[PR #7349] [CLOSED] build(deps-dev): bump @sveltejs/kit from 2.6.2 to 2.8.3 in the npm_and_yarn group across 1 directory #8841

New Issue

Closed

opened 2025-11-11 18:07:26 -06:00 by GiteaMirror · 0 comments

GiteaMirror commented 2025-11-11 18:07:26 -06:00

Owner

Copy Link

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/7349
Author: @dependabot[bot]
Created: 11/25/2024
Status: ❌ Closed

Base: main ← Head: dependabot/npm_and_yarn/npm_and_yarn-330f789f30

---

📝 Commits (1)

• b1c3564 build(deps-dev): bump @sveltejs/kit

📊 Changes

2 files changed (+17 additions, -17 deletions)

View changed files

📝 package-lock.json (+16 -16)
📝 package.json (+1 -1)

📄 Description

Bumps the npm_and_yarn group with 1 update in the / directory: @sveltejs/kit.

Updates @sveltejs/kit from 2.6.2 to 2.8.3

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.8.3

Patch Changes

• fix: ensure error messages are escaped (#13050)

• fix: escape values included in dev 404 page (#13039)

@​sveltejs/kit@​2.8.2

Patch Changes

• fix: prevent duplicate fetch request when using Request with load function's fetch (#13023)

• fix: do not override default cookie decoder to allow users to override the cookie library version (#13037)

@​sveltejs/kit@​2.8.1

Patch Changes

• fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

• fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

@​sveltejs/kit@​2.8.0

Minor Changes

• feat: add helper to identify ActionFailure objects (#12878)

@​sveltejs/kit@​2.7.7

Patch Changes

• fix: update link in JSDoc (#12963)

@​sveltejs/kit@​2.7.6

Patch Changes

• fix: update broken links in JSDoc (#12960)

@​sveltejs/kit@​2.7.5

Patch Changes

• fix: warn on invalid cookie name characters (#12806)

• fix: when using @vitejs/plugin-basic-ssl, set a no-op proxy config to downgrade from HTTP/2 to TLS since undici does not yet enable HTTP/2 by default (#12907)

@​sveltejs/kit@​2.7.4

Patch Changes

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.8.3

Patch Changes

• fix: ensure error messages are escaped (#13050)

• fix: escape values included in dev 404 page (#13039)

2.8.2

Patch Changes

• fix: prevent duplicate fetch request when using Request with load function's fetch (#13023)

• fix: do not override default cookie decoder to allow users to override the cookie library version (#13037)

2.8.1

Patch Changes

• fix: only add nonce to script-src-elem, style-src-attr and style-src-elem CSP directives when unsafe-inline is not present (#11613)

• fix: support HTTP/2 in dev and production. Revert the changes from #12907 to downgrade HTTP/2 to TLS as now being unnecessary (#12989)

2.8.0

Minor Changes

• feat: add helper to identify ActionFailure objects (#12878)

2.7.7

Patch Changes

• fix: update link in JSDoc (#12963)

2.7.6

Patch Changes

• fix: update broken links in JSDoc (#12960)

2.7.5

Patch Changes

• fix: warn on invalid cookie name characters (#12806)

... (truncated)

