chore(deps-dev): bump the npm group in /web with 8 updates

[dependabot]

Bumps the npm group in /web with 8 updates:

Package	From	To
@iconify-json/lucide	1.2.116	1.2.117
@iconify-json/simple-icons	1.2.89	1.2.90
@sveltejs/kit	2.69.2	2.69.3
prettier	3.9.4	3.9.5
svelte	5.56.4	5.56.5
svelte-check	4.7.2	4.7.3
tsx	4.23.0	4.23.1
vite	8.1.2	8.1.4

Updates @iconify-json/lucide from 1.2.116 to 1.2.117

Commits

• See full diff in compare view

Updates @iconify-json/simple-icons from 1.2.89 to 1.2.90

Commits

• See full diff in compare view

Updates @sveltejs/kit from 2.69.2 to 2.69.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.69.3

Patch Changes

• fix: detect destructured load and actions exports during type generation (#16329)

• fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

• fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.69.3

Patch Changes

• fix: detect destructured load and actions exports during type generation (#16329)

• fix: ensure CSS URL references are absolute when paths.relative is false (#16315)

• fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)

Commits

• 80b18f5 Version Packages (#16316)
• b557b1b fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)
• 14d7d5a fix: detect destructured route exports during type generation (#16329)
• 5c38e51 fix: keep CSS URL references as absolute for relative: false (#16315)
• See full diff in compare view

Updates prettier from 3.9.4 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

• b6c7d18 Release 3.9.5
• cd54ccc Avoid corrupting empty Markdown link with title (#19487)
• 2bb67ce Preserving comments' placement property (#19567)
• 91bcac8 Add more tests for comment-only object type (#19587)
• cbee737 Remove space in empty object type (#19583)
• 6394c73 Align empty module declaration with TS (#19568)
• a4e6f7a Prevent the addition of space in type() with + (#19516)
• 3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
• 908503e Handle dangling comments in SwitchStatement (#19581)
• 943a475 Angular: Support expression for exhaustive typechecking (#19571)
• Additional commits viewable in compare view

Updates svelte from 5.56.4 to 5.56.5

Release notes

Sourced from svelte's releases.

svelte@5.56.5

Patch Changes

• chore: drop dead code that make TSGO fail (#18496)

• fix: don't (re)connect deriveds when read inside branch/root effects (#18527)

• fix: skip unnecessary derived effect in earlier batch (#18525)

• fix: avoid declaration tag warning in event handlers (#18500)

• fix: abort deriveds own AbortSignal when it disconnects (#18400)

• fix: ensure $state.eager() is correctly transormed for SSR output (#18530)

• fix: correctly transform declaration tags during SSR (#18492)

• fix: transform computed keys in keyed {#each} destructuring patterns (#18521)

• fix: chain preprocessor sourcemaps with an empty sources[0] instead of dropping them (#18518)

• fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (#18541)

• fix: don't treat declaration tags as parts inside each blocks (#18507)

Changelog

Sourced from svelte's changelog.

5.56.5

Patch Changes

• chore: drop dead code that make TSGO fail (#18496)

• fix: don't (re)connect deriveds when read inside branch/root effects (#18527)

• fix: skip unnecessary derived effect in earlier batch (#18525)

• fix: avoid declaration tag warning in event handlers (#18500)

• fix: abort deriveds own AbortSignal when it disconnects (#18400)

• fix: ensure $state.eager() is correctly transormed for SSR output (#18530)

• fix: correctly transform declaration tags during SSR (#18492)

• fix: transform computed keys in keyed {#each} destructuring patterns (#18521)

• fix: chain preprocessor sourcemaps with an empty sources[0] instead of dropping them (#18518)

• fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (#18541)

• fix: don't treat declaration tags as parts inside each blocks (#18507)

Commits

• 602a873 Version Packages (#18497)
• a4fd67e fix: $state.eager() is sometimes incorrect in SSR (#18530)
• 199ffeb fix: clear previous_task reference after abort in Tween (#18541)
• edeef1f chore: add some failing tests (#18528)
• a91b068 fix: abort deriveds own AbortSignal when it disconnects (#18400)
• b4d1583 fix: transform computed keys in keyed each block destructuring patterns (#18521)
• 08a9e9e fix: prevent derived connection leak in untracked contexts (#18517)
• bfbb026 fix: skip unnecessary derived effect in earlier batch (#18525)
• 5edd8b0 fix: chain preprocessor sourcemaps with an empty sources[0] (#18518)
• 41642b7 fix: avoid declaration tag warning in event handlers (#18500)
• Additional commits viewable in compare view

Updates svelte-check from 4.7.2 to 4.7.3

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.3

Patch Changes

• feat: zero-config +error.svelte props (#3076)

Commits

• 6a7012c Version Packages (#3077)
• d653640 feat: zero-config +error.svelte props (#3076)
• See full diff in compare view

Updates tsx from 4.23.0 to 4.23.1

Release notes

Sourced from tsx's releases.

v4.23.1

4.23.1 (2026-07-13)

Bug Fixes

• support tsImport after global preload (8d4ffc2)
• watch: avoid clearing piped output (95d0672)
• watch: treat script and dependency paths literally (79fddde)

Performance Improvements

• index transform cache lazily (e818ad6)
• load esbuild lazily in CLI (d067938)
• map Node TypeScript formats directly (cdcc623)
• use sync module hooks on Node v22.22.3+ (f8992f1)

---

This release is also available on:

• npm package (@​latest dist-tag)

Commits

• 79fddde fix(watch): treat script and dependency paths literally
• e818ad6 perf: index transform cache lazily
• cdcc623 perf: map Node TypeScript formats directly
• d067938 perf: load esbuild lazily in CLI
• 95d0672 fix(watch): avoid clearing piped output
• 6fd4607 docs: add per-page metadata
• f4176d8 docs: generate sitemap
• 8d4ffc2 fix: support tsImport after global preload
• f0e89b2 docs: document Node's public type-stripping API vs internal loader path
• f8992f1 perf: use sync module hooks on Node v22.22.3+
• See full diff in compare view

Updates vite from 8.1.2 to 8.1.4

Release notes

Sourced from vite's releases.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.4 (2026-07-09)

Features

• legacy: prefer oxc as minifier (fix #21973) (#22468) (ab5dafa)

Bug Fixes

• build: add workaround for building on stackblitz (#22840) (575c32c)
• build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
• deps: update all non-major dependencies (#22865) (d4295a9)
• deps: update rolldown-related dependencies (#22866) (7cf07e4)
• html: avoid backtracking in import-only check (#22848) (b5868c0)
• optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
• ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
• strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

• fix incorrect @default for server.cors (#22859) (70435b2)

Miscellaneous Chores

• deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

• eliminate ineffectiveDynamicImport warn (#22876) (ea22fb3)

Tests

• avoid warnings (#22851) (af21ab6)

Build System

• remove the custom onLog function (#22878) (2c4a217)
• replace deprecated onwarn with onLog (#22741) (c581b55)

8.1.3 (2026-07-02)

Bug Fixes

• css: inject inlined CSS after the shebang line (#22717) (1534d36)
• deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)
• preload css for nested dynamic imports (#22759) (2c53054)
• ssr: correct stacktrace column position for first line (#22828) (c4acd69)

Commits

• a477454 release: v8.1.4
• ab5dafa feat(legacy): prefer oxc as minifier (fix #21973) (#22468)
• 173a1b6 fix(ssr): align named export function call stacktrace column with Node (#22829)
• 575c32c fix(build): add workaround for building on stackblitz (#22840)
• 72a5e21 fix(optimizer): avoid optimizer run for transform request before init (#22852)
• a9539d6 chore(deps): update dependency postcss-modules to v9 (#22867)
• 70435b2 docs: fix incorrect @default for server.cors (#22859)
• 2c4a217 build: remove the custom onLog function (#22878)
• c581b55 build: replace deprecated onwarn with onLog (#22741)
• ea22fb3 refactor: eliminate ineffectiveDynamicImport warn (#22876)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions