Major Changes

breaking: reject query parameters beginning with x-sveltekit- (#17125)

Patch Changes

fix: support bigint params in server-side route resolution (#17130)
fix: generate types when dev server starts (#17034)
fix: validate prerender concurrency (#17145)
fix: manipulate stack trace for errors that happen while generating prerender inputs (#17113)
fix: keep memory flat when precompressing many files (#16993)
fix: render remote form actions while prerendering (#17139)
fix: ignore Vitest browser loader HTML transforms (#17092)
fix: prevent failed link preloads from causing unhandled promise rejections in production (#17181)
fix: enforce request body size limits when Content-Type is absent (#17127)
fix: ignore nested outDir files outside generated (#17150)
fix: follow HTTP redirects from authentication proxies when enhancing form submissions (#17106)
fix: support form fields named after Object prototype properties (#17136)
fix: evict hashed fetch cache entries after mutations (#17146)
fix: keep hash-router links on the current document when resolving paths (#17107)
fix: resolve every module entry point using kit.moduleExtensions (#17043)
fix: send an explicit SSE Accept header for query.live requests to avoid buffering by proxies (#17104)
fix: exit build workers after completing their tasks while allowing synchronous exit handlers to run (#17135)
fix: respect paths.relative for server-side route resolution imports (#17056)
fix: recommend safe include and exclude patterns in tsconfig warning (#17102)
chore: configure the server runtime in one place, deprecate Server in favour of the server object written by builder.generateServerInstance (#17000)
fix: reject fallback handlers on prerendered endpoints (#17140)
fix: record client output extensions in builder.mimeTypes (#16908)
fix: atomically replace route metadata during sync (#17096)
fix: preserve sourcemap source paths when adapters copy build output (#17082)
fix: prevent prerender crawler from hanging on unterminated unquoted attributes (#17141)
fix: redact nested and typed underscore-prefixed remote form fields after invalid submissions (#17128)
fix: correctly serialize Node.js buffers returned from remote functions during SSR (#17158)
fix: preserve errors with read-only stack properties (#17180)
fix: reject invalid binary form file metadata (#17149)

Major Changes

breaking: record the list of static assets at build time, files added to the output afterwards are not served (#16908)

breaking: validate static assets with content-hash ETags and stop sending Last-Modified (#16908)

breaking: serve static assets only to GET and HEAD requests (#16908)

Minor Changes

feat: serve static assets from tables recorded at adapt time, instead of using sirv (#16908)

Patch Changes

chore: bundle the adapter's server source directly instead of prebuilding it with rolldown (#17109)

chore: hand adapt-time values to the server as a module instead of patching built chunks (#17103)

chore: avoid bundling the server twice (#17068)

Updated dependencies [abf47df, df3f003, 3c044cd, 509dd14, 5d8722c, 462111a, 9f3342f, 224e791, 8614b01, 65f93c8, 147f09a, 09b8de8, 68c6ef9, 377fc5d, 84cb5fd, 99492ac, 4ac8c9b, 8efeeb3, 4c812c8, fbbb4c7, c6ba86b, 7847e4e, 68791be, f8258ee, 4da6320, b21766f, a2bfcaf, 680405d, 755024a, 3a7d329]:

@sveltejs/[email protected]

Major Changes

breaking: write static files based on the publish adapter option rather than reading the netlify.toml file (#17078)

Minor Changes

feat: support split and edge options combined (#17045)

Patch Changes

chore: include edge function configuration in the function module (#17058)

Updated dependencies [abf47df, df3f003, 3c044cd, 509dd14, 5d8722c, 462111a, 9f3342f, 224e791, 8614b01, 65f93c8, 147f09a, 09b8de8, 68c6ef9, 377fc5d, 84cb5fd, 99492ac, 4ac8c9b, 8efeeb3, 4c812c8, fbbb4c7, c6ba86b, 7847e4e, 68791be, f8258ee, 4da6320, b21766f, a2bfcaf, 680405d, 755024a, 3a7d329]:
@sveltejs/[email protected]

Major Changes

breaking: build the server with Vite instead of a second Bun.build pass, keeping production dependencies external; buildOptions now only applies to executables (#17120)

Patch Changes

Updated dependencies [abf47df, df3f003, 3c044cd, 509dd14, 5d8722c, 462111a, 9f3342f, 224e791, 8614b01, 65f93c8, 147f09a, 09b8de8, 68c6ef9, 377fc5d, 84cb5fd, 99492ac, 4ac8c9b, 8efeeb3, 4c812c8, fbbb4c7, c6ba86b, 7847e4e, 68791be, f8258ee, 4da6320, b21766f, a2bfcaf, 680405d, 755024a, 3a7d329]:
@sveltejs/[email protected]

Patch Changes

• fix: cancel deferred event listeners during cleanup (#18749)
• fix: preserve global CSS in components without scopable elements (#18793)
• fix: reduce SSR render result garbage collection (#18798)
• fix: resolve the fallback of an each block in the enclosing scope (#18803)
• perf: speed up parser interactions with Acorn or avoid them where possible (#18740)
• fix: prevent effect tree of batches from interfering with each other (#18508)
• fix: serialize input default values during server rendering (#18733)
• fix: remove WAS_MARKED flag in favor of Set (#18127)
• fix: throw set_context_after_init when setContext is called after an await during SSR (#18739)
• fix: make Object.hasOwn reactive for state proxy ownership changes (#18838)
• fix: keep $state.eager when used as a variable initializer (#18809)
• perf: avoid regex matching in parser where possible (#18736)
• fix: in non-async mode, only push variable to current_sources when active_reaction is updating (#18550)
• fix: recognise aria-braillelabel and aria-brailleroledescription as known ARIA attributes (#18765)

Major Changes

major: error when a client-requested single-flight mutation isn't respected by the server, allow the server to explicitly ignore refreshes (#16892)

breaking: remove Server constructor and SSRManifest from public types (#16876)

breaking: replace the builder.generateManifest with builder.generateServerInstance and builder.manifest (#16875)

Minor Changes

feat: allow adapters to receive the Svelte config as a function argument when adding Vite plugins (#16986)

feat: allow adapters to override getRequest and setResponse during vite dev and vite preview (#16753)

Patch Changes

fix: respect paths.relative during development for client files (#17053)

fix: clarify circular imports from src/env (#17014)

breaking: populate env vars before instrumentation.server.js is evaluated and update the adapter instrumentation API (#16303)

fix: record a history traversal before resolving its route (#16959)

fix: support coordinate objects from image inputs in remote forms (#16944)

fix: walk and copy directories without a stat per file (#16995)

fix: widen remote form fields for union schemas and string enums (#16937)

fix: respond to HEAD requests without a body (#17036)

chore: replace deprecated Vite dev server APIs (#16961)

fix: settle a query's pending request in place when its value arrives through set() (#16958)

fix: prevent await_reactivity_loss warning and state_unsafe_mutation error when the new version detector runs after an await (#16915)

chore: parse page options and remote modules with Vite's parseSync instead of acorn (#16947)