fix(deps): update all non-major dependencies (minor)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@fortawesome/fontawesome-free (source)	6.6.0 -> 6.7.2
@sveltejs/kit (source)	2.8.5 -> 2.17.1
@​types/dompurify	3.0.5 -> 3.2.0
dompurify	3.1.7 -> 3.2.4
eslint-plugin-tailwindcss	3.17.5 -> 3.18.0
postcss (source)	8.4.49 -> 8.5.1
prettier (source)	3.3.3 -> 3.4.2
prettier-plugin-svelte	3.2.8 -> 3.3.3
typescript (source)	5.6.3 -> 5.7.3

---

Release Notes

FortAwesome/Font-Awesome (@​fortawesome/fontawesome-free)

v6.7.2

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.1

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

v6.7.0

Compare Source

Change log available at https://fontawesome.com/docs/changelog/

sveltejs/kit (@​sveltejs/kit)

v2.17.1

Compare Source

Patch Changes

• fix: make route resolution imports root-relative if paths.relative option is false (#​13412)

v2.17.0

Compare Source

Minor Changes

• feat: validate values for cache-control and content-type headers in dev mode (#​13114)

• feat: support server-side route resolution (#​13379)

Patch Changes

• chore: don't error during development when using use:enhance with +server as some third party libraries make it possible to POST forms to it (#​13397)

• fix: skip hooks for server fetch to prerendered routes (#​13377)

• fix: ignore non-entry-point CSS files during inlining (#​13395)

• fix: default server fetch to use prerendered paths (#​13377)

v2.16.1

Compare Source

Patch Changes

• fix: avoid overwriting headers for sub-requests made while loading the error page (#​13341)

• fix: correctly resolve index file entrypoints such as src/service-worker/index.js (#​13354)

• fix: correctly handle relative anchors when using the hash router (#​13356)

v2.16.0

Compare Source

Minor Changes

• feat: add ability to invalidate a custom identifier on goto() (#​13256)

• feat: remove the postinstall script to support pnpm 10 (#​13304)

  NOTE: users should add "prepare": "svelte-kit sync" to their package.json in order to avoid the following warning upon first running Vite:

  ▲ [WARNING] Cannot find base config file "./.svelte-kit/tsconfig.json" [tsconfig.json]
  
      tsconfig.json:2:12:
        2 │   "extends": "./.svelte-kit/tsconfig.json",
          ╵              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

• feat: provide PageProps and LayoutProps types (#​13308)

Patch Changes

• perf: shorten chunk file names (#​13003)

• fix: strip internal data before passing URL to reroute (#​13092)

• fix: support absolute URLs and reroutes with data-sveltekit-preload-code="viewport" (#​12217)

• fix: use current window.fetch for server load fetch requests (#​13315)

• fix: resolve symlinks when handling routes (#​12740)

• fix: prevent infinite reload when using the hash router and previewing /index.html (#​13296)

• fix: service worker base path in dev mode (#​12577)

• chore: error during development when using use:enhance with +server (#​13197)

• chore: add most common status codes to redirect() JS documentation (#​13301)

• fix: correctly link to assets inlined by the inlineStyleThreshold option (#​13068)

• fix: fall back to importing dynamic dependencies relative to SvelteKit package (#​12532)

• fix: use arrow function types over bound funcs (#​12955)

• fix: correctly navigate when hash router is enabled and the browser encodes extra hashes (#​13321)

v2.15.3

Compare Source

Patch Changes

• fix: fix race-condition when not using SSR when pressing back before initial load (#​12925)

• fix: remove ":$" from virtual module ids to allow dev server to work with proxies (#​12157)

• fix: upgrade esm-env to remove warning when NODE_ENV is not set (#​13291)

• fix: handle Redirect thrown from root layout load function when client-side navigating to a non-existent page (#​12005)

• fix: make param matchers generated type import end with .js (#​13286)

v2.15.2

Compare Source

Patch Changes

• fix: correctly notify page store subscribers (#​13205)

• fix: prerender data when there is no server load but the trailingSlash option is set from the server (#​13262)

• fix: correctly remove navigation callbacks when returning function in onNavigate (#​13241)

v2.15.1

Compare Source

Patch Changes

• fix: add CSP hashes/nonces to inline styles when using bundleStrategy: 'inline' (#​13232)

