chore(deps): update dependency @sveltejs/kit to v2.49.5 [security]

#653Pull Requestrenovate[bot] 创建于 2026-01-15

dependencies

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@sveltejs/kit](https://svelte.dev) ([source](https://redirect.github.com/sveltejs/kit/tree/HEAD/packages/kit)) | [`2.21.0` → `2.49.5`](https://renovatebot.com/diffs/npm/@sveltejs%2fkit/2.21.0/2.49.5) | ![age](https://developer.mend.io/api/mc/badges/age/npm/@sveltejs%2fkit/2.49.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@sveltejs%2fkit/2.21.0/2.49.5?slim=true) | ### GitHub Vulnerability Alerts #### [CVE-2025-67647](https://redirect.github.com/sveltejs/kit/security/advisories/GHSA-j62c-4x62-9r35) ### Summary Versions of SvelteKit are vulnerable to a server side request forgery (SSRF) and denial of service (DoS) under certain conditions. ### Details Affected versions from 2.44.0 onwards are vulnerable to DoS if: - your app has at least one prerendered route (`export const prerender = true`) Affected versions from 2.19.0 onwards are vulnerable to DoS and SSRF if: - your app has at least one prerendered route (`export const prerender = true`) - AND you are using `adapter-node` without a configured `ORIGIN` environment variable, and you are not using a reverse proxy that implements Host header validation ### Impact The DoS causes the running server process to end. The SSRF allows access to internal services that can be reached without authentication when fetched from SvelteKit's server runtime. It is also possible to obtain an SXSS via cache poisoning, by forcing a potential CDN to cache an XSS returned by the attacker's server (the latter being able to specify the cache-control of their choice). ### Credits - Allam Rachid ([zhero;](https://zhero-web-sec.github.io/research-and-things/)) - Allam Yasser (inzo) - d-xuan ([wednesday](https://d-xuan.github.io/wednesday/)) --- ### Release Notes <details> <summary>sveltejs/kit (@sveltejs/kit)</summary> ### [`v2.49.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2495) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.49.4...@sveltejs/kit@2.49.5) ##### Patch Changes - fix: avoid overriding Vite default `base` when running Vitest 4 ([#14866](https://redirect.github.com/sveltejs/kit/pull/14866)) - fix: ensure url decoded pathnames are not mistaken as rerouted requests ([`d9ae9b0`](https://redirect.github.com/sveltejs/kit/commit/d9ae9b00b14f5574d109f3fd548f960594346226)) - fix: add length checks to remote forms ([`8ed8155`](https://redirect.github.com/sveltejs/kit/commit/8ed8155215b9a74012fecffb942ad9a793b274e5)) ### [`v2.49.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2494) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.49.3...@sveltejs/kit@2.49.4) ##### Patch Changes - fix: support instrumentation for `vite preview` ([#15105](https://redirect.github.com/sveltejs/kit/pull/15105)) - fix: support for `URLSearchParams.has(name, value)` overload ([#15076](https://redirect.github.com/sveltejs/kit/pull/15076)) - fix: put forking behind `experimental.forkPreloads` ([#15135](https://redirect.github.com/sveltejs/kit/pull/15135)) ### [`v2.49.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2493) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.49.2...@sveltejs/kit@2.49.3) ##### Patch Changes - fix: avoid false-positive Vite config overridden warning when using Vitest 4 ([#15121](https://redirect.github.com/sveltejs/kit/pull/15121)) - fix: add `typescript` as an optional peer dependency ([#15074](https://redirect.github.com/sveltejs/kit/pull/15074)) - fix: use hasOwn check when deep-setting object properties ([#15127](https://redirect.github.com/sveltejs/kit/pull/15127)) ### [`v2.49.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2492) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.49.1...@sveltejs/kit@2.49.2) ##### Patch Changes - fix: Stop re-loading already-loaded CSS during server-side route resolution ([#15014](https://redirect.github.com/sveltejs/kit/pull/15014)) - fix: posixify the instrumentation file import on Windows ([#14993](https://redirect.github.com/sveltejs/kit/pull/14993)) - fix: Correctly handle shared memory when decoding binary form data ([#15028](https://redirect.github.com/sveltejs/kit/pull/15028)) ### [`v2.49.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2491) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.49.0...@sveltejs/kit@2.49.1) ##### Patch Changes - fix: suppress `state_referenced_locally` warnings in `.svelte-kit/generated/root.svelte` ([#15013](https://redirect.github.com/sveltejs/kit/pull/15013)) - fix: TypeError when doing response.clone() in page load ([#15005](https://redirect.github.com/sveltejs/kit/pull/15005)) ### [`v2.49.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2490) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.8...@sveltejs/kit@2.49.0) ##### Minor Changes - feat: stream file uploads inside `form` remote functions allowing form data to be accessed before large files finish uploading ([#14775](https://redirect.github.com/sveltejs/kit/pull/14775)) ### [`v2.48.8`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2488) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.7...@sveltejs/kit@2.48.8) ##### Patch Changes - breaking: `invalid` now must be imported from `@sveltejs/kit` ([#14768](https://redirect.github.com/sveltejs/kit/pull/14768)) - breaking: remove `submitter` option from experimental form `validate()` method, always provide default submitter ([#14762](https://redirect.github.com/sveltejs/kit/pull/14762)) ### [`v2.48.7`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2487) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.6...@sveltejs/kit@2.48.7) ##### Patch Changes - fix: allow multiple `server-timing` headers ([#14700](https://redirect.github.com/sveltejs/kit/pull/14700)) - fix: allow access to root-level issues in schema-less forms ([#14893](https://redirect.github.com/sveltejs/kit/pull/14893)) - fix: allow hosting hash-based apps from non-index.html files ([#14825](https://redirect.github.com/sveltejs/kit/pull/14825)) ### [`v2.48.6`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2486) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.5...@sveltejs/kit@2.48.6) ##### Patch Changes - fix: clear issues upon passing validation ([#14683](https://redirect.github.com/sveltejs/kit/pull/14683)) - fix: don't use fork of unrelated route ([#14947](https://redirect.github.com/sveltejs/kit/pull/14947)) - fix: prevent type errors when optional `@opentelemetry/api` dependency isn't installed ([#14949](https://redirect.github.com/sveltejs/kit/pull/14949)) - fix: preserve `this` when invoking standard validator ([#14943](https://redirect.github.com/sveltejs/kit/pull/14943)) - fix: treat client/universal hooks as entrypoints for illegal server import detection ([#14876](https://redirect.github.com/sveltejs/kit/pull/14876)) - fix: correct query `.set` and `.refresh` behavior in commands ([#14877](https://redirect.github.com/sveltejs/kit/pull/14877)) - fix: improved the accuracy of the types of the output of `field.as('...')` ([#14908](https://redirect.github.com/sveltejs/kit/pull/14908)) ### [`v2.48.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2485) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.4...@sveltejs/kit@2.48.5) ##### Patch Changes - fix: wait an extra microtask in dev before calling `$_init_$` ([#14799](https://redirect.github.com/sveltejs/kit/pull/14799)) - fix: discard preload fork before creating a new one ([#14865](https://redirect.github.com/sveltejs/kit/pull/14865)) - fix: delete `RemoteFormAllIssue`, add `path` to `RemoteFormIssue` ([#14864](https://redirect.github.com/sveltejs/kit/pull/14864)) ### [`v2.48.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2484) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.3...@sveltejs/kit@2.48.4) ##### Patch Changes - fix: adjust query's promise implementation to properly allow chaining ([#14859](https://redirect.github.com/sveltejs/kit/pull/14859)) - fix: make prerender cache work, including in development ([#14860](https://redirect.github.com/sveltejs/kit/pull/14860)) ### [`v2.48.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2483) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.2...@sveltejs/kit@2.48.3) ##### Patch Changes - fix: include hash when using `resolve` with hash routing enabled ([#14786](https://redirect.github.com/sveltejs/kit/pull/14786)) - fix: `afterNavigate` callback not running after hydration when experimental async is enabled ([#14644](https://redirect.github.com/sveltejs/kit/pull/14644)) fix: Snapshot `restore` method not called after reload when experimental async is enabled - fix: expose `issue.path` in `.allIssues()` ([#14784](https://redirect.github.com/sveltejs/kit/pull/14784)) ### [`v2.48.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2482) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.1...@sveltejs/kit@2.48.2) ##### Patch Changes - fix: update DOM before running navigate callbacks ([#14829](https://redirect.github.com/sveltejs/kit/pull/14829)) ### [`v2.48.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2481) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.48.0...@sveltejs/kit@2.48.1) ##### Patch Changes - fix: wait for commit promise instead of `settled` ([#14818](https://redirect.github.com/sveltejs/kit/pull/14818)) ### [`v2.48.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2480) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.47.3...@sveltejs/kit@2.48.0) ##### Minor Changes - feat: use experimental `fork` API when available ([#14793](https://redirect.github.com/sveltejs/kit/pull/14793)) ##### Patch Changes - fix: await for `settled` instead of `tick` in navigate ([#14800](https://redirect.github.com/sveltejs/kit/pull/14800)) ### [`v2.47.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2473) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.47.2...@sveltejs/kit@2.47.3) ##### Patch Changes - fix: avoid hanging when `error()` is used while streaming promises from a server `load` function ([#14722](https://redirect.github.com/sveltejs/kit/pull/14722)) - chore: treeshake load function code if we know it's unused ([#14764](https://redirect.github.com/sveltejs/kit/pull/14764)) - fix: `RecursiveFormFields` type for recursive or unknown schemas ([#14734](https://redirect.github.com/sveltejs/kit/pull/14734)) - fix: rework internal representation of form value to be `$state` ([#14771](https://redirect.github.com/sveltejs/kit/pull/14771)) ### [`v2.47.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2472) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.47.1...@sveltejs/kit@2.47.2) ##### Patch Changes - fix: streamed promise not resolving when another load function returns a fast resolving promise ([#14753](https://redirect.github.com/sveltejs/kit/pull/14753)) - chore: allow to run preflight validation only ([#14744](https://redirect.github.com/sveltejs/kit/pull/14744)) - fix: update overload to set `invalid` type to schema input ([#14748](https://redirect.github.com/sveltejs/kit/pull/14748)) ### [`v2.47.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2471) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.47.0...@sveltejs/kit@2.47.1) ##### Patch Changes - fix: allow `read` to be used at the top-level of remote function files ([#14672](https://redirect.github.com/sveltejs/kit/pull/14672)) - fix: more robust remote files generation ([#14682](https://redirect.github.com/sveltejs/kit/pull/14682)) ### [`v2.47.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2470) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.5...@sveltejs/kit@2.47.0) ##### Minor Changes - feat: add [`signal`](https://developer.mozilla.org/en-US/docs/Web/API/Request/signal) property to request ([#14715](https://redirect.github.com/sveltejs/kit/pull/14715)) ##### Patch Changes - fix: resolve remote module syntax errors with trailing expressions ([#14728](https://redirect.github.com/sveltejs/kit/pull/14728)) ### [`v2.46.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2465) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.4...@sveltejs/kit@2.46.5) ##### Patch Changes - fix: ensure `form` remote functions' `fields.set` triggers reactivity ([#14661](https://redirect.github.com/sveltejs/kit/pull/14661)) ### [`v2.46.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2464) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.3...@sveltejs/kit@2.46.4) ##### Patch Changes - fix: prevent access of Svelte 5-only `untrack` function ([#14658](https://redirect.github.com/sveltejs/kit/pull/14658)) ### [`v2.46.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2463) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.2...@sveltejs/kit@2.46.3) ##### Patch Changes - fix: merge `field.set(...)` calls ([#14651](https://redirect.github.com/sveltejs/kit/pull/14651)) - fix: don't automatically reset form after an enhanced submission ([#14626](https://redirect.github.com/sveltejs/kit/pull/14626)) - fix: normalize path strings when updating field values ([#14649](https://redirect.github.com/sveltejs/kit/pull/14649)) ### [`v2.46.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2462) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.1...@sveltejs/kit@2.46.2) ##### Patch Changes - fix: prevent code execution order issues around SvelteKit's `env` modules ([#14637](https://redirect.github.com/sveltejs/kit/pull/14637)) ### [`v2.46.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2461) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.46.0...@sveltejs/kit@2.46.1) ##### Patch Changes - fix: use `$derived` for form fields ([#14621](https://redirect.github.com/sveltejs/kit/pull/14621)) - docs: remove `@example` blocks to allow docs to deploy ([#14636](https://redirect.github.com/sveltejs/kit/pull/14636)) - fix: require a value with `submit` and `hidden` fields ([#14635](https://redirect.github.com/sveltejs/kit/pull/14635)) - fix: delete hydration cache on effect teardown ([#14611](https://redirect.github.com/sveltejs/kit/pull/14611)) ### [`v2.46.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2460) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.45.0...@sveltejs/kit@2.46.0) ##### Minor Changes - feat: imperative form validation ([#14624](https://redirect.github.com/sveltejs/kit/pull/14624)) ##### Patch Changes - fix: wait a tick before collecting form data for validation ([#14631](https://redirect.github.com/sveltejs/kit/pull/14631)) - fix: prevent code execution order issues around SvelteKit's `env` modules ([#14632](https://redirect.github.com/sveltejs/kit/pull/14632)) ### [`v2.45.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2450) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.44.0...@sveltejs/kit@2.45.0) ##### Minor Changes - feat: `form.for(id)` now implicitly sets id on form object ([#14623](https://redirect.github.com/sveltejs/kit/pull/14623)) ##### Patch Changes - fix: allow `fetch` in remote function without emitting a warning ([#14610](https://redirect.github.com/sveltejs/kit/pull/14610)) ### [`v2.44.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2440) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.8...@sveltejs/kit@2.44.0) ##### Minor Changes - feat: expose `event.route` and `event.url` to remote functions ([#14606](https://redirect.github.com/sveltejs/kit/pull/14606)) - breaking: update experimental `form` API ([#14481](https://redirect.github.com/sveltejs/kit/pull/14481)) ##### Patch Changes - fix: don't crawl error responses during prerendering ([#14596](https://redirect.github.com/sveltejs/kit/pull/14596)) ### [`v2.43.8`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2438) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.7...@sveltejs/kit@2.43.8) ##### Patch Changes - fix: HMR for `query` ([#14587](https://redirect.github.com/sveltejs/kit/pull/14587)) - fix: avoid client modules while traversing dependencies to prevent FOUC during dev ([#14577](https://redirect.github.com/sveltejs/kit/pull/14577)) - fix: skip prebundling of .remote.js files ([#14583](https://redirect.github.com/sveltejs/kit/pull/14583)) - fix: more robust remote file pattern matching ([#14578](https://redirect.github.com/sveltejs/kit/pull/14578)) ### [`v2.43.7`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2437) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.6...@sveltejs/kit@2.43.7) ##### Patch Changes - fix: correctly type the `result` of `form` remote functions that do not accept data ([#14573](https://redirect.github.com/sveltejs/kit/pull/14573)) - fix: force remote module chunks to isolate themselves ([#14571](https://redirect.github.com/sveltejs/kit/pull/14571)) ### [`v2.43.6`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2436) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.5...@sveltejs/kit@2.43.6) ##### Patch Changes - fix: ensure cache key is consistent between client/server ([#14563](https://redirect.github.com/sveltejs/kit/pull/14563)) - fix: keep resolve relative to initial base during prerender ([#14533](https://redirect.github.com/sveltejs/kit/pull/14533)) - fix: avoid including `HEAD` twice when an unhandled HTTP method is used in a request to a `+server` handler that has both a `GET` handler and a `HEAD` handler ([#14564](https://redirect.github.com/sveltejs/kit/pull/14564)) - fix: smoothscroll to deep link ([#14569](https://redirect.github.com/sveltejs/kit/pull/14569)) ### [`v2.43.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2435) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.4...@sveltejs/kit@2.43.5) ##### Patch Changes - fix: fall back to non-relative resolution when calling `resolve(...)` outside an event context ([#14532](https://redirect.github.com/sveltejs/kit/pull/14532)) ### [`v2.43.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2434) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.3...@sveltejs/kit@2.43.4) ##### Patch Changes - fix: Webcontainer AsyncLocalStorage workaround ([#14526](https://redirect.github.com/sveltejs/kit/pull/14526)) ### [`v2.43.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2433) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.2...@sveltejs/kit@2.43.3) ##### Patch Changes - fix: Webcontainer AsyncLocalStorage workaround ([#14521](https://redirect.github.com/sveltejs/kit/pull/14521)) - fix: include the value of form submitters on `form` remote functions ([#14475](https://redirect.github.com/sveltejs/kit/pull/14475)) ### [`v2.43.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2432) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.1...@sveltejs/kit@2.43.2) ##### Patch Changes - fix: ensure rendering starts off synchronously ([#14517](https://redirect.github.com/sveltejs/kit/pull/14517)) - fix: keep serialized remote data alive until navigation ([#14508](https://redirect.github.com/sveltejs/kit/pull/14508)) ### [`v2.43.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2431) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.43.0...@sveltejs/kit@2.43.1) ##### Patch Changes - fix: consistently use bare import for internals ([#14506](https://redirect.github.com/sveltejs/kit/pull/14506)) ### [`v2.43.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2430) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.42.2...@sveltejs/kit@2.43.0) ##### Minor Changes - feat: experimental async SSR ([#14447](https://redirect.github.com/sveltejs/kit/pull/14447)) ##### Patch Changes - fix: ensure `__SVELTEKIT_PAYLOAD__.data` is accessed safely ([#14491](https://redirect.github.com/sveltejs/kit/pull/14491)) - fix: create separate cache entries for non-exported remote function queries ([#14499](https://redirect.github.com/sveltejs/kit/pull/14499)) ### [`v2.42.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2422) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.42.1...@sveltejs/kit@2.42.2) ##### Patch Changes - fix: prevent loops in postbuild analysis phase ([#14450](https://redirect.github.com/sveltejs/kit/pull/14450)) - fix: handle nested object fields in form data ([#14469](https://redirect.github.com/sveltejs/kit/pull/14469)) - fix: robustify form helper types ([#14463](https://redirect.github.com/sveltejs/kit/pull/14463)) - fix: avoid running the `init` hook during builds if there's nothing to prerender ([#14464](https://redirect.github.com/sveltejs/kit/pull/14464)) - fix: ensure SSR rendering gets request store context ([#14476](https://redirect.github.com/sveltejs/kit/pull/14476)) ### [`v2.42.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2421) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.42.0...@sveltejs/kit@2.42.1) ##### Patch Changes - fix: ensure environment setup is in its own chunk ([#14441](https://redirect.github.com/sveltejs/kit/pull/14441)) ### [`v2.42.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2420) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.41.0...@sveltejs/kit@2.42.0) ##### Minor Changes - feat: enhance remote form functions with schema support, `input` and `issues` properties ([#14383](https://redirect.github.com/sveltejs/kit/pull/14383)) - breaking: remote form functions get passed a parsed POJO instead of a `FormData` object now ([#14383](https://redirect.github.com/sveltejs/kit/pull/14383)) ### [`v2.41.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2410) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.40.0...@sveltejs/kit@2.41.0) ##### Minor Changes - feat: add `%sveltekit.version%` to `app.html` ([#12132](https://redirect.github.com/sveltejs/kit/pull/12132)) ##### Patch Changes - fix: allow remote functions to return custom types serialized with `transport` hooks ([#14435](https://redirect.github.com/sveltejs/kit/pull/14435)) - fix: fulfil `beforeNavigate` `complete` when redirected ([#12896](https://redirect.github.com/sveltejs/kit/pull/12896)) ### [`v2.40.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2400) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.39.1...@sveltejs/kit@2.40.0) ##### Minor Changes - feat: include `event` property on popstate/link/form navigation ([#14307](https://redirect.github.com/sveltejs/kit/pull/14307)) ##### Patch Changes - fix: respect `replaceState`/`keepFocus`/`noScroll` when a navigation results in a redirect ([#14424](https://redirect.github.com/sveltejs/kit/pull/14424)) - fix: invalidate preload cache when invalidateAll is true ([#14420](https://redirect.github.com/sveltejs/kit/pull/14420)) ### [`v2.39.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2391) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.39.0...@sveltejs/kit@2.39.1) ##### Patch Changes - fix: more robust remote function code transformation ([#14418](https://redirect.github.com/sveltejs/kit/pull/14418)) ### [`v2.39.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2390) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.38.1...@sveltejs/kit@2.39.0) ##### Minor Changes - feat: lazy discovery of remote functions ([#14293](https://redirect.github.com/sveltejs/kit/pull/14293)) ##### Patch Changes - fix: layout load data not serialized on error page ([#14395](https://redirect.github.com/sveltejs/kit/pull/14395)) - fix: fail prerendering when remote function fails ([#14365](https://redirect.github.com/sveltejs/kit/pull/14365)) - fix: treat handle hook redirect as part of remote function call as json redirect ([#14362](https://redirect.github.com/sveltejs/kit/pull/14362)) ### [`v2.38.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2381) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.38.0...@sveltejs/kit@2.38.1) ##### Patch Changes - fix: enable redirects from queries ([#14400](https://redirect.github.com/sveltejs/kit/pull/14400)) - fix: remove empty nodes from serialized server load data ([#14404](https://redirect.github.com/sveltejs/kit/pull/14404)) - fix: allow commands from within endpoints ([#14343](https://redirect.github.com/sveltejs/kit/pull/14343)) ### [`v2.38.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2380) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.37.1...@sveltejs/kit@2.38.0) ##### Minor Changes - feat: add new remote function `query.batch` ([#14272](https://redirect.github.com/sveltejs/kit/pull/14272)) ### [`v2.37.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2371) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.37.0...@sveltejs/kit@2.37.1) ##### Patch Changes - fix: serialize server `load` data before passing to universal `load`, to handle mutations and promises ([#14298](https://redirect.github.com/sveltejs/kit/pull/14298)) - fix: resolve\_route prevent dropping a trailing slash of id ([#14294](https://redirect.github.com/sveltejs/kit/pull/14294)) - fix: assign correct status code to form submission error on the client ([#14345](https://redirect.github.com/sveltejs/kit/pull/14345)) - fix: un-proxy `form.result` ([#14346](https://redirect.github.com/sveltejs/kit/pull/14346)) ### [`v2.37.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2370) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.36.3...@sveltejs/kit@2.37.0) ##### Minor Changes - feat: automatically resolve `query.refresh()` promises on the server ([#14332](https://redirect.github.com/sveltejs/kit/pull/14332)) - feat: allow query.set() to be called on the server ([#14304](https://redirect.github.com/sveltejs/kit/pull/14304)) ##### Patch Changes - fix: disable CSRF checks in dev ([#14335](https://redirect.github.com/sveltejs/kit/pull/14335)) - fix: allow redirects to external URLs from within form functions ([#14329](https://redirect.github.com/sveltejs/kit/pull/14329)) - fix: add type definitions for `query.set()` method to override the value of a remote query function ([#14303](https://redirect.github.com/sveltejs/kit/pull/14303)) - fix: ensure uniqueness of `form.for(...)` across form functions ([#14327](https://redirect.github.com/sveltejs/kit/pull/14327)) ### [`v2.36.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2363) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.36.2...@sveltejs/kit@2.36.3) ##### Patch Changes - fix: bump devalue ([#14323](https://redirect.github.com/sveltejs/kit/pull/14323)) - chore: consolidate dev checks to use `esm-env` instead of a `__SVELTEKIT_DEV__` global ([#14308](https://redirect.github.com/sveltejs/kit/pull/14308)) - fix: reset form inputs by default when using remote form functions ([#14322](https://redirect.github.com/sveltejs/kit/pull/14322)) ### [`v2.36.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2362) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.36.1...@sveltejs/kit@2.36.2) ##### Patch Changes - chore: make config deprecation warnings more visible ([#14281](https://redirect.github.com/sveltejs/kit/pull/14281)) - chore: remove redundant Not Found error message ([#14289](https://redirect.github.com/sveltejs/kit/pull/14289)) - chore: deprecate `csrf.checkOrigin` in favour of `csrf.trustedOrigins: ['*']` ([#14281](https://redirect.github.com/sveltejs/kit/pull/14281)) ### [`v2.36.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2361) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.36.0...@sveltejs/kit@2.36.1) ##### Patch Changes - fix: ensure importing from `$app/navigation` works in test files ([#14195](https://redirect.github.com/sveltejs/kit/pull/14195)) ### [`v2.36.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2360) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.35.0...@sveltejs/kit@2.36.0) ##### Minor Changes - feat: add `csrf.trustedOrigins` configuration ([#14021](https://redirect.github.com/sveltejs/kit/pull/14021)) ##### Patch Changes - fix: correctly decode custom types streamed from a server load function ([#14261](https://redirect.github.com/sveltejs/kit/pull/14261)) - fix: add trailing slash pathname when generating typed routes ([#14065](https://redirect.github.com/sveltejs/kit/pull/14065)) ### [`v2.35.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2350) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.34.1...@sveltejs/kit@2.35.0) ##### Minor Changes - feat: better server-side error logging ([#13990](https://redirect.github.com/sveltejs/kit/pull/13990)) ##### Patch Changes - fix: ensure static error page is loaded correctly for custom user errors ([#13952](https://redirect.github.com/sveltejs/kit/pull/13952)) ### [`v2.34.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2341) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.34.0...@sveltejs/kit@2.34.1) ##### Patch Changes - fix: support multiple cookies with the same name across different paths and domains ([`b2c5d02`](https://redirect.github.com/sveltejs/kit/commit/b2c5d02994a6d83275d6fb3645e6f9a2518c8d20)) - fix: add link header when preloading font ([#14200](https://redirect.github.com/sveltejs/kit/pull/14200)) - fix: `cookies.get(...)` returns `undefined` for a just-deleted cookie ([`b2c5d02`](https://redirect.github.com/sveltejs/kit/commit/b2c5d02994a6d83275d6fb3645e6f9a2518c8d20)) - fix: load env before prerender ([`c5f7139`](https://redirect.github.com/sveltejs/kit/commit/c5f713951e41af2000f21929d42eb9d30c9d3a5c)) ### [`v2.34.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2340) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.33.1...@sveltejs/kit@2.34.0) ##### Minor Changes - feat: allow dynamic `env` access during prerender ([#14243](https://redirect.github.com/sveltejs/kit/pull/14243)) ##### Patch Changes - fix: clone `fetch` responses so that headers are mutable ([#13942](https://redirect.github.com/sveltejs/kit/pull/13942)) - fix: serialize server `load` data before passing to universal `load`, to handle mutations ([#14268](https://redirect.github.com/sveltejs/kit/pull/14268)) - fix: allow `asset(...)` to be used with imported assets ([#14270](https://redirect.github.com/sveltejs/kit/pull/14270)) ### [`v2.33.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2331) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.33.0...@sveltejs/kit@2.33.1) ##### Patch Changes - fix: make paths in .css assets relative ([#14262](https://redirect.github.com/sveltejs/kit/pull/14262)) - fix: avoid copying SSR stylesheets to client assets ([#13069](https://redirect.github.com/sveltejs/kit/pull/13069)) ### [`v2.33.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2330) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.32.0...@sveltejs/kit@2.33.0) ##### Minor Changes - feat: configure error reporting when routes marked as prerendable were not prerendered ([#11702](https://redirect.github.com/sveltejs/kit/pull/11702)) ##### Patch Changes - fix: use correct flag for server tracing ([#14250](https://redirect.github.com/sveltejs/kit/pull/14250)) - fix: correct type names for new `handleUnseenRoutes` option ([#14254](https://redirect.github.com/sveltejs/kit/pull/14254)) - chore: Better docs and error message for missing `@opentelemetry/api` dependency ([#14250](https://redirect.github.com/sveltejs/kit/pull/14250)) ### [`v2.32.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2320) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.31.1...@sveltejs/kit@2.32.0) ##### Minor Changes - feat: inline load fetch `response.body` stream data as base64 in page ([#11473](https://redirect.github.com/sveltejs/kit/pull/11473)) ##### Patch Changes - fix: better error when `.remote.ts` files are used without the `experimental.remoteFunctions` flag ([#14225](https://redirect.github.com/sveltejs/kit/pull/14225)) ### [`v2.31.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2311) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.31.0...@sveltejs/kit@2.31.1) ##### Patch Changes - fix: pass options to resolve in resolveId hook ([#14223](https://redirect.github.com/sveltejs/kit/pull/14223)) ### [`v2.31.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2310) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.30.1...@sveltejs/kit@2.31.0) ##### Minor Changes - feat: OpenTelemetry tracing for `handle`, `sequence`, form actions, remote functions, and `load` functions running on the server ([#13899](https://redirect.github.com/sveltejs/kit/pull/13899)) - feat: add `instrumentation.server.ts` for tracing and observability setup ([#13899](https://redirect.github.com/sveltejs/kit/pull/13899)) ### [`v2.30.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2301) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.30.0...@sveltejs/kit@2.30.1) ##### Patch Changes - chore: generate `$app/types` in a more Typescript-friendly way ([#14207](https://redirect.github.com/sveltejs/kit/pull/14207)) ### [`v2.30.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2300) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.29.1...@sveltejs/kit@2.30.0) ##### Minor Changes - feat: allow to specify options for the service worker in `svelte.config.js` ([#13578](https://redirect.github.com/sveltejs/kit/pull/13578)) ##### Patch Changes - fix: ensure buttonProps.enhance works on buttons with nested text ([#14199](https://redirect.github.com/sveltejs/kit/pull/14199)) - fix: pass validation issues specifically to avoid non-enumerable spreading error ([#14197](https://redirect.github.com/sveltejs/kit/pull/14197)) ### [`v2.29.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2291) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.29.0...@sveltejs/kit@2.29.1) ##### Patch Changes - chore: allow remote functions in all of the src directory ([#14198](https://redirect.github.com/sveltejs/kit/pull/14198)) ### [`v2.29.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2290) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.28.0...@sveltejs/kit@2.29.0) ##### Minor Changes - feat: add a `kit.files.src` option ([#14152](https://redirect.github.com/sveltejs/kit/pull/14152)) ##### Patch Changes - fix: don't treat `$lib/server.ts` or `$lib/server_whatever.ts` as server-only modules, only `$lib/server/**` ([#14191](https://redirect.github.com/sveltejs/kit/pull/14191)) - fix: make illegal server-only import errors actually useful ([#14155](https://redirect.github.com/sveltejs/kit/pull/14155)) - chore: deprecate `config.kit.files` options ([#14152](https://redirect.github.com/sveltejs/kit/pull/14152)) - fix: avoid warning if page options in a Svelte file belongs to a comment ([#14180](https://redirect.github.com/sveltejs/kit/pull/14180)) ### [`v2.28.