Skip to content

chore(deps): bump the patch-updates group across 1 directory with 5 updates#29

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot-npm_and_yarn-patch-updates-1cbae1d73a
Open

chore(deps): bump the patch-updates group across 1 directory with 5 updates#29
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot-npm_and_yarn-patch-updates-1cbae1d73a

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the patch-updates group with 5 updates in the / directory:

Package From To
@astrojs/check 0.9.8 0.9.9
@iconify-json/material-symbols 1.2.64 1.2.69
katex 0.16.44 0.16.45
sanitize-html 2.17.2 2.17.3
svelte 5.55.1 5.55.5

Updates @astrojs/check from 0.9.8 to 0.9.9

Release notes

Sourced from @​astrojs/check's releases.

@​astrojs/check@​0.9.9

Patch Changes

Changelog

Sourced from @​astrojs/check's changelog.

0.9.9

Patch Changes

Commits

Updates @iconify-json/material-symbols from 1.2.64 to 1.2.69

Commits

Updates katex from 0.16.44 to 0.16.45

Release notes

Sourced from katex's releases.

v0.16.45

0.16.45 (2026-04-05)

Bug Fixes

Changelog

Sourced from katex's changelog.

0.16.45 (2026-04-05)

Bug Fixes

Commits
  • 90de979 chore(release): 0.16.45 [ci skip]
  • ee66b78 fix: wrap vcenter mpadded in mrow for valid MathML (#4193)
  • ed12205 refactor: move inline double brushs stroke to helper (#4194)
  • 434d4b8 chore(ci): upgrade to node 24 (#4189)
  • 844a324 chore(deps): bump codecov/codecov-action from 5 to 6 (#4188)
  • 5675226 chore(deps): bump actions/github-script from 7 to 8 (#4179)
  • 34ad75e chore(deps): bump actions/setup-node from 4 to 6 (#4180)
  • 2525c20 chore(deps): bump actions/upload-artifact from 4 to 7 (#4176)
  • See full diff in compare view

Updates sanitize-html from 2.17.2 to 2.17.3

Changelog

Sourced from sanitize-html's changelog.

2.17.3 (2026-04-15)

Security

  • Fix vulnerability introduced in version 2.17.2 that allowed XSS attacks if the developer chose to permit option tags. There was no vulnerability when not explicitly allowing option tags.
Commits

Updates svelte from 5.55.1 to 5.55.5

Release notes

Sourced from svelte's releases.

svelte@5.55.5

Patch Changes

  • fix: don't mark deriveds while an effect is updating (#18124)

  • fix: do not dispatch introstart event with animation of animate directive (#18122)

svelte@5.55.4

Patch Changes

  • fix: never mark a child effect root as inert (#18111)

  • fix: reset context after waiting on blockers of @const expressions (#18100)

  • fix: keep flushing new eager effects (#18102)

svelte@5.55.3

Patch Changes

  • fix: ensure proper HMR updates for dynamic components (#18079)

  • fix: correctly calculate @const blockers (#18039)

  • fix: freeze deriveds once their containing effects are destroyed (#17921)

  • fix: defer error boundary rendering in forks (#18076)

  • fix: avoid false positives for reactivity loss warning (#18088)

svelte@5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

  • fix: skip rebase logic in non-async mode (#18040)

  • fix: don't reset status of uninitialized deriveds (#18054)

Changelog

Sourced from svelte's changelog.

5.55.5

Patch Changes

  • fix: don't mark deriveds while an effect is updating (#18124)

  • fix: do not dispatch introstart event with animation of animate directive (#18122)

5.55.4

Patch Changes

  • fix: never mark a child effect root as inert (#18111)

  • fix: reset context after waiting on blockers of @const expressions (#18100)

  • fix: keep flushing new eager effects (#18102)

5.55.3

Patch Changes

  • fix: ensure proper HMR updates for dynamic components (#18079)

  • fix: correctly calculate @const blockers (#18039)

  • fix: freeze deriveds once their containing effects are destroyed (#17921)

  • fix: defer error boundary rendering in forks (#18076)

  • fix: avoid false positives for reactivity loss warning (#18088)

5.55.2

Patch Changes

  • fix: invalidate @const tags based on visible references in legacy mode (#18041)

  • fix: handle parens in template expressions more robustly (#18075)

  • fix: disallow -- in idPrefix (#18038)

  • fix: correct types for ontoggle on <details> elements (#18063)

  • fix: don't override $destroy/set/on instance methods in dev mode (#18034)

  • fix: unskip branches of earlier batches after commit (#18048)

  • fix: never set derived.v inside fork (#18037)

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 4, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the patch-updates group with 5 updates chore(deps): bump the patch-updates group across 1 directory with 5 updates May 5, 2026
…pdates

Bumps the patch-updates group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@astrojs/check](https://github.com/withastro/astro/tree/HEAD/packages/language-tools/astro-check) | `0.9.8` | `0.9.9` |
| [@iconify-json/material-symbols](https://github.com/iconify/icon-sets) | `1.2.64` | `1.2.69` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.44` | `0.16.45` |
| [sanitize-html](https://github.com/apostrophecms/apostrophe/tree/HEAD/packages/sanitize-html) | `2.17.2` | `2.17.3` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.55.1` | `5.55.5` |



Updates `@astrojs/check` from 0.9.8 to 0.9.9
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/language-tools/astro-check/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/check@0.9.9/packages/language-tools/astro-check)

Updates `@iconify-json/material-symbols` from 1.2.64 to 1.2.69
- [Commits](https://github.com/iconify/icon-sets/commits)

Updates `katex` from 0.16.44 to 0.16.45
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.44...v0.16.45)

Updates `sanitize-html` from 2.17.2 to 2.17.3
- [Changelog](https://github.com/apostrophecms/apostrophe/blob/main/packages/sanitize-html/CHANGELOG.md)
- [Commits](https://github.com/apostrophecms/apostrophe/commits/sanitize-html@2.17.3/packages/sanitize-html)

Updates `svelte` from 5.55.1 to 5.55.5
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.5/packages/svelte)

---
updated-dependencies:
- dependency-name: "@astrojs/check"
  dependency-version: 0.9.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: "@iconify-json/material-symbols"
  dependency-version: 1.2.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: katex
  dependency-version: 0.16.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: sanitize-html
  dependency-version: 2.17.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
- dependency-name: svelte
  dependency-version: 5.55.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot-npm_and_yarn-patch-updates-1cbae1d73a branch from e968e90 to 5d3065f Compare May 5, 2026 05:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants