Skip to content

Bump brace-expansion, aws-cdk-lib, eslint, eslint-plugin-svelte, sst and typescript-eslint in /apps/web - #208

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/multi-495418d869
Open

Bump brace-expansion, aws-cdk-lib, eslint, eslint-plugin-svelte, sst and typescript-eslint in /apps/web#208
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/apps/web/multi-495418d869

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps brace-expansion to 5.0.9 and updates ancestor dependencies brace-expansion, aws-cdk-lib, eslint, eslint-plugin-svelte, sst and typescript-eslint. These dependencies need to be updated together.

Updates brace-expansion from 2.0.2 to 5.0.9

Release notes

Sourced from brace-expansion's releases.

v4.0.1

  • fmt 5a5cc17
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

  • feat: use string replaces instead of splits (#64) 278132b
  • fmt dd72a59
  • add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

  • pkg: publish on tag 3.x 3059c07
  • fmt 8229e6f
  • Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

  • Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
  • added jsdoc (#55) 68c0e37
  • node 16 is EOL 9e781e9
  • add standard 3494c4d
  • use const and let (#57) dd5a4cb
  • docs 6dad209
  • remove test e3dd8ae
  • ci: update node versions d23ede9
  • docs: add @​lanodan to contributors 1eb3fa4
  • docs 1e7c9cd
  • switch from tape to test module (#60) 2520537
  • Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
  • Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
  • docs: add back ci badge 8ee5626
  • Add github actions, remove travis. Closes #52 (#53) 5c8756a
  • CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.1.1

  • Backport v5.0.6 change to v2 (#109) c3a817c

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates aws-cdk-lib from 2.142.1 to 2.263.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.263.0

Features

  • autoscaling: add support for AutoScalingInstanceRefresh UpdatePolicy (#38277) (434157f), closes #38276
  • docdb: support per-instance maintenance window on DatabaseCluster (#38315) (5390624), closes #30391
  • ecs: add support for using existing Cloud Map namespaces in ECS clusters (#36812) (bda00bf), closes #26698
  • eks: add Provisioned Control Plane support with controlPlaneScalingTier property (#36651) (5ea1054), closes #36650
  • eks: add support for Kubernetes version 1.36 (#38441) (da27b6c), closes #38411
  • lambda: add Java8AL2023, Java11AL2023 and Java17AL2023 runtime for Lambda #38418 (#38419) (1e55176)
  • lambda: add logGroup and systemLogLevel to CapacityProvider (#38183) (61a2e2d), closes #38182
  • lambda: add PropagateTags to CapacityProvider for tag propagation (#38180) (6f86f97), closes #38181

Bug Fixes


Alpha modules (2.263.0-alpha.0)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

Bug Fixes

v2.262.2

Bug Fixes


Alpha modules (2.262.2-alpha.0)

v2.262.1

Bug Fixes

  • core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
  • core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

Bug Fixes

2.262.2-alpha.0 (2026-07-29)

2.262.1-alpha.0 (2026-07-23)

2.262.0-alpha.0 (2026-07-22)

Bug Fixes

  • redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

2.261.0-alpha.0 (2026-07-02)

Features

  • metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

  • integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

... (truncated)

Commits
  • 731104d chore: update analytics metadata blueprints
  • 21fede3 chore(codebuild): remove deprecated Ubuntu 14.04 and Win 2016 Base images (#3...
  • da27b6c feat(eks): add support for Kubernetes version 1.36 (#38441)
  • 5390624 feat(docdb): support per-instance maintenance window on DatabaseCluster (#38315)
  • d26e507 fix(core): upgrade cloudformation-validate library (#38444)
  • 6f86f97 feat(lambda): add PropagateTags to CapacityProvider for tag propagation (#38180)
  • bda00bf feat(ecs): add support for using existing Cloud Map namespaces in ECS cluster...
  • 5ea1054 feat(eks): add Provisioned Control Plane support with controlPlaneScalingTier...
  • 1e55176 feat(lambda): add Java8AL2023, Java11AL2023 and Java17AL2023 runtime for Lamb...
  • b8e7c11 chore(iam): add resource validation to PolicyStatement for resource-based pol...
  • Additional commits viewable in compare view

Updates eslint from 9.39.1 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

  • cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
  • f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

Updates eslint-plugin-svelte from 2.46.1 to 3.22.0

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.22.0

Minor Changes

eslint-plugin-svelte@3.21.0

Minor Changes

eslint-plugin-svelte@3.20.0

Minor Changes

Patch Changes

  • #1503 989bfa5 Thanks @​teemingc! - fix(valid-prop-names-in-kit-pages): drop errors from allowed page props in Svelte 5 to follow SvelteKit

eslint-plugin-svelte@3.19.0

Minor Changes

eslint-plugin-svelte@3.18.0

Minor Changes

eslint-plugin-svelte@3.17.1

Patch Changes

eslint-plugin-svelte@3.17.0

Minor Changes

Patch Changes

  • #1490 b742163 Thanks @​marekdedic! - fix(no-navigation-without-resolve): properly detecting invalid binary expression operators

eslint-plugin-svelte@3.16.0

... (truncated)

