[SECURITY]: Bump svelte from 5.39.11 to 5.48.0

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps svelte from 5.39.11 to 5.48.0.

Release notes

Sourced from svelte's releases.

svelte@5.48.0

Minor Changes

• feat: export parseCss from svelte/compiler (#17496)

Patch Changes

• fix: handle non-string values in svelte:element this attribute (#17499)

• fix: faster deduplication of dependencies (#17503)

svelte@5.47.1

Patch Changes

• fix: trigger selectedcontent reactivity (#17486)

svelte@5.47.0

Minor Changes

• feat: customizable <select> elements (#17429)

Patch Changes

• fix: mark subtree of svelte boundary as dynamic (#17468)

• fix: don't reset static elements with debug/snippets (#17477)

svelte@5.46.4

Patch Changes

• fix: use devalue.uneval to serialize hydratable keys (ef81048e238844b729942441541d6dcfe6c8ccca)

svelte@5.46.3

Patch Changes

• fix: reconnect clean deriveds when they are read in a reactive context (#17362)

svelte@5.46.1

Patch Changes

• fix: type currentTarget in on function (#17370)

• fix: skip static optimisation for stateless deriveds after await (#17389)

• fix: prevent infinite loop when HMRing a component with an await (#17380)

svelte@5.46.0

Minor Changes

• feat: Add csp option to render(...), and emit hashes when using hydratable (#17338)

... (truncated)

Changelog

Sourced from svelte's changelog.

5.48.0

Minor Changes

• feat: export parseCss from svelte/compiler (#17496)

Patch Changes

• fix: handle non-string values in svelte:element this attribute (#17499)

• fix: faster deduplication of dependencies (#17503)

5.47.1

Patch Changes

• fix: trigger selectedcontent reactivity (#17486)

5.47.0

Minor Changes

• feat: customizable <select> elements (#17429)

Patch Changes

• fix: mark subtree of svelte boundary as dynamic (#17468)

• fix: don't reset static elements with debug/snippets (#17477)

5.46.4

Patch Changes

• fix: use devalue.uneval to serialize hydratable keys (ef81048e238844b729942441541d6dcfe6c8ccca)

5.46.3

Patch Changes

• fix: reconnect clean deriveds when they are read in a reactive context (#17362)

• fix: don't transform references of function declarations in legacy mode (#17431)

• fix: notify deriveds of changes to sources inside forks (#17437)

• fix: always reconnect deriveds in get, when appropriate (#17451)

• fix: prevent derives without dependencies from ever re-running (286b40c4526ce9970cb81ddd5e65b93b722fe468)

... (truncated)

Commits

• c1fab8c Version Packages (#17508)
• 0ce2313 chore: squelch hydration warnings (#17509)
• f679259 fix: prevent duplicate dependencies without using array.includes (#17503)
• d3776c1 fix: handle non-string values in svelte:element this attribute (#17499)
• c9ebd6a feat: export parseCss from svelte/compiler (#17496)
• 16e9c70 Version Packages (#17488)
• 4ea7631 fix: trigger selectedcontent reactivity (#17486)
• 9cf6066 Version Packages (#17480)
• 645eb12 feat: customizable select (#17429)
• a903e94 fix: mark subtree of svelte boundary as dynamic (#17468)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cloudflare-workers-and-pages]

Deploying issueflow with    Cloudflare Pages

Latest commit:	a12acd0
Status:	⚡️  Build in progress...

View logs

[ascender1729]

@dependabot rebase