Skip to content

Commit 471a683

Browse files
authored
fix(svelte): Bump svelte dev dependency to 3.59.2 (#19208)
- Bumps `svelte` devDependency in `@sentry/svelte` from `3.49.0` to `3.59.2` to resolve GHSA-gw32-9rmw-qwww (XSS via SSR `<textarea bind:value>`) Closes #19209 (added automatically)
1 parent 1ee64f1 commit 471a683

File tree

2 files changed

+5
-5
lines changed

2 files changed

+5
-5
lines changed

packages/svelte/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@
4949
"devDependencies": {
5050
"@sveltejs/vite-plugin-svelte": "1.4.0",
5151
"@testing-library/svelte": "^3.2.1",
52-
"svelte": "3.49.0",
52+
"svelte": "3.59.2",
5353
"vite": "^3.0.0"
5454
},
5555
"scripts": {

yarn.lock

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30091,10 +30091,10 @@ svelte-hmr@^0.16.0:
3009130091
resolved "https://registry.yarnpkg.com/svelte-hmr/-/svelte-hmr-0.16.0.tgz#9f345b7d1c1662f1613747ed7e82507e376c1716"
3009230092
integrity sha512-Gyc7cOS3VJzLlfj7wKS0ZnzDVdv3Pn2IuVeJPk9m2skfhcu5bq3wtIZyQGggr7/Iim5rH5cncyQft/kRLupcnA==
3009330093

30094-
svelte@3.49.0:
30095-
version "3.49.0"
30096-
resolved "https://registry.yarnpkg.com/svelte/-/svelte-3.49.0.tgz#5baee3c672306de1070c3b7888fc2204e36a4029"
30097-
integrity sha512-+lmjic1pApJWDfPCpUUTc1m8azDqYCG1JN9YEngrx/hUyIcFJo6VZhj0A1Ai0wqoHcEIuQy+e9tk+4uDgdtsFA==
30094+
svelte@3.59.2:
30095+
version "3.59.2"
30096+
resolved "https://registry.yarnpkg.com/svelte/-/svelte-3.59.2.tgz#a137b28e025a181292b2ae2e3dca90bf8ec73aec"
30097+
integrity sha512-vzSyuGr3eEoAtT/A6bmajosJZIUWySzY2CzB3w2pgPvnkUjGqlDnsNnA0PMO+mMAhuyMul6C2uuZzY6ELSkzyA==
3009830098

3009930099
svelte@^4.2.8:
3010030100
version "4.2.8"

0 commit comments

Comments
 (0)