chore(deps-dev): bump shadcn-svelte from 1.4.0 to 1.5.0 in /ui

[dependabot]

Bumps shadcn-svelte from 1.4.0 to 1.5.0.

Release notes

Sourced from shadcn-svelte's releases.

shadcn-svelte@1.5.0

Minor Changes

• feat: add --no-deps-install flag to add, init, update, and apply to write dependencies to package.json without running install (#2828)

• feat: if present, preserve the dependency's location in the package.json (#2828)

Patch Changes

• fix: resolve wildcard path alias roots for components.json directory aliases (#2822)

• fix: match deep imports with a path boundary and ignore sv / shadcn-svelte tooling deps (#2826)

• chore: deprecate the --no-deps flag (use --no-deps-install instead) (#2828)

shadcn-svelte@1.4.2

Patch Changes

• fix: detect the nearest tsconfig.json/jsconfig.json so a nested JS project no longer picks up an unrelated parent tsconfig.json (fixes false $lib path alias errors in monorepos) (#2806)

shadcn-svelte@1.4.1

Patch Changes

• fix: provide default value to deprecated --overrite option (#2796)

Changelog

Sourced from shadcn-svelte's changelog.

1.5.0

Minor Changes

• feat: add --no-deps-install flag to add, init, update, and apply to write dependencies to package.json without running install (#2828)

• feat: if present, preserve the dependency's location in the package.json (#2828)

Patch Changes

• fix: resolve wildcard path alias roots for components.json directory aliases (#2822)

• fix: match deep imports with a path boundary and ignore sv / shadcn-svelte tooling deps (#2826)

• chore: deprecate the --no-deps flag (use --no-deps-install instead) (#2828)

1.4.2

Patch Changes

• fix: detect the nearest tsconfig.json/jsconfig.json so a nested JS project no longer picks up an unrelated parent tsconfig.json (fixes false $lib path alias errors in monorepos) (#2806)

1.4.1

Patch Changes

• fix: provide default value to deprecated --overrite option (#2796)

Commits

• 5a8a880 chore(release): version package (#2823)
• 7b68ecf feat(cli): add --no-deps-install option (#2828)
• 9b22162 feat: sv add-ons (#2826)
• 58d7b9c chore: replace prettier for oxfmt (#2825)
• d12d7e8 chore: repo cleanup (#2824)
• 2f717e8 fix(cli): resolve wildcard path alias roots (#2822)
• bf4f461 chore(release): version package (#2807)
• c6bf7d5 fix(cli): resolve nearest tsconfig/jsconfig during init (#2806)
• e7e8c29 chore(release): version package (#2797)
• c0ef8b4 fix: provide default value to deprecated --overrite option (#2796)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​shadcn-svelte@​1.4.0 ⏵ 1.5.0			+1	+1

View full report

[github-actions]

Qodana for JVM

It seems all right 👌

No new problems were found according to the checks applied

💡 Qodana analysis was run in the pull request mode: only the changed files were checked

View the detailed Qodana report

To be able to view the detailed Qodana report, you can either:

• Register at Qodana Cloud and configure the action
• Use GitHub Code Scanning with Qodana
• Host Qodana report at GitHub Pages
• Inspect and use qodana.sarif.json (see the Qodana SARIF format for details)

To get *.log files or any other Qodana artifacts, run the action with upload-result option set to true,
so that the action will upload the files as the job artifacts:

      - name: 'Qodana Scan'
        uses: JetBrains/qodana-action@v2026.2.0
        with:
          upload-result: true

Contact Qodana team

Contact us at qodana-support@jetbrains.com

• Or via our issue tracker: https://jb.gg/qodana-issue
• Or share your feedback: https://jb.gg/qodana-discussions