[Snyk] Security upgrade svelte from 3.29.7 to 3.46.5

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-SVELTE-2414372	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: svelte

The new version differs by 250 commits.

• 468ed37 -> v3.46.5
• 428023e update changelog
• 9f4602a [fix] style: directive should prevent innerHTML optimization (#7390)
• 0eee98a [docs] Update package.json to link to homepage (#7374)
• 9d4ff67 [docs] Correct default port on blog posts (#7372)
• 2f71bc9 [docs] fix typo (#7344)
• 1632bca Update changelog
• cdd3575 [fix] attribute escaping during ssr (#7333)
• b26aa1c Update changelog
• 0a3353b [fix] do not collapse whitespace-only css vars (#7303)
• 2c629bc Update CHANGELOG.md
• e2adf6a fix: do not generate unused-export-let inside <script context="module"> (#7232)
• 9b7b814 [docs] add `-` to the beginning of the line (#7328)
• a9e6087 [docs] "What's new in Svelte" March newsletter (#7293)
• 555cdf3 [docs] fix typo (#7323)
• 8073768 update changelog
• 78131b9 [feat] TS interfaces for typing actions (#7121)
• f24614c [docs] Add missing parent element to code example. (#7309)
• b6441eb [fix] add aria-description aria_attributes - (#7302)
• 435d14a [docs] Fix feature request link (#7292)
• 252895d [docs] improve actions tutorial presentation (#7283)
• f287bbe [doc] fixed seemingly erroneous capitalization of noun (#7273)
• 39f0d8c Bump path-parse from 1.0.6 to 1.0.7 (#7258)
• ec09222 [docs] update to multi-page docs links (#7249)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)