Bump the npm-minor group across 1 directory with 4 updates

[dependabot]

Bumps the npm-minor group with 4 updates in the /eml-client directory: eslint-plugin-svelte, sass, svelte and vite.

Updates eslint-plugin-svelte from 3.22.0 to 3.23.0

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.0

Minor Changes

• #1565 1ec3cf5 Thanks @​ColumbusLabs! - feat: add prefer-attribute-interpolation rule

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.0

Minor Changes

• #1565 1ec3cf5 Thanks @​ColumbusLabs! - feat: add prefer-attribute-interpolation rule

Commits

• a24a9bb chore: release eslint-plugin-svelte (#1576)
• 1ec3cf5 feat: report useless template literal mustaches (#1565)
• 41817f8 chore(deps): update dependency mocha to ~11.8.0 (#1572)
• See full diff in compare view

Updates sass from 1.102.0 to 1.103.1

Release notes

Sourced from sass's releases.

Dart Sass 1.103.1

To install Sass 1.103.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• No user-visible changes.

See the full changelog for changes in earlier releases.

Dart Sass 1.103.0

To install Sass 1.103.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

See the full changelog for changes in earlier releases.

Changelog

Sourced from sass's changelog.

1.103.1

• No user-visible changes.

1.103.0

• Potentially breaking compatibility fix: Colors now preserve "analogous sets" of missing channels during conversions, per the CSS spec. For example, color.to-space(lch(50% none none), lab) now returns lab(50% none none) instead of lab(50% 0 0).

Commits

• 62243d4 Set committer metadata when creating a tag (#2838)
• ed4dcc7 Use more dot shorthands (#2837)
• ac3d928 Support analogous sets of missing channels (#2810)
• 1e0cf28 Merge pull request #2834 from ntkme/fix-release
• f3bd86a Merge pull request #2835 from sass/dart-sdk-version
• 287f9ba Code review
• 91831b8 Fix dartdoc error
• 0971ea9 Bump bufbuild/buf-action from 1.4.0 to 1.5.0 in /.github/util/initialize (#2826)
• c45223b Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 (#2828)
• cbb1db1 Bump dart-lang/setup-dart from 1.7.2 to 1.8.0 (#2829)
• Additional commits viewable in compare view

Updates svelte from 5.56.8 to 5.56.10

Release notes

Sourced from svelte's releases.

svelte@5.56.10

Patch Changes

• fix: preserve CSS escape sequences when printing selectors (#18667)

• fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

• fix: transform expressions inside labeled statements during server compilation (#18617)

• docs: clarify that context lookup includes the current component and all ancestors (#18581)

• fix: apply CSS custom properties with falsy values on components (#18634)

• fix: correctly print {#await ... catch x} et al (#18645)

• fix: ignore comments of Program node during migration script (#18656)

• fix: reliably resolve append_style to its correct root (#18614)

• fix: clean up removed capture event handlers from spread attributes (#18618)

• fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

• fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

• fix: give effect teardowns the value from before the first write in a flush (#18620)

• fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

• fix: preserve namespaces in CSS type selectors (#18678)

• fix: increment private state fields through a non-this receiver (#18622)

• chore: deduplicate client and server context helpers (#18580)

• fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

• fix: allow custom elements to receive async values as props (#18661)

• fix: strip comments from inline style values in linear time (#18553)

• fix: prevent declaration comments from breaking server derived references (#18641)

• perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

• fix: preserve short-circuiting for logical assignments to private state fields (#18594)

svelte@5.56.9

Patch Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

5.56.10

Patch Changes

• fix: preserve CSS escape sequences when printing selectors (#18667)

• fix: parse :nth-child(2n of.foo) where of is not followed by whitespace (#18611)

• fix: transform expressions inside labeled statements during server compilation (#18617)

• docs: clarify that context lookup includes the current component and all ancestors (#18581)

• fix: apply CSS custom properties with falsy values on components (#18634)

• fix: correctly print {#await ... catch x} et al (#18645)

• fix: ignore comments of Program node during migration script (#18656)

• fix: reliably resolve append_style to its correct root (#18614)

• fix: clean up removed capture event handlers from spread attributes (#18618)

• fix: don't corrupt renderer type during SSR's legacy bind: retry loop (#18616)

• fix: treat concise arrow function bodies as implicit returns when calculating blockers (#18613)

• fix: give effect teardowns the value from before the first write in a flush (#18620)

• fix: avoid double-calling a derived reference when destructuring $derived of another $derived during server-side rendering (#18668)

