svelte@5.53.5

sveltejs/sveltesvelte@5.53.5Feb 25, 2026by github-actions[bot]

AI Summary

A smaller patch release focusing on security and correctness regarding text binding escaping in contenteditable elements and sanitizing error metadata.

Key Highlights

Escape `innerText` and `textContent` bindings of `contenteditable`
Sanitize `transformError` values prior to embedding in HTML comments

Full Release Notes

### Patch Changes

-   fix: escape `innerText` and `textContent` bindings of `contenteditable` ([`0df5abcae223058ceb95491470372065fb87951d`](https://github.com/sveltejs/svelte/commit/0df5abcae223058ceb95491470372065fb87951d))

-   fix: sanitize `transformError` values prior to embedding in HTML comments ([`0298e979371bb583855c9810db79a70a551d22b9`](https://github.com/sveltejs/svelte/commit/0298e979371bb583855c9810db79a70a551d22b9))