[dependabot]

Bumps @sveltejs/kit, @sveltejs/adapter-auto and @sveltejs/adapter-node. These dependencies needed to be updated together.
Updates @sveltejs/kit from 2.70.2 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

• fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

• fix: preserve service worker sourcemaps when injecting env (#17566)

• fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

• fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

• fix: report actionable errors for remote modules in server-only locations (#17567)

@​sveltejs/kit@​3.1.0

Minor Changes

• feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

• feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

• fix: don't treat every module as server-only when the project is inside a server directory (#17376)

• fix: continue deployment recovery when service worker updates fail (#17440)

• fix: infer prerendered MIME types from generated files (#17381)

• fix: leave generated files alone when their contents are unchanged (#17310)

• fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

• fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

@​sveltejs/kit@​3.0.1

Patch Changes

• fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

• fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

• fix: preserve service worker sourcemaps when injecting env (#17566)

• fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

• fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

• fix: report actionable errors for remote modules in server-only locations (#17567)

3.1.0

Minor Changes

• feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

• feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

• fix: don't treat every module as server-only when the project is inside a server directory (#17376)

• fix: continue deployment recovery when service worker updates fail (#17440)

• fix: infer prerendered MIME types from generated files (#17381)

• fix: leave generated files alone when their contents are unchanged (#17310)

• fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

• fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

3.0.1

... (truncated)

Commits

• 3d85a7a Version Packages
• 9ed55b4 only treat params as a client entrypoint with client-side route resolution
• ae07803 fix: prevent server-only modules from being imported into browser code via sr...
• a8f7c1e Merge commit from fork
• 7993d5e Merge commit from fork
• 24d8ee4 Merge commit from fork
• 2c190fe Merge commit from fork
• 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
• a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
• b378468 test: check service worker sourcemaps in options-3
• Additional commits viewable in compare view

Updates @sveltejs/adapter-auto from 7.0.1 to 8.0.0

Release notes

Sourced from @​sveltejs/adapter-auto's releases.

@​sveltejs/adapter-auto@​8.0.0

Major Changes

• breaking: require SvelteKit 3 (#15506)

Minor Changes

• feat: add zero-config deployment support for Render (#16850)

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows (#16618)

• fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

• Updated dependencies:

  • @​sveltejs/kit@​3.0.0

@​sveltejs/adapter-auto@​8.0.0-next.4

Minor Changes

• feat: add zero-config deployment support for Render (#16850)

Patch Changes

• Updated dependencies [9a4b343, ee2f55b, 65673a4, 1b79845, b12bb78, 03f1687, 49f0808, e7c74bf, 0876d63, 9a2b9ba, c9f54b5, 22b8152, f6d44cf, 3c3a27b, 7f376b1, 8a587c7, aa4f960]:
  • @​sveltejs/kit@​3.0.0-next.27

@​sveltejs/adapter-auto@​8.0.0-next.3

Major Changes

• breaking: require SvelteKit 3

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows

• fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

• Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

  • @​sveltejs/kit@​3.0.0-next.15

@​sveltejs/adapter-auto@​8.0.0-next.2

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows (#16618)
• Updated dependencies [c3f58bb, b655dc7, a70cc4f, b325afb, e76b3d7, 58f47eb, fe9d8d9, 0c7bbd7, 08d7e2a, f70f679, 0624b26, 0624b26, f4222ad, 089628b, d8617b3, c7369a1, 5e5e592, 60057c1, f70f679, 38f1528, 40092f3, ff4247e, 79a5de5, a70cc4f]:
  • @​sveltejs/kit@​3.0.0-next.14

Changelog

Sourced from @​sveltejs/adapter-auto's changelog.

8.0.0

Major Changes

• breaking: require SvelteKit 3 (#15506)

Minor Changes

• feat: add zero-config deployment support for Render (#16850)

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows (#16618)

• fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

• Updated dependencies:

  • @​sveltejs/kit@​3.0.0

8.0.0-next.4

Minor Changes

• feat: add zero-config deployment support for Render (#16850)

Patch Changes

• Updated dependencies [9a4b343, ee2f55b, 65673a4, 1b79845, b12bb78, 03f1687, 49f0808, e7c74bf, 0876d63, 9a2b9ba, c9f54b5, 22b8152, f6d44cf, 3c3a27b, 7f376b1, 8a587c7, aa4f960]:
  • @​sveltejs/kit@​3.0.0-next.27

