We just released a number of security patches across the Svelte ecosystem. If you use SvelteKit, the Vercel adapter for SvelteKit, Svelte, or devalue, you should upgrade.
The Vercel OSS Bug Bounty paid out over $14,000 for these reports!
@svelte.dev
Web development for the rest of us. See also: - community: @sveltesociety.dev - starter pack: https://bsky.app/starter-pack/did:plc:nlvjelw3dy3pddq7qoglleko/3l6ucetngs423 - feed: https://bsky.app/profile/paolo.ricciuti.me/feed/svelte-feed
We just released a number of security patches across the Svelte ecosystem. If you use SvelteKit, the Vercel adapter for SvelteKit, Svelte, or devalue, you should upgrade.
The Vercel OSS Bug Bounty paid out over $14,000 for these reports!
We've released fixes for 5 CVEs affecting the Svelte ecosystem. Please upgrade your apps!
Read the post to learn if you're affected:
svelte.dev/blog/cves-af...
day 24 โ it's very important, especially at this time of festive indulgence, to stay hydrated. @paolo.ricciuti.me shows us a new trick for passing data from server to client, using `hydratable`
docs: svelte.dev/docs/svelte/...
and that's a wrap! thanks for tuning in everyone, and happy holidays ๐
day 23 โ @paolo.ricciuti.me is back to show you how to give your ๐ค super powers with the Svelte MCP server
docs: svelte.dev/docs/mcp/ove...
day 22 โ it's @kevinak.se with tips on how to find (or start!) your local svelte community, wherever you are in the world
details: sveltesociety.dev/events
day 21 โ special guest mrs @paolo.ricciuti.me teaches us all about creating type-safe component context with the new `createContext` utility. no more `getContext(key) as MyContext`!
www.youtube.com/shorts/ouM0c...
day 20 โ ben davis explains why Svelte is out of order. but, like, in a good way: the compiler ensures that your app doesn't succumb to unnecessary waterfalls when you use `await` in your components
like yesterday's video, no docs for this one โ it Just Works
day 19 โ @paolo.ricciuti.me is back with a demo of streaming file uploads, which let you handle bigger files (no need to buffer everything on the server) and validate your forms instantly
no docs for this one! just update to the latest version of SvelteKit
day 18 โ what the fork?!
docs: svelte.dev/docs/svelte/...
day 17 โ Babbo Natale, sorry, I mean @paolo.ricciuti.me โ is... eager to bring you a gift. if you've been nice, that is
docs: svelte.dev/docs/svelte/...
days 15 and 16 (apologies for the brief disruption in service!) โ
โข `command(...)` www.youtube.com/watch?v=DUM1...
โข optimistic updates www.youtube.com/watch?v=qUfK...
combining all these, you can build type-safe, data-efficient apps that respond instantly
docs here: svelte.dev/docs/kit/rem...
day 14: remote functions part three! today: the `prerender` function, which (unlike the existing prerender page config) lets you mix and match static and dynamic data
docs: svelte.dev/docs/kit/rem...
day 13: remote functions part two, with @dummdidumm.bsky.social. today, a brief introduction to the best <form> handling you've seen in a framework
docs: svelte.dev/docs/kit/rem...
day 12: @dummdidumm.bsky.social brings us the first of several videos introducing remote functions, starting with `query`. expect to hear more about these in 2026!
docs: svelte.dev/docs/kit/rem...
day 11: @jyc.dev โ and his little helpers โ take us on an adventure... using SvelteKit's `resolve` and `asset` to keep us safe from broken links
- `resolve(...)` docs svelte.dev/docs/kit/$ap...
- `asset(...)` docs svelte.dev/docs/kit/$ap...
www.youtube.com/watch?v=Ekhb...
day 10: @kenthropic.com shows us how to make our unrefined code presentable to society, with `class`
docs: svelte.dev/docs/svelte/...
day 9: ben davis is so enamoured of vitest that he might actually start writing tests
docs: svelte.dev/docs/svelte/...
day 8: setting up your editor like a pro, with @fubits.dev. if you're a VS Code or VS Code-ish user you won't want to miss this one
also ft. @dominikg.dev's vite-plugin-svelte inspector (docs: github.com/sveltejs/vit...)
day 7: ben davis on how to use SvelteKit's built-in OpenTelemetry support
docs: svelte.dev/docs/kit/obs...
day 6: @rich-harris.dev has been awaiting you
docs: svelte.dev/docs/svelte/...
day 5: @kenthropic.com is back to teach us how to respect our components' boundaries
docs: svelte.dev/docs/svelte/...
day 4: @kevinak.se introduces the brand-new @sveltesociety.dev website, and the (slightly less new, but still shiny) packages hub
- sveltesociety.dev
- svelte.dev/packages
day 3: @kenthropic.com teaches us all about attachments. they're like actions, but, well... better
docs: svelte.dev/docs/svelte/...
(brand new) tutorial: svelte.dev/tutorial/sve...
day 2: everything you can do with the Svelte CLI
svelte.dev/docs/cli/ove...
๐
๐๐ ADVENT OF SVELTE 2025 ๐
๐๐
24 days, 24 videos with tips, tricks and features you didn't know about
we're hitting the ground running with the lesser-known $inspect(...) and $inspect.trace(...) runes (docs: svelte.dev/docs/svelte/...)
follow along here! advent.sveltesociety.dev/2025
today we landed a @svelte.dev feature i'm pretty stoked about โ we call it 'forking', and it lets you run state changes offscreen and later choose whether to commit them (e.g. user hovers on a link, preload data in case they click)
- docs svelte.dev/docs/svelte/...
- demo svelte.dev/playground/a...
lil' treat for all you weekend builders: Svelte now has an official MCP server, courtesy of resident bot wranglers @paolo.ricciuti.me and @khromov.se ๐ค
it gives your LLM access to docs and compiler-driven diagnostics โ give it a spin and let us know how you get on!
svelte.dev/docs/mcp/ove...
Support Svelte development!
(You can also use these features in SvelteKit, of course! Work continues apace on the final pieces of the puzzle)
bsky.app/profile/benm...
You can now use Svelte's async features in your Astro islands! Just update to the latest versions, opt in to the `experimental.async` flag, and you're off to the races svelte.dev/docs/svelte/...