chore(deps): update npm

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@lucide/svelte (source)	^0.546.0 -> ^0.548.0
@shikijs/langs (source)	^3.13.0 -> ^3.14.0
@shikijs/rehype (source)	^3.13.0 -> ^3.14.0
@shikijs/themes (source)	^3.13.0 -> ^3.14.0
@sveltejs/adapter-vercel (source)	^6.0.0 -> ^6.1.1
@sveltejs/kit (source)	^2.38.1 -> ^2.48.3
@types/node (source)	^24.9.1 -> ^24.9.2
pnpm (source)	10.19.0 -> 10.20.0
posthog-js (source)	^1.280.1 -> ^1.281.0
posthog-node (source)	^5.10.3 -> ^5.10.4
shiki (source)	^3.13.0 -> ^3.14.0
svelte (source)	^5.41.3 -> ^5.43.0

---

Release Notes

lucide-icons/lucide (@​lucide/svelte)

v0.548.0: Version 0.548.0

Compare Source

What's Changed

• feat(docs): add new package for Slint by @​cnlancehu in #​3698
• docs(site): add introductions for packages in documentation by @​mattheskaiser in #​3643
• Fix default prop by @​ericfennis in #​3730
• feat(icons): added gamepad-directional icon by @​felipeajzanetti in #​3693

New Contributors

• @​cnlancehu made their first contribution in #​3698
• @​mattheskaiser made their first contribution in #​3643
• @​felipeajzanetti made their first contribution in #​3693

Full Changelog: lucide-icons/lucide@0.547.0...0.548.0

v0.547.0: Version 0.547.0

Compare Source

What's Changed

• fix(docs): update brand logo statement link in github action by @​karsa-mistmere in #​3630
• chore(deps): bump astro from 5.5.2 to 5.14.4 by @​dependabot[bot] in #​3683
• fix(packages/lucide): replace elements inside <template> (#​2635) by @​KhalidAlansary in #​3576
• feat(icons): added birdhouse icon by @​hieu-onefold in #​3378

New Contributors

• @​KhalidAlansary made their first contribution in #​3576
• @​hieu-onefold made their first contribution in #​3378

Full Changelog: lucide-icons/lucide@0.546.0...0.547.0

shikijs/shiki (@​shikijs/langs)

v3.14.0

Compare Source

   🚀 Features

• Update grammars and themes  -  by @​antfu (26372)

   🐞 Bug Fixes

• colorized-brackets: Fix default color does not work with colorized-brackets  -  by @​oatmealproblem in #​1082 (f4d3f)

    View changes on GitHub

sveltejs/kit (@​sveltejs/adapter-vercel)

v6.1.1

Compare Source

Patch Changes

• chore: improve runtime config parsing (#​14838)

• Updated dependencies [cd72d94, 53b1b73, 2ccc638]:

  • @​sveltejs/kit@​2.48.3

v6.1.0

Compare Source

Minor Changes

• feat: Add experimental support for Bun runtime (#​14817)

Patch Changes

• Updated dependencies [102aecf]:
  • @​sveltejs/kit@​2.48.1

sveltejs/kit (@​sveltejs/kit)

v2.48.3

Compare Source

Patch Changes

• fix: include hash when using resolve with hash routing enabled (#​14786)

• fix: afterNavigate callback not running after hydration when experimental async is enabled (#​14644)
  fix: Snapshot restore method not called after reload when experimental async is enabled

• fix: expose issue.path in .allIssues() (#​14784)

v2.48.2

Compare Source

Patch Changes

• fix: update DOM before running navigate callbacks (#​14829)

v2.48.1

Compare Source

Patch Changes

• fix: wait for commit promise instead of settled (#​14818)

v2.48.0

Compare Source

Minor Changes

• feat: use experimental fork API when available (#​14793)

Patch Changes

• fix: await for settled instead of tick in navigate (#​14800)

v2.47.3

Compare Source

Patch Changes

• fix: avoid hanging when error() is used while streaming promises from a server load function (#​14722)

• chore: treeshake load function code if we know it's unused (#​14764)

• fix: RecursiveFormFields type for recursive or unknown schemas (#​14734)

• fix: rework internal representation of form value to be $state (#​14771)

v2.47.2

Compare Source

Patch Changes

• fix: streamed promise not resolving when another load function returns a fast resolving promise (#​14753)

• chore: allow to run preflight validation only (#​14744)

• fix: update overload to set invalid type to schema input (#​14748)

v2.47.1

Compare Source

Patch Changes

• fix: allow read to be used at the top-level of remote function files (#​14672)

• fix: more robust remote files generation (#​14682)

v2.47.0

Compare Source

Minor Changes

• feat: add signal property to request (#​14715)

Patch Changes

• fix: resolve remote module syntax errors with trailing expressions (#​14728)

v2.46.5

Compare Source

Patch Changes

• fix: ensure form remote functions' fields.set triggers reactivity (#​14661)

v2.46.4

Compare Source

Patch Changes

• fix: prevent access of Svelte 5-only untrack function (#​14658)

v2.46.3

Compare Source

Patch Changes

• fix: merge field.set(...) calls (#​14651)

• fix: don't automatically reset form after an enhanced submission (#​14626)

• fix: normalize path strings when updating field values (#​14649)

v2.46.2

Compare Source

Patch Changes

• fix: prevent code execution order issues around SvelteKit's env modules (#​14637)

v2.46.1

Compare Source

Patch Changes

• fix: use $derived for form fields (#​14621)

• docs: remove @example blocks to allow docs to deploy (#​14636)

• fix: require a value with submit and hidden fields (#​14635)

• fix: delete hydration cache on effect teardown (#​14611)

v2.46.0

Compare Source

Minor Changes

• feat: imperative form validation (#​14624)

Patch Changes

• fix: wait a tick before collecting form data for validation (#​14631)

• fix: prevent code execution order issues around SvelteKit's env modules (#​14632)

v2.45.0

Compare Source

Minor Changes

• feat: form.for(id) now implicitly sets id on form object (#​14623)

Patch Changes

• fix: allow fetch in remote function without emitting a warning (#​14610)

v2.44.0

Compare Source

Minor Changes

• feat: expose event.route and event.url to remote functions (#​14606)

• breaking: update experimental form API (#​14481)

Patch Changes

• fix: don't crawl error responses during prerendering (#​14596)

v2.43.8

Compare Source

Patch Changes

• fix: HMR for query (#​14587)

• fix: avoid client modules while traversing dependencies to prevent FOUC during dev (#​14577)

• fix: skip prebundling of .remote.js files (#​14583)

• fix: more robust remote file pattern matching (#​14578)

v2.43.7

Compare Source

Patch Changes

• fix: correctly type the result of form remote functions that do not accept data (#​14573)

• fix: force remote module chunks to isolate themselves (#​14571)

v2.43.6

Compare Source

Patch Changes

• fix: ensure cache key is consistent between client/server (#​14563)

• fix: keep resolve relative to initial base during prerender (#​14533)

• fix: avoid including HEAD twice when an unhandled HTTP method is used in a request to a +server handler that has both a GET handler and a HEAD handler (#​14564)

• fix: smoothscroll to deep link (#​14569)

v2.43.5

Compare Source

Patch Changes

• fix: fall back to non-relative resolution when calling resolve(...) outside an event context (#​14532)

v2.43.4

Compare Source

Patch Changes

• fix: Webcontainer AsyncLocalStorage workaround (#​14526)

v2.43.3

Compare Source

Patch Changes

• fix: Webcontainer AsyncLocalStorage workaround (#​14521)

• fix: include the value of form submitters on form remote functions (#​14475)

v2.43.2

Compare Source

Patch Changes

• fix: ensure rendering starts off synchronously (#​14517)

• fix: keep serialized remote data alive until navigation (#​14508)

v2.43.1

Compare Source

Patch Changes

• fix: consistently use bare import for internals (#​14506)

v2.43.0

Compare Source

Minor Changes

• feat: experimental async SSR (#​14447)

Patch Changes

• fix: ensure __SVELTEKIT_PAYLOAD__.data is accessed safely (#​14491)

• fix: create separate cache entries for non-exported remote function queries (#​14499)

v2.42.2

Compare Source

Patch Changes

• fix: prevent loops in postbuild analysis phase (#​14450)

• fix: handle nested object fields in form data (#​14469)

• fix: robustify form helper types (#​14463)

• fix: avoid running the init hook during builds if there's nothing to prerender (#​14464)

• fix: ensure SSR rendering gets request store context (#​14476)

v2.42.1

Compare Source

Patch Changes

• fix: ensure environment setup is in its own chunk (#​14441)

v2.42.0

Compare Source

Minor Changes

• feat: enhance remote form functions with schema support, input and issues properties (#​14383)

• breaking: remote form functions get passed a parsed POJO instead of a FormData object now (#​14383)

v2.41.0

Compare Source

Minor Changes

• feat: add %sveltekit.version% to app.html (#​12132)

Patch Changes

• fix: allow remote functions to return custom types serialized with transport hooks (#​14435)

• fix: fulfil beforeNavigate complete when redirected (#​12896)

v2.40.0

Compare Source

Minor Changes

• feat: include event property on popstate/link/form navigation (#​14307)

Patch Changes

• fix: respect replaceState/keepFocus/noScroll when a navigation results in a redirect (#​14424)

• fix: invalidate preload cache when invalidateAll is true (#​14420)

v2.39.1

Compare Source

Patch Changes

• fix: more robust remote function code transformation (#​14418)

v2.39.0

Compare Source

Minor Changes

• feat: lazy discovery of remote functions (#​14293)

Patch Changes

• fix: layout load data not serialized on error page (#​14395)

• fix: fail prerendering when remote function fails (#​14365)

• fix: treat handle hook redirect as part of remote function call as json redirect (#​14362)

pnpm/pnpm (pnpm)

v10.20.0

Compare Source

Minor Changes

• Support --all option in pnpm --help to list all commands #​8628.

Patch Changes

• When the latest version doesn't satisfy the maturity requirement configured by minimumReleaseAge, pick the highest version that is mature enough, even if it has a different major version #​10100.
• create command should not verify patch info.
• Set managePackageManagerVersions to false, when switching to a different version of pnpm CLI, in order to avoid subsequent switches #​10063.

PostHog/posthog-js (posthog-js)

v1.281.0

Compare Source

1.281.0

Minor Changes

• #​2502 751b440 Thanks @​pauldambra! - fix: bucketed rate limiter can calculate tokens without a timer

Patch Changes

• #​2500 71ae0d2 Thanks @​pauldambra! - fix: don't poll surveys while the page is hidden

• Updated dependencies [751b440]:

  • @​posthog/core@​1.4.0

PostHog/posthog-js (posthog-node)

v5.10.4

Compare Source

Patch Changes

• Updated dependencies [751b440]:
  • @​posthog/core@​1.4.0

sveltejs/svelte (svelte)

v5.43.0

Compare Source

Minor Changes

• feat: out-of-order rendering (#​17038)

Patch Changes

• fix: settle batch after DOM updates (#​17054)

v5.42.3

Compare Source

Patch Changes

• fix: handle <svelte:head> rendered asynchronously (#​17052)

• fix: don't restore batch in #await (#​17051)

v5.42.2

Compare Source

Patch Changes

• fix: better error message for global variable assignments (#​17036)

• chore: tweak memoizer logic (#​17042)

v5.42.1

Compare Source

Patch Changes

• fix: ignore fork discard() after commit() (#​17034)

v5.42.0

Compare Source

Minor Changes

• feat: experimental fork API (#​17004)

Patch Changes

• fix: always allow setContext before first await in component (#​17031)

• fix: less confusing names for inspect errors (#​17026)

v5.41.4

Compare Source

Patch Changes

• fix: take into account static blocks when determining transition locality (#​17018)

• fix: coordinate mount of snippets with await expressions (#​17021)

• fix: better optimization of await expressions (#​17025)

• fix: flush pending changes after rendering failed snippet (#​16995)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
svelte-changelog	Ready	Preview	Comment	Oct 29, 2025 9:46am

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}