chore(deps-dev): bump svelte from 3.59.2 to 5.51.5 in /packages/svelte by dependabot[bot] · Pull Request #19482 · getsentry/sentry-javascript

dependabot · 2026-02-24T10:05:38Z

Bumps svelte from 3.59.2 to 5.51.5.

Release notes

svelte@5.51.5

Patch Changes

fix: check to make sure svelte:element tags are valid during SSR (73098bb26c6f06e7fd1b0746d817d2c5ee90755f)

fix: misc option escaping and backwards compatibility (#17741)

fix: strip event handlers during SSR (a0c7f289156e9fafaeaf5ca14af6c06fe9b9eae5)

fix: replace usage of for in with for of Object.keys (f89c7ddd7eebaa1ef3cc540400bec2c9140b330c)

fix: always escape option body in SSR (f7c80da18c215e3727c2a611b0b8744cc6e504c5)

chore: upgrade devalue (#17739)

svelte@5.51.4

Patch Changes

chore: proactively defer effects in pending boundary (#17734)

fix: detect and error on non-idempotent each block keys in dev mode (#17732)

svelte@5.51.3

Patch Changes

fix: prevent event delegation logic conflicting between svelte instances (#17728)

fix: treat CSS attribute selectors as case-insensitive for HTML enumerated attributes (#17712)

fix: locate Rollup annontaion friendly to JS downgraders (#17724)

fix: run effects in pending snippets (#17719)

svelte@5.51.2

Patch Changes

fix: take async into consideration for dev delegated handlers (#17710)

fix: emit state_referenced_locally warning for non-destructured props (#17708)

svelte@5.51.1

Patch Changes

fix: don't crash on undefined document.contentType (#17707)

fix: use symbols for encapsulated event delegation (#17703)

svelte@5.51.0

Minor Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

svelte

4.2.3

Patch Changes

fix: improve a11y-click-events-have-key-events message (#9358)

fix: more robust hydration of html tag (#9184)

4.2.2

Patch Changes

fix: support camelCase properties on custom elements (#9328)

fix: add missing plaintext-only value to contenteditable type (#9242)

chore: upgrade magic-string to 0.30.4 (#9292)

fix: ignore trailing comments when comparing nodes (#9197)

4.2.1

Patch Changes

fix: update style directive when style attribute is present and is updated via an object prop (#9187)

fix: css sourcemap generation with unicode filenames (#9120)

fix: do not add module declared variables as dependencies (#9122)

fix: handle svelte:element with dynamic this and spread attributes (#9112)

fix: silence false positive reactive component warning (#9094)

fix: head duplication when binding is present (#9124)

fix: take custom attribute name into account when reflecting property (#9140)

fix: add indeterminate to the list of HTMLAttributes (#9180)

fix: recognize option value on spread attribute (#9125)

4.2.0

Minor Changes

feat: move svelteHTML from language-tools into core to load the correct svelte/element types (#9070)

... (truncated)

Commits

8ea33bf Version Packages (#17740)
f855a0b fix: misc option escaping and backwards compatibility (#17741)
781052e chore: upgrade devalue (#17739)
f7c80da Merge commit from fork
a0c7f28 Merge commit from fork
73098bb Merge commit from fork
f89c7dd Merge commit from fork
b8f2b86 Version Packages (#17733)
c83aa06 chore: proactively defer effects in pending boundary (#17734)
2287ad0 fix: detect and error on non-idempotent each block keys in dev mode (#17732)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 3.59.2 to 5.51.5. - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG-pre-5.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.51.5/packages/svelte) --- updated-dependencies: - dependency-name: svelte dependency-version: 5.51.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

cursor · 2026-02-24T10:09:17Z

packages/svelte/package.json

    "@sveltejs/vite-plugin-svelte": "1.4.0",
    "@testing-library/svelte": "^3.2.1",
-    "svelte": "3.59.2",
+    "svelte": "5.51.5",


Major svelte bump without updating companion devDependencies

High Severity

Bumping svelte from 3.x to 5.x without updating @sveltejs/vite-plugin-svelte (pinned at 1.4.0, which only supports Svelte 3) and @testing-library/svelte (at ^3.2.1, which doesn't support Svelte 5) will break the build and test pipeline. Svelte 5 requires @sveltejs/vite-plugin-svelte v4+ and @testing-library/svelte v5+. Additionally, the svelte/internal alias in vite.config.ts no longer exists in Svelte 5 (replaced by svelte/internal/client), and the type imports from svelte/types/compiler/preprocess (used in config.ts, types.ts, preprocessors.ts) were removed in Svelte 5 in favor of svelte/compiler.

Additional Locations (1)

packages/svelte/package.json#L49-L51

chargome · 2026-02-24T14:33:08Z

I think we can close this one @Lms24 ?

dependabot · 2026-02-24T15:20:50Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 24, 2026

cursor bot reviewed Feb 24, 2026

View reviewed changes

Lms24 closed this Feb 24, 2026

dependabot bot deleted the dependabot/npm_and_yarn/packages/svelte/svelte-5.51.5 branch February 24, 2026 15:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Comments

chore(deps-dev): bump svelte from 3.59.2 to 5.51.5 in /packages/svelte#19482

chore(deps-dev): bump svelte from 3.59.2 to 5.51.5 in /packages/svelte#19482
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/packages/svelte/svelte-5.51.5

dependabot bot commented on behalf of github Feb 24, 2026

Uh oh!

cursor bot left a comment

Uh oh!

cursor bot Feb 24, 2026

Uh oh!

chargome commented Feb 24, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Comments

Conversation

dependabot bot commented on behalf of github Feb 24, 2026

svelte@5.51.5

Patch Changes

svelte@5.51.4

Patch Changes

svelte@5.51.3

Patch Changes

svelte@5.51.2

Patch Changes

svelte@5.51.1

Patch Changes

svelte@5.51.0

Minor Changes

svelte

4.2.3

Patch Changes

4.2.2

Patch Changes

4.2.1

Patch Changes

4.2.0

Minor Changes

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Feb 24, 2026

Choose a reason for hiding this comment

Major svelte bump without updating companion devDependencies

Uh oh!

chargome commented Feb 24, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants