dependabot[bot] opened a new pull request, #66232: URL: https://github.com/apache/airflow/pull/66232
Bumps the core-ui-package-updates group with 20 updates in the /airflow-core/src/airflow/ui directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.100.5` | | [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.13.21` | `3.13.24` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.10.1` | `12.10.2` | | [axios](https://github.com/axios/axios) | `1.15.0` | `1.15.2` | | [dayjs](https://github.com/iamkun/dayjs) | `1.11.19` | `1.11.20` | | [i18next-http-backend](https://github.com/i18next/i18next-http-backend) | `3.0.5` | `3.0.6` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.71.2` | `7.74.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.13.1` | `7.14.2` | | [use-debounce](https://github.com/xnimorz/use-debounce) | `10.1.0` | `10.1.1` | | [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.12` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.2` | `1.59.1` | | [@rolldown/plugin-babel](https://github.com/rolldown/plugins/tree/HEAD/packages/babel) | `0.2.2` | `0.2.3` | | [@tanstack/eslint-plugin-query](https://github.com/TanStack/query/tree/HEAD/packages/eslint-plugin-query) | `5.91.4` | `5.100.5` | | [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react-swc) | `4.2.3` | `4.3.0` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.4` | `4.1.5` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.8.9` | `20.9.0` | | [msw](https://github.com/mswjs/msw) | `2.12.10` | `2.13.6` | | [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.8` | `8.0.10` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.4` | `4.1.5` | Updates `@tanstack/react-query` from 5.90.21 to 5.100.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/releases";>@tanstack/react-query's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.100.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5";><code>@5</code></a>.100.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5";><code>@5</code></a>.100.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> </ul> </li> </ul> <h2><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/a53ef97f87decb8ea2431710f5199431d3c94c8d";><code>a53ef97</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.100.4</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix(devtools): change onClose callback type from () => unknown to () => void (<a href="https://redirect.github.com/TanStack/query/pull/10118";>#10118</a>)</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/TanStack/query/commit/3d1a62e63bd864359e369bb21356fa80d043f2ba";><code>3d1a62e</code></a>]:</p> <ul> <li><code>@tanstack/query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5";><code>@5</code></a>.100.4</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5";><code>@5</code></a>.100.4</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> </ul> </li> </ul> <h2><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.100.4</h2> <h3>Patch Changes</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md";>@tanstack/react-query's changelog</a>.</em></p> <blockquote> <h2>5.100.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/a53ef97f87decb8ea2431710f5199431d3c94c8d";><code>a53ef97</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.5</li> </ul> </li> </ul> <h2>5.100.4</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.4</li> </ul> </li> </ul> <h2>5.100.3</h2> <h3>Patch Changes</h3> <ul> <li> <p>fix(suspense): skip calling combine when queries would suspend (<a href="https://redirect.github.com/TanStack/query/pull/10576";>#10576</a>)</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/TanStack/query/commit/f85d825e02efbbff02e2081528ed28f5e5382f7a";><code>f85d825</code></a>]:</p> <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.3</li> </ul> </li> </ul> <h2>5.100.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/ea4497e8aa00d8c1c3a36fb1e17563a889d6ab31";><code>ea4497e</code></a>, <a href="https://github.com/TanStack/query/commit/d6a7bf3e3e024c1a77d0536813238cc8007a5fa7";><code>d6a7bf3</code></a>, <a href="https://github.com/TanStack/query/commit/645d5d130f5e8017cb1bf1a37987f7b980aed705";><code>645d5d1</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.2</li> </ul> </li> </ul> <h2>5.100.1</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/1bb0d234280fd4ae1725c439088426a20593a8df";><code>1bb0d23</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.1</li> </ul> </li> </ul> <h2>5.100.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/6540a4126b1c087d86d64525e78f32d9920dcd31";><code>6540a41</code></a>]: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.100.0</li> </ul> </li> </ul> <h2>5.99.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.99.2</li> </ul> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/query/commit/441204b9d22d1dcfc7ac85b04c21ce017a28603e";><code>441204b</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10582";>#10582</a>)</li> <li><a href="https://github.com/TanStack/query/commit/55afb3e6fb631d684e9448b8265c68a4185c76b3";><code>55afb3e</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10581";>#10581</a>)</li> <li><a href="https://github.com/TanStack/query/commit/fe287cc2471b74726a5d05f1c40a86a9ef891c7e";><code>fe287cc</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10579";>#10579</a>)</li> <li><a href="https://github.com/TanStack/query/commit/f85d825e02efbbff02e2081528ed28f5e5382f7a";><code>f85d825</code></a> Feature/use suspense queries combine (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10576";>#10576</a>)</li> <li><a href="https://github.com/TanStack/query/commit/93b28450008eb104bf3a9d661f0a5625719bd2ea";><code>93b2845</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10575";>#10575</a>)</li> <li><a href="https://github.com/TanStack/query/commit/ea4497e8aa00d8c1c3a36fb1e17563a889d6ab31";><code>ea4497e</code></a> fix(query-core): stop wrapping persister generics in NoInfer (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10510";>#10510</a>)</li> <li><a href="https://github.com/TanStack/query/commit/2f9527ed76306a0a73af452724da8906ad1c10aa";><code>2f9527e</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10568";>#10568</a>)</li> <li><a href="https://github.com/TanStack/query/commit/ad517e5564c562346979ba58aa3556359f68bb11";><code>ad517e5</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10567";>#10567</a>)</li> <li><a href="https://github.com/TanStack/query/commit/6540a4126b1c087d86d64525e78f32d9920dcd31";><code>6540a41</code></a> feat(core): callback for retryOnMount (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10515";>#10515</a>)</li> <li><a href="https://github.com/TanStack/query/commit/e236194f100bd99fe2c5e77ed38a533f8622fbc0";><code>e236194</code></a> test(react-query/useQuery.promise): improve stability by isolating 'queryClie...</li> <li>Additional commits viewable in <a href="https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query";>compare view</a></li> </ul> </details> <br /> Updates `@tanstack/react-virtual` from 3.13.21 to 3.13.24 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/virtual/releases";>@tanstack/react-virtual's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.13.24</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/97a204dc5526669114458685552b7569b60d2940";><code>97a204d</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.14.0</li> </ul> </li> </ul> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.13.23</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/7ece2d5d4249b7e703c68ac497ae5545c54e7c67";><code>7ece2d5</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.13.23</li> </ul> </li> </ul> <h2><code>@tanstack/react-virtual</code><a href="https://github.com/3";><code>@3</code></a>.13.22</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/54d771a7d4c74f6968e8132b5a85f3e04682376a";><code>54d771a</code></a>, <a href="https://github.com/TanStack/virtual/commit/d3416c386c6446957f413db2eef3211f5fdf3b5f";><code>d3416c3</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.13.22</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md";>@tanstack/react-virtual's changelog</a>.</em></p> <blockquote> <h2>3.13.24</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/97a204dc5526669114458685552b7569b60d2940";><code>97a204d</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.14.0</li> </ul> </li> </ul> <h2>3.13.23</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/7ece2d5d4249b7e703c68ac497ae5545c54e7c67";><code>7ece2d5</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.13.23</li> </ul> </li> </ul> <h2>3.13.22</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/virtual/commit/54d771a7d4c74f6968e8132b5a85f3e04682376a";><code>54d771a</code></a>, <a href="https://github.com/TanStack/virtual/commit/d3416c386c6446957f413db2eef3211f5fdf3b5f";><code>d3416c3</code></a>]: <ul> <li><code>@tanstack/virtual-core</code><a href="https://github.com/3";><code>@3</code></a>.13.22</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/virtual/commit/c3d4cd4f63d9c314ac6ec0ee7885a93a14ae52f9";><code>c3d4cd4</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1157";>#1157</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/9394e13fdb4b9858057a972ef090e250f754edce";><code>9394e13</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1149";>#1149</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/7ece2d5d4249b7e703c68ac497ae5545c54e7c67";><code>7ece2d5</code></a> fix(virtual-core): remove incorrect elementsCache cleanup using getItemKey (#...</li> <li><a href="https://github.com/TanStack/virtual/commit/c2f1c3979a3170a5995a70eda465618f7339b7a5";><code>c2f1c39</code></a> ci: Version Packages (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1139";>#1139</a>)</li> <li><a href="https://github.com/TanStack/virtual/commit/fc3c733445381f78dc5895a5512f0bdca5279e90";><code>fc3c733</code></a> perf(virtual-core): skip sync DOM reads during normal scrolling (<a href="https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual/issues/1144";>#1144</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/virtual/commits/@tanstack/[email protected]/packages/react-virtual";>compare view</a></li> </ul> </details> <br /> Updates `@xyflow/react` from 12.10.1 to 12.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/xyflow/xyflow/releases";>@xyflow/react's releases</a>.</em></p> <blockquote> <h2><code>@xyflow/react</code><a href="https://github.com/12";><code>@12</code></a>.10.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5735";>#5735</a> <a href="https://github.com/xyflow/xyflow/commit/a6c938fb2e5ed030512ef75d665ac80dc3a66bc6";><code>a6c938fb2</code></a> Thanks <a href="https://github.com/nvie";><code>@nvie</code></a>! - Allow <code>type</code> field to be missing in <code>BuiltInNode</code> (no <code>type</code> field is the same as <code>type: "default"</code>)</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5722";>#5722</a> <a href="https://github.com/xyflow/xyflow/commit/8c9b7e726e0bb79871c85017dace0f1ccf1b478c";><code>8c9b7e726</code></a> Thanks <a href="https://github.com/dfblhmm";><code>@dfblhmm</code></a>! - Add <code>snapGrid</code> to <code>screenToFlowPosition</code> options</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5723";>#5723</a> <a href="https://github.com/xyflow/xyflow/commit/82249517a3338d7bd0d6d499abecfaa6bca8c339";><code>82249517a</code></a> Thanks <a href="https://github.com/moklick";><code>@moklick</code></a>! - Pass options to useReactFlow/useSvelteFlow viewport helper functions correctly</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5733";>#5733</a> <a href="https://github.com/xyflow/xyflow/commit/64115cd086d2c04235f1cae80acb45455fd0de49";><code>64115cd08</code></a> Thanks <a href="https://github.com/AlaricBaraou";><code>@AlaricBaraou</code></a>! - Fix empty store during ReactFlow remount by reordering StoreUpdater before GraphView and using layout effects</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5727";>#5727</a> <a href="https://github.com/xyflow/xyflow/commit/dd54e86b91da29c1f58f646ad9a99f96f0c4a2e5";><code>dd54e86b9</code></a> Thanks <a href="https://github.com/solastley";><code>@solastley</code></a>! - Ensure visual nodes selection state is cleared when zero selected nodes remain in the flow</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/xyflow/xyflow/commit/4a278dbbf942b2bc964e4159347b70ae6617f3dc";><code>4a278dbbf</code></a>]:</p> <ul> <li><code>@xyflow/system</code><a href="https://github.com/0";><code>@0</code></a>.0.76</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md";>@xyflow/react's changelog</a>.</em></p> <blockquote> <h2>12.10.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5735";>#5735</a> <a href="https://github.com/xyflow/xyflow/commit/a6c938fb2e5ed030512ef75d665ac80dc3a66bc6";><code>a6c938fb2</code></a> Thanks <a href="https://github.com/nvie";><code>@nvie</code></a>! - Allow <code>type</code> field to be missing in <code>BuiltInNode</code> (no <code>type</code> field is the same as <code>type: "default"</code>)</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5722";>#5722</a> <a href="https://github.com/xyflow/xyflow/commit/8c9b7e726e0bb79871c85017dace0f1ccf1b478c";><code>8c9b7e726</code></a> Thanks <a href="https://github.com/dfblhmm";><code>@dfblhmm</code></a>! - Add <code>snapGrid</code> to <code>screenToFlowPosition</code> options</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5723";>#5723</a> <a href="https://github.com/xyflow/xyflow/commit/82249517a3338d7bd0d6d499abecfaa6bca8c339";><code>82249517a</code></a> Thanks <a href="https://github.com/moklick";><code>@moklick</code></a>! - Pass options to useReactFlow/useSvelteFlow viewport helper functions correctly</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5733";>#5733</a> <a href="https://github.com/xyflow/xyflow/commit/64115cd086d2c04235f1cae80acb45455fd0de49";><code>64115cd08</code></a> Thanks <a href="https://github.com/AlaricBaraou";><code>@AlaricBaraou</code></a>! - Fix empty store during ReactFlow remount by reordering StoreUpdater before GraphView and using layout effects</p> </li> <li> <p><a href="https://redirect.github.com/xyflow/xyflow/pull/5727";>#5727</a> <a href="https://github.com/xyflow/xyflow/commit/dd54e86b91da29c1f58f646ad9a99f96f0c4a2e5";><code>dd54e86b9</code></a> Thanks <a href="https://github.com/solastley";><code>@solastley</code></a>! - Ensure visual nodes selection state is cleared when zero selected nodes remain in the flow</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/xyflow/xyflow/commit/4a278dbbf942b2bc964e4159347b70ae6617f3dc";><code>4a278dbbf</code></a>]:</p> <ul> <li><code>@xyflow/system</code><a href="https://github.com/0";><code>@0</code></a>.0.76</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/xyflow/xyflow/commit/ba0a3612fdec69bd3e63046cb25c2b94d30ea672";><code>ba0a361</code></a> chore(packages): bump</li> <li><a href="https://github.com/xyflow/xyflow/commit/613ad309998563c1009397d5312e23f302670554";><code>613ad30</code></a> Merge pull request <a href="https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5733";>#5733</a> from AlaricBaraou/fix/store-reset-timing-on-remount</li> <li><a href="https://github.com/xyflow/xyflow/commit/a6c938fb2e5ed030512ef75d665ac80dc3a66bc6";><code>a6c938f</code></a> Explicitly allow missing <code>type</code> field in BuiltInNode type definition</li> <li><a href="https://github.com/xyflow/xyflow/commit/f2831bdf31ae4cd1c19eaa2bda6617f3d651f88a";><code>f2831bd</code></a> Merge pull request <a href="https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5727";>#5727</a> from unifygtm/clear-nodes-selection-active</li> <li><a href="https://github.com/xyflow/xyflow/commit/0e48d846fa6e10ac7eed48bf19312ead2274f3ae";><code>0e48d84</code></a> Return <code>hasSelectedNodes</code> from <code>adoptUserNodes</code> and use it to update `nodesSe...</li> <li><a href="https://github.com/xyflow/xyflow/commit/6db2bd053ff516a484b5d10efee33bd8957fdcee";><code>6db2bd0</code></a> fix(react): prevent empty store during ReactFlow remount</li> <li><a href="https://github.com/xyflow/xyflow/commit/e7b78d1f53474ffe61585fa6a31c706d03eb1c29";><code>e7b78d1</code></a> Merge pull request <a href="https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5720";>#5720</a> from yarikoptic/enh-codespell</li> <li><a href="https://github.com/xyflow/xyflow/commit/38f4fef52d88951b6978d33fb5a4f5ec1fbeda3a";><code>38f4fef</code></a> Merge pull request <a href="https://github.com/xyflow/xyflow/tree/HEAD/packages/react/issues/5722";>#5722</a> from dfblhmm/fix/type-definition</li> <li><a href="https://github.com/xyflow/xyflow/commit/759042d108b34317a12c94e2bb51c8ea4b3422e6";><code>759042d</code></a> Fix spacing in store/index.ts</li> <li><a href="https://github.com/xyflow/xyflow/commit/52d452b08ed92a39875afd4ab3eb79fed77ea2ea";><code>52d452b</code></a> Centralize nodesSelectionActive update in setNodes of store</li> <li>Additional commits viewable in <a href="https://github.com/xyflow/xyflow/commits/@xyflow/[email protected]/packages/react";>compare view</a></li> </ul> </details> <br /> Updates `axios` from 1.15.0 to 1.15.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases";>axios's releases</a>.</em></p> <blockquote> <h2>v1.15.2</h2> <p>This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong> Hardened the Node HTTP adapter and <code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to read only own properties and use null-prototype config objects, preventing polluted <code>auth</code>, <code>baseURL</code>, <code>socketPath</code>, <code>beforeRedirect</code>, and <code>insecureHTTPParser</code> from influencing requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10779";>#10779</a></strong>)</li> <li><strong>SSRF via <code>socketPath</code>:</strong> Rejects non-string <code>socketPath</code> values and adds an opt-in <code>allowedSocketPaths</code> config option to restrict permitted Unix domain socket paths, returning <code>AxiosError</code> <code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777";>#10777</a></strong>)</li> <li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code> with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded <code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance verification (<code>npm audit signatures</code>), 60-day resolution policy, and maintainer incident-response runbook. (<strong><a href="https://redirect.github.com/axios/axios/issues/10776";>#10776</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong><code>allowedSocketPaths</code> Config Option:</strong> New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777";>#10777</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single per-socket <code>error</code> listener tracking the active request via <code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>, eliminating per-request listener accumulation, <code>MaxListenersExceededWarning</code>, and linear heap growth under concurrent or long-running keep-alive workloads (fixes <a href="https://redirect.github.com/axios/axios/issues/10780";>#10780</a>). (<strong><a href="https://redirect.github.com/axios/axios/issues/10788";>#10788</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with v1.15.1 release notes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10781";>#10781</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2";>Full Changelog</a></p> <h2>v1.15.1</h2> <p>This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Header Injection Hardening:</strong> Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (<strong><a href="https://redirect.github.com/axios/axios/issues/10749";>#10749</a></strong>)</li> <li><strong>CRLF Stripping in Multipart Headers:</strong> Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (<strong><a href="https://redirect.github.com/axios/axios/issues/10758";>#10758</a></strong>)</li> <li><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe <code>in</code> checks with <code>hasOwnProperty</code> to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10761";>#10761</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10760";>#10760</a></strong>)</li> <li><strong><code>withXSRFToken</code> Truthy Bypass:</strong> Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10762";>#10762</a></strong>)</li> <li><strong><code>maxBodyLength</code> With Zero Redirects:</strong> Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code> is set to <code>0</code>, closing a bypass path for oversized request bodies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10753";>#10753</a></strong>)</li> <li><strong>Streamed Response <code>maxContentLength</code> Bypass:</strong> Applies <code>maxContentLength</code> to streamed responses that previously bypassed the cap. (<strong><a href="https://redirect.github.com/axios/axios/issues/10754";>#10754</a></strong>)</li> <li><strong>Follow-up CVE Completion:</strong> Completes an earlier incomplete CVE fix to fully close the regression window. (<strong><a href="https://redirect.github.com/axios/axios/issues/10755";>#10755</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>AI-Based Docs Translations:</strong> Initial scaffold for AI-assisted translations of the documentation site. (<strong><a href="https://redirect.github.com/axios/axios/issues/10705";>#10705</a></strong>)</li> <li><strong><code>Location</code> Request Header Type:</strong> Adds <code>Location</code> to <code>CommonRequestHeadersList</code> for accurate typing of redirect-aware requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/7528";>#7528</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>FormData Handling:</strong> Removes <code>Content-Type</code> when no boundary is present on <code>FormData</code> fetch requests, supports multi-select fields, cancels <code>request.body</code> instead of the source stream on fetch abort, and fixes a recursion bug in form-data serialisation. (<strong><a href="https://redirect.github.com/axios/axios/issues/7314";>#7314</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10676";>#10676</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10702";>#10702</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10726";>#10726</a></strong>)</li> <li><strong>HTTP Adapter:</strong> Handles socket-only request errors without leaking keep-alive listeners. (<strong><a href="https://redirect.github.com/axios/axios/issues/10576";>#10576</a></strong>)</li> <li><strong>Progress Events:</strong> Clamps <code>loaded</code> to <code>total</code> for computable upload/download progress events. (<strong><a href="https://redirect.github.com/axios/axios/issues/7458";>#7458</a></strong>)</li> <li><strong>Types:</strong> Aligns <code>runWhen</code> type with the runtime behaviour in <code>InterceptorManager</code> and makes response header keys case-insensitive. (<strong><a href="https://redirect.github.com/axios/axios/issues/7529";>#7529</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10677";>#10677</a></strong>)</li> <li><strong><code>buildFullPath</code>:</strong> Uses strict equality in the base/relative URL check. (<strong><a href="https://redirect.github.com/axios/axios/issues/7252";>#7252</a></strong>)</li> <li><strong><code>AxiosURLSearchParams</code> Regex:</strong> Improves the regex used for param serialisation to avoid edge-case mismatches. (<strong><a href="https://redirect.github.com/axios/axios/issues/10736";>#10736</a></strong>)</li> <li><strong>Resilient Value Parsing:</strong> Parses out header/config values instead of throwing on malformed input. (<strong><a href="https://redirect.github.com/axios/axios/issues/10687";>#10687</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md";>axios's changelog</a>.</em></p> <blockquote> <h2>v1.15.2 - April 21, 2026</h2> <p>This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in <code>allowedSocketPaths</code> allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Prototype Pollution Hardening (HTTP Adapter):</strong> Hardened the Node HTTP adapter and <code>resolveConfig</code>/<code>mergeConfig</code>/validator paths to read only own properties and use null-prototype config objects, preventing polluted <code>auth</code>, <code>baseURL</code>, <code>socketPath</code>, <code>beforeRedirect</code>, and <code>insecureHTTPParser</code> from influencing requests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10779";>#10779</a></strong>)</li> <li><strong>SSRF via <code>socketPath</code>:</strong> Rejects non-string <code>socketPath</code> values and adds an opt-in <code>allowedSocketPaths</code> config option to restrict permitted Unix domain socket paths, returning <code>AxiosError</code> <code>ERR_BAD_OPTION_VALUE</code> on mismatch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777";>#10777</a></strong>)</li> <li><strong>Supply-chain Hardening:</strong> Added <code>.npmrc</code> with <code>ignore-scripts=true</code>, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded <code>SECURITY.md</code>/<code>THREATMODEL.md</code> with provenance verification (<code>npm audit signatures</code>), 60-day resolution policy, and maintainer incident-response runbook. (<strong><a href="https://redirect.github.com/axios/axios/issues/10776";>#10776</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong><code>allowedSocketPaths</code> Config Option:</strong> New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10777";>#10777</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Keep-alive Socket Memory Leak:</strong> Installs a single per-socket <code>error</code> listener tracking the active request via <code>kAxiosSocketListener</code>/<code>kAxiosCurrentReq</code>, eliminating per-request listener accumulation, <code>MaxListenersExceededWarning</code>, and linear heap growth under concurrent or long-running keep-alive workloads (fixes <a href="https://redirect.github.com/axios/axios/issues/10780";>#10780</a>). (<strong><a href="https://redirect.github.com/axios/axios/issues/10788";>#10788</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Changelog:</strong> Updated <code>CHANGELOG.md</code> with v1.15.1 release notes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10781";>#10781</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.15.1...v1.15.2";>Full Changelog</a></p> <hr /> <h2>v1.15.1 - April 19, 2026</h2> <p>This release ships a coordinated set of security hardening fixes across headers, body/redirect limits, multipart handling, and XSRF/prototype-pollution vectors, alongside a broad sweep of bug fixes, test migrations, and threat-model documentation updates.</p> <h2>🔒 Security Fixes</h2> <ul> <li> <p><strong>Header Injection Hardening:</strong> Tightened validation and sanitisation across request header construction to close the header-injection attack surface. (<strong><a href="https://redirect.github.com/axios/axios/issues/10749";>#10749</a></strong>)</p> </li> <li> <p><strong>CRLF Stripping in Multipart Headers:</strong> Correctly strips CR/LF from multipart header values to prevent injection via field names and filenames. (<strong><a href="https://redirect.github.com/axios/axios/issues/10758";>#10758</a></strong>)</p> </li> <li> <p><strong>Prototype Pollution / Auth Bypass:</strong> Replaced unsafe <code>in</code> checks with <code>hasOwnProperty</code> to prevent authentication bypass via prototype pollution on config objects, with additional regression tests. (<strong><a href="https://redirect.github.com/axios/axios/issues/10761";>#10761</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10760";>#10760</a></strong>)</p> </li> <li> <p><strong><code>withXSRFToken</code> Truthy Bypass:</strong> Short-circuits on any truthy non-boolean value, so an ambiguous config no longer silently leaks the XSRF token cross-origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10762";>#10762</a></strong>)</p> </li> <li> <p><strong><code>maxBodyLength</code> With Zero Redirects:</strong> Enforces <code>maxBodyLength</code> even when <code>maxRedirects</code> is set to <code>0</code>, closing a bypass path for oversized request bodies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10753";>#10753</a></strong>)</p> </li> <li> <p><strong>Streamed Response <code>maxContentLength</code> Bypass:</strong> Applies <code>maxContentLength</code> to streamed responses that previously bypassed the cap. (<strong><a href="https://redirect.github.com/axios/axios/issues/10754";>#10754</a></strong>)</p> </li> <li> <p><strong>Follow-up CVE Completion:</strong> Completes an earlier incomplete CVE fix to fully close the regression window. (<strong><a href="https://redirect.github.com/axios/axios/issues/10755";>#10755</a></strong>)</p> </li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>AI-Based Docs Translations:</strong> Initial scaffold for AI-assisted translations of the documentation site. (<strong><a href="https://redirect.github.com/axios/axios/issues/10705";>#10705</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/582934382e4e0e0bcb679c628071a4203e93cf57";><code>5829343</code></a> chore(release): prepare release 1.15.2 (<a href="https://redirect.github.com/axios/axios/issues/10789";>#10789</a>)</li> <li><a href="https://github.com/axios/axios/commit/4709a48fa2717ba97f43f5432d48ca4e26c2d326";><code>4709a48</code></a> fix: added fix for memory leak in sockets (<a href="https://redirect.github.com/axios/axios/issues/10788";>#10788</a>)</li> <li><a href="https://github.com/axios/axios/commit/be3336014e01f9a4fc1f8aef15303cf7daaf58db";><code>be33360</code></a> chore: update changelog (<a href="https://redirect.github.com/axios/axios/issues/10781";>#10781</a>)</li> <li><a href="https://github.com/axios/axios/commit/47915144662f2733e6c051bdcb895a8c8f0586aa";><code>4791514</code></a> fix: more header pollutions (<a href="https://redirect.github.com/axios/axios/issues/10779";>#10779</a>)</li> <li><a href="https://github.com/axios/axios/commit/6feafcff6c2dbafe206161c5d09e38e1d36af66f";><code>6feafcf</code></a> fix: socket issue (<a href="https://redirect.github.com/axios/axios/issues/10777";>#10777</a>)</li> <li><a href="https://github.com/axios/axios/commit/302e2739c602f00e323d4f3f5c79500647633a73";><code>302e273</code></a> docs: update docs, add a couple actions etc (<a href="https://redirect.github.com/axios/axios/issues/10776";>#10776</a>)</li> <li><a href="https://github.com/axios/axios/commit/ac42446be51300fe214ba3c6e40cc95f34fd6871";><code>ac42446</code></a> chore(release): prepare release 1.15.1 (<a href="https://redirect.github.com/axios/axios/issues/10767";>#10767</a>)</li> <li><a href="https://github.com/axios/axios/commit/908f2206b6bfeff67236784abce85935698ac1d9";><code>908f220</code></a> docs: update threatmodel (<a href="https://redirect.github.com/axios/axios/issues/10765";>#10765</a>)</li> <li><a href="https://github.com/axios/axios/commit/f93f8155250c2e066205521eda05ae22983a1f6d";><code>f93f815</code></a> docs: added docs around potential decompressions bomb (<a href="https://redirect.github.com/axios/axios/issues/10763";>#10763</a>)</li> <li><a href="https://github.com/axios/axios/commit/1728aa1b15b8857f970611fd8983c06b423fc486";><code>1728aa1</code></a> fix: short-circuits on any truthy non-boolean in withXSRFToken (<a href="https://redirect.github.com/axios/axios/issues/10762";>#10762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.15.0...v1.15.2";>compare view</a></li> </ul> </details> <br /> Updates `dayjs` from 1.11.19 to 1.11.20 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/iamkun/dayjs/releases";>dayjs's releases</a>.</em></p> <blockquote> <h2>v1.11.20</h2> <h2><a href="https://github.com/iamkun/dayjs/compare/v1.11.19...v1.11.20";>1.11.20</a> (2026-03-12)</h2> <h3>Bug Fixes</h3> <ul> <li>Update locale km.js to support meridiem (<a href="https://redirect.github.com/iamkun/dayjs/issues/3017";>#3017</a>) (<a href="https://github.com/iamkun/dayjs/commit/9d2b6a1ec744ad5db13afd4d701f93349135dfec";>9d2b6a1</a>)</li> <li>update updateLocale plugin to merge nested object properties instead of replacing (<a href="https://redirect.github.com/iamkun/dayjs/issues/3012";>#3012</a>) (<a href="https://github.com/iamkun/dayjs/commit/99691c5f3bd1371d3b763d5f9dfaed9a1945a477";>99691c5</a>), closes <a href="https://redirect.github.com/iamkun/dayjs/issues/1118";>#1118</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md";>dayjs's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/iamkun/dayjs/compare/v1.11.19...v1.11.20";>1.11.20</a> (2026-03-12)</h2> <h3>Bug Fixes</h3> <ul> <li>Update locale km.js to support meridiem (<a href="https://redirect.github.com/iamkun/dayjs/issues/3017";>#3017</a>) (<a href="https://github.com/iamkun/dayjs/commit/9d2b6a1ec744ad5db13afd4d701f93349135dfec";>9d2b6a1</a>)</li> <li>update updateLocale plugin to merge nested object properties instead of replacing (<a href="https://redirect.github.com/iamkun/dayjs/issues/3012";>#3012</a>) (<a href="https://github.com/iamkun/dayjs/commit/99691c5f3bd1371d3b763d5f9dfaed9a1945a477";>99691c5</a>), closes <a href="https://redirect.github.com/iamkun/dayjs/issues/1118";>#1118</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/iamkun/dayjs/commit/af6e1f85c10fa8596e79471eadad25ab2da56f0f";><code>af6e1f8</code></a> chore(release): 1.11.20 [skip ci]</li> <li><a href="https://github.com/iamkun/dayjs/commit/82babd6688d7238fe1585895816fb2e8e0817c7d";><code>82babd6</code></a> D2M (<a href="https://redirect.github.com/iamkun/dayjs/issues/3018";>#3018</a>)</li> <li><a href="https://github.com/iamkun/dayjs/commit/bbe4ab1bdb1042667817de2433fc85e6b12eadad";><code>bbe4ab1</code></a> chore: fix lint error</li> <li><a href="https://github.com/iamkun/dayjs/commit/99691c5f3bd1371d3b763d5f9dfaed9a1945a477";><code>99691c5</code></a> fix: update updateLocale plugin to merge nested object properties instead of ...</li> <li><a href="https://github.com/iamkun/dayjs/commit/9d2b6a1ec744ad5db13afd4d701f93349135dfec";><code>9d2b6a1</code></a> fix: Update locale km.js to support meridiem (<a href="https://redirect.github.com/iamkun/dayjs/issues/3017";>#3017</a>)</li> <li><a href="https://github.com/iamkun/dayjs/commit/acf21cd152fcf0851162cba92b56fb4281673b1a";><code>acf21cd</code></a> chore: update doc</li> <li><a href="https://github.com/iamkun/dayjs/commit/55a64e195a7354b3222241e6a64085c706cc157e";><code>55a64e1</code></a> chore: update doc</li> <li><a href="https://github.com/iamkun/dayjs/commit/807face1fef65eee9955fa587888cf31c5a0d3c0";><code>807face</code></a> chore: update doc</li> <li><a href="https://github.com/iamkun/dayjs/commit/54f447048cee679e51a7053f8042d9b6b7028b89";><code>54f4470</code></a> chore: update doc</li> <li><a href="https://github.com/iamkun/dayjs/commit/9ea23c71a125dbb34025cb9f6114d1083ea62705";><code>9ea23c7</code></a> chore: update doc</li> <li>Additional commits viewable in <a href="https://github.com/iamkun/dayjs/compare/v1.11.19...v1.11.20";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for dayjs since your current version.</p> </details> <br /> Updates `i18next-http-backend` from 3.0.5 to 3.0.6 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md";>i18next-http-backend's changelog</a>.</em></p> <blockquote> <h3>3.0.6</h3> <ul> <li>fix: allow forward slashes in <code>ns</code> values so nested namespace names (mapping to URL layouts such as <code>/locales/en/a/b.json</code>) fetch correctly again. 3.0.5's security fix applied the same strict URL-segment check to both <code>lng</code> and <code>ns</code>, which was correct for <code>lng</code> (no BCP-47 shape contains <code>/</code>) but over-strict for <code>ns</code> — nested namespaces containing <code>/</code> were never officially supported, but the behaviour fell out of the implicit string-substitution semantics of <code>loadPath</code> and is common enough in the wild to be worth accommodating. <code>isSafeUrlSegment</code> is now split into <code>isSafeLangUrlSegment</code> (strict — still rejects <code>/</code>) and <code>isSafeNsUrlSegment</code> (loose — allows <code>/</code> but still rejects <code>..</code>, <code>\</code>, URL-structure characters, control chars, prototype keys, and oversized inputs). <code>isSafeUrlSegment</code> is kept as a backwards-compatible alias for the strict check. The 3.0.5 security fix remains in force for every concrete attack pattern from the original advisory.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/i18next/i18next-http-backend/commit/ddf104807729437c11c0cc25a059b0aac1a1dab6";><code>ddf1048</code></a> 3.0.6</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/d73cfdc23d397a7d978e03bf6541852da08ae1e2";><code>d73cfdc</code></a> fix: allow forward slashes in ns values</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/9abbdee14e28f2a055251a51e7f238bb2bd1e696";><code>9abbdee</code></a> Bump i18next-http-backend from 1.4.0 to 3.0.5 in /example/i18next-vue (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/184";>#184</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/b4ca8bb3d207d53f8f35100126a4a8f686a0ab8e";><code>b4ca8bb</code></a> Bump i18next-http-backend from 3.0.1 to 3.0.5 in /example/fallback (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/183";>#183</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/dffddd494145419f00901aed4ad67b34eb13fbda";><code>dffddd4</code></a> Bump i18next-http-backend from 3.0.2 to 3.0.5 in /example/next (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/182";>#182</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/fd29b400e3ead7ccd1caebc55027aeb4f4c43c1f";><code>fd29b40</code></a> Bump i18next-http-backend from 1.3.2 to 3.0.5 in /example/vue (<a href="https://redirect.github.com/i18next/i18next-http-backend/issues/181";>#181</a>)</li> <li><a href="https://github.com/i18next/i18next-http-backend/commit/dc68dbeab7ab13055bdb1edb7b91b0a0b57a4997";><code>dc68dbe</code></a> docs: link published GHSA advisory in v3.0.5 notes</li> <li>See full diff in <a href="https://github.com/i18next/i18next-http-backend/compare/v3.0.5...v3.0.6";>compare view</a></li> </ul> </details> <br /> Updates `react-hook-form` from 7.71.2 to 7.74.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/releases";>react-hook-form's releases</a>.</em></p> <blockquote> <h2>Version 7.74.0</h2> <p>🪇 feat: setValues (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13201";>#13201</a>)</p> <pre lang="tsx"><code>setValues((data) => { return { ...data, name: 'test' } }) <p>setValues(formValues);<br /> </code></pre></p> <p>🐞 fix: preserve previous field value when useController name changes (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13395";>#13395</a>) 🐞 fix: handle null parent when unregistering nested field (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13396";>#13396</a>) 🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13388";>#13388</a>) 🪢 fix build to exclude test files (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13387";>#13387</a>)</p> <p>thanks to <a href="https://github.com/Yihao-G";><code>@Yihao-G</code></a> & <a href="https://github.com/mixelburg";><code>@mixelburg</code></a></p> <h2>Version 7.73.1</h2> <p>⚡perf: memoize submit (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13378";>#13378</a>) 🚉 perf: improve deepEqual performance (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13362";>#13362</a>) 👀 perf: skip re-render in setValue when value is unchanged (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13352";>#13352</a>) ✂️ remove unneeded flag check for shouldDirty 🚨 fix: safely access field._f during register (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13365";>#13365</a>) 🧹 close <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13298";>#13298</a>: improve fieldState errors when resolver uses dot-notation string keys (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13350";>#13350</a>) 🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13178";>#13178</a>: update state correctly in watch callback with Controller, trigger, and reset (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13180";>#13180</a>) 🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13331";>#13331</a>: skip field array validation when mode is onBlur (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13333";>#13333</a>) 🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13334";>#13334</a> sDirty remains false after deletion an item with shouldDirty: true (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13357";>#13357</a>) 🐞 fix: handle nested field when parent defaultValue is null (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13348";>#13348</a>)</p> <p>thanks to <a href="https://github.com/Prasadzoman";><code>@Prasadzoman</code></a>, <a href="https://github.com/cyphercodes";><code>@cyphercodes</code></a>, <a href="https://github.com/lorenzoceglia";><code>@lorenzoceglia</code></a>, <a href="https://github.com/rizwan-rizu";><code>@rizwan-rizu</code></a>, <a href="https://github.com/tomeelog";><code>@tomeelog</code></a> & <a href="https://github.com/ap0nia";><code>@ap0nia</code></a></p> <h2>Version 7.72.1</h2> <p>🐞 fix: add isDirty check for numeric string keys in defaultValues (issue <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13346";>#13346</a>) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13347";>#13347</a>) 🐞 fix: prevent setValue with shouldDirty from polluting unrelated dirty fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13326";>#13326</a>) 🐞 fix: memoize control in HookFormControlContext to prevent render conflicts (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13272";>#13272</a>) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13312";>#13312</a>) 🐞 fix: isNameInFieldArray should check all ancestor paths for nested field arrays (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13318";>#13318</a>) 🐞 fix: <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13320";>#13320</a> formState.isValid incorrect on Controller re-mount (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13324";>#13324</a>)</p> <p>thanks to <a href="https://github.com/6810779s";><code>@6810779s</code></a>, <a href="https://github.com/candymask0712";><code>@candymask0712</code></a>, <a href="https://github.com/olagokemills";><code>@olagokemills</code></a>, <a href="https://github.com/shahmir-oscilar";><code>@shahmir-oscilar</code></a> & <a href="https://github.com/bae080311";><code>@bae080311</code></a></p> <h2>Version 7.72.0</h2> <p>⚓️ feat: built-in form level validate (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13195";>#13195</a>)</p> <pre lang="tsx"><code>useForm({ validate: async ({ formValues }: FormValidateResult) => { </tr></table> </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/8a816ede4921ace497cbe335008cd151ecdcd888";><code>8a816ed</code></a> 7.74.0</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/ef641fec04bb1d88a99d4617f68e0b76ef8b85bd";><code>ef641fe</code></a> 🐞 fix: preserve previous field value when useController name changes (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13395";>#13395</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/a08a8e80f97912867c0b81f9c361f4c56381df52";><code>a08a8e8</code></a> 🐞 fix: handle null parent when unregistering nested field (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13396";>#13396</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/2374a64c1e9e645043f0444f37654b048d0ec7d7";><code>2374a64</code></a> 📖 thanks KANAME for the support over the years</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/6737b9963273f62e2932fe636c172f76d5a83a7c";><code>6737b99</code></a> 🌡️ test: cover valueAsNumber NaN required validation in validateField (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13391";>#13391</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/29cdd0870119d5c5dd163906f539e0713e1f325f";><code>29cdd08</code></a> 🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13388";>#13388</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/44df01d539d8a77b390d0b7bfa2ff7454e48da79";><code>44df01d</code></a> Revert "Revert "🪢 fix build to exclude test files (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13387";>#13387</a>)""</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/bf525c13523710756dacc7898cf202cfe030a4a0";><code>bf525c1</code></a> Revert "Revert "🪇 feat: setValues (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13201";>#13201</a>)""</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/6cd9e45978aa6265cd4d1b24d9295b33ec8fe1c4";><code>6cd9e45</code></a> 7.73.1</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/9b07561693289f96c6282bfd880e875ad22fefe5";><code>9b07561</code></a> Revert "🪢 fix build to exclude test files (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13387";>#13387</a>)"</li> <li>Additional commits viewable in <a href="https://github.com/react-hook-form/react-hook-form/compare/v7.71.2...v7.74.0";>compare view</a></li> </ul> </details> <br /> Updates `react-router-dom` from 7.13.1 to 7.14.2 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md";>react-router-dom's changelog</a>.</em></p> <blockquote> <h2>v7.14.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><a href="https://github.com/remix-run/react-router/releases/tag/[email protected]";><code>[email protected]</code></a></li> </ul> </li> </ul> <h2>v7.14.1</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><a href="https://github.com/remix-run/react-router/releases/tag/[email protected]";><code>[email protected]</code></a></li> </ul> </li> </ul> <h2>7.14.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> <h2>7.13.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><code>[email protected]</code></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/cf1d25003aa1217dc21c16e95d483601940ae9af";><code>cf1d250</code></a> Release v7.14.2 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14993";>#14993</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/197674ba9fc1b72b452e17894e5e783bdab7a087";><code>197674b</code></a> Release 7.14.1 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14973";>#14973</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/a87774f997d8ba497c97562840f0766250c3e4ce";><code>a87774f</code></a> Add new release process (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14916";>#14916</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/e31077b0c380d9764dbced4c753e9ff99387045d";><code>e31077b</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14945";>#14945</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/6683e85a9d7d607a45a3f6374afcc598a474f602";><code>6683e85</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14943";>#14943</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/aadb56fa532e0eaf7e7b91c1d88e1f325851eb04";><code>aadb56f</code></a> chore: Update version for release (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14908";>#14908</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/c68a9b35933fe5a3750ea8e52399d06f9aaecf77";><code>c68a9b3</code></a> chore: Update version for release (pre) (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/14893";>#14893</a>)</li> <li>See full diff in <a href="https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom";>compare view</a></li> </ul> </details> <br /> Updates `use-debounce` from 10.1.0 to 10.1.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/xnimorz/use-debounce/blob/master/CHANGELOG.md";>use-debounce's changelog</a>.</em></p> <blockquote> <h2>10.1.1</h2> <ul> <li>replace global with globalThis which is defined in all possible environments (browser, node, workers) to address <a href="https://redirect.github.com/xnimorz/use-debounce/issues/212";>xnimorz/use-debounce#212</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/xnimorz/use-debounce/commits";>compare view</a></li> </ul> </details> <br /> Updates `zustand` from 5.0.11 to 5.0.12 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pmndrs/zustand/releases";>zustand's releases</a>.</em></p> <blockquote> <h2>v5.0.12</h2> <p>Two small fixes.</p> <h2>What's Changed</h2> <ul> <li>fix(persist): use latest state in post-rehydration callback by <a href="https://github.com/Shohjahon-n";><code>@Shohjahon-n</code></a> in <a href="https://redirect.github.com/pmndrs/zustand/pull/3391";>pmndrs/zustand#3391</a></li> <li>fix(devtools): correct redux devtools config type extension by <a href="https://github.com/grigoriy-reshetniak";><code>@grigoriy-reshetniak</code></a> in <a href="https://redirect.github.com/pmndrs/zustand/pull/3414";>pmndrs/zustand#3414</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/pavan-sh";><code>@pavan-sh</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3378";>pmndrs/zustand#3378</a></li> <li><a href="https://github.com/Copilot";><code>@Copilot</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3395";>pmndrs/zustand#3395</a></li> <li><a href="https://github.com/Aravindsreeni";><code>@Aravindsreeni</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3400";>pmndrs/zustand#3400</a></li> <li><a href="https://github.com/wallzero";><code>@wallzero</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3401";>pmndrs/zustand#3401</a></li> <li><a href="https://github.com/chaesunbak";><code>@chaesunbak</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3405";>pmndrs/zustand#3405</a></li> <li><a href="https://github.com/Shohjahon-n";><code>@Shohjahon-n</code></a> made their first contribution in <a href="https://redirect.github.com/pmndrs/zustand/pull/3391";>pmndrs/zustand#3391</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/pmndrs/zustand/compare/v5.0.11...v5.0.12";>https://github.com/pmndrs/zustand/compare/v5.0.11...v5.0.12</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pmndrs/zustand/commit/206012dbd1ae046ea0aefb9cd7bf8bba913c6459";><code>206012d</code></a> 5.0.12</li> <li><a href="https://github.com/pmndrs/zustand/commit/d714065f1f2c72e9dc51969a6607a3ce7254de10";><code>d714065</code></a> chore(deps): update dev dependencies (<a href="https://redirect.github.com/pmndrs/zustand/issues/3427";>#3427</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/89ebcd73134ed32689ae767a5ce5ad8f24bd5ee1";><code>89ebcd7</code></a> fix(devtools): correct redux devtools config type extension (<a href="https://redirect.github.com/pmndrs/zustand/issues/3414";>#3414</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/6213fc11bdf096301a82ae5c236b5a666a4ee3ca";><code>6213fc1</code></a> fix(persist): use latest state in post-rehydration callback (<a href="https://redirect.github.com/pmndrs/zustand/issues/3391";>#3391</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/a3869ca4eb1d397d8bf2a6f350661115fff18a5a";><code>a3869ca</code></a> docs: fix broken links in beginner TypeScript guide (<a href="https://redirect.github.com/pmndrs/zustand/issues/3423";>#3423</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/c49df38eff64e90b2ecccea890cc097f5d63bb54";><code>c49df38</code></a> Hotfix section linking (<a href="https://redirect.github.com/pmndrs/zustand/issues/3410";>#3410</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/5561e9bc2555b6e98ac2c6292219f3f9cd7e9bcc";><code>5561e9b</code></a> Fix indentation for actions in index.md (<a href="https://redirect.github.com/pmndrs/zustand/issues/3406";>#3406</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/4966a15d93a93fef950826bc2ebf071f099fb6f3";><code>4966a15</code></a> fix(readme) : comparison documentaion link (<a href="https://redirect.github.com/pmndrs/zustand/issues/3405";>#3405</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/da381c39cdd917f4deccd3c115d702b27eccb387";><code>da381c3</code></a> Fix README internal links for GitHub rendering (<a href="https://redirect.github.com/pmndrs/zustand/issues/3403";>#3403</a>)</li> <li><a href="https://github.com/pmndrs/zustand/commit/0d250b32f4abd11546d0a258e1d27cb522c006ba";><code>0d250b3</code></a> fix persist documentation link (<a href="https://redirect.github.com/pmndrs/zustand/issues/3401";>#3401</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pmndrs/zustand/compare/v5.0.11...v5.0.12";>compare view</a></li> </ul> </details> <br /> Updates `@playwright/test` from 1.58.2 to 1.59.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/playwright/releases";>@playwright/test's releases</a>.</em></p> <blockquote> <h2>v1.59.1</h2> <h3>Bug Fixes</h3> <ul> <li><strong>[Windows]</strong> Reverted hiding console window when spawning browser processes, which caused regressions including broken <code>codegen</code>, <code>--ui</code> and <code>show</code> commands (<a href="https://redirect.github.com/microsoft/playwright/issues/39990";>#39990</a>)</li> </ul> <h2>v1.59.0</h2> <h2>🎬 Screencast</h2> <p>New <a href="https://playwright.dev/docs/api/class-page#page-screencast";>page.screencast</a> API provides a unified interface for capturing page content with:</p> <ul> <li>Screencast recordings</li> <li>Action annotations</li> <li>Visual overlays</li> <li>Real-time frame capture</li> <li>Agentic video receipts</li> </ul> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <!-- raw HTML omitted --> <p><strong>Screencast recording</strong> — record video with precise start/stop control, as an alternative to the <a href="https://playwright.dev/docs/api/class-browser#browser-new-context-option-record-video";><code>recordVideo</code></a> option:</p> <pre lang="js"><code>await page.screencast.start({ path: 'video.webm' }); // ... perform actions ... await page.screencast.stop(); </code></pre> <p><strong>Action annotations</strong> — enable built-in visual annotations that highlight interacted elements and display action titles during recording:</p> <pre lang="js"><code>await page.screencast.showActions({ position: 'top-right' }); </code></pre> <p><a href="https://playwright.dev/docs/api/class-screencast#screencast-show-actions";>screencast.showActions()</a> accepts <code>position</code> (<code>'top-l... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
