Bump undici and @sveltejs/kit

[dependabot[bot]]

Bumps undici to 5.26.4 and updates ancestor dependency @sveltejs/kit. These dependencies need to be updated together.

Updates undici from 5.20.0 to 5.26.4

Release notes

Sourced from undici's releases.

v5.26.4

What's Changed

• use esbuild define/hooks by @​KhafraDev in nodejs/undici#2342
• fix request's arrayBuffer returning uint8 instead of arraybuffer by @​KhafraDev in nodejs/undici#2344
• fix: skip readMore call if parser is null or undefined by @​iiAku in nodejs/undici#2346
• test: first attempt for flaky fix by @​metcoder95 in nodejs/undici#2337
• test: only include WebSocket in WPT Report where it's landed by @​panva in nodejs/undici#2351
• Update DispatchInterceptor.md by @​Uzlopak in nodejs/undici#2354
• fix: Avoid error for stream() being aborted by @​BobNobrain in nodejs/undici#2355
• fix names with esbuild by @​KhafraDev in nodejs/undici#2359

New Contributors

• @​iiAku made their first contribution in nodejs/undici#2346
• @​Uzlopak made their first contribution in nodejs/undici#2354
• @​BobNobrain made their first contribution in nodejs/undici#2355

Full Changelog: https://github.com/nodejs/undici/compare/v5.26.3...v5.26.4

v5.26.3

No release notes provided.

v5.26.2

Security Release, CVE-2023-45143.

v5.26.1

What's Changed

• Fix publish undici-types once and for all! by @​Ethan-Arrowood in nodejs/undici#2338
• Fix node detection omfg by @​KhafraDev in nodejs/undici#2341

Full Changelog: https://github.com/nodejs/undici/compare/v5.26.0...v5.26.1

v5.26.0

What's Changed

• use npm install instead of npm ci by @​Ethan-Arrowood in nodejs/undici#2309
• change default header to node by @​Ethan-Arrowood in nodejs/undici#2310
• chore: change order of the pseudo-headers by @​kyrylodolynskyi in nodejs/undici#2308
• fix: Agent.Options.factory should accept URL object or string as parameter by @​nicole0707 in nodejs/undici#2295
• build(deps-dev): bump sinon from 15.2.0 to 16.1.0 by @​dependabot in nodejs/undici#2312
• test: handle npm ignore-scripts settings by @​panva in nodejs/undici#2313
• feat: respect --max-http-header-size Node.js flag by @​balazsorban44 in nodejs/undici#2234
• fix(#2311): End stream after body sent by @​metcoder95 in nodejs/undici#2314
• disallow setting host header in fetch by @​KhafraDev in nodejs/undici#2322
• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in nodejs/undici#2325
• fix fetch with coverage enabled by @​KhafraDev in nodejs/undici#2330
• Fix stuck when using http2 POST Buffer by @​binsee in nodejs/undici#2336
• fix: 🏷️ add allowH2 to BuildOptions by @​binsee in nodejs/undici#2334
• fix: 🐛 fix process http2 header by @​binsee in nodejs/undici#2332

New Contributors

... (truncated)

Commits

• dea70e2 Bumped v5.26.4
• 0681760 fix names with esbuild (#2359)
• daf349f fix: Avoid error for stream() being aborted (#2355)
• 49254c3 Update DispatchInterceptor.md (#2354)
• 52a7989 test: only include WebSocket in WPT Report where it's landed (#2351)
• 40ab050 test: first attempt for flaky fix (#2337)
• e3de712 fix: skip readMore call if parser is null or undefined (#2346)
• c740cbb fix request's arrayBuffer returning uint8 instead of arraybuffer (#2344)
• 026c1d5 use esbuild define/hooks (#2342)
• 655d3d7 Revert "Revert "include esbuild script in files""
• Additional commits viewable in compare view

Updates @sveltejs/kit from 1.11.0 to 1.26.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​1.26.0

Minor Changes

• feat: infer route parameter type from matcher's guard check if applicable (#10755)

Patch Changes

• fix: basic mime type handling for prerendered pages in preview (#10851)

• chore: use just a single library (mrmime) for mime type handling (#10851)

• chore: bump undici to address security issue (#10885)

• fix: follow whatwg fetch spec for handling redirect loops (#10857)

• fix: use window.fetch in load functions to allow libraries to patch it (#10009)

• chore(deps): update dependency undici to ~5.26.0 (#10860)

@​sveltejs/kit@​1.25.2

Patch Changes

• fix: correctly update $page.url.hash when navigating history (#10843)

• fix: strip virtual module prefix from error messages (#10776)

• fix: cancel ongoing navigation when the browser back button is hit to prevent an incorrect page from being rendered (#10727)

• fix: only remove Vite manifest when copying files (#10782)

@​sveltejs/kit@​1.25.1

Patch Changes

• fix: correct line numbers in stack trace (#10769)

• fix: correctly return 404 when navigating to a missing page and the root layout fetches a prerendered endpoint (#10565)

• fix: allow optional param in middle of route (#10736)

• chore: update undici (#10641)

@​sveltejs/kit@​1.25.0

Minor Changes

• feat: add server endpoint catch-all method handler fallback (#9755)

Patch Changes

• fix: allow calling fetch for any scheme (#10699)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

1.26.0

Minor Changes

• feat: infer route parameter type from matcher's guard check if applicable (#10755)

Patch Changes

• fix: basic mime type handling for prerendered pages in preview (#10851)

• chore: use just a single library (mrmime) for mime type handling (#10851)

• chore: bump undici to address security issue (#10885)

• fix: follow whatwg fetch spec for handling redirect loops (#10857)

• fix: use window.fetch in load functions to allow libraries to patch it (#10009)

• chore(deps): update dependency undici to ~5.26.0 (#10860)

1.25.2

Patch Changes

• fix: correctly update $page.url.hash when navigating history (#10843)

• fix: strip virtual module prefix from error messages (#10776)

• fix: cancel ongoing navigation when the browser back button is hit to prevent an incorrect page from being rendered (#10727)

• fix: only remove Vite manifest when copying files (#10782)

1.25.1

Patch Changes

• fix: correct line numbers in stack trace (#10769)

• fix: correctly return 404 when navigating to a missing page and the root layout fetches a prerendered endpoint (#10565)

• fix: allow optional param in middle of route (#10736)

• chore: update undici (#10641)

1.25.0

Minor Changes

• feat: add server endpoint catch-all method handler fallback (#9755)

... (truncated)

Commits

• 8ac89e8 Version Packages (#10852)
• ee4db0d chore: bump undici to address security issue (#10885)
• 0381fee fix: basic mime type handling for prerendered pages in preview (#10851)
• 5a4dbe3 Infer route parameter type from matcher's guard check if applicable (#10755)
• 6dd025c chore(deps): update dependency undici to ~5.26.0 (#10860)
• be2c8a8 fix: follow whatwg fetch spec for handling redirect loops (#10857)
• 67812ed fix: use window.fetch in load functions to allow libraries to patch it (#...
• c4a5f6c Version Packages (#10784)
• 9bc6e62 fix: popstate navigation wasn't cancelling ongoing navigation() calls whe...
• f8aacaf fix: correctly update $page.url.hash when navigating history (#10843)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/LoCrealloc/abisurvey/network/alerts).

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.