Skip to content

Update dependency svelte to v4.2.20 - abandoned#45

Open
anomiex wants to merge 5 commits into
trunkfrom
renovate/svelte-4.x
Open

Update dependency svelte to v4.2.20 - abandoned#45
anomiex wants to merge 5 commits into
trunkfrom
renovate/svelte-4.x

Conversation

@anomiex

@anomiex anomiex commented Nov 19, 2025

Copy link
Copy Markdown
Owner

This PR contains the following updates:

Package Change Age Confidence
svelte (source) 4.2.19 -> 4.2.20 age confidence

Release Notes

sveltejs/svelte (svelte)

v4.2.20

Compare Source

Patch Changes
  • fix: properly remove event listeners in Component's removeEventListener (#​13556)

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 02:59 AM, on day 1 of the month ( * 0-2 1 * * ) in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

anomiex and others added 5 commits November 19, 2025 12:18
Pnpm 11 will move most configuration from `.npmrc` to
`pnpm-workspace.yaml`. We may as well get a head start on that.

Then let's make some changes too:
* save-exact - We stopped having Renovate pin in Automattic#27087. May as well
  have this match.
* minimumReleaseAge - New setting in 10.16, intended to help avoid
  installing compromised packages by waiting a day before upgrading.
* trustPolicy - New setting in 10.21, intended to help avoid installing
  compromised packages by rejecting installation when the new version
  has no provenance and an older version does.
* trustPolicyExclude - New setting in 10.22, to override trustPolicy
  when there's a legitimate reason.

This also takes the opportunity to clean up a few things:
* public-hoist-pattern was set to the default value.
* resolution-mode was only changed from 8.0.0–8.6.12.
  The current value is the default since then.
* use-lockfile-v6 is obsolete.
* Versions of `swiper` we use no longer have a build script.
@anomiex

anomiex commented Nov 19, 2025

Copy link
Copy Markdown
Owner Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
Scope: all 100 workspace projects
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 59, reused 0, downloaded 0, added 0
Progress: resolved 97, reused 0, downloaded 0, added 0
Progress: resolved 145, reused 0, downloaded 0, added 0
/tmp/renovate/repos/github/anomiex/jetpack/projects/js-packages/image-guide:
 ERR_PNPM_TRUST_DOWNGRADE  High-risk trust downgrade for "[email protected]" (possible package takeover)

This error happened while installing a direct dependency of /tmp/renovate/repos/github/anomiex/jetpack/projects/js-packages/image-guide

Earlier versions had provenance attestation, but this version has no trust evidence. A trust downgrade may indicate a supply chain incident.

File name: undefined
Command failed: /tmp/monorepo/.github/files/renovate-post-upgrade-run.sh renovate/svelte-4.x
warning: unable to access '/home/ubuntu/.config/git/attributes': Permission denied
warning: unable to access '/home/ubuntu/.config/git/ignore': Permission denied
 WARN  Issue while reading "/home/ubuntu/.npmrc". EACCES: permission denied, open '/home/ubuntu/.npmrc'
 WARN  Issue while reading "/home/ubuntu/.config/pnpm/rc". EACCES: permission denied, open '/home/ubuntu/.config/pnpm/rc'
warning: unable to access '/home/ubuntu/.config/git/ignore': Permission denied

@anomiex anomiex force-pushed the trunk branch 3 times, most recently from b387cb0 to 137380f Compare November 26, 2025 19:30
@anomiex anomiex force-pushed the trunk branch 2 times, most recently from 45221d2 to ea5eb20 Compare December 1, 2025 19:28
@anomiex

anomiex commented Dec 1, 2025

Copy link
Copy Markdown
Owner Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@anomiex anomiex force-pushed the trunk branch 8 times, most recently from 9a227f0 to 7bcdbee Compare December 1, 2025 21:46
@anomiex anomiex force-pushed the trunk branch 2 times, most recently from 074522d to 262f411 Compare March 18, 2026 16:06
@anomiex anomiex force-pushed the trunk branch 3 times, most recently from 6ed49a4 to af3852c Compare April 7, 2026 19:59
@anomiex anomiex force-pushed the trunk branch 2 times, most recently from fa6367c to 5fc3c2d Compare May 13, 2026 14:20
@anomiex anomiex force-pushed the trunk branch 8 times, most recently from 2f03538 to 70bd192 Compare May 22, 2026 17:09
@anomiex anomiex changed the title Update dependency svelte to v4.2.20 Update dependency svelte to v4.2.20 - abandoned May 22, 2026
@anomiex

anomiex commented May 22, 2026

Copy link
Copy Markdown
Owner Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@anomiex anomiex force-pushed the trunk branch 7 times, most recently from d364563 to 109216b Compare June 3, 2026 17:35
@anomiex anomiex force-pushed the trunk branch 3 times, most recently from 43fa9fe to 9e1043f Compare June 11, 2026 12:47
@anomiex anomiex force-pushed the trunk branch 4 times, most recently from 778b3c3 to c59ea90 Compare June 23, 2026 20:40
@anomiex anomiex force-pushed the trunk branch 2 times, most recently from 7565b57 to a7302cc Compare June 26, 2026 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants