deps(dev): bump @sveltejs/kit from 2.48.1 to 2.49.0

[dependabot[bot]]

Bumps @sveltejs/kit from 2.48.1 to 2.49.0.

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.49.0

Minor Changes

• feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

@​sveltejs/kit@​2.48.8

Patch Changes

• breaking: invalid now must be imported from @sveltejs/kit (#14768)

• breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

@​sveltejs/kit@​2.48.7

Patch Changes

• fix: allow multiple server-timing headers (#14700)

• fix: allow access to root-level issues in schema-less forms (#14893)

• fix: allow hosting hash-based apps from non-index.html files (#14825)

@​sveltejs/kit@​2.48.6

Patch Changes

• fix: clear issues upon passing validation (#14683)

• fix: don't use fork of unrelated route (#14947)

• fix: prevent type errors when optional @opentelemetry/api dependency isn't installed (#14949)

• fix: preserve this when invoking standard validator (#14943)

• fix: treat client/universal hooks as entrypoints for illegal server import detection (#14876)

• fix: correct query .set and .refresh behavior in commands (#14877)

• fix: improved the accuracy of the types of the output of field.as('...') (#14908)

@​sveltejs/kit@​2.48.5

Patch Changes

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.49.0

Minor Changes

• feat: stream file uploads inside form remote functions allowing form data to be accessed before large files finish uploading (#14775)

2.48.8

Patch Changes

• breaking: invalid now must be imported from @sveltejs/kit (#14768)

• breaking: remove submitter option from experimental form validate() method, always provide default submitter (#14762)

2.48.7

Patch Changes

• fix: allow multiple server-timing headers (#14700)

• fix: allow access to root-level issues in schema-less forms (#14893)

• fix: allow hosting hash-based apps from non-index.html files (#14825)

2.48.6

Patch Changes

• fix: clear issues upon passing validation (#14683)

• fix: don't use fork of unrelated route (#14947)

• fix: prevent type errors when optional @opentelemetry/api dependency isn't installed (#14949)

• fix: preserve this when invoking standard validator (#14943)

• fix: treat client/universal hooks as entrypoints for illegal server import detection (#14876)

• fix: correct query .set and .refresh behavior in commands (#14877)

• fix: improved the accuracy of the types of the output of field.as('...') (#14908)

... (truncated)

Commits

• ab37849 Version Packages (#14959)
• d07ddcf feat: Streaming file uploads (#14775)
• dfb41e1 Version Packages (#14958)
• b9635ab breaking: remove submitter option from experimental form validate(…) meth...
• bd55128 breaking: invalid now must be imported from @sveltejs/kit (#14768)
• 9f55c85 Version Packages (#14954)
• 5b30755 fix: allow hosting hash apps from other html files (#14825)
• 2ff3951 fix: allow access to root-level issues in schema-less forms (#14893)
• 0889a2a fix: append server-timing header value if key exist when using setHeaders...
• f316be0 Version Packages (#14948)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[trunk-io[bot]]

Merging to main in this repository is managed by Trunk.

• [ ] To merge this pull request, check the box to the left or comment /trunk merge below.

[socket-security[bot]]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​sveltejs/​kit@​2.48.1 ⏵ 2.49.0	+1		+1	-1

View full report