Svelte

Recent releases pushed SvelteKit 3.0's preview forward while stable 2.x picked up form controls and security patches.

SvelteKit 3.0 alphas consolidated configuration and pruned legacy APIs. The preview series removed $app/stores and the base/assets exports from $app/paths, moved Svelte config into the Vite plugin, upgraded the Vite requirement to 8.x with bundled rolldown 1.0, and graduated tracing out of the experimental namespace. Remote function files are now gated behind experimental.remoteFunctions.

Remote forms added visibility and feedback controls. Stable builds exposed a submitted property on remote forms, exported RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types for custom enhance callbacks, and set submit field values in the action payload for multi-button forms. The 3.0 preview added a dirty() helper on form fields. Forms now also clear issues and touched states on reset.

Security and runtime stability improved. Kit 2.69.1 patched a prototype pollution vector triggered when deleting file inputs. The Node adapter added an X-Accel-Buffering: no header to SSE responses to stop nginx from buffering streams, and removed stale socket files on startup.

Language tooling aligned with Svelte 5 syntax. Language server and svelte-check added support for {const ...} declaration tags, enabled reading Svelte config from vite.config.js, added a --config flag to svelte-check, and introduced optional tsgo (TypeScript Go) integration for faster type checking.