[dependabot]

Bumps @sveltejs/kit and @sveltejs/adapter-node. These dependencies needed to be updated together.
Updates @sveltejs/kit from 2.70.3 to 3.2.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.2.0

Minor Changes

• feat: Add clickable links to remote function invocation in dev server logs (#17547)

Patch Changes

• fix: reject URL inputs in resolve (#17627)

• fix: respond with JSON instead of rendering the error page for a __data.json request to a missing route (#17630)

• fix: resolve relative paths against the page URL in data requests when paths.relative is true (#17630)

• fix: reject binary remote forms referencing files with an empty file-offset table as 400 Bad Request (#17579)

• fix: correctly populate route and params for afterNavigate during hydration (#17577)

• fix: include assets imported through dynamic imports, remote functions and param matchers in builder.findServerAssets so that read can find them (#17505)

• fix: set navigation.from to null in afterNavigate on start when SSR is disabled (#17587)

• fix: include remote function name and declaration file in schema validation failure logs (#17495)

• fix: reuse SSR results of remote functions from packages during hydration in dev (#17604)

• fix: remove empty type output directories for removed routes (#17472)

• fix: use the UTF-8 byte length when reading inline assets (#17590)

• chore: simplify a few server and build helpers (#17531)

• fix: ignore the query string and hash of an imported asset's URL when using read (#17507)

• fix: avoid reloading unrelated server modules when saving files during development (#17462)

@​sveltejs/kit@​3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.2.0

Minor Changes

• feat: Add clickable links to remote function invocation in dev server logs (#17547)

Patch Changes

• fix: reject URL inputs in resolve (#17627)

• fix: respond with JSON instead of rendering the error page for a __data.json request to a missing route (#17630)

• fix: resolve relative paths against the page URL in data requests when paths.relative is true (#17630)

• fix: reject binary remote forms referencing files with an empty file-offset table as 400 Bad Request (#17579)

• fix: correctly populate route and params for afterNavigate during hydration (#17577)

• fix: include assets imported through dynamic imports, remote functions and param matchers in builder.findServerAssets so that read can find them (#17505)

• fix: set navigation.from to null in afterNavigate on start when SSR is disabled (#17587)

• fix: include remote function name and declaration file in schema validation failure logs (#17495)

• fix: reuse SSR results of remote functions from packages during hydration in dev (#17604)

• fix: remove empty type output directories for removed routes (#17472)

• fix: use the UTF-8 byte length when reading inline assets (#17590)

• chore: simplify a few server and build helpers (#17531)

• fix: ignore the query string and hash of an imported asset's URL when using read (#17507)

• fix: avoid reloading unrelated server modules when saving files during development (#17462)

3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

... (truncated)

Commits

• 879c2c0 Version Packages (#17583)
• 9bc12d3 chore: declare e2e coverage variants in one place (#16845)
• decaf66 fix: resolve relative paths against the page URL in data requests (#17630)
• fe4deb1 fix: reject URL inputs in resolve() (#17627)
• 9ea73c6 pass dev_decoration to init_remote_functions and attach dev_loc
• 5d1665a Merge branch 'main' into fix-remote-validation-log-name
• a428a5c refactor: use if/else if instead of nested ternary
• a03429c fix: reuse SSR results of package remote functions on hydration in dev (#17604)
• 2dce9ca fix: set navigation.from to null on start without SSR (#17587)
• 9c1eda4 feat: Clickable remote function logs (#17547)
• Additional commits viewable in compare view

Updates @sveltejs/adapter-node from 5.5.7 to 6.0.2

Release notes

Sourced from @​sveltejs/adapter-node's releases.

@​sveltejs/adapter-node@​6.0.2

Patch Changes

• fix: ignore Range headers on HEAD requests for static assets (#17602)

• fix: respond with a 500 instead of crashing the server when handling a request fails unexpectedly (#17696)

• fix: support the ORIGIN environment variable when paths.origin is not set (#17632)

• Updated dependencies:

  • @​sveltejs/kit@​3.2.0

@​sveltejs/adapter-node@​6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

@​sveltejs/adapter-node@​6.0.0

Major Changes

• breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

• chore: migrate from rollup to rolldown (#15297)

• breaking: require SvelteKit 3 (#15506)

• breaking: add kit.paths.origin config option, remove kit.prerender.origin and the adapter-node ORIGIN environment variable (#16161)

• breaking: require vite@^8.0.12, the first Vite 8 release bundling stable rolldown 1.0.0 (#16134)

• breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

• breaking: record the list of static assets at build time, files added to the output afterwards are not served (#16908)

• breaking: validate static assets with content-hash ETags and stop sending Last-Modified (#16908)

• breaking: serve static assets only to GET and HEAD requests (#16908)

Minor Changes

• feat: serve static assets from tables recorded at adapt time, instead of using sirv (#16908)

• feat: better error logging (#16374)

Patch Changes

• fix: prevent scheme-like path segments from causing off-site trailing-slash redirects (#17294)

• fix: serve static files with the Content-Type recorded in the manifest (#16564)

... (truncated)

Changelog

Sourced from @​sveltejs/adapter-node's changelog.

6.0.2

Patch Changes

• fix: ignore Range headers on HEAD requests for static assets (#17602)

• fix: respond with a 500 instead of crashing the server when handling a request fails unexpectedly (#17696)

• fix: support the ORIGIN environment variable when paths.origin is not set (#17632)

• Updated dependencies:

  • @​sveltejs/kit@​3.2.0

6.0.1

Patch Changes

• fix: avoid crashing the server when a text/event-stream response has immutable headers (9435bad)
• Updated dependencies:
  • @​sveltejs/kit@​3.1.1

6.0.0

Major Changes

• breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

• chore: migrate from rollup to rolldown (#15297)

• breaking: require SvelteKit 3 (#15506)

• breaking: add kit.paths.origin config option, remove kit.prerender.origin and the adapter-node ORIGIN environment variable (#16161)

• breaking: require vite@^8.0.12, the first Vite 8 release bundling stable rolldown 1.0.0 (#16134)

• breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

• breaking: record the list of static assets at build time, files added to the output afterwards are not served (#16908)

• breaking: validate static assets with content-hash ETags and stop sending Last-Modified (#16908)

• breaking: serve static assets only to GET and HEAD requests (#16908)

Minor Changes

• feat: serve static assets from tables recorded at adapt time, instead of using sirv (#16908)

• feat: better error logging (#16374)

Patch Changes

... (truncated)

Commits

• 879c2c0 Version Packages (#17583)
• bd4731f respond with 500 on unexpected request errors
• 5c7f430 chore: run Node/Bun test apps with prod deps only (#17214)
• 2fc8601 fix: support origin env var in node and bun adapters (#17632)
• 9d89a52 fix: ignore Range headers on static HEAD requests (#17602)
• 3d85a7a Version Packages
• 9435bad fix: avoid crashing the server when a text/event-stream response has immutabl...
• 242149e chore: install kit and the adapter into the adapter test apps like a real pro...
• 3ec9b91 Version Packages
• 2760a6f fix: prevent open redirects when adding trailing slashes (#17294)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.