chore(deps-dev): Bump the development-deps group with 5 updates

[dependabot]

Bumps the development-deps group with 5 updates:

Package	From	To
@types/node	26.4.0	26.4.1
globals	17.11.0	17.12.0
svelte	5.56.10	5.57.0
typescript-eslint	8.68.0	8.69.0
wrangler	4.127.0	4.129.0

Updates @types/node from 26.4.0 to 26.4.1

Commits

• See full diff in compare view

Updates globals from 17.11.0 to 17.12.0

Release notes

Sourced from globals's releases.

v17.12.0

• Update globals (2026-09-01) (#353) 50a2119
• Add __webpack_layer__ global (#351) 779a11a

---

sindresorhus/globals@v17.11.0...v17.12.0

Commits

• 98008c3 17.12.0
• 50a2119 Update globals (2026-09-01) (#353)
• 779a11a Add __webpack_layer__ global (#351)
• See full diff in compare view

Updates svelte from 5.56.10 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

• fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits

• 7bc0a70 Version Packages (#18682)
• 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
• 4ae5eb3 feat: add has function to createContext (#18472)
• 5034b59 chore: bump playwright (#18729)
• 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
• edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
• 05b6916 fix: omit bind:focused from SSR output (#18724)
• 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
• 2e8b57b fix: render selected options for \<select multiple> with an array value ...
• 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
• Additional commits viewable in compare view

Updates typescript-eslint from 8.68.0 to 8.69.0

Release notes

Sourced from typescript-eslint's releases.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• website: respect allowJs playground config (#12744)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• wonbeanie @​wonbeanie
• Younsang Na @​nayounsang

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.69.0 (2026-08-31)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 9a6e546 chore(release): publish 8.69.0
• See full diff in compare view

Updates wrangler from 4.127.0 to 4.129.0

Release notes

Sourced from wrangler's releases.

wrangler@4.129.0

Minor Changes

• #15460 93d72a5 Thanks @​QnJ1c2kNCg! - Support gzip compression for JSON Pipelines sinks

  Pipelines is in open beta. wrangler pipelines sinks create and the interactive setup flow now pass the selected JSON compression to the Pipelines API. JSON sinks accept uncompressed or gzip, while Parquet retains its existing compression options and zstd default.

• #15358 d2d8eea Thanks @​pombosilva! - Add a --json flag to the wrangler workflows commands

  Every wrangler workflows command now accepts --json, which emits the raw API payload instead of the human-readable rendering. The formatted output remains the default, so existing usage is unaffected:

  wrangler workflows instances list my-workflow --json

  The JSON output carries raw values rather than a serialisation of the formatted view: ISO timestamps instead of locale-formatted dates, plain status strings instead of emojified labels, and no presentation-only derived fields.

Patch Changes

• #15469 d40a634 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260831.1	^5.20260902.1
  workerd	1.20260831.1	1.20260902.1

• #15481 7c1b2a6 Thanks @​dependabot! - Update dependencies of "miniflare", "wrangler"

  The following dependency versions have been updated:

  Dependency	From	To
  @​cloudflare/workers-types	^5.20260902.1	^5.20260903.1
  workerd	1.20260902.1	1.20260903.1

• #15472 f6fb347 Thanks @​emily-shen! - Tolerate missing permissions during wrangler delete cleanup checks

  wrangler delete now warns and continues when it cannot inspect Worker dependencies or clean up legacy Workers Sites KV namespaces because of missing permissions. The Worker delete request itself still fails normally if the token cannot delete the Worker.

• #15472 f6fb347 Thanks @​emily-shen! - Tolerate missing resource permissions during resource provisioning

  When Wrangler cannot check whether a bound resource exists because the API returns a 403, it now skips automatic provisioning for that resource type and continues the deploy. The deploy may still fail later if the resource is missing.

• #15476 dc24057 Thanks @​christhorwarth! - Fix remote development with static assets for API tokens using granular Worker permissions

  Wrangler now creates Workers.dev preview sessions through the Worker-scoped endpoint and derives the preview hostname from the session response. This avoids requiring account-level Workers subdomain access.

• Updated dependencies [00a9f2f, 1dba24a, d40a634, 7c1b2a6]:

  • miniflare@5.20260903.0-alpha

... (truncated)

Commits

• be87ff0 Version Packages (#15461)
• f6fb347 tolerate missing permissions for pre-flight checks (#15472)
• dc24057 [wrangler] Use worker-scoped preview sessions (#15476)
• d2d8eea [wrangler] Add --json output to Workflows commands (#15358)
• 93d72a5 PIPE-635: Support gzip compression for JSON sinks (#15460)
• b7b4ff8 Version Packages (#15450)
• ea28cc3 [wrangler] Add observability query string redaction (#15379)
• 1809c5e [wrangler] Stop publishing build metafile (#15398)
• 10d6bfb Support partial manifests in build output (#15388)
• dbbb795 Move binding utilities into workers-utils (#15454)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

🚀 Auto-approved by GitHub Actions based on SemVer policy.