fix(deps): update non-major updates

[bottd]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
@types/react (source)	19.2.15 → 19.2.16			devDependencies	patch
arborium	=2.17.0 → =2.18.0			dependencies	minor
eslint (source)	10.4.0 → 10.4.1			devDependencies	patch
react (source)	19.2.6 → 19.2.7			devDependencies	patch
svelte (source)	5.55.10 → 5.56.1			devDependencies	minor
typescript-eslint (source)	8.60.0 → 8.60.1			devDependencies	patch
vite (source)	8.0.14 → 8.0.16			devDependencies	patch
vite-plugin-dts (source)	5.0.1 → 5.0.2			devDependencies	patch
vitest (source)	4.1.7 → 4.1.8			devDependencies	patch

---

Release Notes

bearcove/arborium (arborium)

v2.18.0

Compare Source

eslint/eslint (eslint)

v10.4.1

Compare Source

Bug Fixes

• e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#​20930) (Francesco Trotta)
• d4ce898 fix: propagate failures from delegated commands (#​20917) (Minh Vu)
• f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#​20916) (kuldeep kumar)
• c5bc78b fix: false positive for reference in finally block (#​20655) (Tanuj Kanti)
• 27538c0 fix: add missing CodePath and CodePathSegment types (#​20853) (Pixel998)

Documentation

• 61b0add docs: remove deprecated rule from related rules of max-params (#​20921) (Tanuj Kanti)
• 305d5b9 docs: remove deprecated rules from related rules section (#​20911) (Tanuj Kanti)
• 49b0202 docs: fix display: none of ad (#​20901) (Tanuj Kanti)
• 9067f94 docs: switch build to Node.js 24 (#​20893) (Milos Djermanovic)
• c91b041 docs: Update README (GitHub Actions Bot)
• e349265 docs: clarify semver strings in rule deprecation objects (#​20885) (Milos Djermanovic)

Chores

• b0e466b test: add data property to invalid tests cases for rules (#​20924) (Tanuj Kanti)
• f78838b test: add CodePath type coverage (#​20904) (Pixel998)
• 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#​20922) (Francesco Trotta)
• 002942c ci: declare contents:read on update-readme workflow (#​20919) (Arpit Jain)
• 64bca24 chore: update ecosystem plugins (#​20912) (ESLint Bot)
• 6d7c832 chore: ignore fflate updates in renovate (#​20908) (Pixel998)
• b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#​20889) (dependabot[bot])
• a9b8d7f chore: increase maxBuffer for ecosystem tests (#​20881) (sethamus)
• b702ead chore: update ecosystem update PR settings (#​20884) (Pixel998)
• 507f60e chore: update ecosystem plugins (#​20882) (ESLint Bot)
• 92f5c5b test: add unit test for message-count (#​20878) (kuldeep kumar)
• df32108 chore: add @​eslint/markdown and typescript-eslint ecosystem tests (#​20837) (sethamus)
• 327f91d chore: use includeIgnoreFile internally (#​20876) (Kirk Waiblinger)
• f0dc4bd chore: pin fflate@​0.8.2 (#​20877) (Milos Djermanovic)
• 0f4bd25 ci: run Discord alert for ecosystem test failures (#​20873) (Copilot)

facebook/react (react)

v19.2.7: 19.2.7 (June 1st, 2026)

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6
  (#​36566 by @​unstubbable)

sveltejs/svelte (svelte)

v5.56.1

Compare Source

Patch Changes

• fix: error at compile time on duplicate snippet/declaration tag definitions (#​18351)

• fix: parse declaration tag contents more robustly (#​18353)

• fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#​18348)

• fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#​18348)

• fix: tolerate whitespace before let/const in declaration tags (#​18348)

• fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#​18350)

• fix: more robust parsing of declaration tags with regards to type (#​18330)

• fix: preserve newlines in spread input values when the type attribute is applied after value (#​18345)

• fix: update SvelteURLSearchParams when setting duplicate keys to the same joined value (#​18336)

• fix: check references for blockers on server, too (#​18352)

v5.56.0

Compare Source

Minor Changes

• feat: allow declarations in the template (#​18282)

Patch Changes

• perf: use createElement instead of createElementNS for HTML elements (#​18262)

• perf: store current_sources as a Set for O(1) membership checks (#​18278)

• perf: deduplicate identical hoisted templates within a component (#​18320)

• perf: hoist rest_props exclude list as a module-scope Set (#​18252)

typescript-eslint/typescript-eslint (typescript-eslint)

v8.60.1

Compare Source

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

vitejs/vite (vite)

v8.0.16

Compare Source

Bug Fixes

• deps: reject UNC paths for launch-editor-middleware (#​22571) (50b9512)
• reject windows alternate paths (#​22572) (dc245c7)

v8.0.15

Compare Source

Features

• send 408 on request timeout (#​22476) (c85c9ee)
• update rolldown to 1.0.3 (#​22538) (646dbed)

Bug Fixes

• capitalize error messages and remove spurious space in parse error (#​22488) (85a0eff)
• deps: update all non-major dependencies (#​22511) (2686d7d)
• dev: fix html-proxy cache key mismatch for /@​fs/ HTML paths (#​21762) (47c4213)
• glob: error on relative glob in virtual module when no files match (#​22497) (5c8e98f)
• optimizer: close the rolldown bundle when write() rejects (#​22528) (e3cfb9d)
• resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#​22509) (40985f1)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​22566) (3052a67)

Code Refactoring

• correct logic in collectAllModules function (#​22562) (6978a9c)

qmhc/unplugin-dts (vite-plugin-dts)

v5.0.2

Compare Source

vitest-dev/vitest (vitest)

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

---

Configuration

📅 Schedule: Branch creation - "every weekday" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.