Commits

• 429bfb7 Version Packages (#13049)
• 134e363 fix: ensure error messages are escaped (#13050)
• d338d46 fix: escape values included in dev 404 page (#13039)
• 5f8399d Version Packages (#13024)
• 1358ccc fix: use default cookie decoder (#13037)
• 570562b fix: handle empty Headers when serialising Request passed to fetch (#13023)
• 435984b Version Packages (#12992)
• 0bd4426 fix: support custom servers using HTTP/2 in production (#12989)
• 6df00fc fix: csp nonce in script-src-elem, style-src-attr and style-src-elem wh...
• c717db9 chore: update playground and add an endpoint (#12983)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/7349 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 11/25/2024 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/npm_and_yarn-330f789f30` --- ### 📝 Commits (1) - [`b1c3564`](https://github.com/open-webui/open-webui/commit/b1c3564a5e398a6f523d181e561813403c255ab5) build(deps-dev): bump @sveltejs/kit ### 📊 Changes **2 files changed** (+17 additions, -17 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+16 -16) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps the npm_and_yarn group with 1 update in the / directory: [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit). Updates `@sveltejs/kit` from 2.6.2 to 2.8.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/releases"><code>@​sveltejs/kit</code>'s releases</a>.</em></p> <blockquote> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.8.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: ensure error messages are escaped (<a href="https://redirect.github.com/sveltejs/kit/pull/13050">#13050</a>)</p> </li> <li> <p>fix: escape values included in dev 404 page (<a href="https://redirect.github.com/sveltejs/kit/pull/13039">#13039</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.8.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: prevent duplicate fetch request when using Request with load function's fetch (<a href="https://redirect.github.com/sveltejs/kit/pull/13023">#13023</a>)</p> </li> <li> <p>fix: do not override default cookie decoder to allow users to override the <code>cookie</code> library version (<a href="https://redirect.github.com/sveltejs/kit/pull/13037">#13037</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.8.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: only add nonce to <code>script-src-elem</code>, <code>style-src-attr</code> and <code>style-src-elem</code> CSP directives when <code>unsafe-inline</code> is not present (<a href="https://redirect.github.com/sveltejs/kit/pull/11613">#11613</a>)</p> </li> <li> <p>fix: support HTTP/2 in dev and production. Revert the changes from <a href="https://redirect.github.com/sveltejs/kit/pull/12907">#12907</a> to downgrade HTTP/2 to TLS as now being unnecessary (<a href="https://redirect.github.com/sveltejs/kit/pull/12989">#12989</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.8.0</h2> <h3>Minor Changes</h3> <ul> <li>feat: add helper to identify <code>ActionFailure</code> objects (<a href="https://redirect.github.com/sveltejs/kit/pull/12878">#12878</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.7.7</h2> <h3>Patch Changes</h3> <ul> <li>fix: update link in JSDoc (<a href="https://redirect.github.com/sveltejs/kit/pull/12963">#12963</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.7.6</h2> <h3>Patch Changes</h3> <ul> <li>fix: update broken links in JSDoc (<a href="https://redirect.github.com/sveltejs/kit/pull/12960">#12960</a>)</li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.7.5</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: warn on invalid cookie name characters (<a href="https://redirect.github.com/sveltejs/kit/pull/12806">#12806</a>)</p> </li> <li> <p>fix: when using <code>@vitejs/plugin-basic-ssl</code>, set a no-op proxy config to downgrade from HTTP/2 to TLS since <code>undici</code> does not yet enable HTTP/2 by default (<a href="https://redirect.github.com/sveltejs/kit/pull/12907">#12907</a>)</p> </li> </ul> <h2><code>@​sveltejs/kit</code><a href="https://github.com/2"><code>@​2</code></a>.7.4</h2> <h3>Patch Changes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md"><code>@​sveltejs/kit</code>'s changelog</a>.</em></p> <blockquote> <h2>2.8.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: ensure error messages are escaped (<a href="https://redirect.github.com/sveltejs/kit/pull/13050">#13050</a>)</p> </li> <li> <p>fix: escape values included in dev 404 page (<a href="https://redirect.github.com/sveltejs/kit/pull/13039">#13039</a>)</p> </li> </ul> <h2>2.8.2</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: prevent duplicate fetch request when using Request with load function's fetch (<a href="https://redirect.github.com/sveltejs/kit/pull/13023">#13023</a>)</p> </li> <li> <p>fix: do not override default cookie decoder to allow users to override the <code>cookie</code> library version (<a href="https://redirect.github.com/sveltejs/kit/pull/13037">#13037</a>)</p> </li> </ul> <h2>2.8.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix: only add nonce to <code>script-src-elem</code>, <code>style-src-attr</code> and <code>style-src-elem</code> CSP directives when <code>unsafe-inline</code> is not present (<a href="https://redirect.github.com/sveltejs/kit/pull/11613">#11613</a>)</p> </li> <li> <p>fix: support HTTP/2 in dev and production. Revert the changes from <a href="https://redirect.github.com/sveltejs/kit/pull/12907">#12907</a> to downgrade HTTP/2 to TLS as now being unnecessary (<a href="https://redirect.github.com/sveltejs/kit/pull/12989">#12989</a>)</p> </li> </ul> <h2>2.8.0</h2> <h3>Minor Changes</h3> <ul> <li>feat: add helper to identify <code>ActionFailure</code> objects (<a href="https://redirect.github.com/sveltejs/kit/pull/12878">#12878</a>)</li> </ul> <h2>2.7.7</h2> <h3>Patch Changes</h3> <ul> <li>fix: update link in JSDoc (<a href="https://redirect.github.com/sveltejs/kit/pull/12963">#12963</a>)</li> </ul> <h2>2.7.6</h2> <h3>Patch Changes</h3> <ul> <li>fix: update broken links in JSDoc (<a href="https://redirect.github.com/sveltejs/kit/pull/12960">#12960</a>)</li> </ul> <h2>2.7.5</h2> <h3>Patch Changes</h3> <ul> <li>fix: warn on invalid cookie name characters (<a href="https://redirect.github.com/sveltejs/kit/pull/12806">#12806</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sveltejs/kit/commit/429bfb74fe823ea13a5fa0547dcf4cd6bb358a93"><code>429bfb7</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13049">#13049</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/134e36343ef57ed7e6e2b3bb9e7f05ad37865794"><code>134e363</code></a> fix: ensure error messages are escaped (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13050">#13050</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/d338d4635a7fd947ba5112df6ee632c4a0979438"><code>d338d46</code></a> fix: escape values included in dev 404 page (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13039">#13039</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/5f8399d88fd9461a6111e03e6168067fba42e2c1"><code>5f8399d</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13024">#13024</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/1358cccd52190df3c74bdd8970dbfb06ffc4ec72"><code>1358ccc</code></a> fix: use default cookie decoder (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13037">#13037</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/570562b74d9e9f295d9b617478088a650f51e96b"><code>570562b</code></a> fix: handle empty Headers when serialising Request passed to fetch (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/13023">#13023</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/435984bf61b047d1e1a8efe88354ca7ac4e9109f"><code>435984b</code></a> Version Packages (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/12992">#12992</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/0bd4426944ce9995b86199900e39c8d3929fa2f2"><code>0bd4426</code></a> fix: support custom servers using HTTP/2 in production (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/12989">#12989</a>)</li> <li><a href="https://github.com/sveltejs/kit/commit/6df00fc8448bf72c91e8f6faee0605995b0fdd65"><code>6df00fc</code></a> fix: csp nonce in <code>script-src-elem</code>, <code>style-src-attr</code> and <code>style-src-elem</code> wh...</li> <li><a href="https://github.com/sveltejs/kit/commit/c717db91236c7ab15045b296c73201c6c6ecd6fa"><code>c717db9</code></a> chore: update playground and add an endpoint (<a href="https://github.com/sveltejs/kit/tree/HEAD/packages/kit/issues/12983">#12983</a>)</li> <li>Additional commits viewable in <a href="https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.8.3/packages/kit">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/open-webui/open-webui/network/alerts). </details> --- _{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

