Skip to content

build(deps-dev): bump the actions-deps group with 3 updates - #8304

Merged
ardatan merged 1 commit into
masterfrom
dependabot/npm_and_yarn/actions-deps-69711b0779
Jul 17, 2026
Merged

build(deps-dev): bump the actions-deps group with 3 updates#8304
ardatan merged 1 commit into
masterfrom
dependabot/npm_and_yarn/actions-deps-69711b0779

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions-deps group with 3 updates: svelte, postcss and wrangler.

Updates svelte from 5.56.5 to 5.56.6

Release notes

Sourced from svelte's releases.

svelte@5.56.6

Patch Changes

  • perf: skip unnecessary blocker analysis when compiling components without top-level await (#18548)

  • fix: rerun derived that had an abort controller on reconnection (#18551)

Changelog

Sourced from svelte's changelog.

5.56.6

Patch Changes

  • perf: skip unnecessary blocker analysis when compiling components without top-level await (#18548)

  • fix: rerun derived that had an abort controller on reconnection (#18551)

Commits

Updates postcss from 8.5.19 to 8.5.14

Changelog

Sourced from postcss's changelog.

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

8.5.15

  • Fixed declaration parsing performance (by @​homanp).

8.5.14

8.5.13

  • Fixed postcss-scss commend regression.

8.5.12

  • Fixed reading any file via user-generated CSS.
  • Added opts.unsafeMap to disable checks.

8.5.11

  • Fixed nested brackets parsing performance (by @​offset).

8.5.10

  • Fixed XSS via unescaped </style> in non-bundler cases (by @​TharVid).

8.5.9

  • Speed up source map encoding paring in case of the error.

... (truncated)

Commits
  • 3ec1394 Release 8.5.14 version
  • f2bb827 Update dependencies
  • d75953d Merge pull request #2084 from 43081j/raw-raws-rawing
  • 68bd213 fix: always call raw to retrieve raw values
  • af58cf1 Release 8.5.13 version
  • f227dbd Temporary ignore pnpm 11 config
  • d3abd40 Update dependencies
  • dd06c3e Revert stringifier changes because of the conflict with postcss-scss
  • ae889c8 Try to fix CI
  • e0093e4 Move to pnpm 11
  • Additional commits viewable in compare view
Attestation changes

This version has no provenance attestation, while the previous version (8.5.19) was attested. Review the package versions before updating.


Updates wrangler from 4.111.0 to 4.112.0

Release notes

Sourced from wrangler's releases.

wrangler@4.112.0

Minor Changes

  • #14470 3de70df Thanks @​DiogoSantoss! - Add a top-level addresses field to Wrangler configuration for Email Routing

    You can now declare the inbound email addresses handled by your Worker directly in wrangler.json:

    {
      "name": "my-worker",
      "main": "src/index.ts",
      "compatibility_date": "2026-05-21",
      "addresses": ["support@example.com", "*@example.com"]
    }
  • #14706 cb6c3f9 Thanks @​edmundhung! - Add Durable Object storage access to createTestHarness()

    You can now execute SQL against a SQLite-backed Durable Object to seed or assert the storage state.

    const server = createTestHarness({
      workers: [{ configPath: "./wrangler.json" }],
    });
    await server.listen();
    const worker = server.getWorker();
    const storage = await worker.getDurableObjectStorage("COUNTER", {
    name: "user-123",
    });
    await worker.fetch("/counter/user-123");
    const rows = await storage.exec(
    "SELECT value FROM counters WHERE id = ?",
    "user-123"
    );
    expect(rows).toEqual([{ value: 1 }]);

  • #14562 9f04a7e Thanks @​martijnwalraven! - Emit a typed runtimeError event on the unstable_startWorker DevEnv for uncaught Worker exceptions

    Uncaught Worker exceptions were only source-mapped and printed, so programmatic consumers had to scrape terminal output to observe them. The DevEnv now re-emits a RuntimeErrorEvent (like reloadComplete) carrying the exception text and source-mapped stack — fed from Miniflare's pretty-error seam via the new handleUncaughtError option for exceptions the runtime catches, and from the inspector for those it does not.

Patch Changes

  • #14682 d39ae01 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

    The following dependency versions have been updated:

... (truncated)

Commits
  • 82918ad Version Packages (#14699)
  • 24731b5 [wrangler] Wait for workerd cleanup in port conflict E2E (#14730)
  • 028ce1f [wrangler] Wait for workers.dev propagation in E2Es (#14728)
  • c79504f fix(wrangler): support containers in test harness (#14725)
  • 4c1309e [wrangler] Use default readiness timeout in local dev E2Es (#14729)
  • b38f494 chore: consolidate most packages on zod 4.4.3 in pnpm catalog (#14707)
  • cb6c3f9 feat(wrangler): access do storage with test harness (#14706)
  • c7dbe1a fix(wrangler): type the public startWorker input as WranglerStartDevWorkerInp...
  • 9f04a7e feat: surface uncaught Worker exceptions as a typed runtimeError event in loc...
  • 3de70df [wrangler] Add top-level addresses config field for Email Routing (#14470)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the actions-deps group with 3 updates: [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte), [postcss](https://github.com/postcss/postcss) and [wrangler](https://github.com/cloudflare/workers-sdk/tree/HEAD/packages/wrangler).


Updates `svelte` from 5.56.5 to 5.56.6
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.56.6/packages/svelte)

Updates `postcss` from 8.5.19 to 8.5.14
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.19...8.5.14)

Updates `wrangler` from 4.111.0 to 4.112.0
- [Release notes](https://github.com/cloudflare/workers-sdk/releases)
- [Commits](https://github.com/cloudflare/workers-sdk/commits/wrangler@4.112.0/packages/wrangler)

---
updated-dependencies:
- dependency-name: svelte
  dependency-version: 5.56.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: postcss
  dependency-version: 8.5.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: actions-deps
- dependency-name: wrangler
  dependency-version: 4.112.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 17, 2026
@changeset-bot

changeset-bot Bot commented Jul 17, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: cbffb57

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions

Copy link
Copy Markdown
Contributor

🚀 Snapshot Release (alpha)

The latest changes of this PR are available as alpha on npm (based on the declared changesets):

Package Version Info
@graphql-tools/executor 1.5.7-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/executor-apollo-link 2.0.12-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/executor-envelop 4.0.12-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/executor-legacy-ws 1.1.32-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/executor-urql-exchange 1.0.34-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/executor-yoga 3.0.42-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/graphql-tag-pluck 8.3.35-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
graphql-tools 9.0.33-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/import 7.1.18-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/links 10.0.12-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/load 8.1.15-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/apollo-engine-loader 8.0.34-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/code-file-loader 8.1.36-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/git-loader 8.0.40-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/github-loader 9.1.6-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/graphql-file-loader 8.1.18-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/json-file-loader 8.0.32-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/module-loader 8.0.32-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/url-loader 9.1.6-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/merge 9.2.2-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/mock 9.1.12-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/node-require 7.0.44-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/relay-operation-optimizer 7.1.8-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/resolvers-composition 7.0.35-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/schema 10.0.38-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎
@graphql-tools/utils 11.2.2-alpha-20260717213109-cbffb5737225a0d98e718d4baf475d9a494e96ac npm ↗︎ unpkg ↗︎

@github-actions

Copy link
Copy Markdown
Contributor

💻 Website Preview

The latest changes are available as preview in: https://pr-8304.graphql-tools-8ja.pages.dev

@ardatan
ardatan merged commit bff3572 into master Jul 17, 2026
38 of 39 checks passed
@ardatan
ardatan deleted the dependabot/npm_and_yarn/actions-deps-69711b0779 branch July 17, 2026 22:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant