[dependabot]

Bumps the svelte group with 4 updates in the / directory: @sveltejs/adapter-node, @sveltejs/kit, svelte and svelte-check.

Updates @sveltejs/adapter-node from 6.0.0 to 6.0.1

Release notes

Sourced from @​sveltejs/adapter-node's releases.

@​sveltejs/adapter-node@​6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

Changelog

Sourced from @​sveltejs/adapter-node's changelog.

6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

Commits

• 3d85a7a Version Packages
• 9435bad fix: avoid crashing the server when a text/event-stream response has immutabl...
• 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
• See full diff in compare view

Updates @sveltejs/kit from 3.0.0 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

• fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

• fix: preserve service worker sourcemaps when injecting env (#17566)

• fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

• fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

• fix: report actionable errors for remote modules in server-only locations (#17567)

@​sveltejs/kit@​3.1.0

Minor Changes

• feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

• feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

• fix: don't treat every module as server-only when the project is inside a server directory (#17376)

• fix: continue deployment recovery when service worker updates fail (#17440)

• fix: infer prerendered MIME types from generated files (#17381)

• fix: leave generated files alone when their contents are unchanged (#17310)

• fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

• fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

@​sveltejs/kit@​3.0.1

Patch Changes

• fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

• fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

• fix: preserve service worker sourcemaps when injecting env (#17566)

• fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

• fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

• fix: report actionable errors for remote modules in server-only locations (#17567)

3.1.0

Minor Changes

• feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

• feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

• fix: don't treat every module as server-only when the project is inside a server directory (#17376)

• fix: continue deployment recovery when service worker updates fail (#17440)

• fix: infer prerendered MIME types from generated files (#17381)

• fix: leave generated files alone when their contents are unchanged (#17310)

• fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

• fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

3.0.1

... (truncated)

Commits

• 3d85a7a Version Packages
• 9ed55b4 only treat params as a client entrypoint with client-side route resolution
• ae07803 fix: prevent server-only modules from being imported into browser code via sr...
• a8f7c1e Merge commit from fork
• 7993d5e Merge commit from fork
• 24d8ee4 Merge commit from fork
• 2c190fe Merge commit from fork
• 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
• a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
• b378468 test: check service worker sourcemaps in options-3
• Additional commits viewable in compare view

Updates svelte from 5.57.1 to 5.57.3

Release notes

Sourced from svelte's releases.

svelte@5.57.3

Patch Changes

• fix: use the first valid fallback role in role for a11y checks (#19045)

• chore: remove obsolete code (#19051)

• fix: keep creating state sources for property checks during component init (#18949)

• fix: skip redundant attribute writes during hydration (#18869)

• fix: track missing state property checks in unowned deriveds (#18944)

• fix: devalue link in hydratable_serialization_failed error (#18999)

svelte@5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

• fix: don't overwrite an unchanged spread value, preserving incomplete number input (#18864)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.57.3

Patch Changes

• fix: use the first valid fallback role in role for a11y checks (#19045)

• chore: remove obsolete code (#19051)

• fix: keep creating state sources for property checks during component init (#18949)

• fix: skip redundant attribute writes during hydration (#18869)

• fix: track missing state property checks in unowned deriveds (#18944)

• fix: devalue link in hydratable_serialization_failed error (#18999)

5.57.2

Patch Changes

• fix: don't create async deriveds for a component destroyed while waiting for its top-level await (#18931)

• fix: prevent untracked derived reads from retaining disconnected dependencies (#18829)

• fix: error if {:else} is followed by another {:else} or {:else if ...} (#18900)

• fix: avoid tracking SvelteURLSearchParams during URL updates (#18791)

• fix: restore hydration state when custom element attribute updates throw (#18467)

• fix: attach event handlers that are assigned after a top-level await in production (#18933)

• fix: flush anything pending before invoking flushSync callback function (#18878)

• fix: preserve location information for await wrappers (#18859)

• fix: keep a reactive assignment with no dependencies when migrate cannot turn it into a declaration (#18817)

• fix: don't hang migrate on a declaration that shares a line with its script tag (#18816)

• fix: prevent duplicate subscriptions when reconnecting deriveds (#18899)

• fix: recover when an unexpected node replaces a nested boundary comment during hydration (#18925)

• fix: print {#await} blocks that only have a pending branch (#18908)

• fix: don't warn about a redundant link role on <area> elements without an href (#18872)

• fix: don't throw state_unsafe_mutation when the focused element is removed while bind:activeElement is used (#18921)

... (truncated)

Commits

• 23bb146 Version Packages (#18947)
• 356c876 chore: better async derived labels (#19068)
• 3c032ad chore: DRY out batch intersection logic (#19061)
• 5bd3e3c chore: add new batch.#is_skipped method (#19058)
• 91b5110 fix: use the first valid fallback role in role for a11y checks (#19045)
• 50e3d28 chore: remove obsolete code (#19051)
• bd762fb fix: skip redundant attribute writes during hydration (#18869)
• 40bb084 chore: more passing async tests (#19014)
• a841a29 chore: bring over passing async-eager tests (#19011)
• 4473857 chore: bring over more tests that already pass on main (#19007)
• Additional commits viewable in compare view

Updates svelte-check from 4.7.6 to 4.7.7

Release notes

Sourced from svelte-check's releases.

svelte-check@4.7.7

Patch Changes

• fix: recognise modern CSS properties such as corner-shape by updating vscode-css-languageservice (#3122)

• fix: recognise the real <script> and <style> start tags when a matching token also appears inside the other tag (#3079)

• fix: resolve symlinked packages when importing their .svelte files, so their types are not duplicated (#3119)

• fix: align default tsconfig "include" logic with tsc/tsserver (#3110)

• fix: report a failed TypeScript compiler process and exit non-zero when a run fails (#3133)

• fix: ignore the .svelte-check cache directory in --watch with --tsgo / --incremental (#3128)

• fix: check all files with --tsgo / --incremental when the tsconfig has no include (#3138)

• fix: disallow --tsgo together with --tsgo-experimental-api (#3128)

• fix: type elements from Svelte's svelte-html.d.ts with --tsgo / --incremental, like the language server (#3141)

Commits

• b1ab063 Version Packages (#3107)
• 3f734db fix: config discovery under dot directories (#3121)
• 2a80d78 fix: check all files with --tsgo / --incremental when tsconfig has no include...
• 297b9e0 fix: type elements from svelte-html.d.ts with --tsgo / --incremental (#3141)
• 2394f19 fix: don't hide $props's type argument error (#3126)
• e549d19 fix(syntax): don't let comments inside \<template> swallow the file (#3137)
• af7c6a5 fix: report a failed TypeScript compiler process instead of a clean run (#3133)
• abaa1ee fix: ignore svelte-check cache directory in watch mode with --tsgo / --increm...
• 1d367d0 fix: ignore noEmitOnError and isolatedDeclarations in emitDts (#3129)
• 565abf9 Recognise modern CSS properties in svelte check (#3122)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions