chore(deps)(deps-dev): Bump the development-dependencies group with 2 updates (#28499)

Bumps the development-dependencies group with 2 updates:
[svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte)
and [postcss](https://github.com/postcss/postcss).

Updates `svelte` from 5.57.1 to 5.57.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/releases">svelte's
releases</a>.</em></p>
<blockquote>
<h2>svelte@5.57.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: use the first valid fallback role in <code>role</code> for a11y
checks (<a
href="https://redirect.github.com/sveltejs/svelte/pull/19045">#19045</a>)</p>
</li>
<li>
<p>chore: remove obsolete code (<a
href="https://redirect.github.com/sveltejs/svelte/pull/19051">#19051</a>)</p>
</li>
<li>
<p>fix: keep creating state sources for property checks during component
init (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18949">#18949</a>)</p>
</li>
<li>
<p>fix: skip redundant attribute writes during hydration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18869">#18869</a>)</p>
</li>
<li>
<p>fix: track missing state property checks in unowned deriveds (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18944">#18944</a>)</p>
</li>
<li>
<p>fix: <code>devalue</code> link in
<code>hydratable_serialization_failed</code> error (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18999">#18999</a>)</p>
</li>
</ul>
<h2>svelte@5.57.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: don't create async deriveds for a component destroyed while
waiting for its top-level <code>await</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18931">#18931</a>)</p>
</li>
<li>
<p>fix: prevent untracked derived reads from retaining disconnected
dependencies (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18829">#18829</a>)</p>
</li>
<li>
<p>fix: error if <code>{:else}</code> is followed by another
<code>{:else}</code> or <code>{:else if ...}</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18900">#18900</a>)</p>
</li>
<li>
<p>fix: avoid tracking SvelteURLSearchParams during URL updates (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18791">#18791</a>)</p>
</li>
<li>
<p>fix: restore hydration state when custom element attribute updates
throw (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18467">#18467</a>)</p>
</li>
<li>
<p>fix: attach event handlers that are assigned after a top-level
<code>await</code> in production (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18933">#18933</a>)</p>
</li>
<li>
<p>fix: flush anything pending before invoking flushSync callback
function (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18878">#18878</a>)</p>
</li>
<li>
<p>fix: preserve location information for <code>await</code> wrappers
(<a
href="https://redirect.github.com/sveltejs/svelte/pull/18859">#18859</a>)</p>
</li>
<li>
<p>fix: keep a reactive assignment with no dependencies when
<code>migrate</code> cannot turn it into a declaration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18817">#18817</a>)</p>
</li>
<li>
<p>fix: don't hang <code>migrate</code> on a declaration that shares a
line with its script tag (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18816">#18816</a>)</p>
</li>
<li>
<p>fix: prevent duplicate subscriptions when reconnecting deriveds (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18899">#18899</a>)</p>
</li>
<li>
<p>fix: recover when an unexpected node replaces a nested boundary
comment during hydration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18925">#18925</a>)</p>
</li>
<li>
<p>fix: print <code>{#await}</code> blocks that only have a pending
branch (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18908">#18908</a>)</p>
</li>
<li>
<p>fix: don't warn about a redundant <code>link</code> role on
<code>&lt;area&gt;</code> elements without an <code>href</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18872">#18872</a>)</p>
</li>
<li>
<p>fix: don't throw <code>state_unsafe_mutation</code> when the focused
element is removed while <code>bind:activeElement</code> is used (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18921">#18921</a>)</p>
</li>
<li>
<p>fix: don't overwrite an unchanged spread <code>value</code>,
preserving incomplete number input (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18864">#18864</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md">svelte's
changelog</a>.</em></p>
<blockquote>
<h2>5.57.3</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: use the first valid fallback role in <code>role</code> for a11y
checks (<a
href="https://redirect.github.com/sveltejs/svelte/pull/19045">#19045</a>)</p>
</li>
<li>
<p>chore: remove obsolete code (<a
href="https://redirect.github.com/sveltejs/svelte/pull/19051">#19051</a>)</p>
</li>
<li>
<p>fix: keep creating state sources for property checks during component
init (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18949">#18949</a>)</p>
</li>
<li>
<p>fix: skip redundant attribute writes during hydration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18869">#18869</a>)</p>
</li>
<li>
<p>fix: track missing state property checks in unowned deriveds (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18944">#18944</a>)</p>
</li>
<li>
<p>fix: <code>devalue</code> link in
<code>hydratable_serialization_failed</code> error (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18999">#18999</a>)</p>
</li>
</ul>
<h2>5.57.2</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p>fix: don't create async deriveds for a component destroyed while
waiting for its top-level <code>await</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18931">#18931</a>)</p>
</li>
<li>
<p>fix: prevent untracked derived reads from retaining disconnected
dependencies (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18829">#18829</a>)</p>
</li>
<li>
<p>fix: error if <code>{:else}</code> is followed by another
<code>{:else}</code> or <code>{:else if ...}</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18900">#18900</a>)</p>
</li>
<li>
<p>fix: avoid tracking SvelteURLSearchParams during URL updates (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18791">#18791</a>)</p>
</li>
<li>
<p>fix: restore hydration state when custom element attribute updates
throw (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18467">#18467</a>)</p>
</li>
<li>
<p>fix: attach event handlers that are assigned after a top-level
<code>await</code> in production (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18933">#18933</a>)</p>
</li>
<li>
<p>fix: flush anything pending before invoking flushSync callback
function (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18878">#18878</a>)</p>
</li>
<li>
<p>fix: preserve location information for <code>await</code> wrappers
(<a
href="https://redirect.github.com/sveltejs/svelte/pull/18859">#18859</a>)</p>
</li>
<li>
<p>fix: keep a reactive assignment with no dependencies when
<code>migrate</code> cannot turn it into a declaration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18817">#18817</a>)</p>
</li>
<li>
<p>fix: don't hang <code>migrate</code> on a declaration that shares a
line with its script tag (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18816">#18816</a>)</p>
</li>
<li>
<p>fix: prevent duplicate subscriptions when reconnecting deriveds (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18899">#18899</a>)</p>
</li>
<li>
<p>fix: recover when an unexpected node replaces a nested boundary
comment during hydration (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18925">#18925</a>)</p>
</li>
<li>
<p>fix: print <code>{#await}</code> blocks that only have a pending
branch (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18908">#18908</a>)</p>
</li>
<li>
<p>fix: don't warn about a redundant <code>link</code> role on
<code>&lt;area&gt;</code> elements without an <code>href</code> (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18872">#18872</a>)</p>
</li>
<li>
<p>fix: don't throw <code>state_unsafe_mutation</code> when the focused
element is removed while <code>bind:activeElement</code> is used (<a
href="https://redirect.github.com/sveltejs/svelte/pull/18921">#18921</a>)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/sveltejs/svelte/commit/23bb146306ff02cc5041bca0c5de9f8bd086e4a3"><code>23bb146</code></a>
Version Packages (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18947">#18947</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/356c8766a024d5982c276e898903fadaceaca960"><code>356c876</code></a>
chore: better async derived labels (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19068">#19068</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/3c032adc27cba8b23bcbb24036bde5d522024f43"><code>3c032ad</code></a>
chore: DRY out batch intersection logic (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19061">#19061</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/5bd3e3cd346e5f6584e5ad98ffc7e65eb7f73764"><code>5bd3e3c</code></a>
chore: add new <code>batch.#is_skipped</code> method (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19058">#19058</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/91b5110b79dd6e6e8224dcf878602990d6ccc93e"><code>91b5110</code></a>
fix: use the first valid fallback role in <code>role</code> for a11y
checks (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19045">#19045</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/50e3d28e1bb6b21b6f6bbeffed1d4718c1af19fc"><code>50e3d28</code></a>
chore: remove obsolete code (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19051">#19051</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/bd762fb1b004b6da6a0c0e609531092e82df95a5"><code>bd762fb</code></a>
fix: skip redundant attribute writes during hydration (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/18869">#18869</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/40bb08482f4857d91221638dec544a532bc35389"><code>40bb084</code></a>
chore: more passing async tests (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19014">#19014</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/a841a29407e0892bcecb8b814d4f0e864cae635d"><code>a841a29</code></a>
chore: bring over passing async-eager tests (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19011">#19011</a>)</li>
<li><a
href="https://github.com/sveltejs/svelte/commit/44738572645ec47c9fcdb2637d64498b96858dcf"><code>4473857</code></a>
chore: bring over more tests that already pass on main (<a
href="https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte/issues/19007">#19007</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte">compare
view</a></li>
</ul>
</details>
<br />

