chore(deps): bump devalue and @sveltejs/adapter-auto in /examples/svelte/svelte-vite#4356
Conversation
Bumps [devalue](https://github.com/sveltejs/devalue) to 5.6.4 and updates ancestor dependency [@sveltejs/adapter-auto](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-auto). These dependencies need to be updated together. Updates `devalue` from 4.3.3 to 5.6.4 - [Release notes](https://github.com/sveltejs/devalue/releases) - [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md) - [Commits](sveltejs/devalue@v4.3.3...v5.6.4) Updates `@sveltejs/adapter-auto` from 1.0.0-next.91 to 7.0.1 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-auto/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-auto@7.0.1/packages/adapter-auto) --- updated-dependencies: - dependency-name: devalue dependency-version: 5.6.4 dependency-type: indirect - dependency-name: "@sveltejs/adapter-auto" dependency-version: 7.0.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
| }, | ||
| "typescript": { | ||
| "optional": true | ||
| } |
There was a problem hiding this comment.
Incompatible peer dependencies after major version bump
High Severity
Bumping @sveltejs/adapter-auto from 1.x to 7.0.1 pulls in @sveltejs/kit 2.54.0 as a peer dependency. @sveltejs/kit 2.54.0 requires @sveltejs/vite-plugin-svelte ^3.0.0 and vite ^5.0.3, but package.json still specifies @sveltejs/vite-plugin-svelte ^2.4.5 (resolves to 2.5.3) and vite ^4.5.12. These unmet peer dependencies will likely cause build failures or runtime incompatibilities.
Additional Locations (1)
|
| Command | Status | Duration | Result |
|---|---|---|---|
nx test @snippet/angular-17-ssr |
❌ Failed | 50s | View ↗ |
nx test @e2e/gen1-next15-app |
✅ Succeeded | 13m 23s | View ↗ |
nx test @e2e/angular-17 |
✅ Succeeded | 6m 41s | View ↗ |
nx test @e2e/qwik-city |
✅ Succeeded | 7m 45s | View ↗ |
nx test @e2e/nextjs-sdk-next-app |
✅ Succeeded | 7m 31s | View ↗ |
nx test @e2e/vue |
✅ Succeeded | 4m 16s | View ↗ |
nx test @e2e/nuxt |
✅ Succeeded | 5m 33s | View ↗ |
nx test @e2e/gen1-next14-pages |
✅ Succeeded | 4m 30s | View ↗ |
Additional runs (37) |
✅ Succeeded | ... | View ↗ |
☁️ Nx Cloud last updated this comment at 2026-03-12 17:02:35 UTC
Bumps devalue to 5.6.4 and updates ancestor dependency @sveltejs/adapter-auto. These dependencies need to be updated together.
Updates
devaluefrom 4.3.3 to 5.6.4Release notes
Sourced from devalue's releases.
... (truncated)
Changelog
Sourced from devalue's changelog.
... (truncated)
Commits
6cbb3f5Version Packages (#133)40f1db1Merge commit from fork87c1f3cMerge commit from forka4a37d2Version Packages (#132)819f1acMerge commit from fork0f04d4dMerge commit from forkfcf4e88fix tests1d8a5eaVersion Packages (#131)1175584Merge commit from forke46afa6Merge commit from forkMaintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for devalue since your current version.
Updates
@sveltejs/adapter-autofrom 1.0.0-next.91 to 7.0.1Release notes
Sourced from
@sveltejs/adapter-auto's releases.Changelog
Sourced from
@sveltejs/adapter-auto's changelog.... (truncated)
Commits
c727a90Version Packages (#15309)77ab341feat: update adapter-netlify to version 61d2be12chore: update suggestion message (#15165)0da365achore(deps): update vitest monorepo to v4 (major) (#14789)6f13d2bVersion Packages (#14738)c710a39breaking: update to adapter-vercel to version 6 (#14737)9fbd0d1Version Packages (#14580)193d37cchore: fix "homepage" field in package.json (#14579)758ec17fix: conditionally access builder properties that only exist on the latest Sv...d4f00a1chore: remove skipLibCheck (#14227)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@sveltejs/adapter-autosince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Although confined to an example app lockfile, it upgrades SvelteKit across a major version and raises Node engine requirements, which can affect local builds and deployment environments.
Overview
Updates
examples/svelte/svelte-vite/package-lock.jsonto use@sveltejs/adapter-autonext(resolving to7.0.1) and pulls in@sveltejs/kit2.54.0, along with a large set of transitive upgrades (notablydevalue5.6.4,cookie0.6.0,set-cookie-parser3.0.1,sirv3.0.2,acorn8.16.0) and removal of now-unneeded transitive packages.The lockfile reflects updated engine/peer requirements (notably Node
>=18.13for@sveltejs/kit/sirv).Written by Cursor Bugbot for commit ceb633a. This will update automatically on new commits. Configure here.