Update dependency svelte to v5.53.11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
svelte (source)	5.50.3 → 5.53.11

---

Release Notes

sveltejs/svelte (svelte)

v5.53.11

Compare Source

Patch Changes

• fix: remove untrack circular dependency (#​17910)

• fix: recover from errors that leave a corrupted effect tree (#​17888)

• fix: properly lazily evaluate RHS when checking for assignment_value_stale (#​17906)

• fix: resolve boundary in correct batch when hydrating (#​17914)

• chore: rebase batches after process, not during (#​17900)

v5.53.10

Compare Source

Patch Changes

• fix: re-process batch if new root effects were scheduled (#​17895)

v5.53.9

Compare Source

Patch Changes

• fix: better bind:this cleanup timing (#​17885)

v5.53.8

Compare Source

Patch Changes

• fix: {@​html} no longer duplicates content inside contenteditable elements (#​17853)

• fix: don't access inert block effects (#​17882)

• fix: handle asnyc updates within pending boundary (#​17873)

• perf: avoid re-traversing the effect tree after $: assignments (#​17848)

• chore: simplify scheduling logic (#​17805)

v5.53.7

Compare Source

Patch Changes

• fix: correctly add __svelte_meta after else-if chains (#​17830)

• perf: cache element interactivity and source line splitting in compiler (#​17839)

• chore: avoid rescheduling effects during branch commit (#​17837)

• perf: optimize CSS selector pruning (#​17846)

• fix: preserve original boundary errors when keyed each rows are removed during async updates (#​17843)

• perf: avoid O(n²) name scanning in scope generate and unique (#​17844)

• fix: preserve each items that are needed by pending batches (#​17819)

v5.53.6

Compare Source

Patch Changes

• perf: optimize parser hot paths for faster compilation (#​17811)

• fix: SvelteMap incorrectly handles keys with undefined values (#​17826)

• fix: SvelteURL search setter now returns the normalized value, matching native URL behavior (#​17828)

• fix: visit synthetic value node during ssr (#​17824)

• fix: always case insensitive event handlers during ssr (#​17822)

• chore: more efficient effect scheduling (#​17808)

• perf: optimize compiler analysis phase (#​17823)

• fix: skip redundant batch.apply (#​17816)

• chore: null out current_batch before committing branches (#​17809)

v5.53.5

Compare Source

Patch Changes

• fix: escape innerText and textContent bindings of contenteditable (0df5abcae223058ceb95491470372065fb87951d)

• fix: sanitize transformError values prior to embedding in HTML comments (0298e979371bb583855c9810db79a70a551d22b9)

v5.53.4

Compare Source

Patch Changes

• fix: set server context after async transformError (#​17799)

• fix: hydrate if blocks correctly (#​17784)

• fix: handle default parameters scope leaks (#​17788)

• fix: prevent flushed effects from running again (#​17787)

v5.53.3

Compare Source

Patch Changes

• fix: render :catch of #await block with correct key (#​17769)

• chore: pin aria-query@​5.3.1 (#​17772)

• fix: make string coercion consistent to toString (#​17774)

v5.53.2

Compare Source

Patch Changes

• fix: update expressions on server deriveds (#​17767)

• fix: further obfuscate node:crypto import from overzealous static analysis (#​17763)

v5.53.1

Compare Source

Patch Changes

• fix: handle shadowed function names correctly (#​17753)

v5.53.0

Compare Source

Minor Changes

• feat: allow comments in tags (#​17671)

• feat: allow error boundaries to work on the server (#​17672)

Patch Changes

• fix: use TrustedHTML to test for customizable <select> support, where necessary (#​17743)

• fix: ensure head effects are kept in the effect tree (#​17746)

• chore: deactivate current_batch by default in unset_context (#​17738)

v5.52.0

Compare Source

Minor Changes

• feat: support TrustedHTML in {@​html} expressions (#​17701)

Patch Changes

• fix: repair dynamic component truthy/falsy hydration mismatches (#​17737)

• fix: re-run non-render-bound deriveds on the server (#​17674)

v5.51.5

Compare Source

Patch Changes

• fix: check to make sure svelte:element tags are valid during SSR (73098bb26c6f06e7fd1b0746d817d2c5ee90755f)

• fix: misc option escaping and backwards compatibility (#​17741)

• fix: strip event handlers during SSR (a0c7f289156e9fafaeaf5ca14af6c06fe9b9eae5)

• fix: replace usage of for in with for of Object.keys (f89c7ddd7eebaa1ef3cc540400bec2c9140b330c)

• fix: always escape option body in SSR (f7c80da18c215e3727c2a611b0b8744cc6e504c5)

• chore: upgrade devalue (#​17739)

v5.51.4

Compare Source

Patch Changes

• chore: proactively defer effects in pending boundary (#​17734)

• fix: detect and error on non-idempotent each block keys in dev mode (#​17732)

v5.51.3

Compare Source

Patch Changes

• fix: prevent event delegation logic conflicting between svelte instances (#​17728)

• fix: treat CSS attribute selectors as case-insensitive for HTML enumerated attributes (#​17712)

• fix: locate Rollup annontaion friendly to JS downgraders (#​17724)

• fix: run effects in pending snippets (#​17719)

v5.51.2

Compare Source

Patch Changes

• fix: take async into consideration for dev delegated handlers (#​17710)

• fix: emit state_referenced_locally warning for non-destructured props (#​17708)

v5.51.1

Compare Source

Patch Changes

• fix: don't crash on undefined document.contentType (#​17707)

• fix: use symbols for encapsulated event delegation (#​17703)

v5.51.0

Compare Source

Minor Changes

• feat: Use TrustedTypes for HTML handling where supported (#​16271)

Patch Changes

• fix: sanitize template-literal-special-characters in SSR attribute values (#​17692)

• fix: follow-up formatting in print() — flush block-level elements into separate sequences (#​17699)

• fix: preserve delegated event handlers as long as one or more root components are using them (#​17695)

---

Configuration

📅 Schedule: Branch creation - "after 9pm on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bolt-new-by-stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	ember-repl@​8.0.1 ⏵ 8.0.2				+1
	svelte@​5.50.3 ⏵ 5.53.11	+1	+11	+1	+1

View full report

[github-actions]

Project	Preview URL1	Manage
Limber	https://renovate-svelte-5.x-lockfile.limber-glimdown.pages.dev	on Cloudflare
Tutorial	https://renovate-svelte-5.x-lockfile.limber-glimmer-tutorial.pages.dev	on Cloudflare

Logs

Footnotes

1. if these branch preview links are not working, please check the logs for the commit-based preview link. There is a character limit of 28 for the branch subdomain, as well as some other heuristics, described here for the sake of implementation ease in deploy-preview.yml, that algo has been omitted. The URLs are logged in the wrangler output, but it's hard to get outputs from a matrix job. ↩