Updates `postcss` from 8.5.31 to 8.5.32
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/releases">postcss's
releases</a>.</em></p>
<blockquote>
<h2>8.5.32</h2>
<ul>
<li>Fixed <code>Input#origin()</code> without <code>opts.from</code> (by
<a href="https://github.com/wleeaf"><code>@​wleeaf</code></a>).</li>
<li>Fixed final-word lookup without source offsets (by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
<li>Fixed explicit <code>start</code> in <code>Warning#toString()</code>
(by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
<li>Fixed <code>Promise</code> semantics in
<code>LazyResult#finally()</code> (by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/postcss/postcss/blob/main/CHANGELOG.md">postcss's
changelog</a>.</em></p>
<blockquote>
<h2>8.5.32</h2>
<ul>
<li>Fixed <code>Input#origin()</code> without <code>opts.from</code> (by
<a href="https://github.com/wleeaf"><code>@​wleeaf</code></a>).</li>
<li>Fixed final-word lookup without source offsets (by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
<li>Fixed explicit <code>start</code> in <code>Warning#toString()</code>
(by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
<li>Fixed <code>Promise</code> semantics in
<code>LazyResult#finally()</code> (by <a
href="https://github.com/Don-Yin"><code>@​Don-Yin</code></a>).</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/postcss/postcss/commit/2455ac8212fe66bc3248aa01186a52c27c87da5a"><code>2455ac8</code></a>
Release 8.5.32 version</li>
<li><a
href="https://github.com/postcss/postcss/commit/e367106f999956dd82799228f5d3fe52c17e2b9f"><code>e367106</code></a>
Update dependencies</li>
<li><a
href="https://github.com/postcss/postcss/commit/f70f586c4b44520cce83036669ab92fc1cf72b41"><code>f70f586</code></a>
Fix <code>Input#origin()</code> without <code>from</code> or with
relative <code>sourceRoot</code> (<a
href="https://redirect.github.com/postcss/postcss/issues/2179">#2179</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/eb28619f747991b223f68f2559ac63343df89936"><code>eb28619</code></a>
Fix final-word lookup without source offsets (<a
href="https://redirect.github.com/postcss/postcss/issues/2178">#2178</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/095654b83ed13b1465eddd07f1d2747832fbf290"><code>095654b</code></a>
Preserve explicit start in Warning#toString() (<a
href="https://redirect.github.com/postcss/postcss/issues/2177">#2177</a>)</li>
<li><a
href="https://github.com/postcss/postcss/commit/9b3d8b8f92d571e73df89936d420b54cf473f39b"><code>9b3d8b8</code></a>
Preserve Promise semantics in result finally() (<a
href="https://redirect.github.com/postcss/postcss/issues/2176">#2176</a>)</li>
<li>See full diff in <a
href="https://github.com/postcss/postcss/compare/8.5.31...8.5.32">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>

Author: dependabot[bot]

.changeset/28499-scaffold-postcss-range.md

@@ -0,0 +1,10 @@
+---
+'@object-ui/cli': patch
+---
+
+fix(cli): scaffolded apps declare `postcss ^8.5.32`, the range the repo itself uses
+
+Clause-②: no
+Metadata-protocol: none
+
+The development-dependencies bump moved every in-repo `postcss` to `^8.5.32`. The scaffold's own table (`SCAFFOLD_DEV_DEPENDENCIES` in `ui/packages/cli/src/utils/scaffold-dependencies.ts`) still said `^8.5.26`, so the routed, plain and init manifests it generates named a range the repo no longer uses. They now name `^8.5.32`.

apps/docs/package.json

@@ -34,7 +34,7 @@
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
     "negotiator": "^1.1.0",
-    "postcss": "^8.5.28",
+    "postcss": "^8.5.32",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "zod": "^4.6.6"

package.json

@@ -224,7 +224,7 @@
     "eslint": "^10.13.0",
     "github-slugger": "2.0.0",
     "semver": "^7.8.5",
-    "svelte": "^5.57.2",
+    "svelte": "^5.57.3",
     "tsup": "^8.5.1",
     "tsx": "^4.23.15",
     "turbo": "^2.11.10",

pnpm-lock.yaml

@@ -103,7 +103,7 @@
     "@vitest/ui": "^4.1.10",
     "happy-dom": "^20.11.2",
     "lucide-react": "^1.43.0",
-    "postcss": "^8.5.26",
+    "postcss": "^8.5.32",
     "react": "19.3.0",
     "react-dom": "19.3.0",
     "react-map-gl": "^8.1.2",

ui/apps/console/package.json

@@ -140,7 +140,7 @@ export const SCAFFOLD_DEV_DEPENDENCIES: Record<string, string> = {
   '@types/react-dom': '19.3.0',
   '@vitejs/plugin-react': '^6.0.5',
   autoprefixer: '^10.5.4',
-  postcss: '^8.5.26',
+  postcss: '^8.5.32',
   tailwindcss: '^4.3.3',
   typescript: '^6.0.3',
   vite: '^8.2.1'

ui/packages/cli/src/utils/scaffold-dependencies.ts

@@ -96,7 +96,7 @@
     "@vitejs/plugin-react": "^6.0.5",
     "autoprefixer": "^10.5.4",
     "jsonc-parser": "^3.3.1",
-    "postcss": "^8.5.26",
+    "postcss": "^8.5.32",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",

ui/packages/components/package.json

@@ -56,7 +56,7 @@
     "@types/react": "19.3.0",
     "@types/react-dom": "19.3.0",
     "@vitejs/plugin-react": "^6.0.5",
-    "postcss": "^8.5.26",
+    "postcss": "^8.5.32",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",

ui/packages/fields/package.json

@@ -48,7 +48,7 @@
     "@objectstack/spec": "workspace:^",
     "@tailwindcss/postcss": "^4.3.3",
     "@vitejs/plugin-react": "^6.0.5",
-    "postcss": "^8.5.26",
+    "postcss": "^8.5.32",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",

ui/packages/plugin-grid/package.json

@@ -63,7 +63,7 @@
     "@types/react": "19.3.0",
     "@types/react-dom": "19.3.0",
     "@vitejs/plugin-react": "^6.0.5",
-    "postcss": "^8.5.26",
+    "postcss": "^8.5.32",
     "tailwindcss": "^4.3.3",
     "typescript": "^6.0.3",
     "vite": "^8.2.1",