deps: bump @cloudinary-util/url-loader to v6 (remove Zod from client bundles)

[smart]

Summary

@cloudinary-util/url-loader v5 shipped a single bundle that imported Zod for schema + runtime checks, so apps using svelte-cloudinary pulled the full Zod package into client chunks.

v6 removes Zod from the published runtime (see current package.json dependencies on npm: only @cloudinary/url-gen, @cloudinary-util/types, @cloudinary-util/util).

This PR bumps the dependency to ^6.2.0 and updates the lockfile.

Test plan

• pnpm install
• node packages/svelte-cloudinary/scripts/version.js
• pnpm --filter svelte-cloudinary test (36 tests)

Notes

• Treat as a semver-aware dependency bump for consumers already on url-loader v5 types/plugins; v6 is a major for @cloudinary-util/url-loader. Our test suite passed with no source changes.

Made with Cursor

[changeset-bot]

🦋 Changeset detected

Latest commit: f599189

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
svelte-cloudinary	Minor

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

@smart is attempting to deploy a commit to the Cloudinary DevX Team on Vercel.

A member of the Team first needs to authorize it.