Skip to content

chore: upgrade devalue and svelte#15339

Merged
elliott-with-the-longest-name-on-github merged 2 commits intomainfrom
elliott/upgrade-devalue-and-svelte
Feb 18, 2026
Merged

chore: upgrade devalue and svelte#15339
elliott-with-the-longest-name-on-github merged 2 commits intomainfrom
elliott/upgrade-devalue-and-svelte

Conversation

@elliott-with-the-longest-name-on-github
Copy link
Contributor

closes #


Please don't delete this checklist! Before submitting the PR, please make sure you do the following:

  • It's really useful if your PR references an issue where it is discussed ahead of time. In many cases, features are absent for a reason. For large changes, please create an RFC: https://github.com/sveltejs/rfcs
  • This message body should clearly illustrate what problems it solves.
  • Ideally, include a test that fails without this PR but passes with it.

Tests

  • Run the tests with pnpm test and lint the project with pnpm lint and pnpm check

Changesets

  • If your PR makes a change that should be noted in one or more packages' changelogs, generate a changeset by running pnpm changeset and following the prompts. Changesets that add features should be minor and those that fix bugs should be patch. Please prefix changeset messages with feat:, fix:, or chore:.

Edits

  • Please ensure that 'Allow edits from maintainers' is checked. PRs without this option may be closed.

@changeset-bot
Copy link

changeset-bot bot commented Feb 18, 2026

🦋 Changeset detected

Latest commit: 3abcf93

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package
Name Type
@sveltejs/kit Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@elliott-with-the-longest-name-on-github elliott-with-the-longest-name-on-github merged commit 62991c8 into main Feb 18, 2026
4 of 26 checks passed
@elliott-with-the-longest-name-on-github elliott-with-the-longest-name-on-github deleted the elliott/upgrade-devalue-and-svelte branch February 18, 2026 19:13
@github-actions github-actions bot mentioned this pull request Feb 18, 2026
elliott-with-the-longest-name-on-github pushed a commit that referenced this pull request Feb 18, 2026
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @sveltejs/adapter-netlify@6.0.2

### Patch Changes

- fix: prefix param matcher with alphabetical characters so that it
works with URLPattern matching
([#15332](#15332))

- Updated dependencies
\[[`3e607b3`](3e607b3),
[`62991c8`](62991c8),
[`f47c01b`](f47c01b)]:
    -   @sveltejs/kit@2.52.2

## @sveltejs/adapter-vercel@6.3.2

### Patch Changes

- fix: 404 for immutable assets that don't match static files
([`c67da8a`](c67da8a))

- Updated dependencies
\[[`3e607b3`](3e607b3),
[`62991c8`](62991c8),
[`f47c01b`](f47c01b)]:
    -   @sveltejs/kit@2.52.2

## @sveltejs/kit@2.52.2

### Patch Changes

- fix: validate `form` file information to prevent amplification attacks
([`3e607b3`](3e607b3))


- chore: upgrade `devalue` and `svelte`
([#15339](#15339))


- fix: parse file offset table more strictly
([`f47c01b`](f47c01b))

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@hyunbinseo
Copy link
Contributor

Thank you! Adding PR description will be nice though.

devalue security issues have been fixed:

Also missing in the Svelte PR:

Copilot AI pushed a commit to Stadly/kit that referenced this pull request Mar 6, 2026
closes #<!-- Add the related issue number here. Repeat this line for
each additional issue it closes -->

<!-- Explain the goal of the PR, why it is needed, and what has been
changed to achieve that goal -->

---

### Please don't delete this checklist! Before submitting the PR, please
make sure you do the following:
- [ ] It's really useful if your PR references an issue where it is
discussed ahead of time. In many cases, features are absent for a
reason. For large changes, please create an RFC:
https://github.com/sveltejs/rfcs
- [ ] This message body should clearly illustrate what problems it
solves.
- [ ] Ideally, include a test that fails without this PR but passes with
it.

### Tests
- [ ] Run the tests with `pnpm test` and lint the project with `pnpm
lint` and `pnpm check`

### Changesets
- [ ] If your PR makes a change that should be noted in one or more
packages' changelogs, generate a changeset by running `pnpm changeset`
and following the prompts. Changesets that add features should be
`minor` and those that fix bugs should be `patch`. Please prefix
changeset messages with `feat:`, `fix:`, or `chore:`.

### Edits

- [ ] Please ensure that 'Allow edits from maintainers' is checked. PRs
without this option may be closed.
Copilot AI pushed a commit to Stadly/kit that referenced this pull request Mar 6, 2026
This PR was opened by the [Changesets
release](https://github.com/changesets/action) GitHub action. When
you're ready to do a release, you can merge this and the packages will
be published to npm automatically. If you're not ready to do a release
yet, that's fine, whenever you add more changesets to main, this PR will
be updated.


# Releases
## @sveltejs/adapter-netlify@6.0.2

### Patch Changes

- fix: prefix param matcher with alphabetical characters so that it
works with URLPattern matching
([sveltejs#15332](sveltejs#15332))

- Updated dependencies
\[[`3e607b3`](sveltejs@3e607b3),
[`62991c8`](sveltejs@62991c8),
[`f47c01b`](sveltejs@f47c01b)]:
    -   @sveltejs/kit@2.52.2

## @sveltejs/adapter-vercel@6.3.2

### Patch Changes

- fix: 404 for immutable assets that don't match static files
([`c67da8a`](sveltejs@c67da8a))

- Updated dependencies
\[[`3e607b3`](sveltejs@3e607b3),
[`62991c8`](sveltejs@62991c8),
[`f47c01b`](sveltejs@f47c01b)]:
    -   @sveltejs/kit@2.52.2

## @sveltejs/kit@2.52.2

### Patch Changes

- fix: validate `form` file information to prevent amplification attacks
([`3e607b3`](sveltejs@3e607b3))


- chore: upgrade `devalue` and `svelte`
([sveltejs#15339](sveltejs#15339))


- fix: parse file offset table more strictly
([`f47c01b`](sveltejs@f47c01b))

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants