@sveltejs/kit@2.70.0

sveltejs/kit@sveltejs/kit@2.70.0Jul 17, 2026by github-actions[bot]

AI Summary

This minor release relocates `defineEnvVars` to a dedicated package and enables CSRF protection for non-production builds.

Key Highlights

  • Move `defineEnvVars` to `@sveltejs/kit/env`.
  • Enable CSRF protection in builds with a non-production `NODE_ENV` value.

Breaking Changes

  • Move `defineEnvVars` to `@sveltejs/kit/env`

Full Release Notes

### Minor Changes

- feat: move `defineEnvVars` to `@sveltejs/kit/env` ([#16378](https://github.com/sveltejs/kit/pull/16378))

### Patch Changes

- fix: enable CSRF protection in builds with a non-production `NODE_ENV` value ([#16313](https://github.com/sveltejs/kit/pull/16313))