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2280) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.27.3...@sveltejs/kit@2.28.0) ##### Minor Changes - feat: add `RouteId` and `RouteParams` to NavigationTarget interface ([#14167](https://redirect.github.com/sveltejs/kit/pull/14167)) - feat: add `pending` property to forms and commands ([#14137](https://redirect.github.com/sveltejs/kit/pull/14137)) ##### Patch Changes - fix: `fetch` imported assets during prerender ([#12201](https://redirect.github.com/sveltejs/kit/pull/12201)) - chore: refactor redundant base64 encoding/decoding functions ([#14160](https://redirect.github.com/sveltejs/kit/pull/14160)) - fix: use correct cache result when fetching same url multiple times ([#12355](https://redirect.github.com/sveltejs/kit/pull/12355)) - fix: don't refresh queries automatically when running commands ([#14170](https://redirect.github.com/sveltejs/kit/pull/14170)) - fix: avoid writing remote function bundle to disk when treeshaking prerendered queries ([#14161](https://redirect.github.com/sveltejs/kit/pull/14161)) ### [`v2.27.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2273) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.27.2...@sveltejs/kit@2.27.3) ##### Patch Changes - chore: add `.git` to the end of `package.json` repository url ([#14134](https://redirect.github.com/sveltejs/kit/pull/14134)) ### [`v2.27.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2272) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.27.1...@sveltejs/kit@2.27.2) ##### Patch Changes - fix: ensure `form()` remote functions work when the app is configured to a single output ([#14127](https://redirect.github.com/sveltejs/kit/pull/14127)) - fix: use the configured base path when calling remote functions from the client ([#14106](https://redirect.github.com/sveltejs/kit/pull/14106)) ### [`v2.27.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2271) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.27.0...@sveltejs/kit@2.27.1) ##### Patch Changes - fix: correctly type remote function input parameters from a schema ([#14098](https://redirect.github.com/sveltejs/kit/pull/14098)) - fix: match URL-encoded newlines in rest route params ([#14102](https://redirect.github.com/sveltejs/kit/pull/14102)) - fix: correctly spell server-side in error messages ([#14101](https://redirect.github.com/sveltejs/kit/pull/14101)) ### [`v2.27.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2270) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.26.1...@sveltejs/kit@2.27.0) ##### Minor Changes - feat: remote functions ([#13986](https://redirect.github.com/sveltejs/kit/pull/13986)) ### [`v2.26.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2261) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.26.0...@sveltejs/kit@2.26.1) ##### Patch Changes - fix: posixify internal app server path ([#14049](https://redirect.github.com/sveltejs/kit/pull/14049)) - fix: ignore route groups when generating typed routes ([#14050](https://redirect.github.com/sveltejs/kit/pull/14050)) ### [`v2.26.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2260) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.25.2...@sveltejs/kit@2.26.0) ##### Minor Changes - feat: better type-safety for `page.route.id`, `page.params`, `page.url.pathname` and various other places ([#13864](https://redirect.github.com/sveltejs/kit/pull/13864)) - feat: `resolve(...)` and `asset(...)` helpers for resolving paths ([#13864](https://redirect.github.com/sveltejs/kit/pull/13864)) - feat: Add `$app/types` module with `Asset`, `RouteId`, `Pathname`, `ResolvedPathname` `RouteParams<T>` and `LayoutParams<T>` ([#13864](https://redirect.github.com/sveltejs/kit/pull/13864)) ### [`v2.25.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2252) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.25.1...@sveltejs/kit@2.25.2) ##### Patch Changes - fix: correctly set URL when navigating during an ongoing navigation ([#14004](https://redirect.github.com/sveltejs/kit/pull/14004)) ### [`v2.25.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2251) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.25.0...@sveltejs/kit@2.25.1) ##### Patch Changes - fix: add missing params property ([#14012](https://redirect.github.com/sveltejs/kit/pull/14012)) ### [`v2.25.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2250) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.24.0...@sveltejs/kit@2.25.0) ##### Minor Changes - feat: support asynchronous `read` implementations from adapters ([#13859](https://redirect.github.com/sveltejs/kit/pull/13859)) ##### Patch Changes - fix: log when no Svelte config file has been found to avoid confusion ([#14001](https://redirect.github.com/sveltejs/kit/pull/14001)) ### [`v2.24.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2240) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.23.0...@sveltejs/kit@2.24.0) ##### Minor Changes - feat: typed `params` prop for page/layout components ([#13999](https://redirect.github.com/sveltejs/kit/pull/13999)) ##### Patch Changes - fix: treeshake internal `storage.get` helper ([#13998](https://redirect.github.com/sveltejs/kit/pull/13998)) ### [`v2.23.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2230) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.5...@sveltejs/kit@2.23.0) ##### Minor Changes - feat: support svelte.config.ts ([#13935](https://redirect.github.com/sveltejs/kit/pull/13935)) > **NOTE** > > Your runtime has to support importing TypeScript files for `svelte.config.ts` to work. > In Node.js, the feature is supported with the `--experimental-strip-types` flag starting in Node 22.6.0 and supported without a flag starting in Node 23.6.0. ##### Patch Changes - fix: extend `vite-plugin-svelte`'s `Config` type instead of duplicating it ([#13982](https://redirect.github.com/sveltejs/kit/pull/13982)) - fix: regression with `rolldown-vite` not bundling a single JS file for single and inline apps ([#13941](https://redirect.github.com/sveltejs/kit/pull/13941)) ### [`v2.22.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2225) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.4...@sveltejs/kit@2.22.5) ##### Patch Changes - fix: re-add `@sveltejs/kit` to `optimizeDeps.exclude` ([#13983](https://redirect.github.com/sveltejs/kit/pull/13983)) ### [`v2.22.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2224) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.3...@sveltejs/kit@2.22.4) ##### Patch Changes - fix: force `$app/*` modules to be bundled ([#13977](https://redirect.github.com/sveltejs/kit/pull/13977)) ### [`v2.22.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2223) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.2...@sveltejs/kit@2.22.3) ##### Patch Changes - fix: don't bundle `@sveltejs/kit` ([#13971](https://redirect.github.com/sveltejs/kit/pull/13971)) ### [`v2.22.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2222) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.1...@sveltejs/kit@2.22.2) ##### Patch Changes - fix: use fallback if `untrack` doesn't exist in svelte package ([#13933](https://redirect.github.com/sveltejs/kit/pull/13933)) - fix: warning for chrome devtools requests now suggests sv instead of vite plugin ([#13905](https://redirect.github.com/sveltejs/kit/pull/13905)) ### [`v2.22.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2221) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.22.0...@sveltejs/kit@2.22.1) ##### Patch Changes - fix: prevent infinite loop when calling `pushState`/`replaceState` in `$effect` ([#13914](https://redirect.github.com/sveltejs/kit/pull/13914)) - chore: use `manualChunks` to bundle single and inline apps with Rolldown ([#13915](https://redirect.github.com/sveltejs/kit/pull/13915)) ### [`v2.22.0`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2220) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.5...@sveltejs/kit@2.22.0) ##### Minor Changes - feat: add support for Vite 7 and Rolldown. See <https://vite.dev/guide/rolldown.html#how-to-try-rolldown> for details about how to try experimental Rolldown support. You will also need `vite-plugin-svelte@^6.0.0-next.0` and `vite@^7.0.0-beta.0`. Compilation should be faster using Rolldown, but with larger bundle sizes until additional tree-shaking is implemented in Rolldown. See [#13738](https://redirect.github.com/sveltejs/kit/issues/13738) for ongoing work. ([#13747](https://redirect.github.com/sveltejs/kit/pull/13747)) ### [`v2.21.5`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2215) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.4...@sveltejs/kit@2.21.5) ##### Patch Changes - fix: correctly set the sequential focus navigation point when using hash routing ([#13884](https://redirect.github.com/sveltejs/kit/pull/13884)) - fix: regression when resetting focus and the URL hash contains selector combinators or separators ([#13884](https://redirect.github.com/sveltejs/kit/pull/13884)) ### [`v2.21.4`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2214) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.3...@sveltejs/kit@2.21.4) ##### Patch Changes - fix: correctly access transport decoders on the client when building for a single or inline output app ([#13871](https://redirect.github.com/sveltejs/kit/pull/13871)) ### [`v2.21.3`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2213) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.2...@sveltejs/kit@2.21.3) ##### Patch Changes - fix: correctly invalidate static analysis cache of child nodes when modifying a universal `+layout` file during dev ([#13793](https://redirect.github.com/sveltejs/kit/pull/13793)) - fix: correctly set sequential focus navigation starting point after navigation ([#10856](https://redirect.github.com/sveltejs/kit/pull/10856)) - fix: suppress console spam for chrome devtools requests ([#13830](https://redirect.github.com/sveltejs/kit/pull/13830)) - fix: avoid externalising packages that depend on `@sveltejs/kit` so that libraries can also use `redirect` and `error` helpers ([#13843](https://redirect.github.com/sveltejs/kit/pull/13843)) - fix: correctly run `deserialize` on the server ([#13686](https://redirect.github.com/sveltejs/kit/pull/13686)) - fix: correctly inline stylesheets of components dynamically imported in a universal load function if they are below the configured inlineStyleThreshold ([#13723](https://redirect.github.com/sveltejs/kit/pull/13723)) ### [`v2.21.2`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2212) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.1...@sveltejs/kit@2.21.2) ##### Patch Changes - fix: omit stack when logging 404 errors ([#13848](https://redirect.github.com/sveltejs/kit/pull/13848)) ### [`v2.21.1`](https://redirect.github.com/sveltejs/kit/blob/HEAD/packages/kit/CHANGELOG.md#2211) [Compare Source](https://redirect.github.com/sveltejs/kit/compare/@sveltejs/kit@2.21.0...@sveltejs/kit@2.21.1) ##### Patch Changes - chore: clarify which functions `handleFetch` affects ([#13788](https://redirect.github.com/sveltejs/kit/pull/13788)) - fix: ensure `$env` and `$app/environment` are correctly set while analysing server nodes ([#13790](https://redirect.github.com/sveltejs/kit/pull/13790)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone EST, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/techniq/svelte-ux).

合并状态:未合并 4 条评论