Skip to content

chore(deps): consolidate Dependabot dependency updates#830

Merged
theashraf merged 5 commits into
mainfrom
chore/deps-consolidated-2026-04
Apr 30, 2026
Merged

chore(deps): consolidate Dependabot dependency updates#830
theashraf merged 5 commits into
mainfrom
chore/deps-consolidated-2026-04

Conversation

@theashraf

Copy link
Copy Markdown
Member

Description

Consolidates 24 of the 31 open Dependabot PRs into a single branch, refreshes pnpm-lock.yaml once, and lets the individual PRs auto-close when this lands. Bumps are split into 5 commits by risk tier so any regression can be reverted independently.

What's included (closes)

Lockfile refresh / patch / minor (within existing ranges)

TypeScript major

Build tooling majors

Svelte cluster (all in packages/svelte)

GitHub Actions

Auto-close (already current)

Deferred (not included)

Source-level changes required by the bumps

  • Added ignoreDeprecations: "6.0" to root tsconfig.dev.json/tsconfig.build.json (TS 6 turned downlevelIteration and moduleResolution=node10 deprecations — both inherited from @lottiefiles/tsconfig — into errors)
  • Bumped examples/wc typescript pin to 6.0.3 to match the inherited ignoreDeprecations value
  • packages/svelte/src/lib/Dotlottie.svelte: added truthy guards on animationId / themeId before passing to loadAnimation / setTheme (svelte-check 4 + stricter null analysis caught two string | undefinedstring calls)

Package(s) affected

  • @lottiefiles/dotlottie-web (core)
  • @lottiefiles/dotlottie-react
  • @lottiefiles/dotlottie-vue
  • @lottiefiles/dotlottie-svelte
  • @lottiefiles/dotlottie-solid
  • @lottiefiles/dotlottie-wc

Type of change

  • Bug fix (non-breaking)
  • New feature (non-breaking)
  • Breaking change
  • Chore (build, CI, docs, refactor)

Checklist

  • Changes have been tested locally (pnpm run lint, pnpm run type-check, pnpm run build, pnpm test — 375 passed, 41 skipped, 6 todo)
  • Tests have been added or updated — not applicable (dev-dependency bumps only)
  • Changeset has been added — not applicable (no published-package runtime impact)

@changeset-bot

changeset-bot Bot commented Apr 30, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6614feb

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

github-actions Bot commented Apr 30, 2026

Copy link
Copy Markdown
Contributor

size-limit report 📦

Path Size Loading time (3g) Running time (snapdragon) Total time
@lottiefiles/dotlottie-web 26.95 KB (+0.08% 🔺) 539 ms (+0.08% 🔺) 15 ms (-64.62% 🔽) 554 ms
@lottiefiles/dotlottie-web WASM 484.83 KB (0%) 9.7 s (0%) 0 ms (+100% 🔺) 9.7 s
@lottiefiles/dotlottie-react 28.25 KB (+0.06% 🔺) 566 ms (+0.06% 🔺) 24 ms (-30.83% 🔽) 589 ms
@lottiefiles/dotlottie-vue 35.3 KB (+0.02% 🔺) 707 ms (+0.02% 🔺) 23 ms (-55.6% 🔽) 729 ms
@lottiefiles/dotlottie-wc 32.85 KB (-0.13% 🔽) 658 ms (-0.13% 🔽) 31 ms (-51.32% 🔽) 688 ms
@lottiefiles/dotlottie-svelte 37.21 KB (-0.07% 🔽) 745 ms (-0.07% 🔽) 54 ms (+34.88% 🔺) 798 ms
@lottiefiles/dotlottie-solid 33.6 KB (-0.12% 🔽) 672 ms (-0.12% 🔽) 24 ms (+25.29% 🔺) 696 ms

- postcss 8.4.32 → 8.5.10 in apps/viewer (closes #818, #826)
- lockfile refreshed; subsumes #721 (svelte),
  #794 (@sveltejs/kit), #795 (next) within ranges
Subsumes #810, #812, #813, #815, #816 (per-package PRs). Adds
ignoreDeprecations: "6.0" to root tsconfigs to silence deprecation
errors inherited from @lottiefiles/tsconfig (downlevelIteration and
moduleResolution=node10). examples/wc bumped to TS 6 to match.
…e/tsconfig, @types/node)

- esbuild 0.23 → 0.28 in packages/web (closes #789)
- vite 5 → ^6.4.2 in apps/viewer + examples/{web,vue,wc,solid} (closes #786)
- @vitejs/plugin-react 4 → ^5.2.0 in packages/react + viewer (closes #751;
  v6 requires vite ^8 which is not yet stable)
- @vue/tsconfig 0.5 → ^0.9.1 in packages/vue (closes #760)
- @types/node 22 → ^25.6.0 in packages/{web,solid} (closes #798, #799)
- @sveltejs/adapter-auto 3 → ^7.0.1 (closes #693)
- @sveltejs/vite-plugin-svelte 4 → ^6.2.4 (closes #691)
- svelte-check 3 → ^4.4.0 (closes #689)
- vite 5 → ^7.3.1 (closes #694)
- publint 0.1 → ^0.3.17 (closes #695)

svelte-check 4 surfaced two strict-null errors in
Dotlottie.svelte (animationId/themeId of type string | undefined
passed to methods expecting string). Added truthy guards to match
the pattern used elsewhere in the file.
- pnpm/action-setup v5 → v6 (closes #797)
- peter-evans/repository-dispatch v3 → v4 (closes #807)
@theashraf theashraf force-pushed the chore/deps-consolidated-2026-04 branch from 6da2db3 to 6614feb Compare April 30, 2026 11:00
@theashraf theashraf merged commit 4dba676 into main Apr 30, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant