chore(deps): update non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@eslint/compat (source)	^1.4.0 -> ^1.4.1
@eslint/js (source)	^9.38.0 -> ^9.39.0
@sveltejs/kit (source)	^2.48.0 -> ^2.48.4
eslint (source)	^9.38.0 -> ^9.39.0
eslint-plugin-svelte (source)	^3.12.5 -> ^3.13.0
globals	^16.4.0 -> ^16.5.0
svelte (source)	^5.42.2 -> ^5.43.2
turbo (source)	^2.5.8 -> ^2.6.0
vitest (source)	^4.0.3 -> ^4.0.6

---

Release Notes

eslint/rewrite (@​eslint/compat)

v1.4.1

Compare Source

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @​eslint/core bumped from ^0.16.0 to ^0.17.0

eslint/eslint (@​eslint/js)

v9.39.0

Compare Source

eslint/eslint (eslint)

v9.39.0

Compare Source

sveltejs/eslint-plugin-svelte (eslint-plugin-svelte)

v3.13.0

Compare Source

Minor Changes

• #​1323 074af20 Thanks @​marekdedic! - feat(no-navigation-without-resolve): checking link shorthand attributes

Patch Changes

• #​1388 005e9fd Thanks @​marekdedic! - fix(no-navigation-without-resolve): allowing undefined and null in link hrefs

sindresorhus/globals (globals)

v16.5.0

Compare Source

• Update globals (2025-11-01) (#​316) 6d441ca
• Add Vue, Svelte, and Astro globals (#​314) ea31521

---

vercel/turborepo (turbo)

v2.6.0: Turborepo v2.6.0

Compare Source

What's Changed

Docs

• docs: clarification on Transit Nodes docs by @​maschwenk in #​9181
• docs: add GitHub Actions reusable workflow documentation for remote caching by @​anthonyshew in #​10923
• docs: generate blog release OG images by @​anthonyshew in #​10936
• docs: fix correct package name from eslint-config-turbo to eslint-plugin-turbo by @​tetzng in #​10954
• docs: align tailwindcss 4 guide to the with-tailwind example by @​esauri in #​10963
• docs: fix typos and formatting issues in Playwright guide by @​yamcodes in #​10980
• docs: adjust compute hours saved component initial value by @​anthonyshew in #​10958
• docs: clarify passthrough args comparison by @​emilbjorklund in #​10990
• docs: fix profile images on home page by @​anthonyshew in #​10993
• feat: microfrontends by @​anthonyshew in #​10982
• docs: Clarify passtrhough args cache miss by @​eug-vs in #​11026
• fix: path validation in microfrontends.json by @​anthonyshew in #​11006
• feat(microfrontends): schema.json for microfrontends.json by @​anthonyshew in #​11008

create-turbo

• feat: update create-turbo Bun prompt text by @​anthonyshew in #​10918

eslint

• fix(eslint-config-turbo): use module.exports for ESLint v8 compatibility by @​anthonyshew in #​10902
• perf: ~8.6x faster ESLint rule by @​anthonyshew in #​10943

Examples

• Update package.json by @​Satheeshsk369 in #​10892
• docs: fix JSDoc type for ESLint config in basic example by @​victor-code19 in #​10727
• refactor(examples): enhance with-nestjs (#​8131) by @​Neosoulink in #​10964
• examples: Upgrade core-team-maintained examples to Next.js 16 by @​anthonyshew in #​11014

Changelog

• chore: remove missing turbow.js references by @​pauloZion1 in #​10893
• fix(turborepo-lockfiles): handle missing optional dependencies in Bun lockfiles by @​anthonyshew in #​10909
• fix: update ui suggested value in error message for turbo.json by @​hugomassing in #​10896
• chore: remove unused origin field from auth structs by @​anthonyshew in #​10910
• feat: new OAuth flow for Turborepo CLI with Vercel by @​anthonyshew in #​10911
• fix(lockfiles): include bundled dependencies in Bun lockfile subgraphs by @​anthonyshew in #​10915
• test: increase coverage for lockfiles by @​anthonyshew in #​10633
• fix: update remote cache OAuth refresh flow by @​anthonyshew in #​10916
• feat(tui): task list search with / by @​anthonyshew in #​10908
• fix: --graph=foo.dot should not require graphviz installed by @​blast-hardcheese in #​10942
• chore: update devcontainer configuration by @​anthonyshew in #​10955
• fix: injectWorkspacePackages for turbo prune with pnpm by @​anthonyshew in #​10945
• fix: adjust binary call for microfrontends proxy on Windows by @​mknichel in #​10962
• Add worktrees.json configuration to .cursor directory by @​Copilot in #​10986
• fix: windows symlinking bug by @​anthonyshew in #​10992
• fix: added Linux env vars to global passthroughs by @​aviramha in #​10984
• fix: recursive transitive closure analysis in npm lockfile parser by @​anthonyshew in #​10988
• ci(fix): dynamically set ports in proxy integration tests by @​anthonyshew in #​11009
• feat: Add support for custom microfrontends.json naming by @​kitfoster in #​11022

New Contributors

• @​Satheeshsk369 made their first contribution in #​10892
• @​robobun made their first contribution in #​10729
• @​hugomassing made their first contribution in #​10896
• @​victor-code19 made their first contribution in #​10727
• @​blast-hardcheese made their first contribution in #​10942
• @​tetzng made their first contribution in #​10954
• @​esauri made their first contribution in #​10963
• @​Copilot made their first contribution in #​10986
• @​emilbjorklund made their first contribution in #​10990
• @​aviramha made their first contribution in #​10984
• @​eug-vs made their first contribution in #​11026
• @​kitfoster made their first contribution in #​11022

Full Changelog: vercel/turborepo@v2.5.8...v2.6.0

vitest-dev/vitest (vitest)

v4.0.6

Compare Source

   🐞 Bug Fixes

• Don't merge errors with different diffs for reporting  -  by @​hi-ogawa in #​8871 (3e19f)
• Do not throw when importing a type from an external package  -  by @​sheremet-va in #​8875 (7e6c3)
• Improve spying types  -  by @​sheremet-va in #​8878 (ca041)
• Reuse the same environment when isolate and fileParallelism are false  -  by @​sheremet-va in #​8889 (31706)
• browser:
  • Support module tracking  -  by @​sheremet-va in #​8877 (9e24a)
  • Ensure setup files are re-evaluated on each test run  -  by @​yjaaidi in #​8883 and #​8884 (f50ea)
• coverage:
  • Prevent filtering out virtual files before remapping to sources  -  by @​AriPerkkio in #​8860 (e3b77)
• happy-dom:
  • Properly teardown additional keys  -  by @​sheremet-va in #​8888 (10a06)
• jsdom:
  • Pass down Node.js FormData to Request  -  by @​sheremet-va in #​8880 (197ca)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
sanity-sveltekit	Ready	Preview	Comment	Nov 6, 2025 10:52am

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​globals@​16.4.0 ⏵ 16.5.0			+1	-4
	npm/​turbo@​2.5.8 ⏵ 2.6.0				+2
	npm/​@​eslint/​compat@​1.4.0 ⏵ 1.4.1				+4
	npm/​@​eslint/​js@​9.38.0 ⏵ 9.39.1
	npm/​eslint@​9.38.0 ⏵ 9.39.1
	npm/​eslint-plugin-svelte@​3.12.5 ⏵ 3.13.0	+1			+1
	npm/​vitest@​4.0.5 ⏵ 4.0.7	+3		+22	+2

View full report