Files
pad/web/package.json
T
xarmian 1dabfd02ae chore(web)(deps): bump vite-plugin-svelte 6 → 7 + vite 7 → 8 (TASK-1238) (#444)
Coordinated bump of the Vite/Svelte build-tool stack:
  • @sveltejs/vite-plugin-svelte  6.2.4 → 7.1.2
  • vite                          7.3.1 → 8.0.11
  • @sveltejs/kit                 2.59.0 → 2.59.1 (patch, free)
  • @sveltejs/adapter-auto        7.0.0  → 7.0.1  (patch, free)

Smaller cascade than the deferred-bumps task body anticipated:
SvelteKit 2.59 already declared `^8.0.0` in its vite peer-dep range, so
no Kit major bump was needed. adapter-static is unaffected. svelte
itself (5.55.5) already meets the new vite-plugin-svelte v7 peer
constraint of ^5.46.4.

vite-plugin-svelte v7 integrated the inspector into the main package,
so the @sveltejs/vite-plugin-svelte-inspector subdep is gone — net 5
fewer packages in node_modules and a ~7KB smaller package-lock.json.

Vite 8 highlights:
  • Rolldown replaces Rollup as the bundler — production build dropped
    from ~12-16s to ~5.9s on this codebase
  • Internally compiled with TypeScript 6 (matches our own TS 6 bump
    from TASK-1236)
  • npm audit moderate vulnerability count: 1 → 0 (the uuid advisory
    was in a transitive that's no longer needed)

Configs reviewed:
  • vite.config.ts is minimal (just sveltekit() plugin + dev proxy);
    none of v7's removed options (vitePlugin.hot,
    vitePlugin.ignorePluginPreprocessors, api.idFilter,
    plugin.api.sveltePreprocess) are in use.
  • svelte.config.js uses vitePlugin.dynamicCompileOptions (still
    supported in v7).

Verified:
  • Clean reinstall (rm -rf node_modules package-lock.json && npm i):
    290 packages, 0 vulnerabilities
  • npm run build: succeeds in 5.91s, output passes through
    adapter-static
  • make check (golangci-lint + go test + npm run build + svelte-check):
    0 errors, same 6 pre-existing warnings
  • Manual UI verify: dashboard, item list, item detail, editor (block
    drag-handle, content edit/save), role board, share page all render
    and function correctly

Rolldown surfaced one informational warning that's PRE-EXISTING in our
code, not introduced by the bump:
  [INEFFECTIVE_DYNAMIC_IMPORT] sync.svelte.ts is both static- and
  dynamic-imported. Filed as a follow-up task — fix is out of scope
  for this PR.

Closes dependabot/npm_and_yarn/web/sveltejs/vite-plugin-svelte-7.0.0
(PR #215). Closes PLAN-1240 Tier 3 (5/5 ships).
2026-05-08 07:52:15 -04:00

55 lines
1.5 KiB
JSON

{
"name": "web",
"private": true,
"version": "0.0.1",
"license": "Apache-2.0",
"type": "module",
"scripts": {
"dev": "vite dev",
"build": "vite build",
"preview": "vite preview",
"prepare": "svelte-kit sync || echo ''",
"check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json",
"check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
"test:e2e": "playwright test",
"test:e2e:ui": "playwright test --ui",
"test:e2e:install": "playwright install --with-deps chromium"
},
"devDependencies": {
"@playwright/test": "^1.59.1",
"@sveltejs/adapter-auto": "^7.0.1",
"@sveltejs/adapter-static": "^3.0.10",
"@sveltejs/kit": "^2.59.1",
"@sveltejs/vite-plugin-svelte": "^7.1.2",
"@types/qrcode": "^1.5.6",
"marked": "^18.0.3",
"svelte": "^5.55.5",
"svelte-check": "^4.4.7",
"typescript": "^6.0.3",
"vite": "^8.0.11"
},
"overrides": {
"cookie": "^0.7.2"
},
"dependencies": {
"@tiptap/core": "^3.22.5",
"@tiptap/extension-bubble-menu": "^3.22.5",
"@tiptap/extension-code-block-lowlight": "^3.22.5",
"@tiptap/extension-link": "^3.22.5",
"@tiptap/extension-placeholder": "^3.22.5",
"@tiptap/extension-table": "^3.22.5",
"@tiptap/extension-task-item": "^3.22.5",
"@tiptap/extension-task-list": "^3.22.5",
"@tiptap/pm": "^3.20.4",
"@tiptap/starter-kit": "^3.22.5",
"@tiptap/suggestion": "^3.22.5",
"diff": "^9.0.0",
"dompurify": "^3.4.2",
"lowlight": "^3.3.0",
"mermaid": "^11.14.0",
"qrcode": "^1.5.4",
"svelte-dnd-action": "^0.9.69",
"tiptap-markdown": "^0.9.0"
}
}