chore(deps-dev): Bump svelte from 3.59.2 to 5.51.5 by dependabot[bot] · Pull Request #19439 · getsentry/sentry-javascript

dependabot · 2026-02-19T20:25:50Z

Bumps svelte from 3.59.2 to 5.51.5.

Release notes

svelte@5.51.5

Patch Changes

fix: check to make sure svelte:element tags are valid during SSR (73098bb26c6f06e7fd1b0746d817d2c5ee90755f)

fix: misc option escaping and backwards compatibility (#17741)

fix: strip event handlers during SSR (a0c7f289156e9fafaeaf5ca14af6c06fe9b9eae5)

fix: replace usage of for in with for of Object.keys (f89c7ddd7eebaa1ef3cc540400bec2c9140b330c)

fix: always escape option body in SSR (f7c80da18c215e3727c2a611b0b8744cc6e504c5)

chore: upgrade devalue (#17739)

svelte@5.51.4

Patch Changes

chore: proactively defer effects in pending boundary (#17734)

fix: detect and error on non-idempotent each block keys in dev mode (#17732)

svelte@5.51.3

Patch Changes

fix: prevent event delegation logic conflicting between svelte instances (#17728)

fix: treat CSS attribute selectors as case-insensitive for HTML enumerated attributes (#17712)

fix: locate Rollup annontaion friendly to JS downgraders (#17724)

fix: run effects in pending snippets (#17719)

svelte@5.51.2

Patch Changes

fix: take async into consideration for dev delegated handlers (#17710)

fix: emit state_referenced_locally warning for non-destructured props (#17708)

svelte@5.51.1

Patch Changes

fix: don't crash on undefined document.contentType (#17707)

fix: use symbols for encapsulated event delegation (#17703)

svelte@5.51.0

Minor Changes

... (truncated)

Changelog

Sourced from svelte's changelog.

svelte

4.2.3

Patch Changes

fix: improve a11y-click-events-have-key-events message (#9358)

fix: more robust hydration of html tag (#9184)

4.2.2

Patch Changes

fix: support camelCase properties on custom elements (#9328)

fix: add missing plaintext-only value to contenteditable type (#9242)

chore: upgrade magic-string to 0.30.4 (#9292)

fix: ignore trailing comments when comparing nodes (#9197)

4.2.1

Patch Changes

fix: update style directive when style attribute is present and is updated via an object prop (#9187)

fix: css sourcemap generation with unicode filenames (#9120)

fix: do not add module declared variables as dependencies (#9122)

fix: handle svelte:element with dynamic this and spread attributes (#9112)

fix: silence false positive reactive component warning (#9094)

fix: head duplication when binding is present (#9124)

fix: take custom attribute name into account when reflecting property (#9140)

fix: add indeterminate to the list of HTMLAttributes (#9180)

fix: recognize option value on spread attribute (#9125)

4.2.0

Minor Changes

feat: move svelteHTML from language-tools into core to load the correct svelte/element types (#9070)

... (truncated)

Commits

8ea33bf Version Packages (#17740)
f855a0b fix: misc option escaping and backwards compatibility (#17741)
781052e chore: upgrade devalue (#17739)
f7c80da Merge commit from fork
a0c7f28 Merge commit from fork
73098bb Merge commit from fork
f89c7dd Merge commit from fork
b8f2b86 Version Packages (#17733)
c83aa06 chore: proactively defer effects in pending boundary (#17734)
2287ad0 fix: detect and error on non-idempotent each block keys in dev mode (#17732)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for svelte since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) from 3.59.2 to 5.51.5. - [Release notes](https://github.com/sveltejs/svelte/releases) - [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG-pre-5.md) - [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.51.5/packages/svelte) --- updated-dependencies: - dependency-name: svelte dependency-version: 5.51.5 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

sentry · 2026-02-19T20:29:52Z

packages/svelte/package.json

@@ -49,7 +49,7 @@
  "devDependencies": {
    "@sveltejs/vite-plugin-svelte": "1.4.0",


Bug: The @sveltejs/vite-plugin-svelte dependency is pinned to version 1.4.0, which is incompatible with Svelte 5 and will cause build and test failures.
_{Severity: CRITICAL}

Suggested Fix

Update the @sveltejs/vite-plugin-svelte dependency in packages/svelte/package.json from version 1.4.0 to a version compatible with Svelte 5, such as ^3.0.0.

Prompt for AI Agent

Review the code at the location below. A potential bug has been identified by an AI agent. Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not valid. Location: packages/svelte/package.json#L50 Potential issue: The `package.json` for the `svelte` package pins the `@sveltejs/vite-plugin-svelte` dependency to version `1.4.0`. This version is incompatible with the Svelte 5 upgrade in this pull request, which requires version `^3.0.0` or higher. This mismatch will cause the build and test pipeline to fail when the Vite configuration attempts to load the outdated plugin, preventing any tests from running successfully. Other packages in the monorepo, such as `sveltekit`, already use a compatible version of the plugin.

_{Did we get this right? 👍 / 👎 to inform future reviews.}

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

cursor · 2026-02-19T20:29:56Z

packages/svelte/package.json

    "@sveltejs/vite-plugin-svelte": "1.4.0",
    "@testing-library/svelte": "^3.2.1",
-    "svelte": "3.59.2",
+    "svelte": "5.51.5",


Svelte 5 bump breaks incompatible vite plugin dependency

High Severity

Bumping svelte from 3.59.2 to 5.51.5 without updating @sveltejs/vite-plugin-svelte from 1.4.0 breaks the build and test pipeline. Version 1.4.0 only supports Svelte 3 (depends on svelte-hmr@^0.15.1) and is incompatible with Svelte 5's completely different compiler API. Similarly, @testing-library/svelte ^3.2.1 doesn't support Svelte 5 — tests using component.$set() will fail since Svelte 5 components are no longer class instances. Both companion dev dependencies need to be updated to Svelte 5–compatible versions.

Lms24 · 2026-02-19T20:38:33Z

Closing this. Svelte 3 is still the lowest version we support in the SDK. We will not bump the dev dependency. It is not shipped to users or used in the SDK besides tests.

dependabot · 2026-02-19T20:38:36Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 19, 2026

sentry bot reviewed Feb 19, 2026

View reviewed changes

cursor bot reviewed Feb 19, 2026

View reviewed changes

Lms24 closed this Feb 19, 2026

dependabot bot deleted the dependabot/npm_and_yarn/svelte-5.51.5 branch February 19, 2026 20:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): Bump svelte from 3.59.2 to 5.51.5#19439

chore(deps-dev): Bump svelte from 3.59.2 to 5.51.5#19439
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/npm_and_yarn/svelte-5.51.5

dependabot bot commented on behalf of github Feb 19, 2026

Uh oh!

sentry bot Feb 19, 2026

Uh oh!

cursor bot left a comment

Uh oh!

cursor bot Feb 19, 2026

Uh oh!

Lms24 commented Feb 19, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

		@@ -49,7 +49,7 @@
		"devDependencies": {
		"@sveltejs/vite-plugin-svelte": "1.4.0",

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 19, 2026

svelte@5.51.5

Patch Changes

svelte@5.51.4

Patch Changes

svelte@5.51.3

Patch Changes

svelte@5.51.2

Patch Changes

svelte@5.51.1

Patch Changes

svelte@5.51.0

Minor Changes

svelte

4.2.3

Patch Changes

4.2.2

Patch Changes

4.2.1

Patch Changes

4.2.0

Minor Changes

Uh oh!

sentry bot Feb 19, 2026

Choose a reason for hiding this comment

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Feb 19, 2026

Choose a reason for hiding this comment

Svelte 5 bump breaks incompatible vite plugin dependency

Uh oh!

Lms24 commented Feb 19, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 19, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments