Skip to content

chore(deps): update devdependency devalue to v6 - #3273

Merged
danielroe merged 1 commit into
mainfrom
renovate/devalue-6.x
Sep 21, 2026
Merged

danielroe merged 1 commit into
mainfrom
renovate/devalue-6.x

Conversation

@renovate

@renovate renovate Bot commented Sep 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
devalue 5.9.0 → 6.0.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

sveltejs/devalue (devalue)

v6.0.0

Compare Source

Major Changes
  • afb3cb4: breaking: use tagged template js for uneval replacers instead of nested uneval
  • 3100507: breaking: require Node 22.17 or newer
Minor Changes
  • afb3cb4: feat: support cyclic custom objects
Patch Changes
  • ac295fb: fix: escape unpaired surrogates so uneval/stringify output survives UTF-8 transport

v5.9.4

Compare Source

Patch Changes
  • 067b125: perf: annotate module-level Object.freeze calls as pure so unused operation tables tree-shake

v5.9.3

Compare Source

Patch Changes
  • 6861dbb: fix: avoid scanning sparse array holes in uneval traversal and shared-array population
  • 9ec5130: fix: reject non-string null-prototype object keys in parse and unflatten to prevent bypassing the __proto__ check
  • dae8153: fix: prevent unhandled internal rejections in stringifyAsync when serializing multiple promises
  • 84f6f67: fix: prevent quadratic uneval output expansion for repeated strings and bigints
  • 6861dbb: fix: avoid eager allocation when evaluating sparse arrays emitted by uneval
  • 8f8d78e: fix: validate revived backing buffers before constructing typed arrays
  • 46dc877: fix: serialize only the visible bytes of Node Buffers in stringify, stringifyAsync and uneval, preventing disclosure of unrelated data from their shared allocation pool

v5.9.2

Compare Source

Patch Changes
  • 8b2a456: fix: reject out-of-bounds indices

v5.9.1

Compare Source

Patch Changes
  • 39457ce: fix: uneval emits valid JS for graphs with more than 65534 repeated references
  • 686e379: fix: emit valid JS for Node Buffer in uneval
  • 376b65c: fix: preserve -0 in float typed arrays in uneval

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@vercel

vercel Bot commented Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs.npmx.dev Ready Ready Preview Sep 21, 2026 8:39am UTC
npmx.dev Ready Ready Preview Sep 21, 2026 8:39am UTC
1 Skipped Deployment
Project Deployment Actions Updated
npmx-lunaria Ignored Ignored Sep 21, 2026 8:39am UTC

Request Review

@socket-security

socket-security Bot commented Sep 21, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addeddevalue@​6.0.010010010096100

View full report

@github-actions

Copy link
Copy Markdown

e18e dependency analysis

No dependency warnings found.

@codecov

codecov Bot commented Sep 21, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

@danielroe
danielroe added this pull request to the merge queue Sep 21, 2026
Merged via the queue into main with commit ec3d2a6 Sep 21, 2026
29 checks passed
@danielroe
danielroe deleted the renovate/devalue-6.x branch September 21, 2026 15:54

This branch was successfully deployed

2 active deployments
Preview – npmx.dev — a764521d Deployed Sep 21, 2026 by vercel[bot]
Preview – docs.npmx.dev — a764521d Deployed Sep 21, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant