Bump esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite #10

dependabot · 2025-12-29T08:15:34Z

Bumps esbuild to 0.27.2 and updates ancestor dependencies esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite. These dependencies need to be updated together.

Updates esbuild from 0.17.19 to 0.27.2

Release notes

Sourced from esbuild's releases.

v0.27.2
Allow import path specifiers starting with #/ (#4361)

Previously the specification for package.json disallowed import path specifiers starting with #/, but this restriction has recently been relaxed and support for it is being added across the JavaScript ecosystem. One use case is using it for a wildcard pattern such as mapping #/* to ./src/* (previously you had to use another character such as #_* instead, which was more confusing). There is some more context in nodejs/node#49182.

This change was contributed by @hybrist.
Automatically add the -webkit-mask prefix (#4357, #4358)

This release automatically adds the -webkit- vendor prefix for the mask CSS shorthand property:
/* Original code */
main {
  mask: url(x.png) center/5rem no-repeat
}
/* Old output (with --target=chrome110) */
main {
mask: url(x.png) center/5rem no-repeat;
}
/* New output (with --target=chrome110) */
main {
-webkit-mask: url(x.png) center/5rem no-repeat;
mask: url(x.png) center/5rem no-repeat;
}
This change was contributed by @BPJEnnova.
Additional minification of switch statements (#4176, #4359)

This release contains additional minification patterns for reducing switch statements. Here is an example:
// Original code
switch (x) {
  case 0:
    foo()
    break
  case 1:
  default:
    bar()
}
// Old output (with --minify)
switch(x){case 0:foo();break;case 1:default:bar()}
// New output (with --minify)

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11
Fix TypeScript-specific class transform edge case (#3559)

The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:
// Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}
Minifier: allow reording a primitive past a side-effect (#3568)

The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

cd83297 publish 0.27.2 to npm
2759721 additional tests for switch with break
fd2b4b3 update release notes
c8d93a7 fix #4357: -webkit- prefix for mask shorthand (#4358)
92ff12c compat table: update @types/node
a35eceb compat table: fix a type error with the new types
f598984 fix make compat-table to install dependencies
f7f6df0 release notes for #4361
6f8ec15 fix: allow subpath imports that start with #/ (#4361)
f7ae61f minify some switch statements to if-else statement
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for esbuild since your current version.

Updates @sveltejs/adapter-auto from 2.1.0 to 7.0.0

Release notes

Sourced from @sveltejs/adapter-auto's releases.

@sveltejs/adapter-auto@7.0.0

Major Changes

feat: update adapter-vercel to version 6 (#14737)

@sveltejs/adapter-auto@6.1.1

Patch Changes

chore: update "homepage" field in package.json (#14579)

Changelog

Sourced from @sveltejs/adapter-auto's changelog.

7.0.0

Major Changes

feat: update adapter-vercel to version 6 (#14737)

6.1.1

Patch Changes

chore: update "homepage" field in package.json (#14579)

6.1.0

Minor Changes

feat: add Deno as a supported package manager (#14163)

Patch Changes

Updated dependencies [ece3906, 5ac9d27, fed6331, 69f4e5f, 6b34122, 9493537, f67ba09]:

@sveltejs/kit@2.28.0

6.0.2

Patch Changes

chore: add .git to the end of package.json repository url (#14134)

Updated dependencies [c968aef]:

@sveltejs/kit@2.27.3

6.0.1

Patch Changes

chore: remove import-meta-resolve dependency (#13629)

Updated dependencies [bd1c04662332cbafa843c35a2e783486116af3d5, 09f61ec2a14573e27769edb403c58aea5433a39f, 09f61ec2a14573e27769edb403c58aea5433a39f]:

@sveltejs/kit@2.21.0

6.0.0

Major Changes

feat: upgrade @sveltejs/adapter-cloudflare to version 7 (#13661)

5.0.0

Major Changes

... (truncated)

Commits

6f13d2b Version Packages (#14738)
c710a39 breaking: update to adapter-vercel to version 6 (#14737)
9fbd0d1 Version Packages (#14580)
193d37c chore: fix "homepage" field in package.json (#14579)
758ec17 fix: conditionally access builder properties that only exist on the latest Sv...
d4f00a1 chore: remove skipLibCheck (#14227)
f635678 feat: OpenTelemetry Tracing (#13899)
7a3583b Version Packages (#14164)
8d2f608 feat: add Deno as a supported package manager (#14163)
0548b15 Version Packages (#14142)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @sveltejs/adapter-auto since your current version.

