[dependabot]

Bumps eslint-plugin-svelte from 3.23.1 to 3.24.1.

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.24.1

Patch Changes

• #1665 4b06717 Thanks @​officialasishkumar! - fix(prefer-derived-over-derived-by): keep type annotations, comments and sequence expressions in the autofix, and skip it when it would change the code

• #1414 fbae40a Thanks @​ai! - fix(require-event-prefix): ignore function props that return a value (e.g. getHref: (item: T) => string). This also changes two cases: () => Promise<void> is now ignored unless checkAsyncFunctions is enabled, and functions that return a Promise of a value (e.g. Promise<string>) are now ignored even when checkAsyncFunctions is enabled.

  Only known no-value returns are checked; any, unknown, never, and unresolved generic returns are ignored. In generic components, only explicit no-value annotations and their Promise wrappers are checked to avoid false positives from parser substitutions.

• #1666 d5ad32a Thanks @​officialasishkumar! - fix: recognize <script module> in no-export-load-in-svelte-module-in-kit-pages and prefer-destructured-store-props

eslint-plugin-svelte@3.24.0

Minor Changes

• #1553 8cca2e0 Thanks @​marekdedic! - feat(no-navigation-without-resolve): track resolve() through array elements, object properties and {#each} iteration variables

Patch Changes

• #1380 9944910 Thanks @​baseballyama! - fix(no-navigation-without-resolve): check complete rel tokens before exempting external links

• #1566 e49015d Thanks @​arpitjain099! - fix(no-unused-props): fix false positives and negatives around spreads, aliases, dotted keys, and props that share a type

• #1516 7538afa Thanks @​kevin-easygo! - fix(no-reactive-functions): use isSpaceBetween instead of isSpaceBetweenTokens, which was removed in ESLint v10

• #1618 7999ad4 Thanks @​baseballyama! - fix(valid-compile): read the parser from context.languageOptions.parserOptions, since context.parserOptions was removed in ESLint v10

• #1606 78def78 Thanks @​ozenyunus35! - Allow a comment before a closing token in svelte/indent to be aligned with the previous line instead of requiring the indentation of the closing token.

• #1581 3b308f3 Thanks @​badreddinesaadioui! - fix(prefer-svelte-reactivity): stop reporting in legacy (non-runes) components, where the svelte/reactivity classes are not tracked

• #1627 36abd30 Thanks @​baseballyama! - Fix false positives in svelte/no-unused-props:

  • The props object is destructured (e.g. const { a } = props). A destructured key now counts as used when its binding is used, and an unused one is reported. Nested destructuring (e.g. const { name } = user) can now report unused nested properties, the same as user.name.
  • The props object is used as a whole (e.g. $inspect(props) or fn(props)). Every property now counts as used. A type query like typeof props.a is not counted as a use.
  • A dynamic key like user[key] now counts as using every property of user.
  • Numeric and template literal keys like props[0].a and props[`a`], and wrapped values like props!.a, (props as Props).a and (props satisfies Props).a are now tracked.
  • Instances of generic classes are now skipped like other class instances.
  • With allowUnusedNestedProperties, nested properties are never reported.
  • Class members that cannot be read from outside (#foo, private, protected) are no longer reported, e.g. in intersections.

• #1629 5e0c7bf Thanks @​baseballyama! - Stop svelte/no-unused-svelte-ignore from reporting svelte-ignore comments for runtime warnings (e.g. ownership_invalid_binding), which the compiler can't report.

• #1626 9aa3a7a Thanks @​baseballyama! - Require postcss@^8.5.10 to avoid GHSA-qx2v-qp2m-jg93.

• #1613 80e66ec Thanks @​smile-alive! - fix(sort-attributes): do not report or move shorthand attributes and directives across spread attributes

• #1635 cf11995 Thanks @​baseballyama! - fix(require-store-reactive-access): with type information, don't report callable stores used as functions, actions, transitions, or event handlers, and stores from function calls such as getContext() checked with ?? / ??= with a store fallback. Don't auto-fix stores that are not declared at the top level, are used in the module script, or are on the left side of ||= / &&= / ??=.

• #1616 a972353 Thanks @​eknathdj! - Honor svelte-ignore comments on nested script nodes in svelte/no-unused-svelte-ignore and svelte/valid-compile (Svelte 5), and no longer treat a comment at the end of the previous line as an ignore comment for the next node.

• #1648 ae85b36 Thanks @​baseballyama! - chore: update svelte-eslint-parser to 1.10.1

... (truncated)

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.24.1

Patch Changes

• #1665 4b06717 Thanks @​officialasishkumar! - fix(prefer-derived-over-derived-by): keep type annotations, comments and sequence expressions in the autofix, and skip it when it would change the code

• #1414 fbae40a Thanks @​ai! - fix(require-event-prefix): ignore function props that return a value (e.g. getHref: (item: T) => string). This also changes two cases: () => Promise<void> is now ignored unless checkAsyncFunctions is enabled, and functions that return a Promise of a value (e.g. Promise<string>) are now ignored even when checkAsyncFunctions is enabled.

