chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/react (source)	19.2.5 -> 19.2.6
svelte (source)	5.43.8 -> 5.43.12
webpack	5.102.1 -> 5.103.0
wrangler (source)	4.48.0 -> 4.49.0

---

Release Notes

sveltejs/svelte (svelte)

v5.43.12

Compare Source

Patch Changes

• fix: maintain correct linked list of effects when updating each blocks (#​17191)

v5.43.11

Compare Source

Patch Changes

• perf: don't use tracing overeager during dev (#​17183)

• fix: don't cancel transition of already outroing elements (#​17186)

v5.43.10

Compare Source

Patch Changes

• fix: avoid other batches running with queued root effects of main batch (#​17145)

v5.43.9

Compare Source

Patch Changes

• fix: correctly handle functions when determining async blockers (#​17137)

• fix: keep deriveds reactive after their original parent effect was destroyed (#​17171)

• fix: ensure eager effects don't break reactions chain (#​17138)

• fix: ensure async @const in boundary hydrates correctly (#​17165)

• fix: take blockers into account when creating #await blocks (#​17137)

• fix: parallelize async @consts in the template (#​17165)

webpack/webpack (webpack)

v5.103.0

Compare Source

Features

• Added DotenvPlugin and top level dotenv option to enable this plugin
• Added WebpackManifestPlugin
• Added support the ignoreList option in devtool plugins
• Allow to use custom javascript parse function
• Added import.meta.env support for environment variables
• Added support for import.meta.dirname and import.meta.filename
• Added support import.defer() for statistical path
• Handle import.meta.main
• Added suport to setup named exports for JSON modules and disable usage named export for import file from "./file.json" with { type: "json" }
• Added support __dirname/__filename/import.meta.dirname/import.meta.filename for universal target
• [CSS] Added the exportType option with link (by default), "text" and css-style-sheet values
• [CSS] Added support for composes properties

Fixes

• The dependOn chunk must be loaded before the common chunk
• Return to namespace import when the external request includes a specific export
• No runtime extra runtime code for module libraries
• Delay HMR accept dependencies to preserve import attributes
• Properly handle external presets for universal target
• Fixed incorrect identifier of import binding for module externals
• Fixed when defer import and dynamic default export mixed
• Reduce generated output when globalThis supported
• Fixed loading async modules in defer import
• Reexport module for default import when no used exports for systemjs library
• Rename HarmonyExportDependencyParserPlugin exported id to CompatibilityPlugin tagged id
• Handle __dirname and __filename for ES modules
• Rename single nested __webpack_export__ and __webpack_require__ in already bundled code
• [Types] webpack function type
• [Types] NormalModule type
• [Types] Multi compiler configuration type
• [Types] Fixed regression in custom hashDigest type
• [CSS] No extra runtime for initial chunk
• [CSS] Fixed a lot of CSS modules bugs

cloudflare/workers-sdk (wrangler)

v4.49.0

Compare Source

Minor Changes

• #​10703 c5c4ee5 Thanks @​danlapid! - Add support for streaming tail consumers in local dev. This is an experimental new feature that allows you to register a tailStream() handler (compared to the existing tail() handler), which will receive streamed tail events from your Worker (compared to the tail() handler, which only receives batched events after your Worker has finished processing).

• #​11251 7035804 Thanks @​penalosa! - When the WRANGLER_HIDE_BANNER environment variable is provided, Wrangler will no longer display a version banner. This applies to all commands.

  For instance, previously running wrangler docs would give the following output:

  > wrangler docs
   ⛅️ wrangler 4.47.0
  ───────────────────
  Opening a link in your default browser: https://developers.cloudflare.com/workers/wrangler/commands/
  

  With WRANGLER_HIDE_BANNER, this is now:

  > WRANGLER_HIDE_BANNER=true wrangler docs
  Opening a link in your default browser: https://developers.cloudflare.com/workers/wrangler/commands/
  

• #​11285 d014fa7 Thanks @​vicb! - Implement the wrangler r2 bulk put bucket-name --filename list.json command.

  The command uploads multiple objects to an R2 bucket.

  The list of object is provided as a JSON encoded file via --filename. It is a list of key and file (respectively the name and the content for the object).

  [
    { "key": "/path/to/obj", "file": "/path/to/file_1"},
    { "key": "/path/to/other/obj", "file": "/path/to/file_2"},
    // ...
  ]
  

  Uploads are executed concurrently and the level of concurrency can be set via --concurrency.

  The command supports the same options as wrangler r2 object put, minus --file, and --pipe and plus --concurrency

• #​11268 15b8460 Thanks @​penalosa! - Support SvelteKit projects in autoconfig

• #​11258 2011b6a Thanks @​dario-piotrowicz! - Add --dry-run flag to wrangler setup and also a dryRun option to runAutoConfig

Patch Changes

• #​11261 a352c7f Thanks @​petebacondarwin! - Avoid using object lookup for OAuth Error classes

• #​11286 8e99766 Thanks @​dario-piotrowicz! - fix: make sure that experimental_patchConfig doesn't throw if it encounters a null value

• #​11279 d0d3fe6 Thanks @​vicb! - bump p-queue to ^9.0.0

• #​11278 92afbba Thanks @​ascorbic! - Fixes a bug that caused .dev.vars to be ignored in OpenNext

• #​11244 65b4afe Thanks @​petebacondarwin! - Internal refactoring to improve error traceability in wrangler dev

• #​11238 da8442f Thanks @​jamesopstad! - Add unstable_getDurableObjectClassNameToUseSQLiteMap export. This is an internal function for use in the Vite plugin.

• #​11266 09cb720 Thanks @​penalosa! - Use the smol-toml library for parsing TOML instead of @​iarna/toml

• #​11236 793e2b4 Thanks @​ascorbic! - Refresh expired preview tokens when running in remote dev mode

• #​11286 8e99766 Thanks @​dario-piotrowicz! - fix: wrangler deploy failing to patch local wrangler.jsonc files if the remote tail_consumers value is null

• #​11275 9cbf126 Thanks @​dario-piotrowicz! - Ensure that wrangler deploy run with a positional argument or with --assets does not trigger the autoconfig process (even with --experimental-autoconfig)

• #​11242 dd1e560 Thanks @​dario-piotrowicz! - Fix: make sure that remote proxy sessions's debug logs are enabled when the wrangler log level is set to "debug"

• Updated dependencies [c5c4ee5, d0041e2, 827d017]:

  • miniflare@​4.20251113.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: abbc228

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

💻 Website Preview

The latest changes are available as preview in: https://pr-7707.graphql-tools.pages.dev