chore(deps): update sveltekit

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@sveltejs/kit (source)	^2.60.1 → ^2.69.1
svelte (source)	^5.55.7 → ^5.56.4
svelte-check	^4.4.8 → ^4.7.1
vite (source)	^8.0.13 → ^8.1.3
vitest (source)	^4.1.6 → ^4.1.9

---

Release Notes

sveltejs/kit (@​sveltejs/kit)

v2.69.1

Patch Changes

• fix: prevent prototype pollution when deleting file inputs (#​16218)

• fix: prevent unhandled promise rejection (#​16219)

v2.69.0

Minor Changes

• feat: expose submitted property of remote forms (#​14811)

Patch Changes

• fix: clear issues and touched states on form reset (#​16163)

• fix: return undefined from fields.branch.issues() when only fields.branch.leaf has issues (#​16187)

v2.68.0

Minor Changes

• feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#​15816)

• feat: set value of submit fields when form is submitted (#​15979)

Patch Changes

• fix: skip native_navigation when __data.json returns 404 on a static fallback page (#​16135)

• fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#​15267)

• fix: snapshot form fields on read (#​16150)

• fix: strip field prefix before erroring on duplicates (#​16151)

• fix: call reset function via prototype (#​16138)

• chore: fix navigation type hover info (#​16147)

v2.67.0

Compare Source

Minor Changes

• feat: add prerender.handleInvalidUrl option for invalid URLs discovered while crawling (#​16088)

Patch Changes

• fix: support exactOptionalPropertyTypes for optional form schema fields (#​15866)

• fix: avoid unnecessarily overriding a user's Vite 8 codeSplitting setting (#​16118)

v2.66.0

Compare Source

Minor Changes

• feat: precompress prerendered .md and .mdx files (#​15893)

• feat: warn the user when they forget to make boolean inputs optional in their form schemas (#​15804)

Patch Changes

• fix: blur active element before component update during navigation so that blur/focusout handlers fire while old component data is still valid (#​15452)

• fix: ensure base is available from $service-worker during development (#​15882)

• fix: use correct relative asset paths when rendering an error page for a missing __data.json request (#​15884)

• fix: preserve active for await consumers across query.live reconnects (#​16022)

• fix: settle query.live reconnect promise on all exit paths, preventing invalidateAll() from deadlocking when a live query is offline or interrupted (#​16022)

• fix: preserve last value when a query.live stream completes without yielding on reconnect (#​16022)

• fix: remove types: ['node'] from generated tsconfig to avoid errors when @types/node is not installed (#​15709)

• fix: prefer pages over endpoints when prerendering (#​16076)

• fix: restore snapshots after afterNavigate callbacks (#​16066)

• fix: support ws:/wss: and trusted-types-eval for CSP sources (#​15938)

• fix: omit empty file inputs from remote form data (#​15898)

• fix: fail early if a route with +page and +server is marked as prerenderable (#​16075)

• fix: wait a tick before resetting forms (#​15805)

• fix: preflight schemas apply correctly when chained before for (#​15863)

• fix: blank page in SPA mode when root layout load() throws (#​15798)

• fix: pass all unknown options from the sveltekit Vite plugin through to vite-plugin-svelte (#​16010)

v2.65.2

Compare Source

Patch Changes

• fix: throw an error when prerendering a root +server.js that returns a non-HTML response (#​15994)

• fix: decode base64-serialized fetch bodies before caching them for client-side replay (#​16034)

• fix: correctly access explicit dynamic public environment variables from prerendered pages and service workers (#​16024)

• fix: allow preloadCode to be called during initial page load (#​16028)

• fix: send cache-control: private, no-store on remote function responses so personalized query results can never be cached by shared caches (#​16020)

• fix: preserve the HTTP status and error body when a remote function request fails in transport (e.g. a 401/403 from a handle hook), instead of reporting a generic 500 (#​16021)

• fix: avoid loading universal nodes during build analysis when the app uses a hash router (#​16042)

• fix: correctly serve client entry during development when using the pnpm global virtual store (#​16045)

• fix: normalize path separators when comparing config (#​16037)

• fix: ensure building resolves correctly to allow avoiding build-time explicit environment variable validation (#​16058)

• fix: prevent unhandled promise rejections when remote function failures are consumed via current/error instead of await (#​16018)

v2.65.1

Compare Source

Patch Changes

• fix: avoid importing the Vite development client code into builds with a non-standard NODE_ENV (#​16023)

• fix: don't emit the unused bundle and stylesheet files when using bundleStrategy: 'inline' (#​16025)

• fix: reset queries before navigating when invalidateAll is set (#​16014)

• fix: regression in loading assets for absolute path apps (#​16026)

v2.65.0

Compare Source

Minor Changes

• feat: allow queries to refresh other queries (#​16012)

Patch Changes

• fix: dedupe remote data (#​15991)

• fix: skip client build if all routes have CSR disabled (#​15936)

v2.64.0

Compare Source

Minor Changes

• feat: allow commands to receive File objects (#​15978)

Patch Changes

• fix: avoid server components from being bundled if SSR is turned off for a route (#​15982)

v2.63.1

Compare Source

Patch Changes

• fix: use SSE for query.live (#​15957)

• fix: use forward slashes in the generated env.d.ts import path on Windows (#​15977)

• fix: allow $app/environment with a warning when explicitEnvironmentVariables is enabled (#​15980)

• fix: avoid importing Vite while validating explicit environment variables (#​15953)

• docs: adjust the release version of explicit env vars (#​15968)

• fix: ensure version is defined when importing from $app/env with explicit environment variables (#​15971)

v2.63.0

Compare Source

Minor Changes

• feat: explicit env vars (#​15934)

Patch Changes

• fix: remove check for svelte.config.js before running sync (#​15946)

• fix: generate a placeholder tsconfig.json to squelch sync-time warnings (#​15948)

• fix: allow use of $app/env/public in service workers (#​15950)

v2.62.0

Compare Source

Minor Changes

• feat: support passing Svelte(Kit) config via Vite plugin (#​15944)

Patch Changes

• fix: preserve multiple Set-Cookie headers on 304 responses (#​15902)

• fix: preload for anchor elements that were just previously preloaded (#​15915)

• fix: catch load function streaming errors on the client (#​15929)

• fix: avoid generating the _app/env.js module if public dynamic environment variables are not used by the app (#​15940)

v2.61.1

Compare Source

Patch Changes

• fix: regression where routes starting and ending with a route group are not matched correctly (#​15903)

v2.61.0

Compare Source

Minor Changes

• breaking: the .run() method has been removed from remote queries on both the client and the server. Use await query() directly instead — it now works everywhere (#​15779)

• feat: remote queries can now be awaited in any context (event handlers, module scope, async callbacks), not just inside reactive contexts. The cache is shared across reactive and non-reactive subscribers, so awaiting a query in an event handler will dedupe with components that have already subscribed to the same query. (#​15779)

• feat: live query instances are now themselves async-iterable (#​15878)

• feat: add programmatic submit method to form remote function instances (#​15657)

• feat: pass form remote function instance into enhance callback (#​15657)

Patch Changes

• fix: resolve the app payload without using process.env.NODE_ENV (#​15852)

• fix: support exactOptionalPropertyTypes for optional route params (#​15825)

• fix: correctly send true value to the server for 'submit' and 'hidden' form fields (#​15858)

• fix: avoid build warnings about undefined universal hooks (#​15895)

• fix: prefer default error page when failing to decode the URL pathname (#​15744)

• fix: disable link prefetching on slow internet connections (#​15885)

• fix: allow routes ending with optional parameters next to more specific routes (#​15861)

• fix: remove reliance on Content-Length header in deserialize_binary_form, which caused failures when proxies (e.g. Vercel, Azure) strip the header and use chunked transfer encoding (#​15796)

sveltejs/svelte (svelte)

v5.56.4

Compare Source

Patch Changes

• fix: include wrapping parentheses in {@​const} declarator end position (#​18436)

• fix: always unset reactivity context after restoring it (#​18453)

• fix: don't notify searchParams subscribers when the URL changes without affecting the search string (#​18425)

• fix: strip ? from optional parameters in <script lang="ts"> so generated JavaScript is valid (#​18448)

v5.56.3

Compare Source

Patch Changes

• fix: ignore errors that occur in destroyed effects (#​18384)

• fix: type BigInts in $state.snapshot(...) return values (#​18388)

v5.56.2

Compare Source

Patch Changes

• fix: properly track effect end node for async sibling component (#​18371)

• fix: prevent false-positive reactivity loss warning (#​18373)

• chore: bump esrap dependency (#​18372)

• fix: ignore declaration tags for animation directive (#​18366)

• fix: reject pending async deriveds on discard (#​18308)

v5.56.1

Compare Source

Patch Changes

• fix: error at compile time on duplicate snippet/declaration tag definitions (#​18351)

• fix: parse declaration tag contents more robustly (#​18353)

• fix: correctly transform references to earlier declarators in a declaration tag (e.g. {let a = $state(0), b = $derived(a * 2)}) (#​18348)

• fix: avoid spurious state_referenced_locally warnings for $derived declarations in declaration tags (#​18348)

• fix: tolerate whitespace before let/const in declaration tags (#​18348)

• fix: prevent infinite loop when a tag's expression ends with a trailing / at the end of the input (#​18350)

• fix: more robust parsing of declaration tags with regards to type (#​18330)

• fix: preserve newlines in spread input values when the type attribute is applied after value (#​18345)

• fix: update SvelteURLSearchParams when setting duplicate keys to the same joined value (#​18336)

• fix: check references for blockers on server, too (#​18352)

v5.56.0

Compare Source

Minor Changes

• feat: allow declarations in the template (#​18282)

Patch Changes

• perf: use createElement instead of createElementNS for HTML elements (#​18262)

• perf: store current_sources as a Set for O(1) membership checks (#​18278)

• perf: deduplicate identical hoisted templates within a component (#​18320)

• perf: hoist rest_props exclude list as a module-scope Set (#​18252)

v5.55.10

Compare Source

Patch Changes

• fix: unlink errored and otherwise finished batch (#​18264)

• perf: walk composedPath() directly in delegated event propagation (#​18268)

• fix: transfer effects when merging batches (#​18254)

• fix: allow $derived(await ...) in disconnected effect roots (#​18273)

• fix: remove temporary raw-text hydration markers (#​18269)

• fix: propagate async @const blockers through closure references so template expressions like {(() => host)()} correctly wait for the awaited value (#​18309)

• fix: properly unlink batches (#​18298)

• fix: settle discarded batch (#​18290)

• fix: declare let: directives before {@​const} declarations on slotted elements (#​18271)

• fix: resume outro-ed branches if they were kept around (#​18291)

• fix: avoid waterfall-warning when async resolves to same value (#​18297)

• fix: correctly coordinate component-level effects inside async blocks (#​18260)

• fix: make unnecessary commit work less likely (#​18263)

• chore: add tag name to a11y_click_events_have_key_events warning (#​18272)

• fix: catch rejected promises while merging/committing (#​18266)

v5.55.9

Compare Source

Patch Changes

• fix: don't unset batch when calling {#await ...} promise (#​18243)

• fix: promise-ify {#await await ...} expressions on the server and correctly hydrate them on the client (#​18243)

• fix: deduplicate dependencies that are added outside the init/update cycle (#​18243)

• fix: avoid false-positive batch invariant error (#​18246)

• fix: inline primitive constants in attribute values during SSR (#​18232)

v5.55.8

Compare Source

Patch Changes

• fix(print): handle svelte:body and fix keyframe percentage double-printing (#​18234)

• fix: execute uninitialized derived even if it's destroyed (#​18228)

• fix: use named symbols everywhere (#​18238)

• fix: don't run teardown effects when deriveds are unfreezed (#​18227)

• fix: unset context synchronously in run (#​18236)

sveltejs/language-tools (svelte-check)

v4.7.1

Compare Source

Patch Changes

• fix: correctly parse --tsgo-experimental-api flag (#​3067)

v4.7.0

Compare Source

Minor Changes

• feat: add --config option (#​3066)

• feat: svelte-check tsgo support with experimental api (#​3036)

Patch Changes

• fix: load esm version of Vite (#​3065)

• fix: stop excluding workspaces under dot-prefixed ancestors (#​3037)

• Updated dependencies [7a3464b, a2561fc]:

  • @​sveltejs/load-config@​0.2.0

v4.6.0

Compare Source

Minor Changes

• feat: support reading Svelte config from vite.config.js/ts (#​3031)

Patch Changes

• Updated dependencies [151cf45]:
  • @​sveltejs/load-config@​0.1.1

v4.5.0

Compare Source

Minor Changes

• feat: support Svelte 5 declaration tags (#​3033)

Patch Changes

• fix: properly handle props with the name slot inside Svelte 5 snippets (#​3030)

• feat: add support for svelte config ts/mts files (#​3009)

vitejs/vite (vite)

v8.1.3

Compare Source

Bug Fixes

• css: inject inlined CSS after the shebang line (#​22717) (1534d36)
• deps: bump es-module-lexer to 2.3.0 (#​22838) (7103c3a)
• preload css for nested dynamic imports (#​22759) (2c53054)
• ssr: correct stacktrace column position for first line (#​22828) (c4acd69)

v8.1.2

Compare Source

Bug Fixes

• deps: revert es-module-lexer to 2.1.0 (#​22827) (0d3bd7c)
• restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#​22757)" (#​22825) (efb98cc)
• revert, "fix: escape ids with multiple null bytes (#​22687)" (cccef55)
• revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#​22757)" (cf97711)

v8.1.1

Compare Source

Features

• update dynamic import warning to link to Vite docs (#​22823) (62bd7af)

Bug Fixes

• bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#​22797) (709eb8e)
• bundled-dev: serve assets emitted during HMR/lazy compile (#​22745) (5876b2c)
• bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#​22778) (8f925e2)
• css: preserve dollar signs in external @import urls with lightningcss (#​22718) (9fa7ab4)
• css: resolve tsconfig paths in CSS and Sass @​import (#​22775) (ef0b891)
• deps: update all non-major dependencies (#​22734) (e635f49)
• deps: update all non-major dependencies (#​22804) (8837400)
• deps: update rolldown-related dependencies (#​22591) (2ce6677)
• escape ids with multiple null bytes (#​22687) (833fc30)
• hide console window when running 'net use' on Windows (#​22698) (92b63f2)
• ignore bundled config temp dir (#​22800) (043a810)
• invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#​22809) (33895ba)
• optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#​22784) (085a0ab)
• optimizer: scanner should resolve input from root (#​22769) (9722b07)
• resolve pnpm .modules.yaml from workspace root instead of cwd (#​22757) (2531ac7)
• return sourcemap field from some plugins that were lacking (#​22782) (7e18bf8)
• server: handle malformed URI in indexHtmlMiddleware (#​22781) (84f5ccc)

Miscellaneous Chores

• improve dependency optimizer messages (#​22549) (092cb3b)

Code Refactoring

• css: remove lightningcss null byte bug workaround (#​22822) (2dafd3b)
• use pre-defined environments variable to avoid duplicate Object.values calls (#​22790) (1113acf)

Tests

• enable "manual chunk path" test and remove "worker.format error" test (#​22824) (c088511)

v8.1.0

Compare Source

Features

• extend server.fs.deny list with common files (#​22707) (61ba8fd)
• update rolldown to 1.1.2 (#​22695) (4f008a6)
• use ~ for Rolldown (#​22693) (9928722)

Bug Fixes

• bundled-dev: errors should be kept when incremental build fails (#​22617) (9a0dd48)
• cache falsy values in perEnvironmentState (#​22715) (0e91e79)
• glob: respect caseSensitive option in hmr matcher (#​22711) (65f525e)
• html: omit nonce on import map when cspNonce is unset (#​22713) (8340bb5)
• optimizer: skip null-valued exports in expandGlobIds glob resolution (#​22611) (8b9f5cd)
• resolved build options should be kept as a getter (#​22691) (3527191)
• server: handle malformed URI in memory files middleware (#​22714) (df9e0a5)
• use literal envPrefix queries for Vite Task (#​22706) (da72733)
• warn on deprecated envFile (#​22555) (ed7b283)

Code Refactoring

• client: inline dev-id value in CSS selector (#​22736) (57f59bc)
• remove unused removeRawQuery util (#​22724) (403cc60)
• use rolldownOptions property for chunkImportMap (#​22692) (8e8816c)

v8.0.16

Compare Source

Bug Fixes

• deps: reject UNC paths for launch-editor-middleware (#​22571) (50b9512)
• reject windows alternate paths (#​22572) (dc245c7)

v8.0.15

Compare Source

Features

• send 408 on request timeout (#​22476) (c85c9ee)
• update rolldown to 1.0.3 (#​22538) (646dbed)

Bug Fixes

• capitalize error messages and remove spurious space in parse error (#​22488) (85a0eff)
• deps: update all non-major dependencies (#​22511) (2686d7d)
• dev: fix html-proxy cache key mismatch for /@​fs/ HTML paths (#​21762) (47c4213)
• glob: error on relative glob in virtual module when no files match (#​22497) (5c8e98f)
• optimizer: close the rolldown bundle when write() rejects (#​22528) (e3cfb9d)
• resolve: provide onWarn for viteResolvePlugin in JS plugin containers (#​22509) (40985f1)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​22566) (3052a67)

Code Refactoring

• correct logic in collectAllModules function (#​22562) (6978a9c)

v8.0.14

Compare Source

Features

• update rolldown to 1.0.2 (#​22484) (96efc88)

Bug Fixes

• deps: update all non-major dependencies (#​22471) (98b8163)
• dev: handle errors when sending messages to vite server (#​22450) (e8e9a34)
• html: handle trailing slash paths in transformIndexHtml (#​22480) (5d94d1b)
• optimizer: pass oxc jsx options to transformSync in dependency scan (#​22342) (b3132da)

Miscellaneous Chores

• deps: update rolldown-related dependencies (#​22470) (7cb728e)
• remove irrelevant commits from changelog (2c69495)

Code Refactoring

• glob: do not rewrite import path for absolute base (#​22310) (0ae2844)

Tests

• css: sass does not use main field (#​22449) (ebf39a0)

vitest-dev/vitest (vitest)

v4.1.9

Compare Source

🐞 Bug Fixes

• Fix importOriginal with optimizer and query import [backport to v4] - by Hiroshi Ogawa, David Harris, Codexand Vladimir in #​10546 (a5180)
• browser:
  • Wait for orchestrator readiness before resolving browser sessions [backport to v4] - by Vladimir and Séamus O'Connor in #​10555 (7fb29)
  • Wait for iframe tester readiness before preparing [backport to v4] - by Vladimir and Séamus O'Connor in #​10497 and #​10556 (fbc62)
• mocker:
  • Hoist vi.mock() for vite-plus/test imports [backport to v4] - by Hiroshi Ogawa, LongYinan, Claude Opus 4.8 and Vladimir in #​10548 (2c955)
• pool:
  • Prevent test run hang on worker crash [backport to v4] - by Ari Perkkiö and Jattioui Ismail in #​10543 and #​10564 (934b0)

View changes on GitHub

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

v4.1.7

Compare Source

   🐞 Bug Fixes

• runner: Limit concurrency per task branch in addition to per leaf callbacks (backport)  -  by @​hi-ogawa in #​10384 (4f0f2)

    View changes on GitHub

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.