chore(deps): update dependency svelte to v5.56.7

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
svelte (source)	5.55.5 → 5.56.7

---

Release Notes

sveltejs/svelte (svelte)

v5.56.7

Compare Source

Patch Changes

• chore: provide indent option for print (#​18474)

v5.56.6

Compare Source

Patch Changes

• perf: skip unnecessary blocker analysis when compiling components without top-level await (#​18548)

• fix: rerun derived that had an abort controller on reconnection (#​18551)

v5.56.5

Compare Source

Patch Changes

• chore: drop dead code that make TSGO fail (#​18496)

• fix: don't (re)connect deriveds when read inside branch/root effects (#​18527)

• fix: skip unnecessary derived effect in earlier batch (#​18525)

• fix: avoid declaration tag warning in event handlers (#​18500)

• fix: abort deriveds own AbortSignal when it disconnects (#​18400)

• fix: ensure $state.eager() is correctly transormed for SSR output (#​18530)

• fix: correctly transform declaration tags during SSR (#​18492)

• fix: transform computed keys in keyed {#each} destructuring patterns (#​18521)

• fix: chain preprocessor sourcemaps with an empty sources[0] instead of dropping them (#​18518)

• fix: clear previous_task reference after abort in Tween to prevent memory leak on interrupted tweens (#​18541)

• fix: don't treat declaration tags as parts inside each blocks (#​18507)

v5.56.4

Compare Source

Patch Changes

• fix: include wrapping parentheses in {@​const} declarator end position (#​18436)

• fix: always unset reactivity context after restoring it (#​18453)

• fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#​18425)

• fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#​18448)

v5.56.3

Compare Source

Patch Changes

• fix: ignore errors that occur in destroyed effects (#​18384)

• fix: type BigInts in $state.snapshot(...) return values (#​18388)

v5.56.2

Compare Source

Patch Changes

• fix: properly track effect end node for async sibling component (#​18371)

• fix: prevent false-positive reactivity loss warning (#​18373)

• chore: bump esrap dependency (#​18372)

• fix: ignore declaration tags for animation directive (#​18366)

• fix: reject pending async deriveds on discard (#​18308)

v5.56.1

Compare Source

Patch Changes

• fix: error at compile time on duplicate snippet/declaration tag definitions (#​18351)

• fix: parse declaration tag contents more robustly (#​18353)

• fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#​18348)

• fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#​18348)

• fix: tolerate whitespace before let/const in declaration tags (#​18348)

• fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#​18350)

• fix: more robust parsing of declaration tags with regards to type (#​18330)

• fix: preserve newlines in spread input values when the type attribute is applied after value (#​18345)

• fix: update SvelteURLSearchParams when setting duplicate keys to the same joined value (#​18336)

• fix: check references for blockers on server, too (#​18352)

v5.56.0

Compare Source

Minor Changes

• feat: allow declarations in the template (#​18282)

Patch Changes

• perf: use createElement instead of createElementNS for HTML elements (#​18262)

• perf: store current_sources as a Set for O(1) membership checks (#​18278)

• perf: deduplicate identical hoisted templates within a component (#​18320)

• perf: hoist rest_props exclude list as a module-scope Set (#​18252)

v5.55.10

Compare Source

Patch Changes

• fix: unlink errored and otherwise finished batch (#​18264)

• perf: walk composedPath() directly in delegated event propagation (#​18268)

• fix: transfer effects when merging batches (#​18254)

• fix: allow $derived(await ...) in disconnected effect roots (#​18273)

• fix: remove temporary raw-text hydration markers (#​18269)

• fix: propagate async @const blockers through closure references so template expressions like {(() => host)()} correctly wait for the awaited value (#​18309)

• fix: properly unlink batches (#​18298)

• fix: settle discarded batch (#​18290)

• fix: declare let: directives before {@​const} declarations on slotted elements (#​18271)

• fix: resume outro-ed branches if they were kept around (#​18291)

• fix: avoid waterfall-warning when async resolves to same value (#​18297)

• fix: correctly coordinate component-level effects inside async blocks (#​18260)

• fix: make unnecessary commit work less likely (#​18263)

• chore: add tag name to a11y_click_events_have_key_events warning (#​18272)

• fix: catch rejected promises while merging/committing (#​18266)

v5.55.9

Compare Source

Patch Changes

• fix: don't unset batch when calling {#await ...} promise (#​18243)

• fix: promise-ify {#await await ...} expressions on the server and correctly hydrate them on the client (#​18243)

• fix: deduplicate dependencies that are added outside the init/update cycle (#​18243)

• fix: avoid false-positive batch invariant error (#​18246)

• fix: inline primitive constants in attribute values during SSR (#​18232)

v5.55.8

Compare Source

Patch Changes

• fix(print): handle svelte:body and fix keyframe percentage double-printing (#​18234)

• fix: execute uninitialized derived even if it's destroyed (#​18228)

• fix: use named symbols everywhere (#​18238)

• fix: don't run teardown effects when deriveds are unfreezed (#​18227)

• fix: unset context synchronously in run (#​18236)

v5.55.7

Compare Source

Patch Changes

• fix: prevent XSS on hydratable from user contents (a16ebc67bbcf8f708360195687e1b2719463e1a4)

• chore: bump devalue (#​18219)

• fix: disallow empty attribute names during SSR (547853e2406a2147ad7fb5ffeba95b01bd9642da)

• fix: harden regex (d2375e2ebcab5c88feb5652f1a9d621b8f06b259)

• fix: move Svelte runtime properties to symbols (e1cbbd96441e82c9eb8a23a2903c0d06d3cda991)

v5.55.6

Compare Source

Patch Changes

• fix: leave stale promises to wait for a later resolution, instead of rejecting (#​18180)

• fix: keep dependencies of $state.eager/pending (#​18218)

• fix: reapply context after transforming error during SSR (#​18099)

• fix: don't rebase just-created batches (#​18117)

• chore: allow null for pending in typings (#​18201)

• fix: flush eager effects in production (#​18107)

• fix: rethrow error of failed iterable after calling return() (#​18169)

• fix: account for proxified instance when updating bind:this (#​18147)

• fix: ensure scheduled batch is flushed if not obsolete (#​18131)

• fix: resolve stale deriveds with latest value (#​18167)

• chore: remove unnecessary increment_pending calls (#​18183)

• fix: correctly compile component member expressions for SSR (#​18192)

• fix: reset source.updated stack traces after flush (#​18196)

• fix: replacing async 'blocking' strategy with 'merging' (#​18205)

• fix: allow @debug tags to reference awaited variables (#​18138)

• fix: re-run fallback props if dependencies update (#​18146)

• fix: abort running obsolete async branches (#​18118)

• fix: ignore comments when reading CSS values (#​18153)

• fix: wrap Promise.all in save during SSR (#​18178)

• fix: ignore false-positive errors of $inspect dependencies (#​18106)

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

cargo audit found vulnerabilities:

• RUSTSEC-2026-0204 crossbeam-epoch@0.9.18: Invalid pointer dereference in fmt::Pointer impl for Atomic and Shared when the underlying pointer is invalid
• RUSTSEC-2023-0071 rsa@0.9.10: Marvin Attack: potential key recovery through timing sidechannels