deps: bump the app-dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the app-dependencies group with 13 updates in the / directory:

Package	From	To
@biomejs/biome	2.4.8	2.5.9
ultracite	7.3.2	7.10.6
@opentui/core	0.3.4	0.5.6
@opentui/solid	0.3.4	0.5.6
babel-preset-solid	1.9.12	1.9.15
solid-js	1.9.13	1.9.15
convex-svelte	0.0.12	0.14.0
@sveltejs/kit	2.61.1	2.70.3
@sveltejs/vite-plugin-svelte	7.1.2	7.3.0
svelte	5.55.10	5.56.10
svelte-check	4.4.8	4.7.6
vite	8.0.14	8.2.2
convex-test	0.0.53	0.0.56

Updates @biomejs/biome from 2.4.8 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>
    export function greet() {
      console.log("Hello!");

... (truncated)

Commits

• 2081460 ci: release (#11309)
• 6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
• a8798ea feat: useNamedLayer (#11377)
• 85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
• e65f07e feat(lint): nursery useControlLabel (#11312)
• ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
• 6b8f09c ci: release (#11236)
• 23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
• 52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
• 0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
• Additional commits viewable in compare view

Updates ultracite from 7.3.2 to 7.10.6

Release notes

Sourced from ultracite's releases.

ultracite@7.10.6

Patch Changes

• 972b946: Update the oxlint presets for oxlint 1.79: replace the removed react/react-compiler rule with the 22 new React Compiler rules in the react preset, add jsdoc/no-blank-blocks and one-var to the core preset (mirrored in the ESLint presets), and require oxlint ^1.79.0
• 2d5bbdb: Declare the jsPluginSettings named export in the ultracite/oxlint/js-plugins type declarations, so the documented (and ultracite init-generated) import jsPlugins, { jsPluginSettings } from "ultracite/oxlint/js-plugins" type-checks (#773)
• 56aef65: Refresh the toolchain versions that ultracite init installs into projects: @biomejs/biome 2.5.9, the ESLint plugin family (including eslint-plugin-cypress 7, eslint-plugin-jsdoc 64, eslint-plugin-solid 0.15, and eslint-plugin-unicorn 73 — the dynamic presets adopt their new rules automatically), and prettier-plugin-svelte 4.1.1 / prettier-plugin-tailwindcss 0.8.1

ultracite@7.10.5

Patch Changes

• 8df6ad0: Offer the vendored anti-slop Oxlint preset during ultracite init — it now appears in the JS-plugins prompt when you pick Oxlint, and non-interactive setup accepts it via --js-plugins anti-slop. Selecting it adds ultracite/oxlint/anti-slop to the generated config's extends; since the preset is vendored inside Ultracite, nothing extra is installed.
• cd229e9: Bump the oxlint-plugin-react-doctor pin from ^0.7.1 to ^0.9.12, so ultracite init installs the current plugin. All react-doctor rules enabled by the js-plugins presets still exist in 0.9.12, and the ported rules run in curated mode via the settings shipped alongside this release (#771).
• e1ac886: Pin React Doctor's ported rules to their framework-aware "curated" mode (#771). react-doctor 0.9.x rewrote its ported oxc/react-refresh rules — notably only-export-components — with a stripped-down default mode: no framework detection, no route-file skipping, and allowConstantExport off, so Next.js route-segment exports like export const dynamic = "force-static" or metadata were flagged as non-component exports in every route file. The ESLint react preset now sets settings["react-doctor"].portedRuleMode: "curated", and generated oxlint configs apply a new jsPluginSettings export from ultracite/oxlint/js-plugins on the root config (oxlint does not merge settings from extended configs, so the setting cannot ride along inside the preset). If you extend the js-plugins preset manually, add settings: jsPluginSettings to your root oxlint config.
• c27fe36: Generate oxlint configs that enable a subset of the JS plugins via a new selectJsPlugins export from ultracite/oxlint/js-plugins, instead of inlining the filtering logic into the generated file. The inlined block contained a typeof check that user-side lint presets flagged (anti-slop/no-runtime-typeof, #770); the generated config is now a one-line extend, is emitted already formatted (including the previously missing blank line after imports), and re-running ultracite init migrates existing configs with the old inlined block automatically.
• 0616523: Update the vendored anti-slop Oxlint plugin to upstream commit 446268e, picking up fixes to no-object-parameters and no-unknown-returns (respect lexical type binders in alias resolution) and a new allowInTypeGuards option on no-runtime-typeof. The ultracite/oxlint/anti-slop preset enables allowInTypeGuards, so typeof checks inside type predicate functions ((x): x is Tdmmulroy/anti-slop#10

