[dependabot]

Bumps the dev-dependencies-security group with 1 update in the / directory: @sveltejs/kit.

Updates @sveltejs/kit from 2.70.3 to 3.2.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.2.0

Minor Changes

• feat: Add clickable links to remote function invocation in dev server logs (#17547)

Patch Changes

• fix: reject URL inputs in resolve (#17627)

• fix: respond with JSON instead of rendering the error page for a __data.json request to a missing route (#17630)

• fix: resolve relative paths against the page URL in data requests when paths.relative is true (#17630)

• fix: reject binary remote forms referencing files with an empty file-offset table as 400 Bad Request (#17579)

• fix: correctly populate route and params for afterNavigate during hydration (#17577)

• fix: include assets imported through dynamic imports, remote functions and param matchers in builder.findServerAssets so that read can find them (#17505)

• fix: set navigation.from to null in afterNavigate on start when SSR is disabled (#17587)

• fix: include remote function name and declaration file in schema validation failure logs (#17495)

• fix: reuse SSR results of remote functions from packages during hydration in dev (#17604)

• fix: remove empty type output directories for removed routes (#17472)

• fix: use the UTF-8 byte length when reading inline assets (#17590)

• chore: simplify a few server and build helpers (#17531)

• fix: ignore the query string and hash of an imported asset's URL when using read (#17507)

• fix: avoid reloading unrelated server modules when saving files during development (#17462)

@​sveltejs/kit@​3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

• fix: parse remote form submissions in linear time (d593e7e)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.2.0

Minor Changes

• feat: Add clickable links to remote function invocation in dev server logs (#17547)

Patch Changes

• fix: reject URL inputs in resolve (#17627)

• fix: respond with JSON instead of rendering the error page for a __data.json request to a missing route (#17630)

• fix: resolve relative paths against the page URL in data requests when paths.relative is true (#17630)

• fix: reject binary remote forms referencing files with an empty file-offset table as 400 Bad Request (#17579)

• fix: correctly populate route and params for afterNavigate during hydration (#17577)

• fix: include assets imported through dynamic imports, remote functions and param matchers in builder.findServerAssets so that read can find them (#17505)

• fix: set navigation.from to null in afterNavigate on start when SSR is disabled (#17587)

• fix: include remote function name and declaration file in schema validation failure logs (#17495)

• fix: reuse SSR results of remote functions from packages during hydration in dev (#17604)

• fix: remove empty type output directories for removed routes (#17472)

• fix: use the UTF-8 byte length when reading inline assets (#17590)

• chore: simplify a few server and build helpers (#17531)

• fix: ignore the query string and hash of an imported asset's URL when using read (#17507)

• fix: avoid reloading unrelated server modules when saving files during development (#17462)

3.1.1

Patch Changes

• fix: return a 400 response instead of throwing when reroute rewrites a malformed pathname (1d21a3b)

• fix: restore function snapshots on reload when SSR is disabled (#17477)

• fix: prevent separate non-exported query.batch functions from sharing a batch (3529813)

• fix: reuse the original fetch across dev server reloads (#17548)

• fix: avoid adding a file watcher while loading src/env (#17502)

... (truncated)

Commits

• 879c2c0 Version Packages (#17583)
• 9bc12d3 chore: declare e2e coverage variants in one place (#16845)
• decaf66 fix: resolve relative paths against the page URL in data requests (#17630)
• fe4deb1 fix: reject URL inputs in resolve() (#17627)
• 9ea73c6 pass dev_decoration to init_remote_functions and attach dev_loc
• 5d1665a Merge branch 'main' into fix-remote-validation-log-name
• a428a5c refactor: use if/else if instead of nested ternary
• a03429c fix: reuse SSR results of package remote functions on hydration in dev (#17604)
• 2dce9ca fix: set navigation.from to null on start without SSR (#17587)
• 9c1eda4 feat: Clickable remote function logs (#17547)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.