chore(deps): bump the production-dependencies group across 1 directory with 6 updates #277

dependabot · 2026-01-01T17:04:39Z

Bumps the production-dependencies group with 6 updates in the / directory:

Package	From	To
@sveltejs/vite-plugin-svelte	`4.0.4`	`6.2.1`
dotenv	`16.6.1`	`17.2.3`
drizzle-orm	`0.44.7`	`0.45.1`
lucide-svelte	`0.548.0`	`0.562.0`
vite-plugin-devtools-json	`0.2.1`	`1.0.0`
zod	`4.2.1`	`4.3.4`

Updates @sveltejs/vite-plugin-svelte from 4.0.4 to 6.2.1

Release notes

Sourced from @sveltejs/vite-plugin-svelte's releases.

@sveltejs/vite-plugin-svelte@6.2.1

Patch Changes

fix: remove unscopable global styles warning (#1223)

Remove automatic configuration for rolldownOptions.optimization.inlineConst because latest version of rolldown-vite has it enabled by default. (#1225)

@sveltejs/vite-plugin-svelte@6.2.0

Minor Changes

feat(rolldown-vite): enable optimization.inlineConst by default to ensure treeshaking works with esm-env in svelte (#1207)

@sveltejs/vite-plugin-svelte@6.1.4

Patch Changes

fix: allow preprocess plugin to run twice (#1206)

fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

replace kleur dependency with builtin node:utils styleText (#1210)

@sveltejs/vite-plugin-svelte@6.1.3

Patch Changes

fix(api): add api.filter and deprecate api.idFilter to avoid confusing filter.id = idFilter.id assignments when used as hybrid filter in other plugins (#1199)

@sveltejs/vite-plugin-svelte@6.1.2

Patch Changes

fix: ensure compiled css is returned when reloading during dev with ssr (e.g. SvelteKit) (#1194)

@sveltejs/vite-plugin-svelte@6.1.1

Patch Changes

fix: ensure compiled svelte css is loaded correctly when rebuilding in build --watch (#1189)

@sveltejs/vite-plugin-svelte@6.1.0

Minor Changes

feat: add support for the new experimental.async option and apply dynamicCompileOptions when compiling Svelte modules (#1176)

Patch Changes

skip comment blocks when reporting compiler errors that might be caused by a preprocessor issue (#1166)

increase logLevel to info for "no Svelte config found" message (#1179)

... (truncated)

Changelog

Sourced from @sveltejs/vite-plugin-svelte's changelog.

6.2.1

Patch Changes

fix: remove unscopable global styles warning (#1223)

Remove automatic configuration for rolldownOptions.optimization.inlineConst because latest version of rolldown-vite has it enabled by default. (#1225)

6.2.0

Minor Changes

feat(rolldown-vite): enable optimization.inlineConst by default to ensure treeshaking works with esm-env in svelte (#1207)

6.1.4

Patch Changes

fix: allow preprocess plugin to run twice (#1206)

fix(types): update urls to PreprocessorGroup and CompileOptions in type documention (#1203)

replace kleur dependency with builtin node:utils styleText (#1210)

6.1.3

Patch Changes

fix(api): add api.filter and deprecate api.idFilter to avoid confusing filter.id = idFilter.id assignments when used as hybrid filter in other plugins (#1199)

6.1.2

Patch Changes

fix: ensure compiled css is returned when reloading during dev with ssr (e.g. SvelteKit) (#1194)

6.1.1

Patch Changes

fix: ensure compiled svelte css is loaded correctly when rebuilding in build --watch (#1189)

6.1.0

Minor Changes

feat: add support for the new experimental.async option and apply dynamicCompileOptions when compiling Svelte modules (#1176)

... (truncated)

Commits

1b50eb9 Version Packages (#1224)
b81ef40 fix: remove automatic setting of rolldown inlineConst (#1225)
bb4b033 fix: remove unscopable global warning (#1223)
e3c60c5 fix(deps): update all non-major dependencies (#1218)
2a623f2 Version Packages (#1217)
e1ffd09 feat(rolldown-vite): enable optimization.inlineConst by default (#1207)
2842159 Version Packages (#1204)
35121ac refactor: replace kleur with styleText (#1210)
db12c90 fix(deps): update all non-major dependencies (#1205)
79a56c4 fix: allow preprocess plugin to run twice (#1206)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @sveltejs/vite-plugin-svelte since your current version.

Updates dotenv from 16.6.1 to 17.2.3

Changelog

Sourced from dotenv's changelog.

17.2.3 (2025-09-29)

Changed

Fixed typescript error definition (#912)

17.2.2 (2025-09-02)

Added

🙏 A big thank you to new sponsor Tuple.app - the premier screen sharing app for developers on macOS and Windows. Go check them out. It's wonderful and generous of them to give back to open source by sponsoring dotenv. Give them some love back.

17.2.1 (2025-07-24)

Changed

Fix clickable tip links by removing parentheses (#897)

17.2.0 (2025-07-09)

Added

Optionally specify DOTENV_CONFIG_QUIET=true in your environment or .env file to quiet the runtime log (#889)

Just like dotenv any DOTENV_CONFIG_ environment variables take precedence over any code set options like ({quiet: false})
# .env
DOTENV_CONFIG_QUIET=true
HELLO="World"
// index.js
require('dotenv').config()
console.log(`Hello ${process.env.HELLO}`)
$ node index.js
Hello World
or
$ DOTENV_CONFIG_QUIET=true node index.js
17.1.0 (2025-07-07)

Added

Add additional security and configuration tips to the runtime log (#884)

Dim the tips text from the main injection information text

... (truncated)

Commits

affe113 17.2.3
db1ff1f changelog 🪵
7063f16 Merge pull request #913 from motdotla/new-tips
0bbe72c test against expected tips
017951b only run .js tests
39eda1f add space back
fcc030e update tips
b6c7a0d updated tips - as Dotenvx Radar has been renamed Dotenvx Ops
b3c8b16 remove unnecessary call to npx
d6e4c17 Merge pull request #912 from adjerbetian/fix/typescript-error-definition
Additional commits viewable in compare view

Updates drizzle-orm from 0.44.7 to 0.45.1

Release notes

Sourced from drizzle-orm's releases.

0.45.1

Fixed pg-native Pool detection in node-postgres transactions breaking in environments with forbidden require() (#5107)

0.45.0

Fixed pg-native Pool detection in node-postgres transactions

Allowed subqueries in select fields

Updated typo algorythm => algorithm

Fixed $onUpdate not handling SQL values (fixes #2388, tests implemented by L-Mario564 in #2911)

Fixed pg mappers not handling Date instances in bun-sql:postgresql driver responses for date, timestamp types (fixes #4493)

Commits

a086f59 Fixed pg-native Pool detection in node-postgres transactions breaking in envi...
c445637 Merge pull request #5095 from drizzle-team/main-workflows
e7b3aaa Merge branch 'main' into main-workflows
0d885a5 refactor: Update condition for run-feature job to improve clarity and functio...
45a1ffb Merge pull request #5087 from drizzle-team/main-workflows
6357645 chore: Comment out NEON_HTTP_CONNECTION_STRING requirement in release workflows
53dec98 refactor: Simplify release router workflow by removing unnecessary switch job...
ce88a18 Merge remote-tracking branch 'origin/ext-deps-kit' into main-workflows
5c8a4c5 +
73e2ea4 feat: Add release router workflow to manage feature and latest releases
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for drizzle-orm since your current version.

Updates lucide-svelte from 0.548.0 to 0.562.0

Release notes

Sourced from lucide-svelte's releases.

Version 0.562.0

What's Changed

fix(icons): changed paint-bucket icon by @jguddas in lucide-icons/lucide#3880

fix(site): Fix and unify color-picker font-size by @taimar in lucide-icons/lucide#3889

fix(react-native-web): only add className prop to parent Icon component by @jguddas in lucide-icons/lucide#3892

fix(lucide-react-native): remove icons namespace export to enable tree-shaking by @jtomaszewski in lucide-icons/lucide#3868

feat(icons): added toolbox icon by @karsa-mistmere in lucide-icons/lucide#3871

New Contributors

@taimar made their first contribution in lucide-icons/lucide#3889

@jtomaszewski made their first contribution in lucide-icons/lucide#3868

Full Changelog: lucide-icons/lucide@0.561.0...0.562.0

Version 0.561.0

What's Changed

fix(site): Small adjustments color picker and add clear button search bar by @ericfennis in lucide-icons/lucide#3851