• fix: preserve namespaces in CSS type selectors (#18678)

• fix: increment private state fields through a non-this receiver (#18622)

• chore: deduplicate client and server context helpers (#18580)

• fix: release last_propagated_event after event propagation settles so it no longer retains the last event's target subtree (#18569)

• fix: allow custom elements to receive async values as props (#18661)

• fix: strip comments from inline style values in linear time (#18553)

• fix: prevent declaration comments from breaking server derived references (#18641)

• perf: make async blocker analysis scale linearly with the number of top-level references (#18549)

• fix: preserve short-circuiting for logical assignments to private state fields (#18594)

5.56.9

... (truncated)

Commits

• 56a036f Version Packages (#18640)
• 545205b perf: make async blocker analysis linear (#18549)
• 950e2a8 fix: strip comments from inline style values in linear time (#18553)
• ffc0e6e fix: release last_propagated_event after event propagation settles (#18569)
• 2f684fe docs: clarify that context lookup includes the current component and all ance...
• 3feb34a chore: deduplicate client/server context helpers (#18580)
• 24130c1 fix: parse nth-child of syntax without whitespace after of (#18611)
• a166761 fix: treat concise arrow function bodies as implicit returns when calculating...
• a4c60cc fix: append_styles resolving to document.head in WC (#18614)
• ee1249b fix: preserve renderer type in copy() during SSR (#18616)
• Additional commits viewable in compare view

Updates vite from 8.2.1 to 8.2.2

Release notes

Sourced from vite's releases.

plugin-legacy@8.2.2

Please refer to CHANGELOG.md for details.

v8.2.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.2.2 (2026-08-20)

Features

• deps: widen @vitejs/devtools peer range to v0.5.0 (#23302) (495d9ff)

Bug Fixes

• bundled-dev: handle lazy request error (#23291) (3ba026d)
• bundled-dev: hot update through circular imports instead of reloading (#23259) (3dbddef)
• config: resolve sourcemap paths against sourcemap location (#23239) (05a003e)
• css: don't pass empty targets to lightningcss (#23295) (2804636)
• define: fix match escaped dots to support $-prefixed define keys (#23249) (dcf88bd)
• deps: update all non-major dependencies (#23217) (ba958bd)
• deps: update rolldown-related dependencies (#23218) (83ecb2c)
• module-runner: exclude completed modules from in-flight cycle detection (fix #22999) (#23009) (d9b10a9)
• optimizer: close custom extension analysis bundles (#23207) (8fb7675)
• reduce Windows 8.3-short-name detection false-positives (#23066) (02cffa9)
• respect resolve.preserveSymlinks when resolving root (fix #23197) (#23198) (8413052)
• ssr: rewrite computed key of destructing parameter (#23307) (9db0b61)
• vite: update outdated upstream file links in license comments (#23285) (c0f2fc6)

Documentation

• build: note cssTarget precedence (#23200) (a20a35e)

Miscellaneous Chores

• fix ts errors in build test cases (#23209) (a0cfcf7)

Code Refactoring

• use JSON import attributes instead of readFileSync in constants (#23258) (1d9fa39)
• use named regex constants over inline literals (#22964) (5c1c6c6)

Tests

• define: close rolldown bundler after generate (#23231) (b4d66fe)
• module-runner: add TLA circular import case (#23299) (4a261f2)
• module-runner: simplify server-hmr tests (#23300) (599b44b)
• ssr: add destructing assignment case for moduleRunnerTransform (#23308) (cb77e2a)

Build System

• use JSON import attributes instead of readFIleSync in rolldown configs (#23251) (d615bcd)

Commits

• de1111a release: v8.2.2
• cb77e2a test(ssr): add destructing assignment case for moduleRunnerTransform (#23308)
• 9db0b61 fix(ssr): rewrite computed key of destructing parameter (#23307)
• 8413052 fix: respect resolve.preserveSymlinks when resolving root (fix #23197) (#23...
• 05a003e fix(config): resolve sourcemap paths against sourcemap location (#23239)
• 495d9ff feat(deps): widen @vitejs/devtools peer range to v0.5.0 (#23302)
• 1d9fa39 refactor: use JSON import attributes instead of readFileSync in constants (#2...
• 2804636 fix(css): don't pass empty targets to lightningcss (#23295)
• 599b44b test(module-runner): simplify server-hmr tests (#23300)
• 4a261f2 test(module-runner): add TLA circular import case (#23299)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.