ultracite@7.10.4

Patch Changes

• 417a85a: Add an opt-in ultracite/oxlint/anti-slop preset that ships a vendored, self-contained build of the anti-slop Oxlint plugin — fifteen rules that reject low-evidence TypeScript and JavaScript patterns (unjustified type assertions, unknown leaking through signatures, Reflect-based access, module mocking, and more). Extend it alongside ultracite/oxlint/core; nothing extra to install. The preset also turns off two core rules that conflict with anti-slop's widening checks (typescript/consistent-indexed-object-style and unicorn/no-immediate-mutation) when extended after core.
• 4d3fab8: Move suspicious/useArraySortCompare from the Biome core config to the opt-in type-aware config. The rule is in Biome's types domain — it type-infers the receiver of every method call before checking the method name, which made ultracite check up to ~260x slower on projects with expensive library types (zod, better-auth, Prisma). It now only runs when type-aware linting is explicitly enabled, alongside the other type/project-domain rules. Fixes #768.

ultracite@7.10.3

Patch Changes

• a1fa9c4: Replace the hand-rolled package exports map matching in the config-resolution doctor check with the resolve.exports library, which implements Node's full PACKAGE_TARGET_RESOLVE algorithm (wildcard patterns, key-order precedence, conditional exports, and array fallbacks). The manual node_modules walk is kept intentionally — it exists to avoid Bun's auto-install cache resolving specifiers the project's own node_modules can't.
• 414ea80: Replace the hand-rolled monorepo workspace scan in framework detection with the find-workspaces library. Workspace declarations from package.json (array and yarn-classic object form) and pnpm-workspace.yaml — including negated globs — are now resolved by the library instead of manual pattern collection and globbing, and lerna/bolt monorepos are picked up as well.
• a9a1989: Replace the hand-rolled upward directory walks in findNearestFile and detectLinter with the empathic library's find.any, which checks candidate names in order within each directory before moving to the parent — the same per-directory precedence the previous implementation enforced manually.
• 27b2707: Use magicast to update ESM lint-staged config files during ultracite init. The config is now edited as an AST instead of being imported and re-serialized, so comments and function-valued entries elsewhere in the config survive the update, and the user's config code is no longer executed. If the Ultracite glob pattern is already owned by a non-array value, or the config isn't a mergeable object literal (e.g. defineConfig(...)), init warns and leaves the file untouched instead of rewriting it. CommonJS configs keep the previous behavior.
• f2529b8: Rewrite the agent-fix progress renderer on top of log-update, cli-truncate, and string-width. log-update now owns the in-place block rewriting that was previously done with manual cursor-up/clear-line escape sequences, and line truncation is measured by display width instead of code units — so lint messages containing emoji or CJK text can no longer overflow the terminal row and corrupt the animated block.
• 277b9d6: Replace the hand-rolled child-process handling in the agent fix runner with execa. The timeout → SIGTERM → grace period → SIGKILL escalation, stderr capture, and spawn-failure handling now use execa's timeout and forceKillAfterDelay options, which are battle-tested across platforms (including Windows kill semantics the manual implementation didn't cover). Behavior is unchanged: agent runs still time out after 5 minutes, escalate to SIGKILL after a 10-second grace period, and report a capped stderr tail.
• 1614a80: Drop the direct cross-spawn dependency: all synchronous process spawning (linter runs, tool version checks, editor extension installs, skill installs) now goes through a small adapter over execa's sync API, which owns the Windows spawn semantics cross-spawn provided. The adapter preserves the spawnSync result shape (status/signal/error/stdout), always disables shell interpretation, and always decodes output as UTF-8. execa was already a dependency for the agent fix runner, so this consolidates on one process-spawning library.
• ac114b4: Replace the glob dependency with fast-glob for the tsconfig.json scan during init. fast-glob was already in the dependency tree via find-workspaces, so this drops glob's transitive dependencies (minipass, path-scurry, etc.) from the install without changing behavior.

