Change8

@sveltejs/kit@2.36.2

📦 sveltekitView on GitHub →
🐛 1 fixes1 deprecations🔧 2 symbols

Summary

This patch release focuses on configuration cleanup, specifically deprecating the CSRF checkOrigin setting in favor of trustedOrigins and improving the visibility of deprecation warnings.

Migration Steps

  1. Update your configuration by replacing `csrf: { checkOrigin: true/false }` with `csrf: { trustedOrigins: ['*'] }` if you intend to allow all origins.

🐛 Bug Fixes

  • Removed redundant 'Not Found' error messages to clean up logs/output.

🔧 Affected Symbols

csrf.checkOrigincsrf.trustedOrigins

⚡ Deprecations

  • The `csrf.checkOrigin` configuration option is deprecated. Use `csrf.trustedOrigins: ['*']` instead.