chore(deps): bump undici and @sveltejs/kit in /examples/svelte/localized-sveltekit

[dependabot]

Removes undici. It's no longer used after updating ancestor dependency @sveltejs/kit. These dependencies need to be updated together.

Removes undici

Updates @sveltejs/kit from 1.30.4 to 3.0.0-next.13

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.0.0-next.13

Major Changes

• breaking: replace the noScroll and keepFocus options of goto with a single reset option, and the data-sveltekit-noscroll and data-sveltekit-keepfocus attributes with data-sveltekit-reset (#16558)

• breaking: deprecate error(status, {...}) in favour of error(status, message, {...}) (#16540)

Minor Changes

• feat: add shallow routing to goto and deprecate pushState and replaceState (#16449)

• feat: preserve page state set through goto(..., { state, persistState: true }) across reloads (#16449)

Patch Changes

• chore: deduplicate repeated CSP directive handling (#16498)

• fix: avoid Vite dev server reload on initial page request (#16553)

• fix: don't set a null accept-language header on internal fetch sub-requests when the incoming request has none (#16527)

• fix: correctly detect prerendered paths in server fetch when paths.base is set (#16525)

• fix: don't duplicate remote modules in the generated manifest (#16532)

• fix: exclude inlined files from the page's $app/manifest immutable list (#16531)

• perf: avoid quadratic remote form issue merging (#16493)

• fix: don't attempt to serialize fetch responses when the request body is not a string or TypedArray (#16501)

• fix: read the error status of App.Error in the prerender and query.live remote functions (#16529)

• fix: propagate errors from prerendered remote responses instead of re-running the function (#16535)

• fix: respect the status returned from handleError on the fallback error page served to error-page sub-requests (#16528)

• fix: skip unnecessary version.json checks if updated.current is already true (#16518)

• fix: allow generation of $app/tsconfig without TypeScript installed (#16534)

• perf: use a Set to check element ids when validating fragment links during prerendering (#16494)

• fix: only include _app/immutable files in $app/manifest's immutable in the service worker (#16531)

• fix: log errors caught by the Vite dev server handler (#16550)

• fix: resolve root per instance of the SvelteKit Vite plugin (#16513)

• fix: ignore path casing differences when warning about overridden Vite config on Windows (#16545)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.0.0-next.13

Major Changes

• breaking: replace the noScroll and keepFocus options of goto with a single reset option, and the data-sveltekit-noscroll and data-sveltekit-keepfocus attributes with data-sveltekit-reset (#16558)

• breaking: deprecate error(status, {...}) in favour of error(status, message, {...}) (#16540)

Minor Changes

• feat: add shallow routing to goto and deprecate pushState and replaceState (#16449)

• feat: preserve page state set through goto(..., { state, persistState: true }) across reloads (#16449)

Patch Changes

• chore: deduplicate repeated CSP directive handling (#16498)

• fix: avoid Vite dev server reload on initial page request (#16553)

• fix: don't set a null accept-language header on internal fetch sub-requests when the incoming request has none (#16527)

• fix: correctly detect prerendered paths in server fetch when paths.base is set (#16525)

• fix: don't duplicate remote modules in the generated manifest (#16532)

• fix: exclude inlined files from the page's $app/manifest immutable list (#16531)

• perf: avoid quadratic remote form issue merging (#16493)

• fix: don't attempt to serialize fetch responses when the request body is not a string or TypedArray (#16501)

• fix: read the error status of App.Error in the prerender and query.live remote functions (#16529)

• fix: propagate errors from prerendered remote responses instead of re-running the function (#16535)

• fix: respect the status returned from handleError on the fallback error page served to error-page sub-requests (#16528)

• fix: skip unnecessary version.json checks if updated.current is already true (#16518)

• fix: allow generation of $app/tsconfig without TypeScript installed (#16534)

• perf: use a Set to check element ids when validating fragment links during prerendering (#16494)

• fix: only include _app/immutable files in $app/manifest's immutable in the service worker (#16531)

• fix: log errors caught by the Vite dev server handler (#16550)

• fix: resolve root per instance of the SvelteKit Vite plugin (#16513)

... (truncated)

Commits

• 1d9e11a Version Packages (next) (#16509)
• 4835414 chore: only check non-build files (#16561)
• 45d25d2 chore: fix up vitest configs and ci (#16555)
• 54d3ea0 chore: remove unused variable
• 40efca1 breaking: noScroll and keepFocus are now reset (#16558)
• a4f1521 fix: don't double-prefix base when checking for prerendered paths in server f...
• e6591a0 fix: compute the service worker's immutable manifest list like the client's (...
• 58ab41a chore: require form and error in the Props constructor (#16554)
• b196a39 perf: avoid quadratic remote form issue merging (#16493)
• 6942ddb chore: deduplicate repeated CSP directive handling (#16498)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sveltejs/kit since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

High Risk
Major SvelteKit 1→3 lockfile jump in an example app while package.json still targets Svelte 3/Vite 6, risking broken installs or runtime/API breakage from Kit 3 breaking changes.

Overview
Updates examples/svelte/localized-sveltekit/package-lock.json so resolving @sveltejs/kit at next now pins Kit 3.0.0-next.13 (was 1.30.4), along with a large transitive refresh.

undici (and @fastify/busboy) drop out of the tree because Kit 3 no longer depends on them. Kit’s direct stack shifts (e.g. cookie 0.5 → 2.0, devalue 4.x → 5.x, sirv/mrmime major bumps, new @standard-schema/spec and @sveltejs/acorn-typescript), and nested @sveltejs/vite-plugin-svelte 2.x under Kit is replaced by a top-level 7.2.0 peer install. Several old Kit helpers (tiny-glob, sade, nested svelte-hmr, etc.) are removed from the lockfile.

package.json is unchanged (@sveltejs/kit: next, svelte ^3.44, vite ^6.2.5), so this is mainly a lockfile realignment that may not satisfy Kit 3’s peer ranges (Svelte 5, Vite 8, Node ≥22) until manifests are updated separately.

^{Reviewed by Cursor Bugbot for commit 5e9bca1. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: 5e9bca1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 5e9bca1

Command	Status	Duration	Result
nx test @e2e/qwik-city	✅ Succeeded	7m 41s	View ↗
nx test @e2e/nextjs-sdk-next-app	✅ Succeeded	6m 56s	View ↗
nx test @e2e/angular-17	✅ Succeeded	6m 26s	View ↗
nx test @e2e/nuxt	✅ Succeeded	5m 46s	View ↗
nx test @e2e/angular-19-ssr	✅ Succeeded	5m 20s	View ↗
nx test @e2e/hydrogen	✅ Succeeded	4m 52s	View ↗
nx test @e2e/gen1-next15-app	✅ Succeeded	4m 59s	View ↗
nx test @e2e/react-sdk-next-14-app	✅ Succeeded	4m 36s	View ↗
Additional runs (38)	✅ Succeeded	...	View ↗

💡 Verify your cache is correct by running tasks in a sandbox. Read docs ↗

---

☁️ Nx Cloud last updated this comment at 2026-08-03 22:49:05 UTC