dependabot[bot] opened a new pull request, #68231: URL: https://github.com/apache/airflow/pull/68231
Bumps the auth-ui-package-updates group with 18 updates in the /airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui directory: | Package | From | To | | --- | --- | --- | | [@hey-api/openapi-ts](https://github.com/hey-api/openapi-ts) | `0.97.3` | `0.98.1` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.14` | `5.101.0` | | [axios](https://github.com/axios/axios) | `1.16.1` | `1.17.0` | | [react](https://github.com/facebook/react/tree/HEAD/packages/react) | `19.2.6` | `19.2.7` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.15` | `19.2.16` | | [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) | `19.2.6` | `19.2.7` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.76.1` | `7.77.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.15.1` | `7.16.0` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.60.0` | `8.60.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.60.0` | `8.60.1` | | [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.60.0` | `8.60.1` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.7` | `4.1.8` | | [eslint](https://github.com/eslint/eslint) | `10.4.0` | `10.4.1` | | [eslint-plugin-prettier](https://github.com/prettier/eslint-plugin-prettier) | `5.5.5` | `5.5.6` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.9.0` | `20.10.1` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.60.0` | `8.60.1` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.14` | `8.0.16` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.8` | Updates `@hey-api/openapi-ts` from 0.97.3 to 0.98.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/hey-api/openapi-ts/blob/main/CHANGELOG.md";>@hey-api/openapi-ts's changelog</a>.</em></p> <blockquote> <h2><code>@hey-api/openapi-ts</code> 0.98.1</h2> <h3>Updates</h3> <ul> <li>cli: simplify generate command messages (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3982";>#3982</a>)</li> </ul> <h3>Plugins</h3> <h4>valibot</h4> <ul> <li>revert referencing TypeScript enums (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3982";>#3982</a>)</li> </ul> <h4>zod</h4> <ul> <li>revert referencing TypeScript enums (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3982";>#3982</a>)</li> </ul> <hr /> <h2><code>@hey-api/openapi-ts</code> 0.98.0</h2> <h3>⚠️ Breaking</h3> <p>This release has 1 breaking change. Please review the release notes carefully before upgrading.</p> <h3>Updates</h3> <ul> <li><strong>⚠️ Breaking:</strong> config: declarative configuration (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3950";>#3950</a>)</li> </ul> <p>This is an internal change that simplifies the configuration and plugin APIs. The generated output should be unaffected, please <a href="https://github.com/hey-api/openapi-ts/issues";>open an issue</a> if that's not the case. If you have custom plugins, refer to the <a href="https://heyapi.dev/docs/openapi/typescript/plugins/custom";>custom plugin guide</a> for the latest instructions.</p> <ul> <li>dsl: track extended class symbols (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3945";>#3945</a>)</li> <li>parser: preserve sort order when filtering input (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3953";>#3953</a>)</li> </ul> <h3>Plugins</h3> <h4><code>@hey-api/client-angular</code></h4> <ul> <li>add explicit return types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3880";>#3880</a>)</li> <li>use <code>Object.create()</code> to avoid prototype chain substitution. Reported by <a href="https://github.com/programsurf";><code>@programsurf</code></a>, <a href="https://github.com/daeungdaeung";><code>@daeungdaeung</code></a>, <a href="https://github.com/yoonsh";><code>@yoonsh</code></a>, and <a href="https://github.com/lubroai";><code>@lubroai</code></a> (GHSA-hhx9-57xq-r5rw) (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3973";>#3973</a>)</li> <li>improve params helper type (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3946";>#3946</a>)</li> </ul> <h4><code>@hey-api/client-axios</code></h4> <ul> <li>add explicit return types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3880";>#3880</a>)</li> <li>use <code>Object.create()</code> to avoid prototype chain substitution. Reported by <a href="https://github.com/programsurf";><code>@programsurf</code></a>, <a href="https://github.com/daeungdaeung";><code>@daeungdaeung</code></a>, <a href="https://github.com/yoonsh";><code>@yoonsh</code></a>, and <a href="https://github.com/lubroai";><code>@lubroai</code></a> (GHSA-hhx9-57xq-r5rw) (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3973";>#3973</a>)</li> <li>improve params helper type (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3946";>#3946</a>)</li> </ul> <h4><code>@hey-api/client-fetch</code></h4> <ul> <li>add explicit return types (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3880";>#3880</a>)</li> <li>use <code>Object.create()</code> to avoid prototype chain substitution. Reported by <a href="https://github.com/programsurf";><code>@programsurf</code></a>, <a href="https://github.com/daeungdaeung";><code>@daeungdaeung</code></a>, <a href="https://github.com/yoonsh";><code>@yoonsh</code></a>, and <a href="https://github.com/lubroai";><code>@lubroai</code></a> (GHSA-hhx9-57xq-r5rw) (<a href="https://redirect.github.com/hey-api/openapi-ts/pull/3973";>#3973</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hey-api/openapi-ts/commit/93258e8de6d0a221fc3649f646553d346db0e766";><code>93258e8</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3983";>#3983</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/99bb7a5ab7e3062311a9a14235e0bc4c92c722c2";><code>99bb7a5</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/3e045931be896fc74971bf9a66022f6352630399";><code>3e04593</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3982";>#3982</a> from hey-api/fix/enum-default-validators</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/11f9324a729a2db2f37c9f36a19c10b0d695e574";><code>11f9324</code></a> fix: validators enum default</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/dbe195b1fbe9f83d8b1f9095f2ed7d01a5b8ab03";><code>dbe195b</code></a> chore: sync changelog [skip ci]</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/520106f58063f52e8d170c0c658679a813172f7f";><code>520106f</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3928";>#3928</a> from hey-api/changeset-release/main</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/1399681d5d0f0b54cf2c5c612f8ab364226092a7";><code>1399681</code></a> chore: update contributors list</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/273d15f0021828764c7db0e4b47e146d4cbf6c7d";><code>273d15f</code></a> ci: release</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/385edc113caa0405a678f9e9ec1f3abf52dafb2e";><code>385edc1</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3981";>#3981</a> from hey-api/renovate/zod-4.x</li> <li><a href="https://github.com/hey-api/openapi-ts/commit/5bdb449a85861113e3757716bab8ed21f12aaf36";><code>5bdb449</code></a> Merge pull request <a href="https://redirect.github.com/hey-api/openapi-ts/issues/3975";>#3975</a> from hey-api/renovate/ajv-8.x</li> <li>Additional commits viewable in <a href="https://github.com/hey-api/openapi-ts/compare/@hey-api/[email protected]...@hey-api/[email protected]";>compare view</a></li> </ul> </details> <br /> Updates `@tanstack/react-query` from 5.100.14 to 5.101.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/releases";>@tanstack/react-query's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.101.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/3042860e3c8731c94ca4dec0e277e415d0484fce";><code>3042860</code></a>, <a href="https://github.com/TanStack/query/commit/e631dc3fa17bff71f413246b7a770a730016d346";><code>e631dc3</code></a>]: <ul> <li><code>@tanstack/query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5";><code>@5</code></a>.101.0</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/10857";>#10857</a> <a href="https://github.com/TanStack/query/commit/7cf5923308fb91f3eff0fe952d8c64676e2bdad7";><code>7cf5923</code></a> - fix(react-query-next-experimental): replace deprecated 'isServer' with 'environmentManager.isServer()'</p> </li> <li> <p>Updated dependencies []:</p> <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5";><code>@5</code></a>.101.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> </ul> </li> </ul> <h2><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.101.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md";>@tanstack/react-query's changelog</a>.</em></p> <blockquote> <h2>5.101.0</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies []: <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.101.0</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/query/commit/f3d8d2abbf15bf81ff7575d3be9845d7b402f25a";><code>f3d8d2a</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10774";>#10774</a>)</li> <li><a href="https://github.com/TanStack/query/commit/532bb298fba15e945e69c6ee4edc0c759ff21324";><code>532bb29</code></a> fix(tests): disable local coverage instrumentation (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10776";>#10776</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query";>compare view</a></li> </ul> </details> <br /> Updates `axios` from 1.16.1 to 1.17.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases";>axios's releases</a>.</em></p> <blockquote> <h2>v1.17.0 — June 1, 2026</h2> <p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901";>#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922";>#10922</a></strong>)</li> <li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926";>#10926</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792";>#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920";>#10920</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929";>#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896";>#10896</a></strong>)</li> <li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957";>#10957</a></strong>)</li> <li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898";>#10898</a></strong>)</li> <li><strong>Headers:</strong> Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10875";>#10875</a></strong>)</li> <li><strong>Request Data Merging:</strong> Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (<strong><a href="https://redirect.github.com/axios/axios/issues/10812";>#10812</a></strong>)</li> <li><strong>Bundler Compatibility:</strong> Converted <code>resolveConfig</code> from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (<strong><a href="https://redirect.github.com/axios/axios/issues/10891";>#10891</a></strong>)</li> <li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code> return types and updated CommonJS <code>isCancel</code> typings to narrow to <code>CanceledError<T></code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10956";>#10956</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10952";>#10952</a></strong>)</li> <li><strong>Build Tooling:</strong> Avoided emitting a null <code>Authorization</code> header from the GitHub build helper when <code>GITHUB_TOKEN</code> is unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10931";>#10931</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>HTTP/2 Internals:</strong> Extracted <code>Http2Sessions</code> into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (<strong><a href="https://redirect.github.com/axios/axios/issues/10861";>#10861</a></strong>)</li> <li><strong>Package Publishing:</strong> Reduced published package size by switching to a <code>files</code> allowlist and dropping unneeded unminified bundle source maps. (<strong><a href="https://redirect.github.com/axios/axios/issues/10939";>#10939</a></strong>)</li> <li><strong>CI and Release Automation:</strong> Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (<strong><a href="https://redirect.github.com/axios/axios/issues/10907";>#10907</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10911";>#10911</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10916";>#10916</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10927";>#10927</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10935";>#10935</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10983";>#10983</a></strong>)</li> <li><strong>Developer Workflow:</strong> Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10925";>#10925</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10914";>#10914</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10958";>#10958</a></strong>)</li> <li><strong>Documentation and Policy:</strong> Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (<strong><a href="https://redirect.github.com/axios/axios/issues/10890";>#10890</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10889";>#10889</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10921";>#10921</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10945";>#10945</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10905";>#10905</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10933";>#10933</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10915";>#10915</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10887";>#10887</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/ issues/10955">#10955</a></strong>)</li> <li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>, <code>qs</code>, docs dependencies, and GitHub Actions dependencies including <code>actions/dependency-review-action</code> and <code>zizmorcore/zizmor-action</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10871";>#10871</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10879";>#10879</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10918";>#10918</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10919";>#10919</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10934";>#10934</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10947";>#10947</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10954";>#10954</a></strong>, <strong><a href="https://redirect.github.com/a xios/axios/issues/10960">#10960</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p> <ul> <li><strong><a href="https://github.com/BasixKOR";><code>@BasixKOR</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/6792";>#6792</a></strong>)</li> <li><strong><a href="https://github.com/carladams1299-lab";><code>@carladams1299-lab</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10861";>#10861</a></strong>)</li> <li><strong><a href="https://github.com/LaplaceYoung";><code>@LaplaceYoung</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10812";>#10812</a></strong>)</li> <li><strong><a href="https://github.com/JamieMagee";><code>@JamieMagee</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10939";>#10939</a></strong>)</li> <li><strong><a href="https://github.com/RonGamzu";><code>@RonGamzu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10905";>#10905</a></strong>)</li> <li><strong><a href="https://github.com/sapirbaruch";><code>@sapirbaruch</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10891";>#10891</a></strong>)</li> <li><strong><a href="https://github.com/nezukoagent";><code>@nezukoagent</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10901";>#10901</a></strong>)</li> <li><strong><a href="https://github.com/devareddy05";><code>@devareddy05</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10929";>#10929</a></strong>)</li> <li><strong><a href="https://github.com/Mohammad-Faiz-Cloud-Engineer";><code>@Mohammad-Faiz-Cloud-Engineer</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10922";>#10922</a></strong>)</li> <li><strong><a href="https://github.com/azandabot";><code>@azandabot</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10931";>#10931</a></strong>)</li> <li><strong><a href="https://github.com/niksy";><code>@niksy</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10896";>#10896</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0";>Full Changelog</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md";>axios's changelog</a>.</em></p> <blockquote> <h2>v1.17.0 — June 1, 2026</h2> <p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p> <h2>🔒 Security Fixes</h2> <ul> <li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901";>#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922";>#10922</a></strong>)</li> <li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926";>#10926</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792";>#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920";>#10920</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929";>#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896";>#10896</a></strong>)</li> <li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957";>#10957</a></strong>)</li> <li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898";>#10898</a></strong>)</li> <li><strong>Headers:</strong> Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10875";>#10875</a></strong>)</li> <li><strong>Request Data Merging:</strong> Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (<strong><a href="https://redirect.github.com/axios/axios/issues/10812";>#10812</a></strong>)</li> <li><strong>Bundler Compatibility:</strong> Converted <code>resolveConfig</code> from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (<strong><a href="https://redirect.github.com/axios/axios/issues/10891";>#10891</a></strong>)</li> <li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code> return types and updated CommonJS <code>isCancel</code> typings to narrow to <code>CanceledError<T></code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10956";>#10956</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10952";>#10952</a></strong>)</li> <li><strong>Build Tooling:</strong> Avoided emitting a null <code>Authorization</code> header from the GitHub build helper when <code>GITHUB_TOKEN</code> is unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10931";>#10931</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>HTTP/2 Internals:</strong> Extracted <code>Http2Sessions</code> into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (<strong><a href="https://redirect.github.com/axios/axios/issues/10861";>#10861</a></strong>)</li> <li><strong>Package Publishing:</strong> Reduced published package size by switching to a <code>files</code> allowlist and dropping unneeded unminified bundle source maps. (<strong><a href="https://redirect.github.com/axios/axios/issues/10939";>#10939</a></strong>)</li> <li><strong>CI and Release Automation:</strong> Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (<strong><a href="https://redirect.github.com/axios/axios/issues/10907";>#10907</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10911";>#10911</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10916";>#10916</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10927";>#10927</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10935";>#10935</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10983";>#10983</a></strong>)</li> <li><strong>Developer Workflow:</strong> Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10925";>#10925</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10914";>#10914</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10958";>#10958</a></strong>)</li> <li><strong>Documentation and Policy:</strong> Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (<strong><a href="https://redirect.github.com/axios/axios/issues/10890";>#10890</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10889";>#10889</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10921";>#10921</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10945";>#10945</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10905";>#10905</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10933";>#10933</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10915";>#10915</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10887";>#10887</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/ issues/10955">#10955</a></strong>)</li> <li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>, <code>qs</code>, docs dependencies, and GitHub Actions dependencies including <code>actions/dependency-review-action</code> and <code>zizmorcore/zizmor-action</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10871";>#10871</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10879";>#10879</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10918";>#10918</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10919";>#10919</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10934";>#10934</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10947";>#10947</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10954";>#10954</a></strong>, <strong><a href="https://redirect.github.com/a xios/axios/issues/10960">#10960</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p> <ul> <li><strong><a href="https://github.com/BasixKOR";><code>@BasixKOR</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/6792";>#6792</a></strong>)</li> <li><strong><a href="https://github.com/carladams1299-lab";><code>@carladams1299-lab</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10861";>#10861</a></strong>)</li> <li><strong><a href="https://github.com/LaplaceYoung";><code>@LaplaceYoung</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10812";>#10812</a></strong>)</li> <li><strong><a href="https://github.com/JamieMagee";><code>@JamieMagee</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10939";>#10939</a></strong>)</li> <li><strong><a href="https://github.com/RonGamzu";><code>@RonGamzu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10905";>#10905</a></strong>)</li> <li><strong><a href="https://github.com/sapirbaruch";><code>@sapirbaruch</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10891";>#10891</a></strong>)</li> <li><strong><a href="https://github.com/nezukoagent";><code>@nezukoagent</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10901";>#10901</a></strong>)</li> <li><strong><a href="https://github.com/devareddy05";><code>@devareddy05</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10929";>#10929</a></strong>)</li> <li><strong><a href="https://github.com/Mohammad-Faiz-Cloud-Engineer";><code>@Mohammad-Faiz-Cloud-Engineer</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10922";>#10922</a></strong>)</li> <li><strong><a href="https://github.com/azandabot";><code>@azandabot</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10931";>#10931</a></strong>)</li> <li><strong><a href="https://github.com/niksy";><code>@niksy</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10896";>#10896</a></strong>)</li> </ul> <p><a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0";>Full Changelog</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/4306df21e84332fc576e98c2de549347c06bfb76";><code>4306df2</code></a> chore: add fun 88 sponsorship</li> <li><a href="https://github.com/axios/axios/commit/931cc8f0106db4c9885403f85364b9e09ae1f6dc";><code>931cc8f</code></a> chore(release): prepare release 1.17.0 (<a href="https://redirect.github.com/axios/axios/issues/10983";>#10983</a>)</li> <li><a href="https://github.com/axios/axios/commit/38ba1b3d2b0aa5ada0463a37a548feb83a84dfa1";><code>38ba1b3</code></a> fix(fetch): support basic auth from URL (<a href="https://redirect.github.com/axios/axios/issues/10896";>#10896</a>)</li> <li><a href="https://github.com/axios/axios/commit/32e2515f1e09b649723e4acd89d920df13eee77e";><code>32e2515</code></a> fix: replace ternary side effect in script (<a href="https://redirect.github.com/axios/axios/issues/10931";>#10931</a>)</li> <li><a href="https://github.com/axios/axios/commit/030e7223831b0f562af3eb7501b24242c8a4c5ba";><code>030e722</code></a> chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs (<a href="https://redirect.github.com/axios/axios/issues/10960";>#10960</a>)</li> <li><a href="https://github.com/axios/axios/commit/ec63164ac6b7a1fcd6b742a8628d3fffe23ce001";><code>ec63164</code></a> chore: remove openspec (<a href="https://redirect.github.com/axios/axios/issues/10958";>#10958</a>)</li> <li><a href="https://github.com/axios/axios/commit/3dec28f94ce29d396d5f2d9718805b47428dc7ab";><code>3dec28f</code></a> fix(http): preserve TLS options for proxy tunnels (<a href="https://redirect.github.com/axios/axios/issues/10957";>#10957</a>)</li> <li><a href="https://github.com/axios/axios/commit/a2390a5c059342bcac2a5297728181dd9939f562";><code>a2390a5</code></a> fix: correct isCancel type to narrow to CanceledError<T> (<a href="https://redirect.github.com/axios/axios/issues/10952";>#10952</a>)</li> <li><a href="https://github.com/axios/axios/commit/fa01b9255d71e72599826428bc6c60f34994c6ce";><code>fa01b92</code></a> chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /docs (<a href="https://redirect.github.com/axios/axios/issues/10954";>#10954</a>)</li> <li><a href="https://github.com/axios/axios/commit/2d2314a1ac29ce6723eb53e130b4a36617fd201c";><code>2d2314a</code></a> fix: AxiosHeaders <code>toJSON()</code> return types (<a href="https://redirect.github.com/axios/axios/issues/10956";>#10956</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0";>compare view</a></li> </ul> </details> <br /> Updates `react` from 19.2.6 to 19.2.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/releases";>react's releases</a>.</em></p> <blockquote> <h2>19.2.7 (June 1st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Fixed missing <code>FormData</code> entries in Server Actions which regressed in 19.2.6 (<a href="https://redirect.github.com/facebook/react/pull/36566";>#36566</a> by <a href="https://github.com/unstubbable";><code>@unstubbable</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/react/commit/6117d7cca4906492c51fe6a03381e35adfd86e7d";><code>6117d7c</code></a> Version 19.2.7 (<a href="https://github.com/facebook/react/tree/HEAD/packages/react/issues/36591";>#36591</a>)</li> <li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.7/packages/react";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for react since your current version.</p> </details> <br /> Updates `@types/react` from 19.2.15 to 19.2.16 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react";>compare view</a></li> </ul> </details> <br /> Updates `react-dom` from 19.2.6 to 19.2.7 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react/releases";>react-dom's releases</a>.</em></p> <blockquote> <h2>19.2.7 (June 1st, 2026)</h2> <h2>React Server Components</h2> <ul> <li>Fixed missing <code>FormData</code> entries in Server Actions which regressed in 19.2.6 (<a href="https://redirect.github.com/facebook/react/pull/36566";>#36566</a> by <a href="https://github.com/unstubbable";><code>@unstubbable</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/facebook/react/commit/6117d7cca4906492c51fe6a03381e35adfd86e7d";><code>6117d7c</code></a> Version 19.2.7 (<a href="https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/36591";>#36591</a>)</li> <li>See full diff in <a href="https://github.com/facebook/react/commits/v19.2.7/packages/react-dom";>compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions";>GitHub Actions</a>, a new releaser for react-dom since your current version.</p> </details> <br /> Updates `react-hook-form` from 7.76.1 to 7.77.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/releases";>react-hook-form's releases</a>.</em></p> <blockquote> <h2>Version 7.77.0</h2> <p>🥡 feat: add resetDefaultValues API (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13427";>#13427</a>)</p> <p><a href="https://react-hook-form.com/docs/useform/resetdefaultvalues";>https://react-hook-form.com/docs/useform/resetdefaultvalues</a></p> <pre lang="tsx"><code>const { resetDefaultValues } = useForm(); <p>resetDefaultValues(currentValues); </code></pre></p> <p>🐚 harden get() against prototype-path traversal (<strong>proto</strong> / constructor / prototype) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13479";>#13479</a>) 🐞 fix FieldArray errors overriding nested fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13476";>#13476</a>) 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13473";>#13473</a>) 🐞 fix: preserve values with shouldUnregister (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13464";>#13464</a>) 🐞 fix stale isDirty in subscribe payload after reset(..., { keepValues: true }) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13461";>#13461</a>) 👝 save bundle size (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13468";>#13468</a>)</p> <p>thanks to <a href="https://github.com/puneetdixit200";><code>@puneetdixit200</code></a> & <a href="https://github.com/dfedoryshchev";><code>@dfedoryshchev</code></a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md";>react-hook-form's changelog</a>.</em></p> <blockquote> <h2>[7.77.0] - 2026-05-31</h2> <h3>Added</h3> <ul> <li><code>resetDefaultValues</code> API</li> </ul> <h3>Fixed</h3> <ul> <li>Stale <code>isDirty</code> in <code>subscribe</code> payload after <code>reset(..., { keepValues: true })</code></li> <li>Preserve values with <code>shouldUnregister</code></li> <li>Inconsistent <code>reset({})</code> behavior requiring double-call to take effect</li> <li><code>FieldArray</code> errors overriding nested fields</li> </ul> <h3>Security</h3> <ul> <li>Harden <code>get()</code> against prototype-path traversal (<code>__proto__</code> / <code>constructor</code> / <code>prototype</code>)</li> </ul> <h3>Performance</h3> <ul> <li>Bundle size reduction</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/5b2074157e342d0ecf2924bbd044196bfcc067fd";><code>5b20741</code></a> 7.77.0</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/f1a02d3fb0b97b1f1abe68bc522ff00989e3d8d5";><code>f1a02d3</code></a> 🧪 add regression coverage for createFormControl + useController remount defau...</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/ba88c3d5bbfdad726f79c028a9377f109c5edaf0";><code>ba88c3d</code></a> 📚 docs: fix JSDoc for UseFormWatch (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13486";>#13486</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/54198d9d807df801249ec0d33438643dcc77159d";><code>54198d9</code></a> 🥡 feat: add <code>resetDefaultValues</code> API (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13427";>#13427</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/fe8276e531f897ffcbc0c64d3d466ad49ceb072c";><code>fe8276e</code></a> 📚 docs: fix duplicate "de" in es-ES README image alt text (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13481";>#13481</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/6aa81f9e1835c85c1cba08fb929b16fbff7aa813";><code>6aa81f9</code></a> 🐚 harden <code>get()</code> against prototype-path traversal (<code>__proto__</code> / `constructor...</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/645478be493ee2d992275db6bf7bb98d64de459b";><code>645478b</code></a> 🐞 fix FieldArray errors overriding nested fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13476";>#13476</a>)</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/889c7523d6c5c68bfc3c78142782cb0a3310729d";><code>889c752</code></a> 🧪 add regression coverage for dynamic nested names with useController and wat...</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/581321c8ab8bfb5d3fe11ce7ed7004aa282f0976";><code>581321c</code></a> 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...</li> <li><a href="https://github.com/react-hook-form/react-hook-form/commit/f8eb2d7d237e290c42ec0785d2708cce942e7d54";><code>f8eb2d7</code></a> 🌭 upgrade deps (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13470";>#13470</a>)</li> <li>Additional commits viewable in <a href="https://github.com/react-hook-form/react-hook-form/compare/v7.76.1...v7.77.0";>compare view</a></li> </ul> </details> <br /> Updates `react-router-dom` from 7.15.1 to 7.16.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md";>react-router-dom's changelog</a>.</em></p> <blockquote> <h2>v7.16.0</h2> <h3>Patch Changes</h3> <ul> <li>Remove stale/invalid <code>unpkg</code> field from <code>package.json</code>. This was removed from other packages with the release of v7 but missed in the <code>react-router-dom</code> re-export package (<a href="https://redirect.github.com/remix-run/react-router/pull/15075";>#15075</a>)</li> <li>Updated dependencies: <ul> <li><a href="https://github.com/remix-run/react-router/releases/tag/[email protected]";><code>[email protected]</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/8984d23f86ca7ae5655711744b77816090bda4e6";><code>8984d23</code></a> Release v7.16.0 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/15105";>#15105</a>)</li> <li><a href="https://github.com/remix-run/react-router/commit/3ed77afcde0ad9aea79f1afe5f05a700b201f289";><code>3ed77af</code></a> chore: format</li> <li><a href="https://github.com/remix-run/react-router/commit/e96962bc6159a2290632849b55872a3878753342";><code>e96962b</code></a> fix: remove stale unpkg field from react-router-dom (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/15075";>#15075</a>)</li> <li>See full diff in <a href="https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom";>compare view</a></li> </ul> </details> <br /> Updates `@types/react` from 19.2.15 to 19.2.16 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.60.0 to 8.60.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.60.1</h2> <h2>8.60.1 (2026-06-01)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> respect ECMAScript line terminators in ts-comment rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352";>#12352</a>)</li> <li><strong>eslint-plugin:</strong> [no-shadow] correct rule to match ESLint v10 handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12182";>#12182</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>lumir</li> <li>Nevette Bailey <a href="https://github.com/nevette-bailey";><code>@nevette-bailey</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md";>@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.60.1 (2026-06-01)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-shadow] correct rule to match ESLint v10 handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12182";>#12182</a>)</li> <li><strong>eslint-plugin:</strong> respect ECMAScript line terminators in ts-comment rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352";>#12352</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>lumir</li> <li>Nevette Bailey <a href="https://github.com/nevette-bailey";><code>@nevette-bailey</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4f84a697aedc436559c3ae09b5b357d98b448d68";><code>4f84a69</code></a> chore(release): publish 8.60.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/598af564db50593277ba46c7fdea3648e4425391";><code>598af56</code></a> docs(eslint-plugin): clarify no-redeclare type-value collision not covered by...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1849b530c254fb4f89d7270160f3a998e4acd964";><code>1849b53</code></a> chore: typecheck using tsgo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12139";>#12139</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/5341d59dd3c21fc4e2bf3bce55cf35d8f84e5216";><code>5341d59</code></a> chore: fix lint issues (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12369";>#12369</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/f525814f01766487ab34a54d56de20ea5c4fb576";><code>f525814</code></a> fix(eslint-plugin): [no-shadow] correct rule to match ESLint v10 handling (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/1";>#1</a>...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2df540cd8bbeb3e2c56d516912f69bf63c1e9450";><code>2df540c</code></a> chore(eslint-plugin): defer type checks to improve rules performance (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/12296";>#12296</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1ab4284789b36cf482a4d9924719162a02d54243";><code>1ab4284</code></a> fix(eslint-plugin): respect ECMAScript line terminators in ts-comment rules (...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2f49df599b2db5f2937caf975d3c63e5cdeb0ea1";><code>2f49df5</code></a> docs: update references to <code>@stylistic/eslint-plugin</code> rules in documentation ...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/eslint-plugin";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.60.0 to 8.60.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.60.1</h2> <h2>8.60.1 (2026-06-01)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> respect ECMAScript line terminators in ts-comment rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352";>#12352</a>)</li> <li><strong>eslint-plugin:</strong> [no-shadow] correct rule to match ESLint v10 handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12182";>#12182</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>lumir</li> <li>Nevette Bailey <a href="https://github.com/nevette-bailey";><code>@nevette-bailey</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md";>@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.60.1 (2026-06-01)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4f84a697aedc436559c3ae09b5b357d98b448d68";><code>4f84a69</code></a> chore(release): publish 8.60.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1849b530c254fb4f89d7270160f3a998e4acd964";><code>1849b53</code></a> chore: typecheck using tsgo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/12139";>#12139</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/parser";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/utils` from 8.60.0 to 8.60.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/utils's releases</a>.</em></p> <blockquote> <h2>v8.60.1</h2> <h2>8.60.1 (2026-06-01)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> respect ECMAScript line terminators in ts-comment rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352";>#12352</a>)</li> <li><strong>eslint-plugin:</strong> [no-shadow] correct rule to match ESLint v10 handling (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12182";>#12182</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>lumir</li> <li>Nevette Bailey <a href="https://github.com/nevette-bailey";><code>@nevette-bailey</code></a></li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md";>@typescript-eslint/utils's changelog</a>.</em></p> <blockquote> <h2>8.60.1 (2026-06-01)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> respect ECMAScript line terminators in ts-comment rules (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12352";>#12352</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>lumir</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.60.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4f84a697aedc436559c3ae09b5b357d98b448d68";><code>4f84a69</code></a> chore(release): publish 8.60.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1849b530c254fb4f89d7270160f3a998e4acd964";><code>1849b53</code></a> chore: typecheck using tsgo (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils/issues/12139";>#12139</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/eebe74b7b32ba0e6baf3f7f7c9556a363cb696ae";><code>eebe74b</code></a> chore: remove obsolete <code>@eslint-community/eslint-utils</code> typings (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils/issues/12334";>#12334</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1ab4284789b36cf482a4d9924719162a02d54243";><code>1ab4284</code></a> fix(eslint-plugin): respect ECMAScript line terminators in ts-comment rules (...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.1/packages/utils";>compare view</a></li> </ul> </details> <br /> Updates `@vitest/coverage-v8` from 4.1.7 to 4.1.8 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/vitest-dev/vitest/releases";>@vitest/coverage-v8's releases</a>.</em></p> <blockquote> <h2>v4.1.8</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li><strong>browser</strong>: <ul> <li>Disable client <code>cdp</code> API when <code>allowWrite/allowExec: false</code> [backport to v4] - by <a href="https://github.com/hi-ogawa";><code>@hi-ogawa</code></a> and <strong>Codex</strong> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10450";>vitest-dev/vitest#10450</a> <a href="https://github.com/vitest-dev/vitest/commit/e4067b3b1";><!-- raw HTML omitted -->(e4067)<!-- raw HTML omitted --></a></li> <li>Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4] - by <a href="https://github.com/toxik";><code>@toxik</code></a> and <a href="https://github.com/Zelys-DFKH";><code>@Zelys-DFKH</code></a> in <a href="https://redirect.github.com/vitest-dev/vitest/issues/10474";>vitest-dev/vitest#10474</a> <a href="https://github.com/vitest-dev/vitest/commit/675b4343f";><!-- raw HTML omitted -->(675b4)<!-- raw HTML omitted --></a></li> </ul> </li> </ul> <h5> <a href="https://github.com/vitest-dev/vitest/compare/v4.1.7...v4.1.8";>View changes on GitHub</a></h5> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/vitest-dev/vitest/commit/e61f2dd2a0ba0a266c1c5e0334aad3799fee527f";><code>e61f2dd</code></a> chore: release v4.1.8</li> <li><a href="https://github.com/vitest-dev/vitest/commit/e4067b3b150005fd42cf75f994300119245806b9";><code>e4067b3</code></a> fix(browser): disable client <code>cdp</code> API when <code>allowWrite/allowExec: false</code> [ba...</li> <li>See full diff in <a href="https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8";>compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.4.0 to 10.4.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases";>eslint's releases</a>.