• fix: silence dev/prod warning during sync (#​13244)

v2.15.0

Compare Source

Minor Changes

• feat: add bundleStrategy: 'inline' option (#​13193)

v2.14.1

Compare Source

Patch Changes

• fix: do not mutate URL during reroute logic (#​13222)

v2.14.0

Compare Source

Minor Changes

• feat: add hash-based routing option (#​13191)

Patch Changes

• fix: create new URL when calling goto(...), to handle case where URL is mutated (#​13196)

v2.13.0

Compare Source

Minor Changes

• feat: add bundleStrategy: 'split' | 'single' option (#​13173)

v2.12.2

Compare Source

Patch Changes

• fix: correctly resolve no hooks file when a similarly named directory exists (#​13188)

• fix: correctly resolve $app/state on the server with Vite 5 (#​13192)

v2.12.1

Compare Source

Patch Changes

• fix: replace navigating.current.<x> with navigating.<x> (#​13174)

v2.12.0

Compare Source

Minor Changes

• feat: add $app/state module (#​13140)

Patch Changes

• chore: specify the route ID in the error message during development when making a form action request to a route without form actions (#​13167)

v2.11.1

Compare Source

Patch Changes

• fix: adhere to Vite build.minify setting when building the service worker (#​13143)

v2.11.0

Compare Source

Minor Changes

• feat: transport custom types across the server/client boundary (#​13149)

Patch Changes

• fix: correctly resolve hooks file when a similarly named directory exists (#​13144)

v2.10.1

Compare Source

Patch Changes

• fix: export init hook from get_hooks (#​13136)

v2.10.0

Compare Source

Minor Changes

• feat: server and client init hook (#​13103)

Patch Changes

• fix: prevent hooks exported from hooks.js from overwriting hooks from hooks.server.js (#​13104)

v2.9.1

Compare Source

Patch Changes

• fix: correctly match route groups preceding optional parameters (#​13099)

v2.9.0

Compare Source

Minor Changes

• feat: Vite 6 support (#​12270)

Patch Changes

• fix: transform link[rel='shortcut icon'] and link[rel='apple-touch-icon'] to be absolute to avoid console error when navigating (#​13077)

cure53/DOMPurify (dompurify)

v3.2.4: DOMPurify 3.2.4

Compare Source

• Fixed a conditional and config dependent mXSS-style bypass reported by @​nsysean
• Added a new feature to allow specific hook removal, thanks @​davecardwell
• Added purify.js and purify.min.js to exports, thanks @​Aetherinox
• Added better logic in case no window object is president, thanks @​yehuya
• Updated some dependencies called out by dependabot
• Updated license files etc to show the correct year

v3.2.3: DOMPurify 3.2.3

Compare Source

• Fixed two conditional sanitizer bypasses discovered by @​parrot409 and @​Slonser
• Updated the attribute clobbering checks to prevent future bypasses, thanks @​parrot409

v3.2.2: DOMPurify 3.2.2

Compare Source

• Fixed a possible bypass in case a rather specific config for custom elements is set, thanks @​yaniv-git
• Fixed several minor issues with the type definitions, thanks again @​reduckted
• Fixed a minor issue with the types reference for trusted types, thanks @​reduckted
• Fixed a minor problem with the template detection regex on some systems, thanks @​svdb99

v3.2.1

Compare Source

v3.2.0: DOMPurify 3.2.0

Compare Source

• Added type declarations, thanks @​reduckted , @​philmayfield, @​aloisklink, @​ssi02014 and others
• Fixed a minor issue with the handling of hooks, thanks @​kevin-mizu

francoismassart/eslint-plugin-tailwindcss (eslint-plugin-tailwindcss)

v3.18.0

Compare Source

• feat: enforces-shorthand rule now support place-content-*/place-items-*/place-self-*
• fix: enforces-shorthand does not work for h- & w- when prefixed (by Kamahl19 🙏)
• docs: so long X 🚀

postcss/postcss (postcss)

v8.5.1

Compare Source

• Fixed backwards compatibility for complex cases (by @​romainmenke).

v8.5.0: 8.5 “Duke Alloces”

Compare Source

PostCSS 8.5 brought API to work better with non-CSS sources like HTML, Vue.js/Svelte sources or CSS-in-JS.

@​romainmenke during his work on Stylelint added Input#document in additional to Input#css.

root.source.input.document //=> "<p>Hello</p>
                           //    <style>
                           //    p {
                           //      color: green;
                           //    }
                           //    </style>"
root.source.input.css      //=> "p {
                           //      color: green;
                           //    }"

Thanks to Sponsors

This release was possible thanks to our community.

If your company wants to support the sustainability of front-end infrastructure or wants to give some love to PostCSS, you can join our supporters by:

• Tidelift with a Spotify-like subscription model supporting all projects from your lock file.
• Direct donations at GitHub Sponsors or Open Collective.

prettier/prettier (prettier)

v3.4.2

Compare Source

diff

Treat U+30A0 & U+30FB in Katakana Block as CJK (#​16796 by @​tats-u)

Prettier doesn't treat U+30A0 & U+30FB as Japanese. U+30FB is commonly used in Japanese to represent the delimitation of first and last names of non-Japanese people or “and”. The following “C言語・C++・Go・Rust” means “C language & C++ & Go & Rust” in Japanese.

<!-- Input (--prose-wrap=never) -->

C言
語
・
C++
・
Go
・
Rust

<!-- Prettier 3.4.1 -->
C言語・ C++ ・ Go ・ Rust

<!-- Prettier 3.4.2 -->
C言語・C++・Go・Rust

U+30A0 can be used as the replacement of the - in non-Japanese names (e.g. “Saint-Saëns” (Charles Camille Saint-Saëns) can be represented as “サン゠サーンス” in Japanese), but substituted by ASCII hyphen (U+002D) or U+FF1D (full width hyphen) in many cases (e.g. “サン=サーンス” or “サン＝サーンス”).

Fix comments print on class methods with decorators (#​16891 by @​fisker)

// Input
class A {
  @​decorator
  /** 
   * The method description
   *
  */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.1
class A {
  @​decorator
  async /**
   * The method description
   *
   */
  method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

// Prettier 3.4.2
class A {
  @​decorator
  /**
   * The method description
   *
   */
  async method(foo: Foo, bar: Bar) {
    console.log(foo);
  }
}

Fix non-idempotent formatting (#​16899 by @​seiyab)

This bug fix is not language-specific. You may see similar change in any languages. This fixes regression in 3.4.0 so change caused by it should yield same formatting as 3.3.3.

// Input
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.1 (first)
<div>
  foo
  <span>
    longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo
  </span>, abc
</div>;

// Prettier 3.4.1 (second)
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

// Prettier 3.4.2
<div>
  foo
  <span>longlonglonglonglonglonglonglonglonglonglonglonglonglonglongl foo</span>
  , abc
</div>;

v3.4.1

Compare Source

diff

Remove unnecessary parentheses around assignment in v-on (#​16887 by @​fisker)

<!-- Input -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

<!-- Prettier 3.4.0 -->
<template>
  <button @&#8203;click="(foo += 2)">Click</button>
</template>

<!-- Prettier 3.4.1 -->
<template>
  <button @&#8203;click="foo += 2">Click</button>
</template>

v3.4.0

Compare Source

diff

🔗 Release Notes

sveltejs/prettier-plugin-svelte (prettier-plugin-svelte)

v3.3.3

Compare Source

v3.3.2

Compare Source

v3.3.1

Compare Source

v3.3.0

Compare Source

microsoft/TypeScript (typescript)

v5.7.3

Compare Source

v5.7.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[netlify]

✅ Deploy Preview for mermaidjs ready!

Name	Link
🔨 Latest commit	4cead18
🔍 Latest deploy log	https://app.netlify.com/sites/mermaidjs/deploys/67a2321bbfa8eb0008a76884
😎 Deploy Preview	https://deploy-preview-1579--mermaidjs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[cypress]

Mermaid Live Editor    Run #1810

Run Properties:   Passed #1810  •  cec77130a5 ℹ️: Merge 4cead1811fa2781d97bbc1481db818bd5e95d7e9 into 1b7065609b72801ca63d1e8906db...

Project	Mermaid Live Editor
Branch Review	renovate/all-minor-patch
Run status	Passed #1810
Run duration	02m 09s
Commit	cec77130a5 ℹ️: Merge 4cead1811fa2781d97bbc1481db818bd5e95d7e9 into 1b7065609b72801ca63d1e8906db...
Committer	renovate[bot]
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	6
Skipped	0
Passing	29
View all changes introduced in this branch ↗︎