feat(icons): added stone icon by @Alportan in lucide-icons/lucide#3850

Full Changelog: lucide-icons/lucide@0.560.0...0.561.0

Version 0.560.0

What's Changed

feat(icons): added cannabis-off icon by @NickVeles in lucide-icons/lucide#3748

New Contributors

@NickVeles made their first contribution in lucide-icons/lucide#3748

Full Changelog: lucide-icons/lucide@0.559.0...0.560.0

Version 0.559.0

What's Changed

feat(icons): added fishing-hook icon by @7ender in lucide-icons/lucide#3837

New Contributors

@7ender made their first contribution in lucide-icons/lucide#3837

Full Changelog: lucide-icons/lucide@0.558.0...0.559.0

Version 0.558.0

What's Changed

feat(icons): added hd icon by @jamiemlaw in lucide-icons/lucide#2958

Full Changelog: lucide-icons/lucide@0.557.0...0.558.0

Version 0.557.0

What's Changed

fix(github/workflows/ci): fixes linting issues by @karsa-mistmere in lucide-icons/lucide#3858

... (truncated)

Commits

076e0bb chore(dependencies): Update dependencies (#3809)
See full diff in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for lucide-svelte since your current version.

Updates vite-plugin-devtools-json from 0.2.1 to 1.0.0

Commits

See full diff in compare view

Updates zod from 4.2.1 to 4.3.4

Release notes

Sourced from zod's releases.

v4.3.4

Commits:

1a8bea3b474eada6f219c163d0d3ad09fadabe72 Add integration tests

e01cd02b2f23d7e9078d3813830b146f8a2258b4 Support patternProperties for looserecord (#5592)

089e5fbb0f58ce96d2c4fb34cd91724c78df4af5 Improve looseRecord docs

decef9c418d9a598c3f1bada06891ba5d922c5cd Fix lint

9443aab00d44d5d5f4a7eada65fc0fc851781042 Drop iso time in fromJSONSchema

66bda7491a1b9eab83bdeec0c12f4efc7290bd48 Remove .refine() from ZodMiniType

b4ab94ca608cd5b581bfc12b20dd8d95b35b3009 4.3.4

v4.3.3

Commits:

f3b2151959d215d405f54dff3c7ab3bf1fd887ca v4.3.3

v4.3.2

Commits:

bf96635d243118de6e4f260077aa137453790bf6 Loosen strictObjectinside intersection (#5587)

f71dc0182ab0f0f9a6be6295b07faca269e10179 Remove Juno (#5590)

0f41e5a12a43e6913c9dcb501b2b5136ea86500d 4.3.2

v4.3.1

Commits:

0fe88407a4149c907929b757dc6618d8afe998fc allow non-overwriting extends with refinements. 4.3.1

v4.3.0

This is Zod's biggest release since 4.0. It addresses several of Zod's longest-standing feature requests.

z.fromJSONSchema()

Convert JSON Schema to Zod (#5534, #5586)

You can now convert JSON Schema definitions directly into Zod schemas. This function supports JSON Schema "draft-2020-12", "draft-7", "draft-4", and OpenAPI 3.0.
import * as z from "zod";
const schema = z.fromJSONSchema({
type: "object",
properties: {
name: { type: "string", minLength: 1 },
age: { type: "integer", minimum: 0 },
},
required: ["name"],
});
schema.parse({ name: "Alice", age: 30 }); // ✅
</tr></table>

... (truncated)

Commits

b4ab94c 4.3.4
66bda74 Remove .refine() from ZodMiniType
9443aab Drop iso time in fromJSONSchema
decef9c Fix lint
089e5fb Improve looseRecord docs
e01cd02 Support patternProperties for looserecord (#5592)
1a8bea3 Add integration tests
f3b2151 v4.3.3
0f41e5a 4.3.2
f71dc01 Remove Juno (#5590)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 6 updates Bumps the production-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@sveltejs/vite-plugin-svelte](https://github.com/sveltejs/vite-plugin-svelte/tree/HEAD/packages/vite-plugin-svelte) | `4.0.4` | `6.2.1` | | [dotenv](https://github.com/motdotla/dotenv) | `16.6.1` | `17.2.3` | | [drizzle-orm](https://github.com/drizzle-team/drizzle-orm) | `0.44.7` | `0.45.1` | | [lucide-svelte](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-svelte) | `0.548.0` | `0.562.0` | | [vite-plugin-devtools-json](https://github.com/ChromeDevTools/vite-plugin-devtools-json) | `0.2.1` | `1.0.0` | | [zod](https://github.com/colinhacks/zod) | `4.2.1` | `4.3.4` | Updates `@sveltejs/vite-plugin-svelte` from 4.0.4 to 6.2.1 - [Release notes](https://github.com/sveltejs/vite-plugin-svelte/releases) - [Changelog](https://github.com/sveltejs/vite-plugin-svelte/blob/main/packages/vite-plugin-svelte/CHANGELOG.md) - [Commits](https://github.com/sveltejs/vite-plugin-svelte/commits/@sveltejs/vite-plugin-svelte@6.2.1/packages/vite-plugin-svelte) Updates `dotenv` from 16.6.1 to 17.2.3 - [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md) - [Commits](motdotla/dotenv@v16.6.1...v17.2.3) Updates `drizzle-orm` from 0.44.7 to 0.45.1 - [Release notes](https://github.com/drizzle-team/drizzle-orm/releases) - [Commits](drizzle-team/drizzle-orm@0.44.7...0.45.1) Updates `lucide-svelte` from 0.548.0 to 0.562.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/0.562.0/packages/lucide-svelte) Updates `vite-plugin-devtools-json` from 0.2.1 to 1.0.0 - [Commits](https://github.com/ChromeDevTools/vite-plugin-devtools-json/commits) Updates `zod` from 4.2.1 to 4.3.4 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.2.1...v4.3.4) --- updated-dependencies: - dependency-name: "@sveltejs/vite-plugin-svelte" dependency-version: 6.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: dotenv dependency-version: 17.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: drizzle-orm dependency-version: 0.45.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: lucide-svelte dependency-version: 0.562.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: vite-plugin-devtools-json dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: zod dependency-version: 4.3.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 1, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/production-dependencies-a279554b50 branch from 2f1a0f1 to 3d17dda Compare January 2, 2026 18:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the production-dependencies group across 1 directory with 6 updates #277

chore(deps): bump the production-dependencies group across 1 directory with 6 updates #277

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): bump the production-dependencies group across 1 directory with 6 updates #277

Are you sure you want to change the base?

chore(deps): bump the production-dependencies group across 1 directory with 6 updates #277

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@​sveltejs/vite-plugin-svelte@​6.2.1

Patch Changes

@​sveltejs/vite-plugin-svelte@​6.2.0

Minor Changes

@​sveltejs/vite-plugin-svelte@​6.1.4

Patch Changes

@​sveltejs/vite-plugin-svelte@​6.1.3

Patch Changes

@​sveltejs/vite-plugin-svelte@​6.1.2

Patch Changes

@​sveltejs/vite-plugin-svelte@​6.1.1

Patch Changes

@​sveltejs/vite-plugin-svelte@​6.1.0

Minor Changes

Patch Changes

6.2.1

Patch Changes

6.2.0

Minor Changes

6.1.4

Patch Changes

6.1.3

Patch Changes

6.1.2

Patch Changes

6.1.1

Patch Changes

6.1.0

Minor Changes

17.2.3 (2025-09-29)

Changed

17.2.2 (2025-09-02)

Added

17.2.1 (2025-07-24)

Changed

17.2.0 (2025-07-09)

Added

17.1.0 (2025-07-07)

Added

0.45.1

0.45.0

Version 0.562.0

What's Changed

New Contributors

Version 0.561.0

What's Changed

Version 0.560.0

What's Changed

New Contributors

Version 0.559.0

What's Changed

New Contributors

Version 0.558.0

What's Changed

Version 0.557.0

What's Changed

v4.3.4

Commits:

v4.3.3

Commits:

v4.3.2

Commits:

v4.3.1

Commits:

v4.3.0

z.fromJSONSchema()

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot bot commented on behalf of github Jan 1, 2026 •

edited

Loading

`@sveltejs/vite-plugin-svelte@6`.2.1

`@sveltejs/vite-plugin-svelte@6`.2.0

`@sveltejs/vite-plugin-svelte@6`.1.4

`@sveltejs/vite-plugin-svelte@6`.1.3

`@sveltejs/vite-plugin-svelte@6`.1.2

`@sveltejs/vite-plugin-svelte@6`.1.1

`@sveltejs/vite-plugin-svelte@6`.1.0

`z.fromJSONSchema()`