feat: version 3

.changeset/chilly-berries-press.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: upgrade to cookie v1. Cookie names must now contain only ASCII characters

.changeset/clean-papers-give.md

@@ -0,0 +1,6 @@
+---
+'@sveltejs/adapter-netlify': major
+'@sveltejs/adapter-vercel': major
+---
+
+chore: use `rolldown` for edge function bundling

.changeset/cold-carrots-raise.md

@@ -0,0 +1,7 @@
+---
+'@sveltejs/package': major
+'@sveltejs/kit': major
+'@sveltejs/enhanced-img': major
+---
+
+breaking: require Node 22.17.0 or newer

.changeset/config.json

@@ -4,7 +4,7 @@
 	"commit": false,
 	"linked": [],
 	"access": "public",
-	"baseBranch": "main",
+	"baseBranch": "version-3",
 	"bumpVersionsWithWorkspaceProtocolOnly": true,
 	"ignore": ["!(@sveltejs/*)"]
 }

.changeset/cuddly-radios-brush.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: remove the `preloadStrategy` option. `modulepreload` will always be used

.changeset/cuddly-tigers-attend.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: default the cookie `path` option to `'/'`

.changeset/cyan-zoos-love.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: remove `@sveltejs/kit/node/polyfills`

.changeset/early-worlds-slide.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: require `@sveltejs/vite-plugin-svelte` v7

.changeset/easy-shrimps-like.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/enhanced-img': minor
+---
+
+breaking: require Vite 8

.changeset/eighty-paws-love.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: remove `createEntries` from the `Builder` object passed to adapter functions

.changeset/fine-ghosts-camp.md

@@ -0,0 +1,7 @@
+---
+'@sveltejs/adapter-netlify': major
+---
+
+breaking: write output that conforms to the stable [Netlify Frameworks API](https://docs.netlify.com/build/frameworks/frameworks-api/).
+
+Deploying and previewing with Netlify CLI now requires [v17.31.0](https://github.com/netlify/cli/releases/tag/v17.31.0) or later. Run `npm i -g netlify-cli@latest` to upgrade.

.changeset/five-readers-march.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/adapter-cloudflare': major
+---
+
+breaking: upgrade `@cloudflare/workers-types` to 4.20260219.0

.changeset/fluffy-tires-judge.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/adapter-cloudflare': major
+---
+
+breaking: upgrade minimum `wrangler` version to ^4.67.0

.changeset/forty-ducks-fly.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/adapter-cloudflare': major
+---
+
+breaking: remove `platform.context` in favour of `platform.ctx`

.changeset/gentle-radios-go.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: remove the deprecated CSRF `checkOrigin` option in favor of `trustedOrigins`

.changeset/gentle-signs-cross.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: the `delta` property now only exists for `popstate` navigation events

.changeset/giant-numbers-care.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: remove deprecated `pragma` header in version polling for improved CORS support

.changeset/heavy-showers-leave.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: require Svelte 5

.changeset/large-onions-attack.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/adapter-node': major
+---
+
+chore: migrate from rollup to rolldown

.changeset/late-lions-crash.md

@@ -0,0 +1,9 @@
+---
+"@sveltejs/adapter-auto": major
+"@sveltejs/adapter-cloudflare": major
+"@sveltejs/adapter-netlify": major
+"@sveltejs/adapter-node": major
+"@sveltejs/adapter-static": major
+---
+
+breaking: require SvelteKit 3

.changeset/light-singers-lie.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+chore: change `error`, `isHttpError`, `redirect`, and `isRedirect` to refer to public type instead of internal class

.changeset/nasty-impalas-wear.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': minor
+---
+
+feat: resolve paths using the Vite config `root` option instead of `process.cwd()` to better support monorepo configurations such as Vitest workspaces

.changeset/nine-coins-cheer.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': major
+---
+
+breaking: require Vite 8. Provides new functionality even for existing Vite 8 users such as faster builds with Vite hook filters and more powerful SvelteKit adapters with the Vite environment API

.changeset/plenty-cougars-wave.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/adapter-cloudflare': patch
+---
+
+chore: check the `WORKERS_CI` environment variable to determine if we're building for Cloudflare Workers

.changeset/polite-lemons-refuse.md

@@ -0,0 +1,6 @@
+---
+'@sveltejs/adapter-netlify': major
+'@sveltejs/adapter-vercel': major
+---
+
+breaking: edge function build target is now `es2022`

.changeset/pre.json

@@ -0,0 +1,54 @@
+{
+  "mode": "pre",
+  "tag": "next",
+  "initialVersions": {
+    "@sveltejs/adapter-auto": "7.0.1",
+    "@sveltejs/adapter-cloudflare": "7.2.7",
+    "test-cloudflare-pages": "0.0.1",
+    "test-cloudflare-workers": "0.0.1",
+    "@sveltejs/adapter-netlify": "6.0.0",
+    "test-netlify-basic": "0.0.1",
+    "test-netlify-edge": "0.0.1",
+    "@sveltejs/adapter-node": "5.5.3",
+    "@sveltejs/adapter-static": "3.0.10",
+    "~TODO~": "0.0.1",
+    "@sveltejs/adapter-vercel": "6.3.1",
+    "@sveltejs/amp": "1.1.5",
+    "@sveltejs/enhanced-img": "0.10.2",
+    "enhanced-img-basics": "0.0.1",
+    "@sveltejs/kit": "2.51.0",
+    "test-amp": "0.0.1",
+    "test-async": "0.0.1",
+    "test-basics": "0.0.2-next.0",
+    "test-dev-only": "0.0.2-next.0",
+    "test-embed": "0.0.1",
+    "test-hash-based-routing": "0.0.1",
+    "test-no-ssr": "0.0.1",
+    "test-options": "0.0.1",
+    "test-options-2": "0.0.1",
+    "test-options-3": "0.0.1",
+    "test-prerendered-app-error-pages": "0.0.1",
+    "test-writes": "0.0.2-next.0",
+    "prerenderable-incorrect-fragment": "0.0.1",
+    "prerenderable-remote-function-error": "0.0.1",
+    "prerenderable-not-prerendered": "0.0.1",
+    "private-dynamic-env": "0.0.1",
+    "private-dynamic-env-dynamic-import": "0.0.1",
+    "private-static-env": "0.0.1",
+    "private-static-env-dynamic-import": "0.0.1",
+    "server-only-folder": "0.0.1",
+    "server-only-folder-dynamic-import": "0.0.1",
+    "server-only-module": "0.0.1",
+    "server-only-module-dynamic-import": "0.0.1",
+    "service-worker-dynamic-public-env": "0.0.1",
+    "service-worker-private-env": "0.0.1",
+    "syntax-error": "0.0.1",
+    "prerendering-test-basics": "0.0.2-next.0",
+    "prerendering-test-options": "0.0.1",
+    "prerendering-test-paths-base": "0.0.1",
+    "@sveltejs/package": "2.5.7",
+    "test-redirect-importer": "0.0.1",
+    "playground-basic": "0.0.0"
+  },
+  "changesets": []
+}

.changeset/salty-chefs-sleep.md

@@ -0,0 +1,6 @@
+---
+'@sveltejs/package': patch
+'@sveltejs/kit': patch
+---
+
+chore: remove dependency on kleur

.changeset/shaggy-walls-wave.md

@@ -0,0 +1,5 @@
+---
+"@sveltejs/kit": major
+---
+
+breaking: `svelte.config.js` will now be included in type checking

.changeset/shiny-feet-crash.md

@@ -0,0 +1,5 @@
+---
+'@sveltejs/kit': minor
+---
+
+chore: deprecate `Response` helpers in favor of platform-provided alternatives

.changeset/spicy-drinks-build.md

@@ -0,0 +1,5 @@
+---
+"@sveltejs/kit": patch
+---
+
+chore: remove dependency on `set-cookie-parser`

.github/workflows/ci.yml

@@ -3,7 +3,7 @@ name: CI
 on:
   push:
     branches:
-      - main
+      - version-3
     paths-ignore: &paths_ignore
       - '.changeset/**'
       - '.githooks/**'
@@ -68,14 +68,6 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - node-version: 18
-            os: ubuntu-latest
-            e2e-browser: 'chromium'
-            vite: 'baseline'
-          - node-version: 20
-            os: ubuntu-latest
-            e2e-browser: 'chromium'
-            vite: 'current'
           - node-version: 22
             os: ubuntu-latest
             e2e-browser: 'chromium'
@@ -84,10 +76,10 @@ jobs:
             os: ubuntu-latest
             e2e-browser: 'chromium'
             vite: 'current'
-          - node-version: 24
-            os: ubuntu-latest
-            e2e-browser: 'chromium'
-            vite: 'beta'
+#          - node-version: 24
+#            os: ubuntu-latest
+#            e2e-browser: 'chromium'
+#            vite: 'beta'
     env:
       KIT_E2E_BROWSER: ${{matrix.e2e-browser}}
       MATRIX_VITE: ${{matrix.vite}}
@@ -256,7 +248,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [18, 20, 22, 24]
+        node-version: [22, 24]
     steps:
       - uses: actions/checkout@v6
       - uses: pnpm/action-setup@v4.3.0
@@ -269,16 +261,6 @@ jobs:
         with:
           deno-version: ^2.2.4
       - run: pnpm install --frozen-lockfile
-      - name: setup overrides for matrix.node
-        if: matrix.node-version == 18
-        run:
-          | # copies catalogs.node-xx to overrides in pnpm-workspace.yaml so the subsequent `pnpm install` enforces them
-          yq -i '.overrides =.catalogs."node-18"' pnpm-workspace.yaml
-          pnpm install --no-frozen-lockfile
-          git checkout pnpm-lock.yaml pnpm-workspace.yaml # revert changes to pnpm files to avoid cache key changes
-          pnpm --dir packages/kit ls vite @sveltejs/vite-plugin-svelte
       - run: pnpm playwright install chromium --no-shell
       - run: cd packages/kit && pnpm prepublishOnly
       - run: pnpm run test:others
-        env:
-          NODE_OPTIONS: ${{matrix.node-version == 22 && '--experimental-strip-types' || ''}} # allows loading svelte.config.ts

.github/workflows/release.yml

@@ -3,7 +3,7 @@ name: Release
 on:
   push:
     branches:
-      - main
+      - version-3
 
 concurrency:
   # prevent two release workflows from running at once

documentation/docs/20-core-concepts/20-load.md

@@ -296,7 +296,7 @@ export async function load({ fetch, params }) {
 
 ## Cookies
 
-A server `load` function can get and set [`cookies`](@sveltejs-kit#Cookies).
+A server `load` function can get [`cookies`](@sveltejs-kit#Cookies) as shown below. When setting cookies, SvelteKit provides default values for `httpOnly`, `secure`, and `path` — as described in [the API documentation](@sveltejs-kit#Cookies) — in order to improve security and developer experience.
 
 ```js
 /// file: src/routes/+layout.server.js

documentation/docs/25-build-and-deploy/40-adapter-node.md

@@ -33,7 +33,7 @@ You will need the output directory, the project's `package.json`, and the produc
 node build
 ```
 
-Development dependencies will be bundled into your app using [Rollup](https://rollupjs.org). To control whether a given package is bundled or externalised, place it in `devDependencies` or `dependencies` respectively in your `package.json`.
+Development dependencies will be bundled into your app using [Rolldown](https://rolldown.rs/). To control whether a given package is bundled or externalised, place it in `devDependencies` or `dependencies` respectively in your `package.json`.
 
 ### Compressing responses
 

documentation/docs/25-build-and-deploy/90-adapter-vercel.md

@@ -48,7 +48,7 @@ The following options apply to all functions:
 - `split`: if `true`, causes a route to be deployed as an individual function. If `split` is set to `true` at the adapter level, all routes will be deployed as individual functions
 
 Additionally, the following option applies to edge functions:
-- `external`: an array of dependencies that esbuild should treat as external when bundling functions. This should only be used to exclude optional dependencies that will not run outside Node
+- `external`: an array of dependencies that Rolldown should treat as external when bundling functions. This should only be used to exclude optional dependencies that will not run outside Node
 
 And the following option apply to serverless functions:
 - `memory`: the amount of memory available to the function. Defaults to `1024` Mb, and can be decreased to `128` Mb or [increased](https://vercel.com/docs/concepts/limits/overview#serverless-function-memory) in 64Mb increments up to `3008` Mb on Pro or Enterprise accounts

documentation/docs/25-build-and-deploy/99-writing-adapters.md

@@ -57,7 +57,6 @@ Within the `adapt` method, there are a number of things that an adapter should d
 	- Instantiates the app with a manifest generated with `builder.generateManifest({ relativePath })`
 	- Listens for requests from the platform, converts them to a standard [`Request`](https://developer.mozilla.org/en-US/docs/Web/API/Request) if necessary, calls the `server.respond(request, { getClientAddress })` function to generate a [`Response`](https://developer.mozilla.org/en-US/docs/Web/API/Response) and responds with it
 	- expose any platform-specific information to SvelteKit via the `platform` option passed to `server.respond`
-	- Globally shims `fetch` to work on the target platform, if necessary. SvelteKit provides a `@sveltejs/kit/node/polyfills` helper for platforms that can use `undici`
 - Bundle the output to avoid needing to install dependencies on the target platform, if necessary
 - Put the user's static files and the generated JS/CSS in the correct location for the target platform
 

documentation/docs/60-appendix/10-faq.md

@@ -31,7 +31,7 @@ Here are a few things to keep in mind when checking if a library is packaged cor
 - `main` should be defined if `exports` is not. It should be either a CommonJS or ESM file and adhere to the previous bullet. If a `module` field is defined, it should refer to an ESM file.
 - Svelte components should be distributed as uncompiled `.svelte` files with any JS in the package written as ESM only. Custom script and style languages, like TypeScript and SCSS, should be preprocessed as vanilla JS and CSS respectively. We recommend using [`svelte-package`](./packaging) for packaging Svelte libraries, which will do this for you.
 
-Libraries work best in the browser with Vite when they distribute an ESM version, especially if they are dependencies of a Svelte component library. You may wish to suggest to library authors that they provide an ESM version. However, CommonJS (CJS) dependencies should work as well since, by default, [`vite-plugin-svelte` will ask Vite to pre-bundle them](https://github.com/sveltejs/vite-plugin-svelte/blob/main/docs/faq.md#what-is-going-on-with-vite-and-pre-bundling-dependencies) using `esbuild` to convert them to ESM.
+Libraries work best in the browser with Vite when they distribute an ESM version, especially if they are dependencies of a Svelte component library. You may wish to suggest to library authors that they provide an ESM version. However, CommonJS (CJS) dependencies should work as well since, by default, [`vite-plugin-svelte` will ask Vite to pre-bundle them](https://github.com/sveltejs/vite-plugin-svelte/blob/main/docs/faq.md#what-is-going-on-with-vite-and-pre-bundling-dependencies) using `rolldown` to convert them to ESM.
 
 If you are still encountering issues we recommend searching both [the Vite issue tracker](https://github.com/vitejs/vite/issues) and the issue tracker of the library in question. Sometimes issues can be worked around by fiddling with the [`optimizeDeps`](https://vitejs.dev/config/#dep-optimization-options) or [`ssr`](https://vitejs.dev/config/#ssr-options) config values though we recommend this as only a short-term workaround in favor of fixing the library in question.
 

eslint.config.js

@@ -55,7 +55,6 @@ export default [
 		ignores: [
 			'packages/adapter-cloudflare/test/apps/**/*',
 			'packages/adapter-netlify/test/apps/**/*',
-			'packages/adapter-node/rollup.config.js',
 			'packages/adapter-node/tests/smoke.spec_disabled.js',
 			'packages/adapter-static/test/apps/**/*',
 			'packages/adapter-vercel/test/apps/**/*',

package.json

@@ -15,7 +15,7 @@
 		"test:vite-ecosystem-ci": "pnpm --dir packages/kit test",
 		"test:others": "pnpm -r --filter='./packages/*' --filter=!./packages/kit/ --workspace-concurrency=1 test",
 		"check": "pnpm -r prepublishOnly && pnpm -r check",
-		"lint": "pnpm -r lint && eslint --cache --cache-location node_modules/.eslintcache 'packages/**/*.js'",
+		"lint": "pnpm -r lint && echo '\nRunning eslint...' && eslint --cache --cache-location node_modules/.eslintcache 'packages/**/*.js'",
 		"format": "pnpm -r format",
 		"precommit": "pnpm format && pnpm lint",
 		"changeset:version": "changeset version && pnpm -r generate:version && git add --all",
@@ -30,7 +30,8 @@
 		"@svitejs/changesets-changelog-github-compact": "catalog:",
 		"eslint": "catalog:",
 		"prettier": "catalog:",
-		"prettier-plugin-svelte": "catalog:"
+		"prettier-plugin-svelte": "catalog:",
+		"vitest": "catalog:"
 	},
 	"packageManager": "pnpm@10.32.1+sha512.a706938f0e89ac1456b6563eab4edf1d1faf3368d1191fc5c59790e96dc918e4456ab2e67d613de1043d2e8c81f87303e6b40d4ffeca9df15ef1ad567348f2be",
 	"engines": {