Updates @sveltejs/kit from 1.30.4 to 2.49.2

Release notes

Sourced from @sveltejs/kit's releases.

@sveltejs/kit@2.49.2

Patch Changes

fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

fix: posixify the instrumentation file import on Windows (#14993)

fix: Correctly handle shared memory when decoding binary form data (#15028)

@sveltejs/kit@2.49.1

Patch Changes

fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#15013)

fix: TypeError when doing response.clone() in page load (#15005)

@sveltejs/kit@2.49.0

Minor Changes

feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

@sveltejs/kit@2.48.8

Patch Changes

breaking: invalid now must be imported from @sveltejs/kit (#14768)

breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

@sveltejs/kit@2.48.7

Patch Changes

fix: allow multiple server-timing headers (#14700)

fix: allow access to root-level issues in schema-less forms (#14893)

fix: allow hosting hash-based apps from non-index.html files (#14825)

@sveltejs/kit@2.48.6

Patch Changes

fix: clear issues upon passing validation (#14683)

fix: don't use fork of unrelated route (#14947)

... (truncated)

Changelog

Sourced from @sveltejs/kit's changelog.

2.49.2

Patch Changes

fix: Stop re-loading already-loaded CSS during server-side route resolution (#15014)

fix: posixify the instrumentation file import on Windows (#14993)

fix: Correctly handle shared memory when decoding binary form data (#15028)

2.49.1

Patch Changes

fix: suppress state_referenced_locally warnings in .svelte-kit/generated/root.svelte (#15013)

fix: TypeError when doing response.clone() in page load (#15005)

2.49.0

Minor Changes

feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

2.48.8

Patch Changes

breaking: invalid now must be imported from @sveltejs/kit (#14768)

breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

2.48.7

Patch Changes

fix: allow multiple server-timing headers (#14700)

fix: allow access to root-level issues in schema-less forms (#14893)

fix: allow hosting hash-based apps from non-index.html files (#14825)

2.48.6

Patch Changes

... (truncated)

Commits

e9752a1 Version Packages (#15015)
37619d2 docs: update invalidateAll documentation to mention query functions (#15042)
1f2b4c3 fix: Correctly handle shared memory for DataView initialization in deserializ...
cd6837c test(kit): add regression test for the posixied instrumentation file (#15023)
08a153b fix(kit): ensure instrumentation file is posixified on Windows (#14993)
9d1c523 chore: More flaky test fixes (#15020)
ad71199 fix: Stop re-loading already-loaded CSS during server-side route resolution (...
f555ba6 Version Packages (#15007)
df05c8f fix: suppress state_referenced_locally warnings in `.svelte-kit/generated/r...
977b8bd Bugfix: Fix #15004 by applying MDN recommended fix when proxying Response in ...
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @sveltejs/kit since your current version.

Updates vite from 4.3.8 to 7.3.0

Release notes

Sourced from vite's releases.

v7.3.0

Please refer to CHANGELOG.md for details.

v7.2.7

Please refer to CHANGELOG.md for details.

v7.2.6

Please refer to CHANGELOG.md for details.

v7.2.5

Please refer to CHANGELOG.md for details.

Note: 7.2.5 failed to publish so it is skipped on npm

v7.2.4

Please refer to CHANGELOG.md for details.

v7.2.3

Please refer to CHANGELOG.md for details.

v7.2.2

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.1

Please refer to CHANGELOG.md for details.

[email protected]

Please refer to CHANGELOG.md for details.

v7.2.0

Please refer to CHANGELOG.md for details.

v7.2.0-beta.1

Please refer to CHANGELOG.md for details.

v7.2.0-beta.0

Please refer to CHANGELOG.md for details.

v7.1.12

Please refer to CHANGELOG.md for details.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vite's changelog.

7.3.0 (2025-12-15)

Features

deps: update esbuild from ^0.25.0 to ^0.27.0 (#21183) (cff26ec)

7.2.7 (2025-12-08)

Bug Fixes

plugin shortcut support (#21211) (721f163)

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

config: handle shebang properly (#21158) (df5a30d)

deps: update all non-major dependencies (#21146) (a3cd262)

deps: update all non-major dependencies (#21175) (72e398a)

fix external: true merging (#21164) (5ef557a)

shortcuts not rebound after server restart (#21166) (3765f7b)

Performance Improvements

deps: replace debug with obug (#21137) (203a551)

Documentation

clarify manifest.json imports field is JS chunks only (#21136) (46d3077)

Miscellaneous Chores

deps: update rolldown-related dependencies (#21174) (74559c9)

7.2.4 (2025-11-20)

Bug Fixes

revert "perf(deps): replace debug with obug (#21107)" (2d66b7b)

7.2.3 (2025-11-20)

Bug Fixes

allow multiple bindCLIShortcuts calls with shortcut merging (#21103) (5909efd)

deps: update all non-major dependencies (#21096) (6a34ac3)

deps: update all non-major dependencies (#21128) (4f8171e)

Performance Improvements

deps: replace debug with obug (#21107) (acfe939)

Miscellaneous Chores

... (truncated)

Commits

acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
5ef557a fix: fix external: true merging (#21164)
74559c9 chore(deps): update rolldown-related dependencies (#21174)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vite since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.27.2 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [@sveltejs/adapter-auto](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-auto), [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). These dependencies need to be updated together. Updates `esbuild` from 0.17.19 to 0.27.2 - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md) - [Commits](evanw/esbuild@v0.17.19...v0.27.2) Updates `@sveltejs/adapter-auto` from 2.1.0 to 7.0.0 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-auto/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/adapter-auto) Updates `@sveltejs/kit` from 1.30.4 to 2.49.2 - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit) Updates `vite` from 4.3.8 to 7.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v7.3.0/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v7.3.0/packages/vite) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.27.2 dependency-type: indirect - dependency-name: "@sveltejs/adapter-auto" dependency-version: 7.0.0 dependency-type: direct:development - dependency-name: "@sveltejs/kit" dependency-version: 2.49.2 dependency-type: direct:development - dependency-name: vite dependency-version: 7.3.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Dec 29, 2025

dependabot bot mentioned this pull request Dec 29, 2025

Bump vite, @sveltejs/adapter-auto and @sveltejs/kit #9

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite #10

Bump esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite #10

Uh oh!

dependabot bot commented on behalf of github Dec 29, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite #10

Are you sure you want to change the base?

Bump esbuild, @sveltejs/adapter-auto, @sveltejs/kit and vite #10

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 29, 2025

v0.27.2

Changelog: 2023

0.19.11

@​sveltejs/adapter-auto@​7.0.0

Major Changes

@​sveltejs/adapter-auto@​6.1.1

Patch Changes

7.0.0

Major Changes

6.1.1

Patch Changes

6.1.0

Minor Changes

Patch Changes

6.0.2

Patch Changes

6.0.1

Patch Changes

6.0.0

Major Changes

5.0.0

Major Changes

@​sveltejs/kit@​2.49.2

Patch Changes

@​sveltejs/kit@​2.49.1

Patch Changes

@​sveltejs/kit@​2.49.0

Minor Changes

@​sveltejs/kit@​2.48.8

Patch Changes

@​sveltejs/kit@​2.48.7

Patch Changes

@​sveltejs/kit@​2.48.6

Patch Changes

2.49.2

Patch Changes

2.49.1

Patch Changes

2.49.0

Minor Changes

2.48.8

Patch Changes

2.48.7

Patch Changes

2.48.6

Patch Changes

v7.3.0

v7.2.7

v7.2.6

v7.2.5

v7.2.4

v7.2.3

v7.2.2

[email protected]

v7.2.1

[email protected]

v7.2.0

v7.2.0-beta.1

v7.2.0-beta.0

v7.1.12

v7.1.11

v7.1.10

7.3.0 (2025-12-15)

Features

7.2.7 (2025-12-08)

Bug Fixes

7.2.6 (2025-12-01)

7.2.5 (2025-12-01)

Bug Fixes

Performance Improvements

Documentation

Miscellaneous Chores

7.2.4 (2025-11-20)

Bug Fixes

`@sveltejs/adapter-auto@7`.0.0

`@sveltejs/adapter-auto@6`.1.1

`@sveltejs/kit@2`.49.2

`@sveltejs/kit@2`.49.1

`@sveltejs/kit@2`.49.0

`@sveltejs/kit@2`.48.8

`@sveltejs/kit@2`.48.7

`@sveltejs/kit@2`.48.6