Repository navigation
build(deps-dev): bump @sveltejs/kit from 2.18.0 to 3.0.0 in /e2e-tests/test-applications/sveltekit-hooks-test-app - #1381
Conversation
Bumps [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) from 2.18.0 to 3.0.0. - [Release notes](https://github.com/sveltejs/kit/releases) - [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md) - [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.0.0/packages/kit) --- updated-dependencies: - dependency-name: "@sveltejs/kit" dependency-version: 3.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
testing against kit 2, not bumping to sveltekit 3 |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 2 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want reviews to match your repository better? Bugbot Learning can learn team-specific rules from PR activity. A team admin can enable Learning in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 67253d9. Configure here.
| "devDependencies": { | ||
| "@sveltejs/adapter-auto": "^3.0.0", | ||
| "@sveltejs/kit": "2.18.0", | ||
| "@sveltejs/kit": "3.0.0", |
There was a problem hiding this comment.
Incomplete SvelteKit 3 upgrade
High Severity
Bumping only @sveltejs/kit to 3.0.0 leaves SvelteKit 2-era peers in place. Kit 3 requires @sveltejs/vite-plugin-svelte v7, svelte 5, vite 8, TypeScript 6, and adapter-auto v8, and it reads config from the Vite plugin rather than svelte.config.js. The test app will fail to install or build.
Reviewed by Cursor Bugbot for commit 67253d9. Configure here.
| "devDependencies": { | ||
| "@sveltejs/adapter-auto": "^3.0.0", | ||
| "@sveltejs/kit": "2.18.0", | ||
| "@sveltejs/kit": "3.0.0", |
There was a problem hiding this comment.
Hooks e2e tests will fail
High Severity
sveltekit-hooks.test.ts is written for Kit 2.18.0. Version 3.0.0 is bucketed as >=2.31.0, so the wizard skips the version warning the test waits on and writes Sentry.init to instrumentation.server.ts instead of hooks.server.ts. The suite will time out and fail content assertions.
Reviewed by Cursor Bugbot for commit 67253d9. Configure here.
Bumps @sveltejs/kit from 2.18.0 to 3.0.0.
Release notes
Sourced from @sveltejs/kit's releases.
... (truncated)
Changelog
Sourced from @sveltejs/kit's changelog.
... (truncated)
Commits
3ec9b91Version Packages2760a6ffix: prevent open redirects when adding trailing slashes (#17294)e771183Version Packages (next) (#17267)91ac48ffix: catalog missing route file prefix warning (#17288)e40de8dfix links (#17289)2c9fa5efix: revert route metadata caching regression (#17281)7e55449chore: fix server fetch test setup (#17290)538edbfMerge commit from forkb11bb87Merge commit from forkd9d55b5Merge commit from forkMaintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@sveltejs/kitsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.