ultracite@7.10.2

Patch Changes

• 1c48c68: Enable Tailwind CSS class sorting (sortTailwindcss) in the Oxfmt preset. Classes in class/className attributes and in clsx, cva, tw, twMerge, cn, twJoin, and tv calls are now sorted using the same algorithm as prettier-plugin-tailwindcss, matching the behavior of the Prettier preset (which always loads the Tailwind plugin) and the Biome preset's useSortedClasses rule. Projects without Tailwind installed are unaffected beyond class strings being sorted against the default theme, and oxfmt versions older than 0.35.0 ignore the option.
• dc78be4: Stop sorting TanStack route option keys in route files. TanStack Router's route option types are order-sensitive (head/component infer loaderData from properties declared before them), so the Biome useSortedKeys source action rewrote createFileRoute literals into an order that breaks type inference (loaderData becomes never). The Biome TanStack preset now disables useSortedKeys for route files, and the oxlint TanStack preset disables sort-keys there so route files aren't caught between it and react-doctor/tanstack-start-route-property-order.

ultracite@7.10.1

Patch Changes

• d018b7f: Fix several agent fix mode (fix --claude/--codex) issues: runs no longer abort with ENOBUFS when linter JSON output exceeds 1MB, user-supplied format/reporter flags can no longer override the JSON reporter and break parsing, a stuck agent process is force-killed 10 seconds after the timeout instead of hanging forever, and the progress renderer no longer garbles TTY output when file paths and rule names exceed the terminal width.
• d018b7f: Fix Biome config migration leaving the legacy bare "extends": ["ultracite"] form in place, which breaks Biome's module resolution since the package has no root export. It's now mapped to ultracite/biome/core.
• d018b7f: Fix ultracite doctor reporting spurious failures: config checks now walk up parent directories (matching check/fix and the linters themselves) so monorepo packages inheriting a root config pass, .oxlintrc.json is accepted as a valid oxlint config (with a migration suggestion), and Prettier/Stylelint configs declared via package.json keys are recognized.
• d018b7f: Fix ultracite init corrupting existing Prettier/Stylelint/ESLint configs by writing an ESM module into JSON/YAML/TOML/CJS config files (e.g. .prettierrc, eslint.config.cjs). Updates now write the default .mjs config instead and remove the incompatible file so it can't shadow the new one.
• d018b7f: Fix ultracite check/fix misrouting space-separated flag values (e.g. --max-warnings 10) into the file list, which scrambled the underlying linter invocation and made formatters fail on bogus targets. Positional files listed before a -- separator are also kept as lint targets instead of being reclassified as passthrough, which could silently widen formatter runs to the whole project.
• d018b7f: Fix Lefthook and pre-commit YAML updates silently doing nothing on common config shapes: the Lefthook job is now inserted correctly when jobs: isn't the first key under pre-commit: (and no longer matches a jobs: key in a different hook), repos: [] in .pre-commit-config.yaml is handled, and shapes that can't be safely edited produce a warning instead of writing the file back unchanged.
• d018b7f: Fix the Husky integration overwriting an existing .husky/pre-commit hook: ultracite init ran husky init, which unconditionally replaces the hook with npm test. It now runs plain husky to set up the hooks infrastructure without touching the hook file.

... (truncated)

Commits

• d875eb5 Version Packages (#774)
• 56aef65 Update prettier-plugin-svelte and prettier-plugin-tailwindcss
• dde1725 Update the ESLint family to latest
• 6d8477f Update @​biomejs/biome to 2.5.9
• 093fb98 Update oxfmt to 0.64.0 and regenerate the markdown fence patch
• 972b946 Update the oxlint presets for oxlint 1.79
• 2d5bbdb Declare jsPluginSettings in the oxlint/js-plugins type declarations
• 326ba63 Version Packages (#772)
• ee1ffdd Enable allowInTypeGuards on no-runtime-typeof in the anti-slop preset
• 0616523 Update vendored anti-slop plugin to 446268e
• Additional commits viewable in compare view

Updates @opentui/core from 0.3.4 to 0.5.6

Release notes

Sourced from @​opentui/core's releases.

Release v0.5.6

What's Changed

• ci: migrate npm publishing to OIDC by @​kommander in anomalyco/opentui#1395

Full Changelog: anomalyco/opentui@v0.5.5...v0.5.6

Release v0.5.4

What's Changed

• ot web blue by @​simonklee in anomalyco/opentui#1367
• web: add package index by @​simonklee in anomalyco/opentui#1368
• web: improve documentation readability by @​simonklee in anomalyco/opentui#1371
• packages: add remote facts for community entries by @​simonklee in anomalyco/opentui#1372
• packages: declutter package headers by @​simonklee in anomalyco/opentui#1373
• scrollback: add package index text by @​simonklee in anomalyco/opentui#1374
• docs: add interactive core quickstart by @​simonklee in anomalyco/opentui#1375
• docs: refactor website documentation by @​simonklee in anomalyco/opentui#1377
• fix(core): use blocks fallback for forced Sixel placements on Kitty by @​simonklee in anomalyco/opentui#1378
• renderer: clear stale mouse input by @​simonklee in anomalyco/opentui#1382
• core: fix GNU Screen OSC 52 passthrough by @​simonklee in anomalyco/opentui#1334

Full Changelog: anomalyco/opentui@v0.5.3...v0.5.4

Release v0.5.3

What's Changed

• fix(core): clip glyphs left of the buffer by @​simonklee in anomalyco/opentui#1361
• web: rebuild site + add blog by @​simonklee in anomalyco/opentui#1362
• ot fix web mobile by @​simonklee in anomalyco/opentui#1366

Full Changelog: anomalyco/opentui@v0.5.2...v0.5.3

Release v0.5.2

What's Changed

• bench: add JS benchmark by @​simonklee in anomalyco/opentui#1332
• web: upgrade Astro by @​simonklee in anomalyco/opentui#1335
• build(core): statically link libghostty by @​jlongster in anomalyco/opentui#1317
• web: add pixel OpenTUI logo mark by @​simonklee in anomalyco/opentui#1336
• bench: add Node JS benchmark runner by @​simonklee in anomalyco/opentui#1337
• core: migrate to zig 0.16 by @​simonklee in anomalyco/opentui#1286
• ci: limit native artifact upload to platform packages by @​simonklee in anomalyco/opentui#1347
• test(core): remove network dependency from tree-sitter test by @​simonklee in anomalyco/opentui#1348
• fix(web): pin Bun types to 1.3.14 by @​simonklee in anomalyco/opentui#1349
• feat(core): add embedded terminal runtime by @​jlongster in anomalyco/opentui#1338
• image: accept retained NativeImage sources by @​simonklee in anomalyco/opentui#1356
• Clipboard and paste by @​simonklee in anomalyco/opentui#1271
• render: bound streaming code highlights by @​simonklee in anomalyco/opentui#1331

... (truncated)

Commits

• c1ae55b fix: pin Bun types to 1.3.14
• b7b4a95 Release v0.5.6
• fdf893d Release v0.5.5
• 2e7f96f fix(core): pass transient FFI buffers directly (#1394)
• 6e09f4b core: vendor Zig dependencies (#1386)
• 6dec16a native: move Zig sources into packages/native (#1391)
• 8cae8ed feat(core): add embedded terminal renderable (#1340)
• 7f5b19b Release v0.5.4
• b428e73 core: fix GNU Screen OSC 52 passthrough (#1334)
• ffb3c96 renderer: clear stale mouse input (#1382)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentui/core since your current version.

Updates @opentui/solid from 0.3.4 to 0.5.6

Release notes

Sourced from @​opentui/solid's releases.

Release v0.5.6

What's Changed

• ci: migrate npm publishing to OIDC by @​kommander in anomalyco/opentui#1395

Full Changelog: anomalyco/opentui@v0.5.5...v0.5.6

Release v0.5.4

What's Changed

• ot web blue by @​simonklee in anomalyco/opentui#1367
• web: add package index by @​simonklee in anomalyco/opentui#1368
• web: improve documentation readability by @​simonklee in anomalyco/opentui#1371
• packages: add remote facts for community entries by @​simonklee in anomalyco/opentui#1372
• packages: declutter package headers by @​simonklee in anomalyco/opentui#1373
• scrollback: add package index text by @​simonklee in anomalyco/opentui#1374
• docs: add interactive core quickstart by @​simonklee in anomalyco/opentui#1375
• docs: refactor website documentation by @​simonklee in anomalyco/opentui#1377
• fix(core): use blocks fallback for forced Sixel placements on Kitty by @​simonklee in anomalyco/opentui#1378
• renderer: clear stale mouse input by @​simonklee in anomalyco/opentui#1382
• core: fix GNU Screen OSC 52 passthrough by @​simonklee in anomalyco/opentui#1334

Full Changelog: anomalyco/opentui@v0.5.3...v0.5.4

Release v0.5.3

What's Changed

• fix(core): clip glyphs left of the buffer by @​simonklee in anomalyco/opentui#1361
• web: rebuild site + add blog by @​simonklee in anomalyco/opentui#1362
• ot fix web mobile by @​simonklee in anomalyco/opentui#1366

Full Changelog: anomalyco/opentui@v0.5.2...v0.5.3

Release v0.5.2

What's Changed

• bench: add JS benchmark by @​simonklee in anomalyco/opentui#1332
• web: upgrade Astro by @​simonklee in anomalyco/opentui#1335
• build(core): statically link libghostty by @​jlongster in anomalyco/opentui#1317
• web: add pixel OpenTUI logo mark by @​simonklee in anomalyco/opentui#1336
• bench: add Node JS benchmark runner by @​simonklee in anomalyco/opentui#1337
• core: migrate to zig 0.16 by @​simonklee in anomalyco/opentui#1286
• ci: limit native artifact upload to platform packages by @​simonklee in anomalyco/opentui#1347
• test(core): remove network dependency from tree-sitter test by @​simonklee in anomalyco/opentui#1348
• fix(web): pin Bun types to 1.3.14 by @​simonklee in anomalyco/opentui#1349
• feat(core): add embedded terminal runtime by @​jlongster in anomalyco/opentui#1338
• image: accept retained NativeImage sources by @​simonklee in anomalyco/opentui#1356
• Clipboard and paste by @​simonklee in anomalyco/opentui#1271
• render: bound streaming code highlights by @​simonklee in anomalyco/opentui#1331

... (truncated)

Commits

• c1ae55b fix: pin Bun types to 1.3.14
• b7b4a95 Release v0.5.6
• fdf893d Release v0.5.5
• 7f5b19b Release v0.5.4
• 1500698 Release v0.5.3
• 14b3d13 Release v0.5.2
• ad9a818 prepare release v0.5.1
• 1bc4d2a prepare release v0.5.0
• 078bb44 feat(core): add native image rendering (#1283)
• 0c8c4f7 Release v0.4.5
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​opentui/solid since your current version.

Updates babel-preset-solid from 1.9.12 to 1.9.15

Commits

• See full diff in compare view

Updates solid-js from 1.9.13 to 1.9.15

Commits

• a252c78 chore: version packages for 1.9.15 release
• 5aceb1c test: isolate transition #2046 from leaked enableScheduling
• 954b968 Update DOM expression runtimes
• c6aa672 fix: re-subscribe external sources after a transition
• f55af45 test: reset hydration leftovers after lazy() reject
• 59649bc fix: exclude shared keys from later splitProps groups
• 7700341 fix: surface lazy() rejections and allow retry
• 5086b27 fix(reactive): make createSelector transition-aware
• c257b9e chore: upgrade CI tooling and add CVE Lite scan
• d2f81d5 chore: version packages for 1.9.14 release
• Additional commits viewable in compare view

Updates convex-svelte from 0.0.12 to 0.14.0

Release notes

Sourced from convex-svelte's releases.

v0.14.0

Minor Changes

• 97e072f: ### Features

  • closeConvex() - new export (from convex-svelte and convex-svelte/sveltekit) for explicit client teardown, e.g. in tests. After closing, the next setupConvex() / initConvex() creates a fresh client.

  Fixes

  • HMR and remounts - setupConvex() no longer closes the client when its component unmounts. The client is shared app-wide (context hooks, SSR transport, detached queries), so closing it on component teardown broke remounts and crashed dev-mode HMR with a misleading "ConvexClient is disabled" error. The client is now app-scoped, stays open for the lifetime of the app, and a closed client is never reused.
  • usePaginatedQuery with keepPreviousData - existing paginated results stay visible while new query arguments load, preventing transient empty states during search/filter changes.
  • usePaginatedQuery with SSR initialData - loadMore() calls made before the live subscription is ready are now queued and run once it connects, instead of being silently dropped.

  Improvements

  • Single deployment per app - setupConvex() and initConvex() now throw when called with a different URL while a client already exists, instead of silently reusing the old deployment's client.

v0.13.0

Minor Changes

• 874612c: ### Features

  • Authentication - setupAuth() and useAuth() for reactive auth state management. Includes SSR hydration via initialState option.
  • getConvexClient() - retrieves the Convex client from a module-level singleton, working anywhere (.ts, .svelte, hooks) as long as setupConvex() has been called first.
  • SvelteKit subpath (convex-svelte/sveltekit) - new export with SvelteKit-specific helpers:
    • convexLoad() - SSR data fetching that auto-upgrades to live subscriptions on the client
    • createConvexHttpClient() - server-side HTTP client helper with auth token support
    • getConvexUrl() - retrieve the deployment URL set by initConvex() or setupConvex()
  • convexLoadPaginated() - SSR-compatible paginated query loading. Fetches the first page on the server and automatically upgrades to a live paginated subscription on the client, with loadMore() support for incremental loading.
  • useMutation() / useAction() - thin wrappers that return callable functions for mutations and actions. They work in .svelte components and plain .ts / .js files.
  • withServerConvexToken(token, fn) - new server-only helper (exported from convex-svelte/sveltekit/server) that stores the auth token in request-scoped AsyncLocalStorage. Wrap your SvelteKit resolve() call with it in hooks.server.ts and convexLoad / createConvexHttpClient will automatically use the token during SSR.
  • Automatic server-side token for convexLoad, convexLoadPaginated, and createConvexHttpClient - when no explicit { token } option is provided, the server path falls back to the token set by withServerConvexToken.
  • New export path convex-svelte/sveltekit/server - server-only utilities that depend on node:async_hooks. Currently exports withServerConvexToken.
  • Skip support for convexLoad / convexLoadPaginated - pass 'skip' as args to avoid fetching. Useful for auth-gated queries that should not run when the user is unauthenticated.

  Fixes

  • Use authenticated singleton ConvexClient for client-side initial fetches in convexLoad() and convexLoadPaginated() instead of creating new HTTP clients.
  • Prevent flash of null query results during SSR hydration by calling client.setAuth() synchronously during setupAuth() initialization.
  • Add deferred subscription queue to prevent auth gap between transport.decode and setupAuth.
  • Add isLoading, error, and isStale properties to ConvexLoadResult for consistent query state interface.

  Improvements

  • Expose UsePaginatedQuery types and consolidate API reference table with type exports.
  • Raise peer dependency floors to convex@^1.30.0 and svelte@^5.19.0. convex-svelte relies on Convex 1.30.0 behavior for paginated query SSR hydration, and on Svelte 5.19.0 compiler fixes for TypeScript/runes syntax.
  • Explicit { token } option still takes priority (fully backward compatible). Client-side navigation still uses the authenticated singleton.
  • Restructured README with expanded installation guide, client access patterns, SSR performance rationale, and API reference.

  Docs

... (truncated)

Changelog

Sourced from convex-svelte's changelog.

0.14.0

Minor Changes

• 97e072f: ### Features

  • closeConvex() - new export (from convex-svelte and convex-svelte/sveltekit) for explicit client teardown, e.g. in tests. After closing, the next setupConvex() / initConvex() creates a fresh client.

