-
Notifications
You must be signed in to change notification settings - Fork 0
build(deps-dev): bump @sveltejs/kit from 2.6.2 to 2.8.3 #12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.6.2 to 2.8.3. - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/[email protected]/packages/kit) --- updated-dependencies: - dependency-name: "@sveltejs/kit" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
👋 Hey! As a free user, you're receiving reviews for every 5th PR. Upgrade to get reviews on every pull request and boost your code quality! Learn more here 🚀 |
Reviewer's Guide by SourceryThis PR updates the @sveltejs/kit dependency from version 2.6.2 to 2.8.3. The update includes several bug fixes related to error message escaping, HTTP/2 support, CSP nonce handling, and cookie management. It also adds a new helper function for identifying ActionFailure objects. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Pull request summary
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!
1525f74
to
b5f4c85
Compare
Bumps @sveltejs/kit from 2.6.2 to 2.8.3.
Release notes
Sourced from
@sveltejs/kit
's releases.... (truncated)
Changelog
Sourced from
@sveltejs/kit
's changelog.... (truncated)
Commits
429bfb7
Version Packages (#13049)134e363
fix: ensure error messages are escaped (#13050)d338d46
fix: escape values included in dev 404 page (#13039)5f8399d
Version Packages (#13024)1358ccc
fix: use default cookie decoder (#13037)570562b
fix: handle empty Headers when serialising Request passed to fetch (#13023)435984b
Version Packages (#12992)0bd4426
fix: support custom servers using HTTP/2 in production (#12989)6df00fc
fix: csp nonce inscript-src-elem
,style-src-attr
andstyle-src-elem
wh...c717db9
chore: update playground and add an endpoint (#12983)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by Sourcery
Build: