[dependabot]

Bumps the minor-patch group with 6 updates in the /frontend directory:

Package	From	To
@playwright/test	1.61.1	1.63.0
@sveltejs/kit	2.70.1	2.70.3
prettier	3.9.6	3.9.8
svelte	5.56.7	5.57.0
svelte-check	4.7.3	4.7.6
typescript-eslint	8.65.0	8.70.0

Updates @playwright/test from 1.61.1 to 1.63.0

Release notes

Sourced from @​playwright/test's releases.

v1.63.0

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock. Tests that share a lock name never run concurrently, across files, workers and projects, while everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group. Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments, and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API

... (truncated)

Commits

• 1b025d7 chore: mark v1.63.0 (#42569)
• 0b9956d cherry-pick(#42568): docs(test): mark test.step subtitle option as since v1.63
• 13dbf10 cherry-pick(#42552): docs: release notes for v1.63
• e93b64e cherry-pick(#42566): feat(test): add subtitle option to test.step (#42567)
• 2b7a5f2 test: response.body() for content-encoding:identity (#42537)
• 648a67c fix(mcp): create parent directories for explicitly named files (#42540)
• 7894f56 docs(mcp): clarify how tool file names are resolved (#42538)
• 52900a1 devops: restore npm publishing from GitHub Actions (#42550)
• 8c47f59 docs(csharp): fix nonexistent method names in guide examples (#42507)
• bd6e552 chore(video): emit frames with real timestamps, drop frame number quantizatio...
• Additional commits viewable in compare view

Updates @sveltejs/kit from 2.70.1 to 2.70.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.70.3

Patch Changes

• fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

@​sveltejs/kit@​2.70.2

Patch Changes

• fix: prevent quadratic backtracking in Accept header content negotiation (#1)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.70.3

Patch Changes

• fix: avoid eagerly reading $app/state dependencies during module initialization (b61018d)

2.70.2

Patch Changes

• fix: prevent quadratic backtracking in Accept header content negotiation (82712fc)

Commits

• 39e8e1f Version Packages (#16771)
• b61018d fix: avoid eagerly reading $app/state dependencies during module
• 1ad0d43 chore: get Vercel split platform tests running (#16666)
• a297aff Version Packages (#16571)
• 82712fc Merge commit from fork
• See full diff in compare view

Updates prettier from 3.9.6 to 3.9.8

Release notes

Sourced from prettier's releases.

3.9.8

• Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

🔗 Changelog

3.9.7

• Support Angular 22.2
• Fix regressions in v3.9

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.8

diff

Markdown: Don't let Liquid objects interrupt paragraphs (#20087 by @​seiyab)

<!-- Input -->
If `module` is not a [`WebAssembly.Module`](https://github.com/prettier/prettier/blob/main/en-US/docs/WebAssembly/Reference/JavaScript_interface/Module) object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.7 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.
<!-- Prettier 3.9.8 -->
If module is not a WebAssembly.Module object instance, a
{{jsxref("TypeError")}} is thrown.

3.9.7

diff

Markdown: Prevent indentation drift in list-item code blocks (#19647, #19990 by @​Austin1serb, @​giaBaoJS)

<!-- Input -->
- [x] short first line.
  second paragraph at six spaces that wraps
  onto another line here.

<!-- Prettier 3.9.6 -->

 
short first line.
second paragraph at six spaces that wraps
    onto another line here.



<!-- Prettier 3.9.7 -->

 
short first line.
second paragraph at six spaces that wraps
onto another line here.

JavaScript: Fix embedded template literal idempotency (#19725 by @​fisker)

... (truncated)

Commits

• 4f2ab67 Release 3.9.8
• 3d82af8 Update Regex related dependencies (#20082)
• 5ec8db1 [3.9.x] Markdown: Don't let Liquid objects interrupt paragraphs (#20087)
• 5b142ed Release Release @​prettier/plugin-hermes@​0.2.3, @​prettier/plugin-oxc@​0.2.3, an...
• 0df8eb8 Bump Prettier dependency to 3.9.7
• 3cf6c8c Clean changelog_unreleased
• 0449af3 Release 3.9.7
• 43cd5b0 Allow verify markdown test with mdx parser
• ab8c911 Fix test on Node.js v26 (#19927)
• 4a5adf9 Fix tests
• Additional commits viewable in compare view

Updates svelte from 5.56.7 to 5.57.0

Release notes

Sourced from svelte's releases.

svelte@5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

• fix: measure nested transitions before applying their starting styles (#18647)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.0

Minor Changes

• feat: export RenderOutput, SyncRenderOutput, Csp and Sha256Source from svelte/server (#18648)

• feat: add has function to createContext (#18472)

• feat: support defaultValue on <select> (#18591)

• feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)

Patch Changes

• fix: block template store subscriptions on the promise that assigns the store (#18582)

• fix: route $derived teardown errors through invoke_error_boundary (#18486)

• fix: track SvelteDate snapshots in reactions (#18700)

• fix: remove <svelte:head> anchors on unmount (#18697)

• fix: warn on undeclared shorthand event handlers on <svelte:window>, <svelte:document> and <svelte:body> (#18480)

• perf: reuse the cached value in the <option>/<select> value guard (#18713)

• fix: prevent malformed AST output for <select> with static value attribute (#18449)

• fix: apply ownership mutation ignores to binding assignments (#18718)

• fix: prevent onoutroend from firing twice when compilerOptions.hmr is true (#18655)

• fix: preserve whitespace after inline elements when printing (#18685)

• perf: fold SSR block-open markers into the branch's first push (#18712)

• fix: run onDestroy callbacks when a server render throws (#18585)

• fix: report derived_invalid_export for export let x = $derived(...) in runes mode (#18692)

• fix: never apply class hash to elements inside <svelte:head> (#18160)

• fix: keep defaultChecked on hydrated radio inputs with spread attributes (#18701)

• fix: accept onfocusin/onfocusout in a11y_mouse_events_have_key_events (#18689)

• perf: O(n²)→O(n) Map lookups for legacy $: reactive statement ordering (#18602)

• fix: distinct memoizer on style/class directives (#18466)

... (truncated)

Commits

• 7bc0a70 Version Packages (#18682)
• 6374a2a chore: move @types/trusted-types to devDependencies (#18730)
• 4ae5eb3 feat: add has function to createContext (#18472)
• 5034b59 chore: bump playwright (#18729)
• 74197cc feat: add getOrInsert/getOrInsertComputed to SvelteMap (#18728)
• edbe11e fix: properly apply static textarea value attribute during CSR (#18727)
• 05b6916 fix: omit bind:focused from SSR output (#18724)
• 7c6f36a fix: keep boolean attributes with an empty string value when rendering attrib...
• 2e8b57b fix: render selected options for \<select multiple> with an array value ...
• 864de81 fix: keep the current selection of a \<select> when its defaultValue is ap...
• Additional commits viewable in compare view

Updates svelte-check from 4.7.3 to 4.7.6

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.6

Patch Changes

• fix: don't log an error for vite configs without a Svelte plugin (#3091)

• fix: handle SvelteKit 3 having its config merged at the top level (#3104)

svelte-check@4.7.5

Patch Changes

• fix: prevent silent error during start-up caused by unhandled promise (#3096)

• Updated dependencies [1df53d8]:

  • @​sveltejs/load-config@​0.2.2

svelte-check@4.7.4

Patch Changes

• fix: support TypeScript 7 Stable under npm alias (#3073)

Commits

• f436ec0 Version Packages (#3105)
• 97710db fix: handle SvelteKit 3 having its config merged at the top level (#3104)
• 820daab fix: handle SvelteKit 3 changed imports for zero types feature (#3106)
• 32018fd fix: don't log an error for vite configs without a Svelte plugin (#3091)
• 58b7731 Version Packages (#3102)
• 87ce367 fix: handle chdir throwing (#3103)
• 1b77fc6 chore: replace kit.svelte.dev links with the new site URL (#3100)
• a83093b fix: remove type dependency on magic-string (#3101)
• 182e45d Version Packages (#3098)
• aba960b fix: prevent silent error during start-up caused by unhandled promise (#3096)
• Additional commits viewable in compare view

Updates typescript-eslint from 8.65.0 to 8.70.0

Release notes

Sourced from typescript-eslint's releases.

v8.70.0

8.70.0 (2026-09-07)

🚀 Features

• eslint-plugin: [no-generated-empty-object-type] add rule (#12730)
• website: generate per-page social preview cards (#12734)

🩹 Fixes

• use stable release of pnpm 12 (#12808)
• update pnpm to 12.3.4 and dedupe Docusaurus packages (#12829)
• eslint-plugin: [member-ordering] don't report fields that read fields declared before them (#12729)
• eslint-plugin: [no-unnecessary-condition] no false positive on RHS of a nested logical expression (#12728)
• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)
• project-service: avoid discarded tsserver logs (#12748)
• typescript-estree: clarify the parserOptions.project error message (#12817)

❤️ Thank You

• Barry @​barry166
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨ @​JoshuaKGoldberg
• Kirk Waiblinger @​kirkwaiblinger
• Ulrich Stark @​ulrichstark
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.69.0

8.69.0 (2026-08-31)

🚀 Features

• eslint-plugin: [no-misused-promises] add flagUnions option for checkConditionals (#12603)

🩹 Fixes

• eslint-plugin: [no-mixed-enums] use scope analysis instead of type checking for merged namespaces (#12731)
• eslint-plugin: [unified-signatures] compare type parameters by constraint instead of name (#12741)
• eslint-plugin: [no-meaningless-void-operator] report void on non-call expressions (#12727)
• website: respect allowJs playground config (#12744)

❤️ Thank You

• Abdu Alim Arlikhozhaev @​Arlikhozhaev
• Evyatar Daud @​StyleShit

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.70.0 (2026-09-07)

🩹 Fixes

• eslint-plugin: [no-deprecated] report deprecated imported values used in object shorthand properties (#12780)

❤️ Thank You

• Ulrich Stark @​ulrichstark

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.69.0 (2026-08-31)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.68.0 (2026-08-24)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.67.0 (2026-08-10)

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.66.0 (2026-08-03)

... (truncated)

Commits

• 7ee7608 chore(release): publish 8.70.0
• 4586535 fix(eslint-plugin): [no-deprecated] report deprecated imported values used in...
• 9a6e546 chore(release): publish 8.69.0
• 8f4e00a chore(release): publish 8.68.0
• 55f6d5d chore: enable source maps (#12677)
• 20a261f chore(release): publish 8.67.0
• c245fbb feat(typescript-eslint): export basic globs for using tseslint (#12105)
• 3b155bb chore: use typescript 7 for typechecking (#12601)
• e51b11b chore(release): publish 8.66.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.