Transit applies one pinned third-party patch through Bun's patchedDependencies.
| Reference | Value |
|---|---|
| Subject and boundary | The Bits UI touch fix, root dependency overrides and the fixed page-data guard. |
| Verified source | package.json, patches/[email protected], apps/web/src/lib/site/pageDataFetch.ts and apps/web/src/tests/kit-data-response.test.ts at main f32cd9b10a6cfa7ea87c07c979355c226e9ddbac, checked November 7, 2026. |
| Support state | Source pins Kit 3.1.1, Vite 8.3.5 and Bits UI 2.20.4. Only Bits UI has a Bun patch. |
| Boundary | Current behavior | Verification |
|---|---|---|
[email protected] |
Retains an outside touch click until the deferred dismissal check. A deferred callback cannot retroactively cancel native click behavior | src/lib/components/shell/dismissibleLayerTouch.svelte.test.ts and real Dialog, Sheet, Popover and Menu callers |
| Fixed Kit page data | pageDataFetch reads a clone of successful same-origin application/json responses for /__data.json and .html__data.json before returning the original response. Incomplete JSON rejects before navigation commits; deferred streams remain untouched |
src/tests/kit-data-response.test.ts; built-app navigation/invalidation, because the client hook bypasses the guard in dev |
| Root overrides | brace-expansion, nanoid, postcss, undici, vite, bits-ui, @sveltejs/kit |
Read exact values in root package.json and resolved packages in bun.lock |
On a Bits UI upgrade, re-port or remove its patch deliberately, run bun install --frozen-lockfile and the affected touch tests. A Kit upgrade must preserve the real fixed/deferred response tests; the guard costs a clone and a second JSON parse per matching navigation. Shared @yesid/* fixes belong upstream and arrive through a release.