GiteaMirror added the pull-request label 2025-11-11 18:07:26 -06:00

GiteaMirror closed this issue 2025-11-11 18:07:26 -06:00

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

dev

bits-ui-v2

backend-outlet

v0.8.10

v0.8.9

v0.8.8

v0.8.7

v0.8.6

v0.8.5

v0.8.4

v0.8.3

v0.8.2

v0.8.1

v0.8.0

v0.7.2

v0.7.1

v0.7.0

v0.6.43

v0.6.42

v0.6.41

v0.6.40

v0.6.39

v0.6.38

v0.6.37

v0.6.36

v0.6.35

v0.6.34

v0.6.33

v0.6.32

v0.6.31

v0.6.30

v0.6.29

v0.6.28

v0.6.27

v0.6.26

v0.6.25

v0.6.24

v0.6.23

v0.6.22

v0.6.21

v0.6.20

v0.6.19

v0.6.18

v0.6.17

v0.6.16

v0.6.15

v0.6.14

v0.6.13

v0.6.12

v0.6.11

v0.6.10

v0.6.9

v0.6.8

v0.6.7

v0.6.6

v0.6.5

v0.6.4

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.20

v0.5.19

v0.5.18

v0.5.17

v0.5.16

v0.5.15

v0.5.14

v0.5.13

v0.5.12

v0.5.11

v0.5.10

v0.5.9

v0.5.8

v0.5.7

v0.5.6

v0.5.5

v0.5.4

v0.5.3

v0.5.2

v0.5.1

v0.5.0

v0.4.8

v0.4.7

v0.4.6

v0.4.5

v0.4.4

v0.4.3

v0.4.2

v0.4.1

v0.4.0

v0.3.35

v0.3.34

v0.3.33

v0.3.32

v0.3.31

v0.3.30

v0.3.29

v0.3.28

v0.3.27

v0.3.26

v0.3.25

v0.3.24

v0.3.23

v0.3.22

v0.3.21

v0.3.20

v0.3.19

v0.3.18

v0.3.17

v0.3.16

v0.3.15

v0.3.14

v0.3.13

v0.3.12

v0.3.11

v0.3.10

v0.3.9

v0.3.8

v0.3.7

v0.3.6

v0.3.5

v0.3.4

v0.3.3

v0.3.2

v0.3.1

v0.3.0

v0.2.5

v0.2.4

v0.2.3

v0.2.2

v0.2.1

v0.2.0

v0.1.125

v0.1.124

v0.1.123

v0.1.122

v0.1.121

v0.1.120

v0.1.119

v0.1.118

v0.1.117

v0.1.116

v0.1.115

v0.1.114

v0.1.113

v0.1.112

v0.1.111

v0.1.110

v0.1.109

v0.1.108

v0.1.107

v0.1.106

v0.1.105

v0.1.104

v0.1.103

v0.1.102

Labels

Clear labels

bug

core

documentation

enhancement

good first issue

help wanted

non-core

pull-request

Mirrored from GitHub Pull Request

python

question

testing wanted

No Label pull-request

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

GiteaMirror ninjasurge

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#8841