build(deps-dev): Bump sveltekit-superforms from 2.27.4 to 2.28.1

[dependabot]

Bumps sveltekit-superforms from 2.27.4 to 2.28.1.

Release notes

Sourced from sveltekit-superforms's releases.

v2.28.1

Fixed

• Zod 4 adapter: Allow top-level .transform() and .refine() in schemas. #646.
• Zod 4 adapter now respects global customError configuration when no explicit error map is provided. The adapter prioritizes customError over localeError. #618.
• Zod 4 adapter: Fixed Default Date values in nested objects. #650.

v2.28.0

Changed

• TypeBox adapter has been bumped to 1.0! Check the migration guide to upgrade. Note that if you must stay on 0.x for a while, you cannot upgrade to this version of Superforms.

Added

• Added support for Zod 4 stringbools. #610
• booleanProxy now supports the empty option.

Fixed

• Fixed loading timers when the timeoutMS setting is triggered and a redirect response is returned. #622
• filesStore initialValue now matches fileStore. #637
• Fixed JSON Schema for some non-representable types in Zod 4 adapter, it now handles set and map properly. #617
• Possibly fixed the SuperDebug broken import on Svelte 5 in enforced runes mode #599
• Zod 4 error messages should now take the current locale into account as default. #618, #639
• Zod 3 fix for URL parsing - A default boolean value of true returned false when parsing a URL with superValidate. #633

Changelog

Sourced from sveltekit-superforms's changelog.

[2.28.1] - 2025-10-19

Fixed

• Zod 4 adapter: Allow top-level .transform() and .refine() in schemas. #646.
• Zod 4 adapter now respects global customError configuration when no explicit error map is provided. The adapter prioritizes customError over localeError. #618.
• Zod 4 adapter: Fixed Default Date values in nested objects. #650.

[2.28.0] - 2025-10-19

Changed

• TypeBox adapter has been bumped to 1.0! Check the migration guide to upgrade. Note that if you must stay on 0.x for a while, you cannot upgrade to this version of Superforms.

Added

• Added support for Zod 4 stringbools. #610
• booleanProxy now supports the empty option.

Fixed

• Fixed loading timers when the timeoutMS setting is triggered and a redirect response is returned. #622
• filesStore initialValue now matches fileStore. #637
• Fixed JSON Schema for some non-representable types in Zod 4 adapter, it now handles set and map properly. #617
• Possibly fixed the SuperDebug broken import on Svelte 5 in enforced runes mode #599
• Zod 4 error messages should now take the current locale into account as default. #618, #639
• Zod 3 fix for URL parsing - A default boolean value of true returned false when parsing a URL with superValidate. #633

Commits

• 6e32a35 2.28.1
• 2a5ca44 2.28.1 changelog
• 5bfe3ce Minor package updates
• 5d2fb0f Fixed Default Date values in nested objects
• 5e3ec3c Zod 4 adapter now respects global customError configuration when no explici...
• e07206c Fixes #646
• 06b654f Fixed eslint config
• bada871 Eslint fixes
• e50c932 booleanProxy now supports the empty option.
• b04b136 2.28.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}