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.22.0

Minor Changes

3.21.0

Minor Changes

3.20.0

Minor Changes

Patch Changes

  • #1503 989bfa5 Thanks @​teemingc! - fix(valid-prop-names-in-kit-pages): drop errors from allowed page props in Svelte 5 to follow SvelteKit

3.19.0

Minor Changes

3.18.0

Minor Changes

3.17.1

Patch Changes

3.17.0

Minor Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-svelte since your current version.


Updates sst from 2.43.2 to 4.17.1

Release notes

Sourced from sst's releases.

v4.17.1

Changelog

v4.17.0

Changelog

v4.16.0

Changelog

v4.15.2

Changelog

v4.15.1

Changelog

v4.15.0

Changelog

v4.14.3

Changelog

v4.14.2

Changelog

v4.14.1

Changelog

... (truncated)

Commits
  • a0bd20f Fix duplicate CloudWatch role URN on fresh accounts (#6911)
  • 8bfe1c1 Add state.retention option to prevent big state buckets (#6925)
  • adcdb2f Fix sst add requiring Prettier (or other dependencies) (#6924)
  • d1e8ff1 Re-run FunctionEnvironmentUpdate when Lambda changes (#6920)
  • 9321c40 Support custom MAIL FROM domain for SES (#6906)
  • 4f1a634 Sync IAM permissions breakdown (#6898)
  • 9f23ba0 Remove enteprise page from docs
  • e881243 Limit CloudFront Function name length in domain redirects (#6889)
  • 817ac33 Use supplied credentials in AWS SDK client (#6893)
  • 9cfa06c Add Durable objects Component (#6785)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sst since your current version.


Updates typescript-eslint from 8.48.1 to 8.65.0

Release notes

Sourced from typescript-eslint's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)
  • eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
  • eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
  • parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
  • typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

  • eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
  • eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
  • eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

  • support parsing import defer (#12513)
  • eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)
  • typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

  • eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.65.0 (2026-07-20)

🚀 Features

  • add warning when TS 7 is detected (#12529)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

  • remove redundant package.json "files" (#12444)

❤️ Thank You

See GitHub Releases for more information.

... (truncated)

Commits
  • 63ba81b chore(release): publish 8.65.0
  • eaf4576 feat: add warning when TS 7 is detected (#12529)
  • 0d06406 chore: add attw validation to repo (

…and typescript-eslint

Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) to 5.0.9 and updates ancestor dependencies [brace-expansion](https://github.com/juliangruber/brace-expansion), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [eslint](https://github.com/eslint/eslint), [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte), [sst](https://github.com/anomalyco/sst) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). These dependencies need to be updated together.


Updates `brace-expansion` from 2.0.2 to 5.0.9
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v2.0.2...v5.0.9)

Updates `aws-cdk-lib` from 2.142.1 to 2.263.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.263.0/packages/aws-cdk-lib)

Updates `eslint` from 9.39.1 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v9.39.1...v10.8.0)

Updates `eslint-plugin-svelte` from 2.46.1 to 3.22.0
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.22.0/packages/eslint-plugin-svelte)

Updates `sst` from 2.43.2 to 4.17.1
- [Release notes](https://github.com/anomalyco/sst/releases)
- [Commits](https://github.com/anomalyco/sst/compare/sst@2.43.2...v4.17.1)

Updates `typescript-eslint` from 8.48.1 to 8.65.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.9
  dependency-type: indirect
- dependency-name: aws-cdk-lib
  dependency-version: 2.263.0
  dependency-type: direct:development
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.22.0
  dependency-type: direct:development
- dependency-name: sst
  dependency-version: 4.17.1
  dependency-type: direct:development
- dependency-name: typescript-eslint
  dependency-version: 8.65.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 8cad988c54

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread apps/web/package.json
"react": "^18.2.0",
"react-dom": "^18.2.0",
"sst": "2.43.2",
"sst": "4.17.1",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep SST on v2 until the config is migrated

This bump installs SST 4, but the app's infrastructure is still written for SST v2: apps/web/sst.config.ts imports SSTConfig from sst, imports Cron/SvelteKitSite from sst/constructs, uses stacks(app), and passes CDK props into the site. SST v3/v4 uses the new $config/run component API instead, so after CI installs this package the existing deploy step in .github/workflows/cd.yml (npm i && npx sst deploy --stage prod) will fail before updating production. Either keep sst on the v2 line or migrate sst.config.ts and the SvelteKit adapter together.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants