chore(deps): bump the frontend-dependencies group in /frontend with 4 updates

[dependabot]

Bumps the frontend-dependencies group in /frontend with 4 updates: daisyui, @biomejs/biome, @types/node and svelte.

Updates daisyui from 5.7.37 to 5.7.42

Release notes

Sourced from daisyui's releases.

v5.7.42

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.42

💚 Thank you for using daisyUI!

v5.7.41

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.41

💚 Thank you for using daisyUI!

v5.7.40

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.40

💚 Thank you for using daisyUI!

v5.7.39

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.39

💚 Thank you for using daisyUI!

v5.7.38

🌼 Read changelog: https://daisyui.com/docs/changelog/

📦 Install this update:

npm i -D daisyui@5.7.38

💚 Thank you for using daisyUI!

Changelog

Sourced from daisyui's changelog.

5.7.42 (2026-09-18)

Bug Fixes

• disabled style for input, select, textarea and file-input (#4769) (a0ca2b8)

5.7.41 (2026-09-18)

Bug Fixes

• #4766 validator colors specificity (#4767) (6fcaa55)

5.7.40 (2026-09-17)

Bug Fixes

• style aria-checked as btn-active in button (#4761) (276fce3)

5.7.39 (2026-09-17)

Bug Fixes

• allow Firefox Android to use diff by tap because Firefox Android ignores CSS resize and cannot drag(#4763) (ac97999)

5.7.38 (2026-09-14)

Bug Fixes

• style aria-current as active in dock (#4753) (fe22841)
• style aria-current as menu-active in menu (#4752) (10dc2fb)
• style aria-pressed and aria-current as btn-active in button (#4754) (8e495a0)

Commits

• 530fd88 chore(release): 5.7.42
• a0ca2b8 fix: disabled style for input, select, textarea and file-input (#4769)
• 4621885 chore(release): 5.7.41
• 6fcaa55 fix: #4766 validator colors specificity (#4767)
• 0ea447b chore(release): 5.7.40
• 276fce3 fix: style aria-checked as btn-active in button (#4761)
• dd0a94a chore(release): 5.7.39
• ac97999 fix: allow Firefox Android to use diff by tap because Firefox Android ignores...
• 01d6dc2 chore(release): 5.7.38
• 10dc2fb fix: style aria-current as menu-active in menu (#4752)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.13 to 2.5.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.14

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.14

Patch Changes

• #9022 0d49e24 Thanks @​dyc3! - Added the nursery rule noReturnInFinally. This rule disallows return statements in Promise.prototype.finally() callbacks, including inside nested blocks and conditional branches. Returns in nested functions are ignored by the rule.

  // Invalid: return in finally callback
  Promise.resolve(1).finally(() => { return 2 })
  // Valid: no return in finally callback
  Promise.resolve(1).finally(() => { console.log(2) })

  Returning a value from a Promise.prototype.finally() callback does not replace the original promise's fulfillment value, which can be confusing. Returned promises and thenables are awaited, and their rejection rejects the resulting promise.

• #11754 71eaa0d Thanks @​griff-rees! - Added the nursery rule noSvelteAtDebugTags, which disallows Svelte's {@debug} tag.

  <!-- Invalid: leftover debugging tag -->
  {@debug user}

  The {@debug} tag is a debugging aid and should be removed once you no longer need it, as it should not remain in production code. The rule provides a safe fix that removes the tag.

• #11725 5eb5f09 Thanks @​m1handr! - Added the nursery rule useValidTestTitle, which enforces valid titles for unit test cases and suites.

• #11735 9bd70c7 Thanks @​ematipico! - Fixed #8471: source.fixAll.biome ignored formatter.formatWithErrors. It now applies safe fixes without formatting files that have parse errors when the option is disabled.

• #11715 f05a3c3 Thanks @​ematipico! - Fixed #7771: Grit plugins that use sequential no longer panic when Biome processes files.

• #11766 c2542c6 Thanks @​dyc3! - Fixed validation of readonly and accessor modifiers: combining them in either order now reports that they cannot be used together.

• #11461 22e9966 Thanks @​FoundDream! - Fixed #11423: Multiline template interpolations now preserve the indentation of their closing brace when the source indentation is not a multiple of tabWidth.

   const value = `
        ${
          condition
            ? "yes"
            : "no"
  -}
  +     }
   `;

• #11766 c2542c6 Thanks @​dyc3! - Fixed #11763: TypeScript class members using override accessor, such as override accessor value = 1, now parse correctly. The reversed order, accessor override, now reports that override must precede accessor.

• #11790 17d0ff0 Thanks @​ematipico! - Fixed #10248: noUselessFragments now allows fragments with props in Astro files, such as <Fragment slot="name">{text}</Fragment> inside template expressions.

... (truncated)

Commits

• af4365d ci: release (#11711)
• 7ee3a6c fix(useExhaustiveSwitchCases): add option requireExplicitCase (#11777)
• 02ea438 feat(json_analyze): implement noJsonUnsafeValues (#9758)
• 64fd314 feat(json_analyze): implement useConsistentObjectKeys (#9797)
• a9c4aa0 feat(html): detect undeclared custom Vue directives (#11651)
• 1fc17e3 feat: expand useIncludes (#11739)
• 71eaa0d feat(lint/html/svelte): add noSvelteAtDebugTags (#11754)
• 9bd70c7 fix: various bug fixes (#11735)
• c7c4e2b fix(analyzer): various bugs (#11720)
• 5eb5f09 feat(biome_js_analyze): implement useValidTestTitle rule (#9176) (#11725)
• Additional commits viewable in compare view

Updates @types/node from 26.5.1 to 26.6.2

Commits

• See full diff in compare view

Updates svelte from 5.57.0 to 5.57.1

Release notes

Sourced from svelte's releases.

svelte@5.57.1

Patch Changes

• fix: cancel deferred event listeners during cleanup (#18749)

• fix: preserve global CSS in components without scopable elements (#18793)

• fix: reduce SSR render result garbage collection (#18798)

• fix: resolve the fallback of an each block in the enclosing scope (#18803)

• perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

• fix: prevent effect tree of batches from interfering with each other (#18508)

• fix: serialize input default values during server rendering (#18733)

• fix: remove WAS_MARKED flag in favor of Set (#18127)

• fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

• fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

• fix: keep $state.eager when used as a variable initializer (#18809)

• perf: avoid regex matching in parser where possible (#18736)

• fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

• fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

Changelog

Sourced from svelte's changelog.

5.57.1

Patch Changes

• fix: cancel deferred event listeners during cleanup (#18749)

• fix: preserve global CSS in components without scopable elements (#18793)

• fix: reduce SSR render result garbage collection (#18798)

• fix: resolve the fallback of an each block in the enclosing scope (#18803)

• perf: speed up parser interactions with Acorn or avoid them where possible (#18740)

• fix: prevent effect tree of batches from interfering with each other (#18508)

• fix: serialize input default values during server rendering (#18733)

• fix: remove WAS_MARKED flag in favor of Set (#18127)

• fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)

• fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)

• fix: keep $state.eager when used as a variable initializer (#18809)

• perf: avoid regex matching in parser where possible (#18736)

• fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)

• fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

Commits

• 636eaaa Version Packages (#18750)
• 8030ff2 fix: remove incorrect special handling of :export pseudo-selectors (#18839)
• a72dc8e fix: make Object.hasOwn reactive for state proxies (#18838)
• 6eb720a chore: scope.js stops importing from the analysis visitors (#18787)
• e6ae460 chore: analysis and transform stop importing each other (#18786)
• 5981c06 chore: move parser helpers next to their users (#18785)
• f2ad10e fix: preserve global CSS without scopable elements (#18793)
• a8a9b02 fix: reduce SSR render result garbage collection (#18798)
• 6be176d fix: resolve the fallback of an each block in the enclosing scope (#18803)
• 34b13ac fix: keep $state.eager when used as a variable initializer (#18809)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions