diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 2eea6bc73a14..3b61d3736a3d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -1053,16 +1053,16 @@ importers: version: 4.0.2(postcss@8.5.14) rollup-plugin-svelte: specifier: 7.2.2 - version: 7.2.2(rollup@3.30.0)(svelte@5.53.12) + version: 7.2.2(rollup@3.30.0)(svelte@5.55.7) sass: specifier: npm:sass-embedded@^1.97.2 version: sass-embedded@1.97.3 svelte: - specifier: 5.53.12 - version: 5.53.12 + specifier: 5.55.7 + version: 5.55.7 svelte-preprocess: specifier: 6.0.2 - version: 6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.53.12)(typescript@5.9.3) + version: 6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.55.7)(typescript@5.9.3) tslib: specifier: 2.8.1 version: 2.8.1 @@ -5412,16 +5412,16 @@ importers: version: 4.0.2(postcss@8.5.14) rollup-plugin-svelte: specifier: 7.2.2 - version: 7.2.2(rollup@3.30.0)(svelte@5.53.12) + version: 7.2.2(rollup@3.30.0)(svelte@5.55.7) sass: specifier: npm:sass-embedded@^1.97.2 version: sass-embedded@1.97.3 svelte: - specifier: 5.53.12 - version: 5.53.12 + specifier: 5.55.7 + version: 5.55.7 svelte-preprocess: specifier: 6.0.2 - version: 6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.53.12)(typescript@5.9.3) + version: 6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.55.7)(typescript@5.9.3) tslib: specifier: 2.8.1 version: 2.8.1 @@ -6560,7 +6560,7 @@ importers: version: 10.3.6(eslint@9.39.4)(storybook@10.3.6(@testing-library/dom@10.4.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(wp-prettier@3.0.3))(typescript@5.9.3) eslint-plugin-svelte: specifier: 3.15.2 - version: 3.15.2(eslint@9.39.4)(svelte@5.53.12) + version: 3.15.2(eslint@9.39.4)(svelte@5.55.7) eslint-plugin-testing-library: specifier: 7.16.0 version: 7.16.0(eslint@9.39.4)(typescript@5.9.3) @@ -6602,7 +6602,7 @@ importers: version: wp-prettier@3.0.3 prettier-plugin-svelte: specifier: 3.3.2 - version: 3.3.2(svelte@5.53.12)(wp-prettier@3.0.3) + version: 3.3.2(svelte@5.55.7)(wp-prettier@3.0.3) react: specifier: 18.3.1 version: 18.3.1 @@ -6622,11 +6622,11 @@ importers: specifier: 7.0.0 version: 7.0.0(stylelint@17.7.0(typescript@5.9.3)) svelte: - specifier: 5.53.12 - version: 5.53.12 + specifier: 5.55.7 + version: 5.55.7 svelte-eslint-parser: specifier: 1.4.1 - version: 1.4.1(svelte@5.53.12) + version: 1.4.1(svelte@5.55.7) typescript: specifier: 5.9.3 version: 5.9.3 @@ -12841,8 +12841,8 @@ packages: detect-node@2.1.0: resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==} - devalue@5.8.0: - resolution: {integrity: sha512-2zA9pFEsnp7vWBZbXF5JAgAq0fsUIt/1XPbRiAmRV3lp/2C3upzH+sADiyy66aFCihoLEsrQHxNM5w1gIDfsBg==} + devalue@5.8.1: + resolution: {integrity: sha512-4CXDYRBGqN+57wVJkuXBYmpAVUSg3L6JAQa/DFqm238G73E1wuyc/JhGQJzN7vUf/CMphYau2zXbfWzDR5aTEw==} devlop@1.1.0: resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==} @@ -17590,8 +17590,8 @@ packages: typescript: optional: true - svelte@5.53.12: - resolution: {integrity: sha512-4x/uk4rQe/d7RhfvS8wemTfNjQ0bJbKvamIzRBfTe2eHHjzBZ7PZicUQrC2ryj83xxEacfA1zHKd1ephD1tAxA==} + svelte@5.55.7: + resolution: {integrity: sha512-ymI5ykLPwIHW839E053FQbI1G+jnRFJEw3Kv5Y4njixVWywQBx+NUFpkkKyk5LIb36Fg9DVXSYpqiGekLD0hyw==} engines: {node: '>=18'} svg-pathdata@7.2.0: @@ -28693,7 +28693,7 @@ snapshots: detect-node@2.1.0: {} - devalue@5.8.0: {} + devalue@5.8.1: {} devlop@1.1.0: dependencies: @@ -29286,7 +29286,7 @@ snapshots: - supports-color - typescript - eslint-plugin-svelte@3.15.2(eslint@9.39.4)(svelte@5.53.12): + eslint-plugin-svelte@3.15.2(eslint@9.39.4)(svelte@5.55.7): dependencies: '@eslint-community/eslint-utils': 4.9.1(eslint@9.39.4) '@jridgewell/sourcemap-codec': 1.5.5 @@ -29298,9 +29298,9 @@ snapshots: postcss-load-config: 3.1.4(postcss@8.5.14) postcss-safe-parser: 7.0.1(postcss@8.5.14) semver: 7.7.3 - svelte-eslint-parser: 1.4.1(svelte@5.53.12) + svelte-eslint-parser: 1.4.1(svelte@5.55.7) optionalDependencies: - svelte: 5.53.12 + svelte: 5.55.7 transitivePeerDependencies: - ts-node @@ -32766,10 +32766,10 @@ snapshots: dependencies: fast-diff: 1.3.0 - prettier-plugin-svelte@3.3.2(svelte@5.53.12)(wp-prettier@3.0.3): + prettier-plugin-svelte@3.3.2(svelte@5.55.7)(wp-prettier@3.0.3): dependencies: prettier: wp-prettier@3.0.3 - svelte: 5.53.12 + svelte: 5.55.7 prettier@3.8.3: {} @@ -33416,12 +33416,12 @@ snapshots: transitivePeerDependencies: - ts-node - rollup-plugin-svelte@7.2.2(rollup@3.30.0)(svelte@5.53.12): + rollup-plugin-svelte@7.2.2(rollup@3.30.0)(svelte@5.55.7): dependencies: '@rollup/pluginutils': 4.2.1 resolve.exports: 2.0.3 rollup: 3.30.0 - svelte: 5.53.12 + svelte: 5.55.7 rollup-pluginutils@2.8.2: dependencies: @@ -34335,7 +34335,7 @@ snapshots: supports-preserve-symlinks-flag@1.0.0: {} - svelte-eslint-parser@1.4.1(svelte@5.53.12): + svelte-eslint-parser@1.4.1(svelte@5.55.7): dependencies: eslint-scope: 8.4.0 eslint-visitor-keys: 4.2.1 @@ -34344,18 +34344,18 @@ snapshots: postcss-scss: 4.0.9(postcss@8.5.14) postcss-selector-parser: 7.1.1 optionalDependencies: - svelte: 5.53.12 + svelte: 5.55.7 - svelte-preprocess@6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.53.12)(typescript@5.9.3): + svelte-preprocess@6.0.2(@babel/core@7.29.0)(postcss@8.5.14)(sass-embedded@1.97.3)(svelte@5.55.7)(typescript@5.9.3): dependencies: - svelte: 5.53.12 + svelte: 5.55.7 optionalDependencies: '@babel/core': 7.29.0 postcss: 8.5.14 sass: sass-embedded@1.97.3 typescript: 5.9.3 - svelte@5.53.12: + svelte@5.55.7: dependencies: '@jridgewell/remapping': 2.3.5 '@jridgewell/sourcemap-codec': 1.5.5 @@ -34366,7 +34366,7 @@ snapshots: aria-query: 5.3.1 axobject-query: 4.1.0 clsx: 2.1.1 - devalue: 5.8.0 + devalue: 5.8.1 esm-env: 1.2.2 esrap: 2.2.6 is-reference: 3.0.3 diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index b4d38cd9b448..473b6616f833 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -30,12 +30,6 @@ minimumReleaseAgeExclude: - '@automattic/*' - '@woocommerce/*' - '@wordpress/*' - # Renovate security update: dompurify@3.4.0 - - dompurify@3.4.0 - # Need to unblock @wordpress/* package updates - - '@types/wordpress__block-editor@15.0.6' - # Renovate security update: postcss@8.5.10 - - postcss@8.5.10 trustPolicy: no-downgrade trustPolicyExclude: # https://github.com/paulmillr/chokidar/issues/1440 diff --git a/projects/js-packages/image-guide/changelog/renovate-npm-svelte-vulnerability b/projects/js-packages/image-guide/changelog/renovate-npm-svelte-vulnerability new file mode 100644 index 000000000000..45028352a802 --- /dev/null +++ b/projects/js-packages/image-guide/changelog/renovate-npm-svelte-vulnerability @@ -0,0 +1,4 @@ +Significance: patch +Type: changed + +Update package dependencies. diff --git a/projects/js-packages/image-guide/package.json b/projects/js-packages/image-guide/package.json index e1ac57813a0c..88d5d1a16d72 100644 --- a/projects/js-packages/image-guide/package.json +++ b/projects/js-packages/image-guide/package.json @@ -58,7 +58,7 @@ "rollup-plugin-postcss": "4.0.2", "rollup-plugin-svelte": "7.2.2", "sass": "npm:sass-embedded@^1.97.2", - "svelte": "5.53.12", + "svelte": "5.55.7", "svelte-preprocess": "6.0.2", "tslib": "2.8.1", "typescript": "5.9.3", diff --git a/projects/plugins/inspect/changelog/renovate-npm-svelte-vulnerability b/projects/plugins/inspect/changelog/renovate-npm-svelte-vulnerability new file mode 100644 index 000000000000..45028352a802 --- /dev/null +++ b/projects/plugins/inspect/changelog/renovate-npm-svelte-vulnerability @@ -0,0 +1,4 @@ +Significance: patch +Type: changed + +Update package dependencies. diff --git a/projects/plugins/inspect/package.json b/projects/plugins/inspect/package.json index 2ddb4bafe7e1..a55adbd8fa26 100644 --- a/projects/plugins/inspect/package.json +++ b/projects/plugins/inspect/package.json @@ -38,7 +38,7 @@ "rollup-plugin-postcss": "4.0.2", "rollup-plugin-svelte": "7.2.2", "sass": "npm:sass-embedded@^1.97.2", - "svelte": "5.53.12", + "svelte": "5.55.7", "svelte-preprocess": "6.0.2", "tslib": "2.8.1", "typescript": "5.9.3", diff --git a/tools/js-tools/package.json b/tools/js-tools/package.json index 7c7debf8c8d6..0485fd5742db 100644 --- a/tools/js-tools/package.json +++ b/tools/js-tools/package.json @@ -72,7 +72,7 @@ "storybook": "10.3.6", "stylelint": "17.7.0", "stylelint-scss": "7.0.0", - "svelte": "5.53.12", + "svelte": "5.55.7", "svelte-eslint-parser": "1.4.1", "typescript": "5.9.3", "typescript-eslint": "8.57.1",