  Only known no-value returns are checked; any, unknown, never, and unresolved generic returns are ignored. In generic components, only explicit no-value annotations and their Promise wrappers are checked to avoid false positives from parser substitutions.

• #1666 d5ad32a Thanks @​officialasishkumar! - fix: recognize <script module> in no-export-load-in-svelte-module-in-kit-pages and prefer-destructured-store-props

3.24.0

Minor Changes

• #1553 8cca2e0 Thanks @​marekdedic! - feat(no-navigation-without-resolve): track resolve() through array elements, object properties and {#each} iteration variables

Patch Changes

• #1380 9944910 Thanks @​baseballyama! - fix(no-navigation-without-resolve): check complete rel tokens before exempting external links

• #1566 e49015d Thanks @​arpitjain099! - fix(no-unused-props): fix false positives and negatives around spreads, aliases, dotted keys, and props that share a type

• #1516 7538afa Thanks @​kevin-easygo! - fix(no-reactive-functions): use isSpaceBetween instead of isSpaceBetweenTokens, which was removed in ESLint v10

• #1618 7999ad4 Thanks @​baseballyama! - fix(valid-compile): read the parser from context.languageOptions.parserOptions, since context.parserOptions was removed in ESLint v10

• #1606 78def78 Thanks @​ozenyunus35! - Allow a comment before a closing token in svelte/indent to be aligned with the previous line instead of requiring the indentation of the closing token.

• #1581 3b308f3 Thanks @​badreddinesaadioui! - fix(prefer-svelte-reactivity): stop reporting in legacy (non-runes) components, where the svelte/reactivity classes are not tracked

• #1627 36abd30 Thanks @​baseballyama! - Fix false positives in svelte/no-unused-props:

  • The props object is destructured (e.g. const { a } = props). A destructured key now counts as used when its binding is used, and an unused one is reported. Nested destructuring (e.g. const { name } = user) can now report unused nested properties, the same as user.name.
  • The props object is used as a whole (e.g. $inspect(props) or fn(props)). Every property now counts as used. A type query like typeof props.a is not counted as a use.
  • A dynamic key like user[key] now counts as using every property of user.
  • Numeric and template literal keys like props[0].a and props[`a`], and wrapped values like props!.a, (props as Props).a and (props satisfies Props).a are now tracked.
  • Instances of generic classes are now skipped like other class instances.
  • With allowUnusedNestedProperties, nested properties are never reported.
  • Class members that cannot be read from outside (#foo, private, protected) are no longer reported, e.g. in intersections.

• #1629 5e0c7bf Thanks @​baseballyama! - Stop svelte/no-unused-svelte-ignore from reporting svelte-ignore comments for runtime warnings (e.g. ownership_invalid_binding), which the compiler can't report.

• #1626 9aa3a7a Thanks @​baseballyama! - Require postcss@^8.5.10 to avoid GHSA-qx2v-qp2m-jg93.

• #1613 80e66ec Thanks @​smile-alive! - fix(sort-attributes): do not report or move shorthand attributes and directives across spread attributes

• #1635 cf11995 Thanks @​baseballyama! - fix(require-store-reactive-access): with type information, don't report callable stores used as functions, actions, transitions, or event handlers, and stores from function calls such as getContext() checked with ?? / ??= with a store fallback. Don't auto-fix stores that are not declared at the top level, are used in the module script, or are on the left side of ||= / &&= / ??=.

• #1616 a972353 Thanks @​eknathdj! - Honor svelte-ignore comments on nested script nodes in svelte/no-unused-svelte-ignore and svelte/valid-compile (Svelte 5), and no longer treat a comment at the end of the previous line as an ignore comment for the next node.

... (truncated)

Commits

• a18a0e4 chore: release eslint-plugin-svelte (#1670)
• fbae40a fix(require-event-prefix): ignore function props that return a value (#1414)
• d5ad32a fix: recognize \<script module> in two more rules (#1666)
• 4b06717 fix(prefer-derived-over-derived-by): stop the autofix from changing code (#1665)
• bed2470 chore: release eslint-plugin-svelte (#1611)
• ae85b36 chore: update svelte-eslint-parser to 1.10.1 (#1648)
• 5e0c7bf fix(no-unused-svelte-ignore): skip runtime warning codes (#1629)
• cf11995 fix(require-store-reactive-access): allow callable stores and ?? fallbacks ...
• 36abd30 fix(no-unused-props): handle props object destructuring and generic class ins...
• 9b859e3 fix(valid-compile): respect compilerOptions.runes from svelte config (#1625)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
box-box	Ready	Preview	Nov 11, 2026 3:36am UTC

[greptile-apps]

PR author is in the excluded authors list.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 89f019e9-0da9-4d91-8832-7840a9eada66

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn