SvelteKit Updates & Release Notes
41 updates curated from 1 source by the Releasebot Team. Last updated: Jul 20, 2026
- Jul 20, 2026
- Date parsed from source:Jul 20, 2026
- First seen by Releasebot:Jul 20, 2026
@sveltejs/[email protected]
SvelteKit releases breaking route config precedence and consistent special filename patterns, while adding production sourcemaps, function validators for environment variables, and better error logging. It also includes several fixes for schema matching, streamed data, stack traces, and HTML escaping.
Major Changes
- breaking: config exported from a universal route file takes precedence over a server one (#16400)
- breaking: consistent special filename patterns (#16382)
Minor Changes
- feat: support sourcemaps in production (#16412)
- feat: support function validators for environment variables (#16402)
- feat: better error logging (#16374)
Patch Changes
- fix: don't treat callable standard schemas as function param matchers (#16403)
- fix: reject malformed streamed data encoding (#16423)
- fix: hide stack traces for internal errors like 404s (#16411)
- perf: match only unpaired surrogates when escaping HTML (#16407)
- fix: don't report empty environment variables as missing (#16401)
- chore: clarify which hooks run during server route resolution (#16397)
- Jul 20, 2026
- Date parsed from source:Jul 20, 2026
- First seen by Releasebot:Jul 20, 2026
@sveltejs/[email protected]
SvelteKit improves error logging with a minor patch update.
Minor Changes
- feat: better error logging (#16374)
Patch Changes
- Updated dependencies [5220191, 8cb2f7d, b88c7a7, a6ea113, 6446f64, 58f1789, 09774a2, c542fdd, aedaa27, 428ee1a, fefb3ae]:
- @sveltejs/[email protected]
All of your release notes in one feed
Join Releasebot and get updates from Svelte and hundreds of other software products.
- Jul 19, 2026
- Date parsed from source:Jul 19, 2026
- First seen by Releasebot:Jul 19, 2026
@sveltejs/[email protected]
SvelteKit updates docs links to the hooks documentation in a patch change.
- Jul 18, 2026
- Date parsed from source:Jul 18, 2026
- First seen by Releasebot:Jul 19, 2026
@sveltejs/[email protected]
SvelteKit moves defineEnvVars to @sveltejs/kit/env and adds performance, redirect, and plugin handling fixes.
Major Changes
- breaking: move defineEnvVars to @sveltejs/kit/env (#16375)
Patch Changes
- fix: treat data: protocol URLs as external for redirect (#16392)
- perf: skip import graph collection outside client environments (#16383)
- fix: warn if there are plugins using transformIndexHtml (#16394)
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
@sveltejs/[email protected]
SvelteKit adds relative import transformation for alias imports in files.
Minor Changes
- feat: transform import aliases into relative imports in files (#16360)
Similar to SvelteKit with recent updates:
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
@sveltejs/[email protected]
SvelteKit releases breaking changes and updates that tighten server-only handling, adjust aliasing and form submission rules, and delegate dev CORS handling to Vite. It also restores deprecated env aliases and includes performance and bug fixes for cookies, Cloudflare Wrangler, streamed data, and CSRF protection.
Major Changes
breaking: handle's resolve is now typed to always return a Promise (#16352)
breaking: replace the $lib alias with #lib and remove files.lib config. (#16360)
breaking: disallow cross-origin form submissions without a Content-Type header (#16347)
breaking: Server-only directories (/server/ in the path) are now treated as server-only everywhere inside the project (except src/routes and the assets directory) (#16360)
breaking: delegate CORS handling to Vite for static directory requests during development (#16357)
Minor Changes
feat: reinstate $env/static/private, $env/dynamic/private, $env/static/public, $env/dynamic/public and $app/environment as deprecated aliases for $app/env/private $app/env/public and $app/env (#16334)
Patch Changes
perf: cache the default cookie header parse and avoid allocations in cookies.get (#16341)
fix: avoid client-side code being bundled by Cloudflare Wrangler (#16364)
fix: handle rejected streamed server data after delayed loads (#16268)
fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)
Original source - Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
@sveltejs/[email protected]
SvelteKit moves defineEnvVars to @sveltejs/kit/env and tightens CSRF protection for non-production builds.
Minor Changes
- feat: move defineEnvVars to @sveltejs/kit/env (#16378)
Patch Changes
- fix: enable CSRF protection in builds with a non-production NODE_ENV value (#16313)
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
- Jul 17, 2026
- Date parsed from source:Jul 17, 2026
- First seen by Releasebot:Jul 18, 2026
@sveltejs/[email protected]
SvelteKit fixes Windows entrypoint bundling in a patch release.
Patch Changes
- fix: correctly bundle entrypoints on Windows (#16367)
- Updated dependencies [c1ee782, 1a1b3ea, 6423d98, 6d1f4f0, 5ca9906, b148d31, 5ca9906, 9f3d9bb, 7bfd922, ffa0e3b]:
- @sveltejs/[email protected]
- Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit adds a warning for .server files and server directory files without server-only imports.
Minor Changes
feat: warn when using a .server. file or file inside a server directory without importing a server-only module (#16266)
Original source - Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit ships breaking API updates, adds refreshAll and new generated type support, and improves routing, cookies, preloading, and client navigation handling with several bug fixes and type generation refinements.
Major Changes
breaking: remove experimental.handleRenderingErrors flag (#16265)
breaking: make getRequest and setResponse synchronous (#16280)
breaking: make page.url immutable on a type level (#16256)
breaking: add refreshAll and deprecate invalidateAll (#16289)
Minor Changes
feat: allow hyphens in param and matcher names (#16284)
feat: add ErrorProps to generated types (#16272)
Patch Changes
fix: detect destructured load and actions exports during type generation (#16329)
fix: ensure CSS URL references are absolute when paths.relative is false (#16315)
fix: exclude deleted cookies from cookies.getAll() so it stays consistent with cookies.get() (#16297)
fix: reset failed <svelte:boundary> on client navigation so a stale +error.svelte is torn down (#16296)
fix: preserve shared client chunk hashes when the app version changes (#16324)
fix: align MAX_COOKIE_SIZE with RFC 6265bis (#16322)
fix: use mouseover+mousemove for preloading to reduce events (#16325)
Original source - Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit fixes peer dependency checks to allow prerelease versions of SvelteKit 3.
Patch Changes
- fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)
- Updated dependencies [737d119, fa78efb, 07c207e, a47071b, 14d7d5a, 5c38e51, 0702baa, e1938c6, 8293144, f76d7d9, ab5c253, b557b1b, 4a513e2]:
- @sveltejs/[email protected]
- Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit fixes peer dependency handling so prerelease SvelteKit 3 versions satisfy the range.
Patch Changes
- fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)
- Updated dependencies [737d119, fa78efb, 07c207e, a47071b, 14d7d5a, 5c38e51, 0702baa, e1938c6, 8293144, f76d7d9, ab5c253, b557b1b, 4a513e2]:
- @sveltejs/[email protected]
- Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit fixes peer dependency support for prerelease SvelteKit 3 versions in a patch update.
Patch Changes
fix: allow prerelease versions of SvelteKit 3 to satisfy the peer dependency range (#16286)
Updated dependencies [737d119, fa78efb, 07c207e, a47071b, 14d7d5a, 5c38e51, 0702baa, e1938c6, 8293144, f76d7d9, ab5c253, b557b1b, 4a513e2]:
- @sveltejs/[email protected]
- Jul 14, 2026
- Date parsed from source:Jul 14, 2026
- First seen by Releasebot:Jul 14, 2026
@sveltejs/[email protected]
SvelteKit fixes package.json to include utils.js and updates dependencies in a patch release.
Patch Changes
- fix: include utils.js in package.json files (#16298)
- Updated dependencies [737d119, fa78efb, 07c207e, a47071b, 14d7d5a, 5c38e51, 0702baa, e1938c6, 8293144, f76d7d9, ab5c253, b557b1b, 4a513e2]:
- @sveltejs/[email protected]
Curated by the Releasebot team
Releasebot is an aggregator of official product update announcements from hundreds of software vendors and thousands of sources.
Our editorial process involves the manual review and audit of release notes procured with the help of automated systems.