Skip to content

Bump @sveltejs/kit and @sveltejs/adapter-static - #82

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a340452cdf
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a340452cdf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026

Copy link
Copy Markdown

Bumps @sveltejs/kit and @sveltejs/adapter-static. These dependencies needed to be updated together.
Updates @sveltejs/kit from 2.70.3 to 3.1.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

@​sveltejs/kit@​3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

@​sveltejs/kit@​3.0.1

Patch Changes

  • fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.1

Patch Changes

  • fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

  • fix: restore function snapshots on reload when SSR is disabled (#17477)

  • fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

  • fix: reuse the original fetch across dev server reloads (#17548)

  • fix: avoid adding a file watcher while loading src/env (#17502)

  • fix: parse remote form submissions in linear time (d593e7e)

  • fix: prevent server-side route resolution from loading code from another origin for pathnames starting with // (dd63fd1)

  • fix: preserve service worker sourcemaps when injecting env (#17566)

  • fix: prevent server-only modules from being imported into browser code via src/params.js (ae07803)

  • fix: avoid injecting a non-serializable TypeScript config callback by default (#17512)

  • fix: report actionable errors for remote modules in server-only locations (#17567)

3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

3.0.1

... (truncated)

Commits
  • 3d85a7a Version Packages
  • 9ed55b4 only treat params as a client entrypoint with client-side route resolution
  • ae07803 fix: prevent server-only modules from being imported into browser code via sr...
  • a8f7c1e Merge commit from fork
  • 7993d5e Merge commit from fork
  • 24d8ee4 Merge commit from fork
  • 2c190fe Merge commit from fork
  • 8503225 Merge pull request #17548 from sachinkr7368/fix/dev-fetch-wrapper-leak
  • a2fa1c0 Merge pull request #17566 from CNSeniorious000/fix/service-worker-sourcemap
  • b378468 test: check service worker sourcemaps in options-3
  • Additional commits viewable in compare view

Updates @sveltejs/adapter-static from 3.0.10 to 4.0.1

Release notes

Sourced from @​sveltejs/adapter-static's releases.

@​sveltejs/adapter-static@​4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1

@​sveltejs/adapter-static@​4.0.0

Major Changes

  • breaking: require SvelteKit 3 (#15506)

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

  • fix: avoid caching immutable asset 404s when configuring for Vercel (#16626)

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel (#16497)

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

  • chore: use builder.config to access SvelteKit config settings (#16895)

  • Updated dependencies:

    • @​sveltejs/kit@​3.0.0

@​sveltejs/adapter-static@​4.0.0-next.4

Major Changes

  • breaking: require SvelteKit 3

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16286)

  • fix: avoid caching immutable asset 404s when configuring for Vercel

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

  • Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

    • @​sveltejs/kit@​3.0.0-next.15

@​sveltejs/adapter-static@​4.0.0-next.3

Patch Changes

... (truncated)

Changelog

Sourced from @​sveltejs/adapter-static's changelog.

4.0.1

Patch Changes

  • fix: escape prerendered paths used in Vercel route patterns (8a81718)
  • Updated dependencies:
    • @​sveltejs/kit@​3.1.1

4.0.0

Major Changes

  • breaking: require SvelteKit 3 (#15506)

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16610)

  • fix: avoid caching immutable asset 404s when configuring for Vercel (#16626)

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel (#16497)

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)

  • chore: use builder.config to access SvelteKit config settings (#16895)

  • Updated dependencies:

    • @​sveltejs/kit@​3.0.0

4.0.0-next.4

Major Changes

  • breaking: require SvelteKit 3

Patch Changes

  • chore: use node:fs instead of deprecated builder.rimraf and builder.mkdirp (#16286)

  • fix: avoid caching immutable asset 404s when configuring for Vercel

  • fix: match adapter-vercel's prerendered redirect handling when deploying to Vercel

  • fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range

  • Updated dependencies [bbd1e2f, e21d27b, 6044d05, 7fb611f, 9f06b3a, 8763327, 7dc2379, a70c3eb, 89f49c7, f36b3a4, 1144a63, 9f06b3a]:

    • @​sveltejs/kit@​3.0.0-next.15

4.0.0-next.3

Patch Changes

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) and [@sveltejs/adapter-static](https://github.com/sveltejs/kit/tree/HEAD/packages/adapter-static). These dependencies needed to be updated together.

Updates `@sveltejs/kit` from 2.70.3 to 3.1.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.1/packages/kit)

Updates `@sveltejs/adapter-static` from 3.0.10 to 4.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/adapter-static/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/adapter-static@4.0.1/packages/adapter-static)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.1
  dependency-type: direct:development
- dependency-name: "@sveltejs/adapter-static"
  dependency-version: 4.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 31, 2026
@mstange

mstange commented Nov 1, 2026

Copy link
Copy Markdown
Collaborator

Done in #84.

@mstange mstange closed this Nov 1, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-a340452cdf branch November 1, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant