Skip to content

Bump @sveltejs/kit from 2.70.3 to 3.1.0 - #466

Open
dependabot[bot] wants to merge 1 commit into
depsfrom
dependabot/npm_and_yarn/deps/sveltejs/kit-3.1.0
Open

dependabot[bot] wants to merge 1 commit into
depsfrom
dependabot/npm_and_yarn/deps/sveltejs/kit-3.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @sveltejs/kit from 2.70.3 to 3.1.0.

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

@​sveltejs/kit@​3.0.1

Patch Changes

  • fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

@​sveltejs/kit@​3.0.0

Major Changes

  • breaking: move remote function types to $app/server (#16740)

  • breaking: remove experimental.handleRenderingErrors flag (#16265)

  • breaking: make getRequest and setResponse synchronous (#16280)

  • breaking: TypeScript 6 is now the minimum required version (#15930)

  • breaking: refresh all load functions/queries when clicking a link to the current URL (#16572)

  • breaking: move remote function types to $app/server (#16764)

  • breaking: upgrade to cookie v2. Cookie names must now contain only ASCII characters (#13386)

  • breaking: require Node 22 or newer (#12548)

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

  • breaking: remove the preloadStrategy option. modulepreload will always be used (#15256)

  • breaking: default the cookie path option to '/' (#15398)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

3.0.1

Patch Changes

  • fix: ensure relative imports in generated types work with nodenext module resolution (#17351)

3.0.0

Major Changes

  • breaking: move remote function types to $app/server (#16740)

  • breaking: remove experimental.handleRenderingErrors flag (#16265)

  • breaking: make getRequest and setResponse synchronous (#16280)

  • breaking: TypeScript 6 is now the minimum required version (#15930)

  • breaking: refresh all load functions/queries when clicking a link to the current URL (#16572)

  • breaking: move remote function types to $app/server (#16764)

  • breaking: upgrade to cookie v2. Cookie names must now contain only ASCII characters (#13386)

  • breaking: require Node 22 or newer (#12548)

  • major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

... (truncated)

Commits
  • 73bf98c Version Packages (#17364)
  • 38b95ac fix: continue deployment recovery when service worker updates fail (#17440)
  • c7e59b3 fix: leave focus in the parent page from an unfocused iframe (#17297)
  • 35835f2 feat: support report-sha256/report-sha384/report-sha512 CSP keywords (#17398)
  • 230d00c fix: infer prerendered MIME types from generated files (#17381)
  • 59441bc fix: don't treat every module as server-only when the project is inside a `se...
  • 3bc9234 fix: don't warn about Storybook's Vite plugins that use transformIndexHtml ...
  • 9b56543 fix: leave unchanged generated files alone, and replace changed ones atomical...
  • fd7cd9a docs: fix links (#17363)
  • 51a4e0b feat: emit a span for +server handlers when tracing is enabled (#17325)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/deps/sveltejs/kit-3.1.0 branch from 4c465e7 to 7527715 Compare October 25, 2026 05:56
@github-actions github-actions Bot added the needs-migration Major update: needs a planned migration label Oct 25, 2026
@github-actions

Copy link
Copy Markdown

A major update is not merged by automation. It needs a planned migration (the maintainers keep those notes beside the roadmap, under plans/core/pending/ in the private planning repo); until then this PR stays open and labelled needs-migration. If the migration is already written, link it here.

Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.70.3 to 3.1.0.
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.0/packages/kit)

---
updated-dependencies:
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/deps/sveltejs/kit-3.1.0 branch from 7527715 to ff08b3b Compare October 30, 2026 22:37
@github-actions

Copy link
Copy Markdown

A major update is not merged by automation. It needs a planned migration (the maintainers keep those notes beside the roadmap, under plans/core/pending/ in the private planning repo); until then this PR stays open and labelled needs-migration. If the migration is already written, link it here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code needs-migration Major update: needs a planned migration

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants