chore(deps-dev): bump @sveltejs/kit from 2.5.22 to 2.69.1

[dependabot]

Bumps @sveltejs/kit from 2.5.22 to 2.69.1.

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.69.1

Patch Changes

• fix: prevent prototype pollution when deleting file inputs (#16218)

• fix: prevent unhandled promise rejection (#16219)

@​sveltejs/kit@​2.69.0

Minor Changes

• feat: expose submitted property of remote forms (#14811)

Patch Changes

• fix: clear issues and touched states on form reset (#16163)

• fix: return undefined from fields.branch.issues() when only fields.branch.leaf has issues (#16187)

@​sveltejs/kit@​2.68.0

Minor Changes

• feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#15816)

• feat: set value of submit fields when form is submitted (#15979)

Patch Changes

• fix: skip native_navigation when __data.json returns 404 on a static fallback page (#16135)

• fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#15267)

• fix: snapshot form fields on read (#16150)

• fix: strip field prefix before erroring on duplicates (#16151)

• fix: call reset function via prototype (#16138)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.69.1

Patch Changes

• fix: prevent prototype pollution when deleting file inputs (#16218)

• fix: prevent unhandled promise rejection (#16219)

2.69.0

Minor Changes

• feat: expose submitted property of remote forms (#14811)

Patch Changes

• fix: clear issues and touched states on form reset (#16163)

• fix: return undefined from fields.branch.issues() when only fields.branch.leaf has issues (#16187)

2.68.0

Minor Changes

• feat: expose RemoteFormEnhanceInstance and RemoteFormEnhanceCallback types (#15816)

• feat: set value of submit fields when form is submitted (#15979)

Patch Changes

• fix: skip native_navigation when __data.json returns 404 on a static fallback page (#16135)

• fix: ignore third-party monkeypatches in pushState/replaceState warning detection (#15267)

• fix: snapshot form fields on read (#16150)

• fix: strip field prefix before erroring on duplicates (#16151)

... (truncated)

Commits

• d89edcc Version Packages (#16221)
• 82b0370 fix: prevent unhandled promise rejection (#16219)
• df32f6f fix: prevent prototype pollution when deleting file inputs (#16218)
• 18801ae Version Packages (#16167)
• fd628a5 fix: return undefined from fields.branch.issues() when only `fields.branc...
• 4f6bcbb feat(remote form): expose submitted property (#14811)
• 53d37f9 fix: clear issues and touched states on form reset (#16163)
• fef1827 Version Packages (#16142)
• e82a0a8 feat: set value of submit fields when form is submitted (#15979)
• 6bde3b6 fix: snapshot form fields on read (#16150)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​sveltejs/kit since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ede92cd8e2

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Restore the protocol lockfile resolutions

This SvelteKit-only bump also changes the protocol lock entries for solady and sp1-contracts to new tarball SHAs, even though packages/protocol/package.json was not changed. Those packages are imported by L1 sources such as LibHashOptimized.sol and SP1Verifier.sol, and the shared install action runs pnpm install --frozen-lockfile, so any protocol compile/test/deploy path will now build contracts against different upstream Solidity code as a side effect of a frontend devDependency update. Please keep the non-Svelte lockfile resolutions unchanged, or split this into an explicit contract-dependency update with the corresponding protocol validation.

Useful? React with 👍 / 👎.

[davidtaikocha]

Closing: the regenerated pnpm-lock.yaml in this bump also retargets packages/protocol's git dependencies (forge-std, solady) to newer commits, because they are declared with unpinned refs (e.g. github:foundry-rs/forge-std) — an unreviewed change to audited contract dependencies, as flagged by the P1/P2 review comment. The protocol git deps need to be pinned to exact commits first; the underlying advisory remains tracked in the Security tab and a clean Dependabot PR can be recreated from the alert afterwards.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.