8.0.0-next.3

Major Changes

• breaking: require SvelteKit 3

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows

• fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

• Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

  • @​sveltejs/kit@​3.0.0-next.15

8.0.0-next.2

Patch Changes

• fix: convert resolved adapter path to a file URL before importing, so builds work on Windows (#16618)
• Updated dependencies [c3f58bb, b655dc7, a70cc4f, b325afb, e76b3d7, 58f47eb, fe9d8d9, 0c7bbd7, 08d7e2a, f70f679, 0624b26, 0624b26, f4222ad, 089628b, d8617b3, c7369a1, 5e5e592, 60057c1, f70f679, 38f1528, 40092f3, ff4247e, 79a5de5, a70cc4f]:
  • @​sveltejs/kit@​3.0.0-next.14

... (truncated)

Commits

• 3ec9b91 Version Packages
• 375d4d0 chore: bump dev deps (#17195)
• 8eae94e chore: upgrade to Vitest 5 (#17084)
• 090d77f Version Packages (next) (#16943)
• 31a06c2 feat: add Render support to adapter-auto (#16850)
• 039cbcb chore: replace prettier with oxfmt (#16702)
• 7d11304 chore: use tsgo for type checking (#16692)
• aa810a0 chore: lint rule and windows CI leg to guard the recurring windows path bug c...
• 30b9cb2 Version Packages (next) (#16639)
• 94c447d Version Packages (next) (#16574)
• Additional commits viewable in compare view

Updates @sveltejs/adapter-node from 5.5.7 to 6.0.1

Release notes

Sourced from @​sveltejs/adapter-node's releases.

@​sveltejs/adapter-node@​6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

@​sveltejs/adapter-node@​6.0.0

Major Changes

• breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

• chore: migrate from rollup to rolldown (#15297)

• breaking: require SvelteKit 3 (#15506)

• breaking: add kit.paths.origin config option, remove kit.prerender.origin and the adapter-node ORIGIN environment variable (#16161)

• breaking: require vite@^8.0.12, the first Vite 8 release bundling stable rolldown 1.0.0 (#16134)

• breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

• breaking: record the list of static assets at build time, files added to the output afterwards are not served (#16908)

• breaking: validate static assets with content-hash ETags and stop sending Last-Modified (#16908)

• breaking: serve static assets only to GET and HEAD requests (#16908)

Minor Changes

• feat: serve static assets from tables recorded at adapt time, instead of using sirv (#16908)

• feat: better error logging (#16374)

Patch Changes

• fix: prevent scheme-like path segments from causing off-site trailing-slash redirects (#17294)

• fix: serve static files with the Content-Type recorded in the manifest (#16564)

• chore: bundle the adapter's server source directly instead of prebuilding it with rolldown (#17109)

• chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

• chore: hand adapt-time values to the server as a module instead of patching built chunks (#17103)

• fix: externalize @opentelemetry/api to prevent bundler chunk colocation between instrumentation.server.js and application code (#16302)

• feat: abort request.signal when the response closes prematurely, via a new response option for getRequest (#16793)

... (truncated)

Changelog

Sourced from @​sveltejs/adapter-node's changelog.

6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

6.0.0

Major Changes

• breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

• chore: migrate from rollup to rolldown (#15297)

• breaking: require SvelteKit 3 (#15506)

• breaking: add kit.paths.origin config option, remove kit.prerender.origin and the adapter-node ORIGIN environment variable (#16161)

• breaking: require vite@^8.0.12, the first Vite 8 release bundling stable rolldown 1.0.0 (#16134)

• breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

• breaking: record the list of static assets at build time, files added to the output afterwards are not served (#16908)

• breaking: validate static assets with content-hash ETags and stop sending Last-Modified (#16908)

• breaking: serve static assets only to GET and HEAD requests (#16908)

Minor Changes

• feat: serve static assets from tables recorded at adapt time, instead of using sirv (#16908)

• feat: better error logging (#16374)

Patch Changes

• fix: prevent scheme-like path segments from causing off-site trailing-slash redirects (#17294)

• fix: serve static files with the Content-Type recorded in the manifest (#16564)

• chore: bundle the adapter's server source directly instead of prebuilding it with rolldown (#17109)

• chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

• chore: hand adapt-time values to the server as a module instead of patching built chunks (#17103)

• fix: externalize @opentelemetry/api to prevent bundler chunk colocation between instrumentation.server.js and application code (#16302)

... (truncated)

Commits

• 3d85a7a Version Packages
• 9435bad fix: avoid crashing the server when a text/event-stream response has immutabl...
• 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
• 3ec9b91 Version Packages
• 2760a6f fix: prevent open redirects when adding trailing slashes (#17294)
• bde057e Version Packages (next) (#17212)
• cded491 fix: respect runtime export conditions in server adapters (#17234)
• 47417bc Version Packages (next) (#17202)
• dca7630 fix: bundle dev deps (#17210)
• 2b652e6 Version Packages (next) (#17062)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.