chore(release): @wxt-dev/module-svelte v2.0.3

Co-authored-by: Aaron <aaronklinker1@gmail.com>

.github/FUNDING.yml

@@ -1,15 +1,3 @@
-# These are supported funding model platforms
+# https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository#about-funding-files
 
-github: [wxt-dev] # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
-patreon: # Replace with a single Patreon username
-open_collective: # Replace with a single Open Collective username
-ko_fi: # Replace with a single Ko-fi username
-tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel
-community_bridge: # Replace with a single Community Bridge project-name e.g., cloud-foundry
-liberapay: # Replace with a single Liberapay username
-issuehunt: # Replace with a single IssueHunt username
-lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry
-polar: # Replace with a single Polar username
-buy_me_a_coffee: # Replace with a single Buy Me a Coffee username
-thanks_dev: # Replace with a single thanks.dev username
-custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2']
+github: wxt-dev

.github/pull_request_template.md

@@ -0,0 +1,13 @@
+### Overview
+
+<!-- Describe your changes and why you made them -->
+
+### Manual Testing
+
+<!-- Describe how to test your changes to make sure the PR works as intended -->
+
+### Related Issue
+
+<!-- If this PR is related to an issue, please link it here -->
+
+This PR closes #<issue_number>

SECURITY.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+While WXT is in prerelease, only the latest version will recieve security updates. The latest version is:
+
+<img alt="npm version" src="https://img.shields.io/npm/v/wxt?labelColor=black&color=%234fa048">
+
+<!--
+## Reporting a Vulnerability
+
+Use this section to tell people how to report a vulnerability.
+
+Tell them where to go, how often they can expect to get an update on a
+reported vulnerability, what to expect if the vulnerability is accepted or
+declined, etc.
+-->

packages/module-svelte/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## v2.0.3
+
+[compare changes](https://github.com/wxt-dev/wxt/compare/module-svelte-v2.0.2...module-svelte-v2.0.3)
+
+### 🩹 Fixes
+
+- Upgrade `vite-plugin-svelte` to support Vite 6 ([#1375](https://github.com/wxt-dev/wxt/pull/1375))
+
+### ❤️ Contributors
+
+- Eli ([@lishaduck](http://github.com/lishaduck))
+
 ## v2.0.2
 
 [compare changes](https://github.com/wxt-dev/wxt/compare/module-svelte-v2.0.1...module-svelte-v2.0.2)

packages/module-svelte/package.json

@@ -17,7 +17,7 @@
     "email": "aaronklinker1+wxt@gmail.com"
   },
   "license": "MIT",
-  "version": "2.0.2",
+  "version": "2.0.3",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",
@@ -46,7 +46,7 @@
     "svelte": ">=5"
   },
   "dependencies": {
-    "@sveltejs/vite-plugin-svelte": "^4.0.0"
+    "@sveltejs/vite-plugin-svelte": "^4.0.0 || ^5.0.0"
   },
   "devDependencies": {
     "@aklinker1/check": "^1.4.5",

packages/wxt/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## v0.19.26
+
+[compare changes](https://github.com/wxt-dev/wxt/compare/wxt-v0.19.25...wxt-v0.19.26)
+
+### 🩹 Fixes
+
+- **context:** Deduplicate `wxt:content-script-started` ([#1364](https://github.com/wxt-dev/wxt/pull/1364))
+
+### ❤️ Contributors
+
+- Deniz Uğur ([@DenizUgur](http://github.com/DenizUgur))
+
 ## v0.19.25
 
 [compare changes](https://github.com/wxt-dev/wxt/compare/wxt-v0.19.24...wxt-v0.19.25)

packages/wxt/package.json

@@ -1,7 +1,7 @@
 {
   "name": "wxt",
   "type": "module",
-  "version": "0.19.25",
+  "version": "0.19.26",
   "description": "Next gen framework for developing web extensions",
   "repository": {
     "type": "git",

packages/wxt/src/client/content-scripts/content-script-context.ts

@@ -42,6 +42,7 @@ export class ContentScriptContext implements AbortController {
   private isTopFrame = window.self === window.top;
   private abortController: AbortController;
   private locationWatcher = createLocationWatcher(this);
+  private receivedMessageIds = new Set<string>();
 
   constructor(
     private readonly contentScriptName: string,
@@ -233,19 +234,28 @@ export class ContentScriptContext implements AbortController {
       {
         type: ContentScriptContext.SCRIPT_STARTED_MESSAGE_TYPE,
         contentScriptName: this.contentScriptName,
+        messageId: Math.random().toString(36).slice(2),
       },
       '*',
     );
   }
 
+  verifyScriptStartedEvent(event: MessageEvent) {
+    const isScriptStartedEvent =
+      event.data?.type === ContentScriptContext.SCRIPT_STARTED_MESSAGE_TYPE;
+    const isSameContentScript =
+      event.data?.contentScriptName === this.contentScriptName;
+    const isNotDuplicate = !this.receivedMessageIds.has(event.data?.messageId);
+    return isScriptStartedEvent && isSameContentScript && isNotDuplicate;
+  }
+
   listenForNewerScripts(options?: { ignoreFirstEvent?: boolean }) {
     let isFirst = true;
 
     const cb = (event: MessageEvent) => {
-      if (
-        event.data?.type === ContentScriptContext.SCRIPT_STARTED_MESSAGE_TYPE &&
-        event.data?.contentScriptName === this.contentScriptName
-      ) {
+      if (this.verifyScriptStartedEvent(event)) {
+        this.receivedMessageIds.add(event.data.messageId);
+
         const wasFirst = isFirst;
         isFirst = false;
         if (wasFirst && options?.ignoreFirstEvent) return;

pnpm-lock.yaml

@@ -219,7 +219,7 @@ importers:
   packages/module-svelte:
     dependencies:
       '@sveltejs/vite-plugin-svelte':
-        specifier: ^4.0.0
+        specifier: ^4.0.0 || ^5.0.0
         version: 4.0.0(svelte@5.1.6)(vite@5.4.11(@types/node@20.17.6)(sass@1.80.7))
       svelte:
         specifier: '>=5'