From deeb26dc3f808b912202ca0447d7903e80cb3230 Mon Sep 17 00:00:00 2001
From: vicrodh <103399283+vicrodh@users.noreply.github.com>
Date: Fri, 16 Jan 2026 12:37:33 -0600
Subject: [PATCH] security: update svelte to 5.46.4

Fixes CVE for Cross-site Scripting vulnerability (MEDIUM)
---
 package-lock.json | 10 +++++-----
 package.json      |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e429ed980..db1130b07 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,7 +23,7 @@
         "@tauri-apps/cli": "^2",
         "@testing-library/svelte": "^5.3.1",
         "jsdom": "^27.4.0",
-        "svelte": "^5.0.0",
+        "svelte": "^5.46.4",
         "svelte-check": "^4.0.0",
         "typescript": "~5.6.2",
         "vite": "^6.0.3",
@@ -2723,9 +2723,9 @@
       "license": "MIT"
     },
     "node_modules/svelte": {
-      "version": "5.46.1",
-      "resolved": "https://registry.npmjs.org/svelte/-/svelte-5.46.1.tgz",
-      "integrity": "sha512-ynjfCHD3nP2el70kN5Pmg37sSi0EjOm9FgHYQdC4giWG/hzO3AatzXXJJgP305uIhGQxSufJLuYWtkY8uK/8RA==",
+      "version": "5.46.4",
+      "resolved": "https://registry.npmjs.org/svelte/-/svelte-5.46.4.tgz",
+      "integrity": "sha512-VJwdXrmv9L8L7ZasJeWcCjoIuMRVbhuxbss0fpVnR8yorMmjNDwcjIH08vS6wmSzzzgAG5CADQ1JuXPS2nwt9w==",
       "license": "MIT",
       "dependencies": {
         "@jridgewell/remapping": "^2.3.4",
@@ -2736,7 +2736,7 @@
         "aria-query": "^5.3.1",
         "axobject-query": "^4.1.0",
         "clsx": "^2.1.1",
-        "devalue": "^5.5.0",
+        "devalue": "^5.6.2",
         "esm-env": "^1.2.1",
         "esrap": "^2.2.1",
         "is-reference": "^3.0.3",
diff --git a/package.json b/package.json
index 99bc17a2b..9476566d5 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "@tauri-apps/cli": "^2",
     "@testing-library/svelte": "^5.3.1",
     "jsdom": "^27.4.0",
-    "svelte": "^5.0.0",
+    "svelte": "^5.46.4",
     "svelte-check": "^4.0.0",
     "typescript": "~5.6.2",
     "vite": "^6.0.3",