discard CSS AST objects with false or undefined properties (#18571)
  • Allow users to disable URL rebasing in @tailwindcss/postcss via transformAssetUrls: false (#18321)
  • Fix false-positive migrations in addEventListener and JavaScript variable names (#18718)
  • Fix Standalone CLI showing default Bun help when run via symlink on Windows (#18723)
  • Read from --border-color-* theme keys in divide-* utilities for backwards compatibility (#18704)
  • Don't scan .hdr and .exr files for classes by default (#18734)
Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.1.13] - 2025-09-03

Changed

  • Drop warning from browser build (#18731)
  • Drop exact duplicate declarations when emitting CSS (#18809)

Fixed

  • Don't transition visibility when using transition (#18795)
  • Discard matched variants with unknown named values (#18799)
  • Discard matched variants with non-string values (#18799)
  • Show suggestions for known matchVariant values (#18798)
  • Replace deprecated clip with clip-path in sr-only (#18769)
  • Hide internal fields from completions in matchUtilities (#18820)
  • Ignore .vercel folders by default (can be overridden by @source … rules) (#18855)
  • Consider variants starting with @- to be invalid (e.g. @-2xl:flex) (#18869)
  • Do not allow custom variants to start or end with a - or _ (#18867, #18872)
  • Upgrade: Migrate aria theme keys to @custom-variant (#18815)
  • Upgrade: Migrate data theme keys to @custom-variant (#18816)
  • Upgrade: Migrate supports theme keys to @custom-variant (#18817)

[4.1.12] - 2025-08-13

Fixed

  • Don't consider the global important state in @apply (#18404)
  • Add missing suggestions for flex-<number> utilities (#18642)
  • Fix trailing ) from interfering with extraction in Clojure keywords (#18345)
  • Detect classes inside Elixir charlist, word list, and string sigils (#18432)
  • Track source locations through @plugin and @config (#18345)
  • Allow boolean values of process.env.DEBUG in @tailwindcss/node (#18485)
  • Ignore consecutive semicolons in the CSS parser (#18532)
  • Center the dropdown icon added to an input with a paired datalist by default (#18511)
  • Extract candidates in Slang templates (#18565)
  • Improve error messages when encountering invalid functional utility names (#18568)
  • Discard CSS AST objects with false or undefined properties (#18571)
  • Allow users to disable URL rebasing in @tailwindcss/postcss via transformAssetUrls: false (#18321)
  • Fix false-positive migrations in addEventListener and JavaScript variable names (#18718)
  • Fix Standalone CLI showing default Bun help when run via symlink on Windows (#18723)
  • Read from --border-color-* theme keys in divide-* utilities for backwards compatibility (#18704)
  • Don't scan .hdr and .exr files for classes by default (#18734)
Commits
Package Dependencies
Ecosystem:
npm
Version Change:
9.32.0 → 9.35.0
Update Type:
Minor
Package:
@types/node
Ecosystem:
npm
Version Change:
20.19.9 → 24.3.1
Update Type:
Major
Package:
vite
Ecosystem:
npm
Version Change:
7.0.6 → 7.1.5
Update Type:
Minor
Package:
typescript
Ecosystem:
npm
Version Change:
5.8.3 → 5.9.2
Update Type:
Minor
Package:
@eslint/js
Ecosystem:
npm
Version Change:
9.32.0 → 9.35.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
8.38.0 → 8.42.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
3.11.0 → 3.12.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.1.11 → 4.1.13
Update Type:
Patch
Ecosystem:
npm
Version Change:
2.26.1 → 2.37.1
Update Type:
Minor
Package:
svelte
Ecosystem:
npm
Version Change:
5.37.1 → 5.38.7
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.1.0 → 6.1.4
Update Type:
Patch
Ecosystem:
npm
Version Change:
6.6.2 → 6.7.1
Update Type:
Minor
Ecosystem:
npm
Version Change:
6.0.1 → 6.1.0
Update Type:
Minor
Ecosystem:
npm
Version Change:
4.3.0 → 4.3.1
Update Type:
Patch
Ecosystem:
npm
Version Change:
1.3.1 → 1.3.2
Update Type:
Patch
Technical Details
ID: 8219069
UUID: 3394920547
Node ID: PR_kwDOPU0lfM6nbDBE
Host: GitHub
Repository: zitadel/example-auth-sveltekit