[dependabot]

Bumps svelte-check from 4.7.6 to 4.7.7.

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.7

Patch Changes

• fix: recognise modern CSS properties such as corner-shape by updating vscode-css-languageservice (#3122)

• fix: recognise the real <script> and <style> start tags when a matching token also appears inside the other tag (#3079)

• fix: resolve symlinked packages when importing their .svelte files, so their types are not duplicated (#3119)

• fix: align default tsconfig "include" logic with tsc/tsserver (#3110)

• fix: report a failed TypeScript compiler process and exit non-zero when a run fails (#3133)

• fix: ignore the .svelte-check cache directory in --watch with --tsgo / --incremental (#3128)

• fix: check all files with --tsgo / --incremental when the tsconfig has no include (#3138)

• fix: disallow --tsgo together with --tsgo-experimental-api (#3128)

• fix: type elements from Svelte's svelte-html.d.ts with --tsgo / --incremental, like the language server (#3141)

Commits

• b1ab063 Version Packages (#3107)
• 3f734db fix: config discovery under dot directories (#3121)
• 2a80d78 fix: check all files with --tsgo / --incremental when tsconfig has no include...
• 297b9e0 fix: type elements from svelte-html.d.ts with --tsgo / --incremental (#3141)
• 2394f19 fix: don't hide $props's type argument error (#3126)
• e549d19 fix(syntax): don't let comments inside \<template> swallow the file (#3137)
• af7c6a5 fix: report a failed TypeScript compiler process instead of a clean run (#3133)
• abaa1ee fix: ignore svelte-check cache directory in watch mode with --tsgo / --increm...
• 1d367d0 fix: ignore noEmitOnError and isolatedDeclarations in emitDts (#3129)
• 565abf9 Recognise modern CSS properties in svelte check (#3122)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

APPROVE — routine patch bump of a dev-only type checker; fixes only, no breaking changes.

Package	Jump	CI	Risk
svelte-check	4.7.6 → 4.7.7	still running at review time	low

What changed

• Fixes: modern CSS properties (e.g. corner-shape) are now recognised, symlinked package .svelte imports resolve, and <script>/<style> tag detection is more robust.
• svelte-check now reports a failed TypeScript process and exits non-zero. A previously silent failure could now turn npm run check red. That would be a real finding, not a regression.
• The --tsgo/--incremental fixes don't apply unless those flags are used.
• It stays in devDependencies, so ADR-0070 is unaffected. It is only run by npm run check, with no runtime imports.
• Lockfile: a transitive legacy-javascript 0.0.1 → 0.0.3 (under @paulirish/trace_engine, Lighthouse tooling) and two deprecated markers on @opentelemetry/sdk-trace-*. These are lockfile re-resolution noise. No new install scripts or new packages, and the deprecations are metadata only.

[KyleMit]

MERGE

Merge 3 of 11, wave 1, after #3189. Conflicts with #3188 (wave 2) and #3187 (recommended close).

• svelte-check 4.7.6 → 4.7.7, patch, devDependencies. It runs as Quality's Type check step.
• CI: Type check passed on this head under the new version, and every other job except Quality's audit step is green.

Quality is red on every PR in the batch and on main (ef3d1eb) at its last step, Audit dependencies: vite 8.3.1 (high), handlebars 4.7.9 via @capacitor/assets (critical), source-map-js 1.2.1 (high), uuid 7.0.3 and postcss-selector-parser 7.1.5 (moderate). Every earlier Quality step (format, type check, lint, knip, production deps) passed on this PR. With the whole batch applied via npm pkg set, pnpm audit clears only @vitest/mocker (2 moderate, #3186) and cookie (1 low, #3187). Quality stays red after the batch and needs its own fix; it is not this PR's failure.

Batch — 15 open Dependabot PRs (npm 14 of its 30-PR limit, actions 1 of 10, so nothing is queued behind the limit). Wave 1, in this order, simulated with chained git merge-tree plus a unique-key pnpm-lock.yaml parse, clean at every step: #3186 → #3189 → #3192 → #3194 → #3197 → #3198. Wave 2, one Dependabot rebase each after wave 1 lands, because each conflicts in package.json/pnpm-lock.yaml with a wave-1 PR: #3188, #3190, #3191, #3193, #3195. HOLD: #3184, #3196. Recommended CLOSE: #3185, #3187.

🤖 Generated with Claude Code

---

Generated by Claude Code