From 4d8f99a2709e3c02e48d8bc6c77458f4ba49d0e3 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 13:06:06 -0600 Subject: [PATCH] Version Packages (#18220) This PR was opened by the [Changesets release](https://github.com/changesets/action) GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated. # Releases ## svelte@5.55.7 ### Patch Changes - fix: prevent XSS on `hydratable` from user contents ([`a16ebc67bbcf8f708360195687e1b2719463e1a4`](https://github.com/sveltejs/svelte/commit/a16ebc67bbcf8f708360195687e1b2719463e1a4)) - chore: bump devalue ([#18219](https://github.com/sveltejs/svelte/pull/18219)) - fix: disallow empty attribute names during SSR ([`547853e2406a2147ad7fb5ffeba95b01bd9642da`](https://github.com/sveltejs/svelte/commit/547853e2406a2147ad7fb5ffeba95b01bd9642da)) - fix: harden regex ([`d2375e2ebcab5c88feb5652f1a9d621b8f06b259`](https://github.com/sveltejs/svelte/commit/d2375e2ebcab5c88feb5652f1a9d621b8f06b259)) - fix: move Svelte runtime properties to symbols ([`e1cbbd96441e82c9eb8a23a2903c0d06d3cda991`](https://github.com/sveltejs/svelte/commit/e1cbbd96441e82c9eb8a23a2903c0d06d3cda991)) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- .changeset/blue-lions-call.md | 5 ----- .changeset/eight-things-join.md | 5 ----- .changeset/famous-webs-flash.md | 5 ----- .changeset/proud-dogs-go.md | 5 ----- .changeset/six-snails-sell.md | 5 ----- packages/svelte/CHANGELOG.md | 14 ++++++++++++++ packages/svelte/package.json | 2 +- packages/svelte/src/version.js | 2 +- 8 files changed, 16 insertions(+), 27 deletions(-) delete mode 100644 .changeset/blue-lions-call.md delete mode 100644 .changeset/eight-things-join.md delete mode 100644 .changeset/famous-webs-flash.md delete mode 100644 .changeset/proud-dogs-go.md delete mode 100644 .changeset/six-snails-sell.md diff --git a/.changeset/blue-lions-call.md b/.changeset/blue-lions-call.md deleted file mode 100644 index f9ddb88505..0000000000 --- a/.changeset/blue-lions-call.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'svelte': patch ---- - -fix: prevent XSS on `hydratable` from user contents diff --git a/.changeset/eight-things-join.md b/.changeset/eight-things-join.md deleted file mode 100644 index 678d63db33..0000000000 --- a/.changeset/eight-things-join.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'svelte': patch ---- - -chore: bump devalue diff --git a/.changeset/famous-webs-flash.md b/.changeset/famous-webs-flash.md deleted file mode 100644 index 75a01f689a..0000000000 --- a/.changeset/famous-webs-flash.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'svelte': patch ---- - -fix: disallow empty attribute names during SSR diff --git a/.changeset/proud-dogs-go.md b/.changeset/proud-dogs-go.md deleted file mode 100644 index c728466138..0000000000 --- a/.changeset/proud-dogs-go.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'svelte': patch ---- - -fix: harden regex diff --git a/.changeset/six-snails-sell.md b/.changeset/six-snails-sell.md deleted file mode 100644 index 6c61546e86..0000000000 --- a/.changeset/six-snails-sell.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -'svelte': patch ---- - -fix: move Svelte runtime properties to symbols diff --git a/packages/svelte/CHANGELOG.md b/packages/svelte/CHANGELOG.md index e5ba5737c4..1255d8c6a0 100644 --- a/packages/svelte/CHANGELOG.md +++ b/packages/svelte/CHANGELOG.md @@ -1,5 +1,19 @@ # svelte +## 5.55.7 + +### Patch Changes + +- fix: prevent XSS on `hydratable` from user contents ([`a16ebc67bbcf8f708360195687e1b2719463e1a4`](https://github.com/sveltejs/svelte/commit/a16ebc67bbcf8f708360195687e1b2719463e1a4)) + +- chore: bump devalue ([#18219](https://github.com/sveltejs/svelte/pull/18219)) + +- fix: disallow empty attribute names during SSR ([`547853e2406a2147ad7fb5ffeba95b01bd9642da`](https://github.com/sveltejs/svelte/commit/547853e2406a2147ad7fb5ffeba95b01bd9642da)) + +- fix: harden regex ([`d2375e2ebcab5c88feb5652f1a9d621b8f06b259`](https://github.com/sveltejs/svelte/commit/d2375e2ebcab5c88feb5652f1a9d621b8f06b259)) + +- fix: move Svelte runtime properties to symbols ([`e1cbbd96441e82c9eb8a23a2903c0d06d3cda991`](https://github.com/sveltejs/svelte/commit/e1cbbd96441e82c9eb8a23a2903c0d06d3cda991)) + ## 5.55.6 ### Patch Changes diff --git a/packages/svelte/package.json b/packages/svelte/package.json index 7e9521bb57..2f0743641f 100644 --- a/packages/svelte/package.json +++ b/packages/svelte/package.json @@ -2,7 +2,7 @@ "name": "svelte", "description": "Cybernetically enhanced web apps", "license": "MIT", - "version": "5.55.6", + "version": "5.55.7", "type": "module", "types": "./types/index.d.ts", "engines": { diff --git a/packages/svelte/src/version.js b/packages/svelte/src/version.js index b11e7635c7..6b0ed0aea8 100644 --- a/packages/svelte/src/version.js +++ b/packages/svelte/src/version.js @@ -4,5 +4,5 @@ * The current version, as set in package.json. * @type {string} */ -export const VERSION = '5.55.6'; +export const VERSION = '5.55.7'; export const PUBLIC_VERSION = '5';