chore(deps-dev): bump @sveltejs/kit from 2.42.1 to 2.57.1 by dependabot[bot] · Pull Request #5640 · reown-com/appkit

dependabot · 2026-04-10T19:13:34Z

Bumps @sveltejs/kit from 2.42.1 to 2.57.1.

Release notes

Sourced from @sveltejs/kit's releases.

@sveltejs/kit@2.57.1

Patch Changes

fix: better validation for redirect inputs (10d7b44)

fix: enforce BODY_SIZE_LIMIT on chunked requests (3202ed6)

fix: use default values as fallbacks (#15680)

fix: relax form typings for union types (#15687)

@sveltejs/kit@2.57.0

Minor Changes

feat: return boolean from submit to indicate submission validity for enhanced form remote functions (#15530)

Patch Changes

fix: use array type for select fields that accept multiple values (#15591)

fix: silently 404 Chrome DevTools workspaces request in dev and preview (#15656)

fix: config.kit.csp.directives['trusted-types'] requires 'svelte-trusted-html' (and 'sveltekit-trusted-url' when a service worker is automatically registered) if it is configured (#15323)

fix: avoid inlineDynamicImports ignored with codeSplitting warning when using Vite 8 (#15647)

fix: reimplement treeshaking non-dynamic prerendered remote functions (#15447)

@sveltejs/kit@2.56.1

Patch Changes

chore: update JSDoc (#15640)

@sveltejs/kit@2.56.0

Minor Changes

breaking: rework client-driven refreshes (#15562)

breaking: stabilize remote function caching by sorting object keys (#15570)

breaking: add run() method to queries, disallow awaiting queries outside render (#15533)

... (truncated)

Changelog

Sourced from @sveltejs/kit's changelog.

2.57.1

Patch Changes

fix: better validation for redirect inputs (10d7b44)

fix: enforce BODY_SIZE_LIMIT on chunked requests (3202ed6)

fix: use default values as fallbacks (#15680)

fix: relax form typings for union types (#15687)

2.57.0

Minor Changes

feat: return boolean from submit to indicate submission validity for enhanced form remote functions (#15530)

Patch Changes

fix: use array type for select fields that accept multiple values (#15591)

fix: silently 404 Chrome DevTools workspaces request in dev and preview (#15656)

fix: config.kit.csp.directives['trusted-types'] requires 'svelte-trusted-html' (and 'sveltekit-trusted-url' when a service worker is automatically registered) if it is configured (#15323)

fix: avoid inlineDynamicImports ignored with codeSplitting warning when using Vite 8 (#15647)

fix: reimplement treeshaking non-dynamic prerendered remote functions (#15447)

2.56.1

Patch Changes

chore: update JSDoc (#15640)

2.56.0

Minor Changes

breaking: rework client-driven refreshes (#15562)

... (truncated)

Commits

75147d4 Version Packages (#15684)
10d7b44 Merge commit from fork
3202ed6 Merge commit from fork
24d7e76 chore: fix reuse wording in client comment (#15679)
6a9cdaa fix: relax form typings for union types (#15687)
ab8b2f1 fix: use default values as fallbacks (#15680)
3ccb33b Version Packages (#15651)
7f8aef7 chore: reduce use of any types (#15659)
be1c95f chore: avoid importing types directly from Rollup (#15668)
1615af7 chore: centralize noops (#15662)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.42.1 to 2.57.1. - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.57.1/packages/kit) --- updated-dependencies: - dependency-name: "@sveltejs/kit" dependency-version: 2.57.1 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-04-10T19:13:34Z

Labels

The following labels could not be found: chore: update dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-04-10T19:13:40Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
appkit-demo	Ready	Preview, Comment	Apr 10, 2026 7:17pm
appkit-gallery	Ready	Preview	Apr 10, 2026 7:17pm
appkit-headless-sample-app	Error		Apr 10, 2026 7:17pm
appkit-laboratory	Ready	Preview	Apr 10, 2026 7:17pm

9 Skipped Deployments

Project	Deployment	Updated (UTC)
appkit-basic-example	Ignored	Apr 10, 2026 7:17pm
appkit-basic-sign-client-example	Ignored	Apr 10, 2026 7:17pm
appkit-basic-up-example	Ignored	Apr 10, 2026 7:17pm
appkit-ethers5-bera	Ignored	Apr 10, 2026 7:17pm
appkit-nansen-demo	Ignored	Apr 10, 2026 7:17pm
appkit-wagmi-cdn-example	Ignored	Apr 10, 2026 7:17pm
ethereum-provider-wagmi-example	Ignored	Apr 10, 2026 7:17pm
next-wagmi-solana-bitcoin-example	Ignored	Apr 10, 2026 7:17pm
vue-wagmi-example	Ignored	Apr 10, 2026 7:17pm

changeset-bot · 2026-04-10T19:13:40Z

⚠️ No Changeset found

Latest commit: eb896db

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

socket-security · 2026-04-10T19:15:20Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	class-variance-authority@0.7.1
	clsx@2.1.1
	date-fns@4.1.0
	chalk@4.1.2
	semver@7.7.2
	tw-animate-css@1.4.0

View full report

socket-security · 2026-04-10T19:15:22Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `entities` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: pnpm-lock.yaml → `npm/entities@4.5.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/entities@4.5.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `entities` is 91.0% likely obfuscated Confidence: 0.91 Location: Package overview From: pnpm-lock.yaml → `npm/entities@6.0.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/entities@6.0.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

github-actions · 2026-04-10T19:15:33Z

Visual Regression Test Results ❌ Failed

✨ No visual changes detected

Chromatic Build: undefined
Storybook Preview: undefined

dependabot Bot mentioned this pull request Apr 10, 2026

chore(deps-dev): bump @sveltejs/kit from 2.42.1 to 2.49.5 #5476

Closed

vercel Bot had a problem deploying to Preview – appkit-headless-sample-app April 10, 2026 19:15 Failure

vercel Bot deployed to Preview – appkit-gallery April 10, 2026 19:16 View deployment

vercel Bot deployed to Preview – appkit-demo April 10, 2026 19:17 View deployment

vercel Bot deployed to Preview – appkit-laboratory April 10, 2026 19:17 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump @sveltejs/kit from 2.42.1 to 2.57.1#5640

chore(deps-dev): bump @sveltejs/kit from 2.42.1 to 2.57.1#5640
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/sveltejs/kit-2.57.1

dependabot Bot commented on behalf of github Apr 10, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 10, 2026

Uh oh!

vercel Bot commented Apr 10, 2026 •

edited

Loading

Uh oh!

changeset-bot Bot commented Apr 10, 2026

Uh oh!

socket-security Bot commented Apr 10, 2026

Uh oh!

socket-security Bot commented Apr 10, 2026

Uh oh!

github-actions Bot commented Apr 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 10, 2026

@​sveltejs/kit@​2.57.1

Patch Changes

@​sveltejs/kit@​2.57.0

Minor Changes

Patch Changes

@​sveltejs/kit@​2.56.1

Patch Changes

@​sveltejs/kit@​2.56.0

Minor Changes

2.57.1

Patch Changes

2.57.0

Minor Changes

Patch Changes

2.56.1

Patch Changes

2.56.0

Minor Changes

Uh oh!

dependabot Bot commented on behalf of github Apr 10, 2026

Labels

Uh oh!

vercel Bot commented Apr 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Apr 10, 2026

⚠️ No Changeset found

Uh oh!

socket-security Bot commented Apr 10, 2026

Uh oh!

socket-security Bot commented Apr 10, 2026

Uh oh!

github-actions Bot commented Apr 10, 2026

Visual Regression Test Results ❌ Failed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@sveltejs/kit@2`.57.1

`@sveltejs/kit@2`.57.0

`@sveltejs/kit@2`.56.1

`@sveltejs/kit@2`.56.0

vercel Bot commented Apr 10, 2026 •

edited

Loading