iiinova — where your digital self keeps evolving

Svelte @svelte.dev · 27/08/2026

Last few days for early bird pricing for Svelte Summit! If you're quick you can snag another 10% off 👇

063

Svelte @svelte.dev · 20/08/2026

come and celebrate our 10th birthday in ljubljana! we will make sure there's cake

1203

Reposted by Svelte

Svelte Society @sveltesociety.dev · 11/08/2026

Only a couple of days left to submit a talk for Svelte Summit. Don't miss your chance! sveltesummit.com/cfp

074

Reposted by Svelte

Svelte Society @sveltesociety.dev · 08/08/2026

Can't wait for Svelte Summit? Virtual Tickets are now LIVE. THIS IS NOT A DRILL! sveltesummit.com/virtual

0104

Reposted by Svelte

rich harris @rich-harris.dev · 01/06/2026

SvelteKit arguably has a more sophisticated and flexible system for handling env vars than any other framework. We think we can do better though. Here's what we're working on: github.com/sveltejs/kit... Give it a read and let us know if you have feedback

github.com

feat: explicit environment variables by Rich-Harris · Pull Request #15934 · sveltejs/kit

Today, environment variables are implicitly available: anything in process.env can be imported directly (as long as the name is a valid identifier) from $env/static/private, or accessed via env imp...

41059

Svelte @svelte.dev · 14/05/2026

devalue: - github.com/sveltejs/dev... Svelte: - github.com/sveltejs/sve... - github.com/sveltejs/sve... - github.com/sveltejs/sve... - github.com/sveltejs/sve... SvelteKit: - github.com/sveltejs/kit... Thank you to the researchers who responsibly disclosed these

github.com

DoS via sparse array deserialization

`devalue.parse` could, due to quirks in some JavaScript engines, be convinced to allocate much more memory than was needed when deserializing sparse arrays, leading to excessive memory consumption.

1190

Svelte @svelte.dev · 14/05/2026

We've just published patch releases of devalue, Svelte, and SvelteKit that fix a number of vulnerabilities. No need to panic — they're all hard to exploit or reliant on experimental features — but we recommend updating as soon as you get a chance. More details in the advisories:

16610

Reposted by Svelte

Elliott Johnson @ell.iott.dev · 18/02/2026

We just released a number of security patches across the Svelte ecosystem. If you use SvelteKit, the Vercel adapter for SvelteKit, Svelte, or devalue, you should upgrade. The Vercel OSS Bug Bounty paid out over $14,000 for these reports!

15512

Svelte @svelte.dev · 15/01/2026

We've released fixes for 5 CVEs affecting the Svelte ecosystem. Please upgrade your apps! Read the post to learn if you're affected: svelte.dev/blog/cves-af...

svelte.dev

CVEs affecting the Svelte ecosystem

Time to upgrade

17120

Svelte @svelte.dev · 24/12/2025

day 24 — it's very important, especially at this time of festive indulgence, to stay hydrated. @paolo.ricciuti.me shows us a new trick for passing data from server to client, using `hydratable` docs: svelte.dev/docs/svelte/... and that's a wrap! thanks for tuning in everyone, and happy holidays 🎄

youtube.com

Advent of Svelte 2025 - Day 24: hydratable #javascript #sveltejs #webdevelopment