  Fixes

  • HMR and remounts - setupConvex() no longer closes the client when its component unmounts. The client is shared app-wide (context hooks, SSR transport, detached queries), so closing it on component teardown broke remounts and crashed dev-mode HMR with a misleading "ConvexClient is disabled" error. The client is now app-scoped, stays open for the lifetime of the app, and a closed client is never reused.
  • usePaginatedQuery with keepPreviousData - existing paginated results stay visible while new query arguments load, preventing transient empty states during search/filter changes.
  • usePaginatedQuery with SSR initialData - loadMore() calls made before the live subscription is ready are now queued and run once it connects, instead of being silently dropped.

  Improvements

  • Single deployment per app - setupConvex() and initConvex() now throw when called with a different URL while a client already exists, instead of silently reusing the old deployment's client.

0.13.0

Minor Changes

• 874612c: ### Features

  • Authentication - setupAuth() and useAuth() for reactive auth state management. Includes SSR hydration via initialState option.
  • getConvexClient() - retrieves the Convex client from a module-level singleton, working anywhere (.ts, .svelte, hooks) as long as setupConvex() has been called first.
  • SvelteKit subpath (convex-svelte/sveltekit) - new export with SvelteKit-specific helpers:
    • convexLoad() - SSR data fetching that auto-upgrades to live subscriptions on the client
    • createConvexHttpClient() - server-side HTTP client helper with auth token support
    • getConvexUrl() - retrieve the deployment URL set by initConvex() or setupConvex()
  • convexLoadPaginated() - SSR-compatible paginated query loading. Fetches the first page on the server and automatically upgrades to a live paginated subscription on the client, with loadMore() support for incremental loading.
  • useMutation() / useAction() - thin wrappers that return callable functions for mutations and actions. They work in .svelte components and plain .ts / .js files.
  • withServerConvexToken(token, fn) - new server-only helper (exported from convex-svelte/sveltekit/server) that stores the auth token in request-scoped AsyncLocalStorage. Wrap your SvelteKit resolve() call with it in hooks.server.ts and convexLoad / createConvexHttpClient will automatically use the token during SSR.
  • Automatic server-side token for convexLoad, convexLoadPaginated, and createConvexHttpClient - when no explicit { token } option is provided, the server path falls back to the token set by withServerConvexToken.
  • New export path convex-svelte/sveltekit/server - server-only utilities that depend on node:async_hooks. Currently exports withServerConvexToken.
  • Skip support for convexLoad / convexLoadPaginated - pass 'skip' as args to avoid fetching. Useful for auth-gated queries that should not run when the user is unauthenticated.

  Fixes

  • Use authenticated singleton ConvexClient for client-side initial fetches in convexLoad() and convexLoadPaginated() instead of creating new HTTP clients.
  • Prevent flash of null query results during SSR hydration by calling client.setAuth() synchronously during setupAuth() initialization.
  • Add deferred subscription queue to prevent auth gap between transport.decode and setupAuth.
  • Add isLoading, error, and isStale properties to ConvexLoadResult for consistent query state interface.

  Improvements

  • Expose UsePaginatedQuery types and consolidate API reference table with type exports.
  • Raise peer dependency floors to convex@^1.30.0 and svelte@^5.19.0. convex-svelte relies on Convex 1.30.0 behavior for paginated query SSR hydration, and on Svelte 5.19.0 compiler fixes for TypeScript/runes syntax.
  • Explicit { token } option still takes priority (fully backward compatible). Client-side navigation still uses the authenticated singleton.
  • Restructured README with expanded installation guide, client access patterns, SSR performance rationale, and API reference.

  Docs

  • Fully reworked documentation with complete examples and in-depth explanations covering all features.
  • Added guidance on choosing between +page.ts (universal) and +page.server.ts (server-only) for convexLoad.

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for convex-svelte since your current version.

Updates @sveltejs/kit from 2.61.1 to 2.70.3

Release notes

Sourced from @​sveltejs/kit's releases.

Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: automated. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
cable-intel-web	Ready	Preview	Aug 24, 2026 6:37am

[anandpant]

@dependabot recreate

[dependabot]

Dependabot could not run Bun to update your dependencies due to a configuration error. Because of this, Dependabot cannot update this pull request.

[anandpant]

Closing: #144 (now on main) covers everything here except the Biome 2.5.9 and Ultracite 7.10.6 lint-tool bumps. Dependabot can't rebuild this PR because it can no longer run this repo's Bun setup, so those two will be handled separately if needed.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml