@sveltejs/kit 2.36.2 → 2.36.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sveltejs/kit",
-  "version": "2.36.2",
+  "version": "2.36.3",
   "description": "SvelteKit is the fastest way to build Svelte apps",
   "keywords": [
     "framework",
@@ -23,7 +23,7 @@
     "@types/cookie": "^0.6.0",
     "acorn": "^8.14.1",
     "cookie": "^0.6.0",
-    "devalue": "^5.1.0",
+    "devalue": "^5.3.2",
     "esm-env": "^1.2.2",
     "kleur": "^4.1.5",
     "magic-string": "^0.30.5",
@@ -41,7 +41,7 @@
     "@types/set-cookie-parser": "^2.4.7",
     "dts-buddy": "^0.6.2",
     "rollup": "^4.14.2",
-    "svelte": "^5.35.5",
+    "svelte": "^5.38.5",
     "svelte-preprocess": "^6.0.0",
     "typescript": "^5.3.3",
     "vite": "^6.3.5",
@@ -115,7 +115,9 @@
     "test:cross-platform:build": "pnpm test:unit && pnpm -r --workspace-concurrency 1 --filter=\"./test/**\" test:cross-platform:build",
     "test:server-side-route-resolution:dev": "pnpm -r --workspace-concurrency 1 --filter=\"./test/**\" test:server-side-route-resolution:dev",
     "test:server-side-route-resolution:build": "pnpm test:unit && pnpm -r --workspace-concurrency 1 --filter=\"./test/**\" test:server-side-route-resolution:build",
-    "test:unit": "vitest --config kit.vitest.config.js run",
+    "test:unit:dev": "vitest --config kit.vitest.config.js run",
+    "test:unit:prod": "NODE_ENV=production vitest --config kit.vitest.config.js run csp.spec.js cookie.spec.js",
+    "test:unit": "pnpm test:unit:dev && pnpm test:unit:prod",
     "generate:version": "node scripts/generate-version.js",
     "generate:types": "node scripts/generate-dts.js"
   }

package/src/exports/public.d.ts

@@ -1822,7 +1822,7 @@ export type RemoteQuery<T> = RemoteResource<T> & {
 	 *   await submit().updates(
 	 *     todos.withOverride((todos) => [...todos, { text: data.get('text') }])
 	 *   );
-	 * }}>
+	 * })}>
 	 *   <input type="text" name="text" />
 	 *   <button type="submit">Add Todo</button>
 	 * </form>

package/src/exports/vite/index.js

@@ -335,7 +335,6 @@ async function kit({ svelte_config }) {
 					__SVELTEKIT_ADAPTER_NAME__: s(kit.adapter?.name),
 					__SVELTEKIT_APP_VERSION_FILE__: s(`${kit.appDir}/version.json`),
 					__SVELTEKIT_APP_VERSION_POLL_INTERVAL__: s(kit.version.pollInterval),
-					__SVELTEKIT_DEV__: 'false',
 					__SVELTEKIT_EMBEDDED__: s(kit.embedded),
 					__SVELTEKIT_EXPERIMENTAL__REMOTE_FUNCTIONS__: s(kit.experimental.remoteFunctions),
 					__SVELTEKIT_CLIENT_ROUTING__: s(kit.router.resolution === 'client'),
@@ -351,7 +350,6 @@ async function kit({ svelte_config }) {
 			} else {
 				new_config.define = {
 					__SVELTEKIT_APP_VERSION_POLL_INTERVAL__: '0',
-					__SVELTEKIT_DEV__: 'true',
 					__SVELTEKIT_EMBEDDED__: s(kit.embedded),
 					__SVELTEKIT_EXPERIMENTAL__REMOTE_FUNCTIONS__: s(kit.experimental.remoteFunctions),
 					__SVELTEKIT_CLIENT_ROUTING__: s(kit.router.resolution === 'client'),

package/src/runtime/app/state/server.js

@@ -1,3 +1,4 @@
+import { DEV } from 'esm-env';
 import { getContext } from 'svelte';
 
 function context() {
@@ -16,31 +17,30 @@ function context_dev(name) {
 	}
 }
 
-// TODO we're using DEV in some places and __SVELTEKIT_DEV__ in others - why? Can we consolidate?
 export const page = {
 	get data() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.data') : context()).page.data;
+		return (DEV ? context_dev('page.data') : context()).page.data;
 	},
 	get error() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.error') : context()).page.error;
+		return (DEV ? context_dev('page.error') : context()).page.error;
 	},
 	get form() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.form') : context()).page.form;
+		return (DEV ? context_dev('page.form') : context()).page.form;
 	},
 	get params() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.params') : context()).page.params;
+		return (DEV ? context_dev('page.params') : context()).page.params;
 	},
 	get route() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.route') : context()).page.route;
+		return (DEV ? context_dev('page.route') : context()).page.route;
 	},
 	get state() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.state') : context()).page.state;
+		return (DEV ? context_dev('page.state') : context()).page.state;
 	},
 	get status() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.status') : context()).page.status;
+		return (DEV ? context_dev('page.status') : context()).page.status;
 	},
 	get url() {
-		return (__SVELTEKIT_DEV__ ? context_dev('page.url') : context()).page.url;
+		return (DEV ? context_dev('page.url') : context()).page.url;
 	}
 };
 

package/src/runtime/app/stores.js

@@ -1,5 +1,5 @@
 import { getContext } from 'svelte';
-import { BROWSER } from 'esm-env';
+import { BROWSER, DEV } from 'esm-env';
 import { stores as browser_stores } from '../client/client.js';
 
 /**
@@ -35,7 +35,7 @@ export const getStores = () => {
  */
 export const page = {
 	subscribe(fn) {
-		const store = __SVELTEKIT_DEV__ ? get_store('page') : getStores().page;
+		const store = DEV ? get_store('page') : getStores().page;
 		return store.subscribe(fn);
 	}
 };
@@ -52,7 +52,7 @@ export const page = {
  */
 export const navigating = {
 	subscribe(fn) {
-		const store = __SVELTEKIT_DEV__ ? get_store('navigating') : getStores().navigating;
+		const store = DEV ? get_store('navigating') : getStores().navigating;
 		return store.subscribe(fn);
 	}
 };
@@ -67,7 +67,7 @@ export const navigating = {
  */
 export const updated = {
 	subscribe(fn) {
-		const store = __SVELTEKIT_DEV__ ? get_store('updated') : getStores().updated;
+		const store = DEV ? get_store('updated') : getStores().updated;
 
 		if (BROWSER) {
 			updated.check = store.check;

package/src/runtime/client/remote-functions/form.svelte.js

@@ -210,7 +210,7 @@ export function form(id) {
 			};
 		};
 
-		instance.onsubmit = form_onsubmit(({ submit }) => submit());
+		instance.onsubmit = form_onsubmit(({ submit, form }) => submit().then(() => form.reset()));
 
 		/** @param {Parameters<RemoteForm<any>['buttonProps']['enhance']>[0]} callback */
 		const form_action_onclick = (callback) => {
@@ -247,7 +247,7 @@ export function form(id) {
 			type: 'submit',
 			formmethod: 'POST',
 			formaction: action,
-			onclick: form_action_onclick(({ submit }) => submit())
+			onclick: form_action_onclick(({ submit, form }) => submit().then(() => form.reset()))
 		};
 
 		Object.defineProperty(button_props, 'enhance', {

package/src/runtime/server/cookie.js

@@ -1,4 +1,5 @@
 import { parse, serialize } from 'cookie';
+import { DEV } from 'esm-env';
 import { normalize_path, resolve } from '../../utils/url.js';
 import { add_data_suffix } from '../pathname.js';
 import { text_encoder } from '../utils.js';
@@ -96,7 +97,7 @@ export function get_cookies(request, url) {
 			// in development, if the cookie was set during this session with `cookies.set`,
 			// but at a different path, warn the user. (ignore cookies from request headers,
 			// since we don't know which path they were set at)
-			if (__SVELTEKIT_DEV__ && !cookie) {
+			if (DEV && !cookie) {
 				const paths = Array.from(cookie_paths[name] ?? []).filter((path) => {
 					// we only care about paths that are _more_ specific than the current path
 					return path_matches(path, url.pathname) && path !== url.pathname;
@@ -252,7 +253,7 @@ export function get_cookies(request, url) {
 		const cookie = { name, value, options: { ...options, path } };
 		new_cookies.set(cookie_key, cookie);
 
-		if (__SVELTEKIT_DEV__) {
+		if (DEV) {
 			const serialized = serialize(name, value, cookie.options);
 			if (text_encoder.encode(serialized).byteLength > MAX_COOKIE_SIZE) {
 				throw new Error(`Cookie "${name}" is too large, and will be discarded by the browser`);

package/src/runtime/server/page/actions.js

@@ -57,7 +57,7 @@ export async function handle_action_json_request(event, event_state, options, se
 	try {
 		const data = await call_action(event, event_state, actions);
 
-		if (__SVELTEKIT_DEV__) {
+		if (DEV) {
 			validate_action_return(data);
 		}
 
@@ -176,7 +176,7 @@ export async function handle_action_request(event, event_state, server) {
 	try {
 		const data = await call_action(event, event_state, actions);
 
-		if (__SVELTEKIT_DEV__) {
+		if (DEV) {
 			validate_action_return(data);
 		}
 

package/src/runtime/server/page/csp.js

@@ -1,3 +1,4 @@
+import { DEV } from 'esm-env';
 import { escape_html } from '../../../utils/escape.js';
 import { sha256 } from './crypto.js';
 
@@ -77,7 +78,7 @@ class BaseProvider {
 	 */
 	constructor(use_hashes, directives, nonce) {
 		this.#use_hashes = use_hashes;
-		this.#directives = __SVELTEKIT_DEV__ ? { ...directives } : directives; // clone in dev so we can safely mutate
+		this.#directives = DEV ? { ...directives } : directives; // clone in dev so we can safely mutate
 
 		const d = this.#directives;
 
@@ -93,7 +94,7 @@ class BaseProvider {
 		const style_src_attr = d['style-src-attr'];
 		const style_src_elem = d['style-src-elem'];
 
-		if (__SVELTEKIT_DEV__) {
+		if (DEV) {
 			// remove strict-dynamic in dev...
 			// TODO reinstate this if we can figure out how to make strict-dynamic work
 			// if (d['default-src']) {
@@ -148,7 +149,7 @@ class BaseProvider {
 
 		this.#script_needs_csp = this.#script_src_needs_csp || this.#script_src_elem_needs_csp;
 		this.#style_needs_csp =
-			!__SVELTEKIT_DEV__ &&
+			!DEV &&
 			(this.#style_src_needs_csp ||
 				this.#style_src_attr_needs_csp ||
 				this.#style_src_elem_needs_csp);

package/src/runtime/server/page/load_data.js

@@ -176,7 +176,7 @@ export async function load_server_data({ event, event_state, state, node, parent
 		}
 	});
 
-	if (__SVELTEKIT_DEV__) {
+	if (DEV) {
 		validate_load_response(result, `in ${node.server_id}`);
 	}
 
@@ -278,7 +278,7 @@ export async function load_data({
 		}
 	});
 
-	if (__SVELTEKIT_DEV__) {
+	if (DEV) {
 		validate_load_response(result, `in ${node.universal_id}`);
 	}
 

package/src/runtime/server/page/render.js

@@ -182,7 +182,7 @@ export async function render_response({
 			])
 		};
 
-		if (__SVELTEKIT_DEV__) {
+		if (DEV) {
 			const fetch = globalThis.fetch;
 			let warned = false;
 			globalThis.fetch = (info, init) => {
@@ -255,7 +255,7 @@ export async function render_response({
 		: Array.from(inline_styles.values()).join('\n');
 
 	if (style) {
-		const attributes = __SVELTEKIT_DEV__ ? [' data-sveltekit'] : [];
+		const attributes = DEV ? [' data-sveltekit'] : [];
 		if (csp.style_needs_nonce) attributes.push(` nonce="${csp.nonce}"`);
 
 		csp.add_style(style);
@@ -295,7 +295,7 @@ export async function render_response({
 		}
 	}
 
-	const global = __SVELTEKIT_DEV__ ? '__sveltekit_dev' : `__sveltekit_${options.version_hash}`;
+	const global = DEV ? '__sveltekit_dev' : `__sveltekit_${options.version_hash}`;
 
 	const { data, chunks } = get_data(
 		event,
@@ -516,10 +516,10 @@ export async function render_response({
 		}
 
 		if (options.service_worker) {
-			let opts = __SVELTEKIT_DEV__ ? ", { type: 'module' }" : '';
+			let opts = DEV ? ", { type: 'module' }" : '';
 			if (options.service_worker_options != null) {
 				const service_worker_options = { ...options.service_worker_options };
-				if (__SVELTEKIT_DEV__) {
+				if (DEV) {
 					service_worker_options.type = 'module';
 				}
 				opts = `, ${s(service_worker_options)}`;

package/src/runtime/server/respond.js

@@ -40,7 +40,6 @@ import { record_span } from '../telemetry/record_span.js';
 import { otel } from '../telemetry/otel.js';
 
 /* global __SVELTEKIT_ADAPTER_NAME__ */
-/* global __SVELTEKIT_DEV__ */
 
 /** @type {import('types').RequiredResolveOptions['transformPageChunk']} */
 const default_transform = ({ html }) => html;
@@ -167,7 +166,7 @@ export async function internal_respond(request, options, manifest, state) {
 		request,
 		route: { id: null },
 		setHeaders: (new_headers) => {
-			if (__SVELTEKIT_DEV__) {
+			if (DEV) {
 				validateHeaders(new_headers);
 			}
 

package/src/runtime/server/utils.js

@@ -104,7 +104,7 @@ export async function handle_error_and_jsonify(event, state, options, error) {
 		return { message: 'Unknown Error', ...error.body };
 	}
 
-	if (__SVELTEKIT_DEV__ && typeof error == 'object') {
+	if (DEV && typeof error == 'object') {
 		fix_stack_trace(error);
 	}
 

package/src/types/ambient.d.ts

@@ -66,7 +66,7 @@ declare module '$service-worker' {
 	 */
 	export const build: string[];
 	/**
-	 * An array of URL strings representing the files in your static directory, or whatever directory is specified by `config.kit.files.assets`. You can customize which files are included from `static` directory using [`config.kit.serviceWorker.files`](https://svelte.dev/docs/kit/configuration)
+	 * An array of URL strings representing the files in your static directory, or whatever directory is specified by `config.kit.files.assets`. You can customize which files are included from `static` directory using [`config.kit.serviceWorker.files`](https://svelte.dev/docs/kit/configuration#serviceWorker)
 	 */
 	export const files: string[];
 	/**

package/src/types/global-private.d.ts

@@ -2,7 +2,6 @@ declare global {
 	const __SVELTEKIT_ADAPTER_NAME__: string;
 	const __SVELTEKIT_APP_VERSION_FILE__: string;
 	const __SVELTEKIT_APP_VERSION_POLL_INTERVAL__: number;
-	const __SVELTEKIT_DEV__: boolean;
 	const __SVELTEKIT_EMBEDDED__: boolean;
 	/** True if `config.kit.experimental.instrumentation.server` is `true` */
 	const __SVELTEKIT_SERVER_TRACING_ENABLED__: boolean;

package/src/version.js

@@ -1,4 +1,4 @@
 // generated during release, do not modify
 
 /** @type {string} */
-export const VERSION = '2.36.2';
+export const VERSION = '2.36.3';

package/types/index.d.ts

@@ -1798,7 +1798,7 @@ declare module '@sveltejs/kit' {
 		 *   await submit().updates(
 		 *     todos.withOverride((todos) => [...todos, { text: data.get('text') }])
 		 *   );
-		 * }}>
+		 * })}>
 		 *   <input type="text" name="text" />
 		 *   <button type="submit">Add Todo</button>
 		 * </form>
@@ -3087,7 +3087,7 @@ declare module '$service-worker' {
 	 */
 	export const build: string[];
 	/**
-	 * An array of URL strings representing the files in your static directory, or whatever directory is specified by `config.kit.files.assets`. You can customize which files are included from `static` directory using [`config.kit.serviceWorker.files`](https://svelte.dev/docs/kit/configuration)
+	 * An array of URL strings representing the files in your static directory, or whatever directory is specified by `config.kit.files.assets`. You can customize which files are included from `static` directory using [`config.kit.serviceWorker.files`](https://svelte.dev/docs/kit/configuration#serviceWorker)
 	 */
 	export const files: string[];
 	/**