</em></p> <blockquote> <h2>v10.4.1</h2> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/e557467db7496220eebcbe2ac5ea6d38c12bb1ec";><code>e557467</code></a> fix: update <code>@eslint/plugin-kit</code> version to 0.7.2 (<a href="https://redirect.github.com/eslint/eslint/issues/20930";>#20930</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/d4ce898796ca22c3b96aa70d3014cb85f4bac1cd";><code>d4ce898</code></a> fix: propagate failures from delegated commands (<a href="https://redirect.github.com/eslint/eslint/issues/20917";>#20917</a>) (Minh Vu)</li> <li><a href="https://github.com/eslint/eslint/commit/f4f3507460bc016b5be979c05d2969793f570cbf";><code>f4f3507</code></a> fix: prefer-arrow-callback invalid autofix with newline after <code>async</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20916";>#20916</a>) (kuldeep kumar)</li> <li><a href="https://github.com/eslint/eslint/commit/c5bc78b37e08b9054a11f0cc2d81808bb24acb85";><code>c5bc78b</code></a> fix: false positive for reference in <code>finally</code> block (<a href="https://redirect.github.com/eslint/eslint/issues/20655";>#20655</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/27538c01f5df4e9306f6f4ba867b2dd6307fae59";><code>27538c0</code></a> fix: add missing CodePath and CodePathSegment types (<a href="https://redirect.github.com/eslint/eslint/issues/20853";>#20853</a>) (Pixel998)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/61b0add61ffc52665562be7bb96f526690a78b30";><code>61b0add</code></a> docs: remove deprecated rule from related rules of <code>max-params</code> (<a href="https://redirect.github.com/eslint/eslint/issues/20921";>#20921</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/305d5b91aeac24d36fde42f75625a8f183d4ce43";><code>305d5b9</code></a> docs: remove deprecated rules from related rules section (<a href="https://redirect.github.com/eslint/eslint/issues/20911";>#20911</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/49b0202d01918b8061720d586dffd7c68047090c";><code>49b0202</code></a> docs: fix <code>display: none</code> of ad (<a href="https://redirect.github.com/eslint/eslint/issues/20901";>#20901</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/9067f9492ec998afc5b4f057a477ecf6ebd45e44";><code>9067f94</code></a> docs: switch build to Node.js 24 (<a href="https://redirect.github.com/eslint/eslint/issues/20893";>#20893</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/c91b0417e3420c76807ce1fa2aea76e2de87ab86";><code>c91b041</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/e349265cb37f3ebc837e178e48a725bb782bd870";><code>e349265</code></a> docs: clarify semver strings in rule deprecation objects (<a href="https://redirect.github.com/eslint/eslint/issues/20885";>#20885</a>) (Milos Djermanovic)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/b0e466b6ab47bfc7de43d8de0c315d8ee83aa584";><code>b0e466b</code></a> test: add <code>data</code> property to invalid tests cases for rules (<a href="https://redirect.github.com/eslint/eslint/issues/20924";>#20924</a>) (Tanuj Kanti)</li> <li><a href="https://github.com/eslint/eslint/commit/f78838bc4c86d487e1bcc7cede260c4467721c46";><code>f78838b</code></a> test: add CodePath type coverage (<a href="https://redirect.github.com/eslint/eslint/issues/20904";>#20904</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/1daa4bd734b79a62e317d0394394a6b38cff49f9";><code>1daa4bd</code></a> chore: update <code>eslint-plugin-eslint-comments</code> test data to latest commit (<a href="https://redirect.github.com/eslint/eslint/issues/20922";>#20922</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/002942ce988ea28b78e0a2f3b074081e638b552c";><code>002942c</code></a> ci: declare contents:read on update-readme workflow (<a href="https://redirect.github.com/eslint/eslint/issues/20919";>#20919</a>) (Arpit Jain)</li> <li><a href="https://github.com/eslint/eslint/commit/64bca24e7bed35bc3c864fc625cb2d89eca87d5b";><code>64bca24</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20912";>#20912</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/6d7c832950d5e92499d88e504080661f888f8f56";><code>6d7c832</code></a> chore: ignore fflate updates in renovate (<a href="https://redirect.github.com/eslint/eslint/issues/20908";>#20908</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/b2c86382164d87c6203b78d52068cd6a2a6ffe30";><code>b2c8638</code></a> ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (<a href="https://redirect.github.com/eslint/eslint/issues/20889";>#20889</a>) (dependabot[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/a9b8d7f74c50211701cfc49710fa541fd91b2aa5";><code>a9b8d7f</code></a> chore: increase maxBuffer for ecosystem tests (<a href="https://redirect.github.com/eslint/eslint/issues/20881";>#20881</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/b702ead5e1ed7cb9f28238a454797662efb37396";><code>b702ead</code></a> chore: update ecosystem update PR settings (<a href="https://redirect.github.com/eslint/eslint/issues/20884";>#20884</a>) (Pixel998)</li> <li><a href="https://github.com/eslint/eslint/commit/507f60e9a78c9a902bc8759f066ae17a1ea6cd81";><code>507f60e</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/20882";>#20882</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/92f5c5bb6bf3a5d167c8ee53a430833410295c6d";><code>92f5c5b</code></a> test: add unit test for message-count (<a href="https://redirect.github.com/eslint/eslint/issues/20878";>#20878</a>) (kuldeep kumar)</li> <li><a href="https://github.com/eslint/eslint/commit/df321080af5758b1fa25e4b9a40e26135642dd6e";><code>df32108</code></a> chore: add <code>@eslint/markdown</code> and typescript-eslint ecosystem tests (<a href="https://redirect.github.com/eslint/eslint/issues/20837";>#20837</a>) (sethamus)</li> <li><a href="https://github.com/eslint/eslint/commit/327f91d36aa49f2a50ded931d841a16374fd875f";><code>327f91d</code></a> chore: use includeIgnoreFile internally (<a href="https://redirect.github.com/eslint/eslint/issues/20876";>#20876</a>) (Kirk Waiblinger)</li> <li><a href="https://github.com/eslint/eslint/commit/f0dc4bd893fb3a9f44e4ddc3ad7063ffb0beacd3";><code>f0dc4bd</code></a> chore: pin [email protected] (<a href="https://redirect.github.com/eslint/eslint/issues/20877";>#20877</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/0f4bd257a67a082b756de746d9e0c4842ab764ca";><code>0f4bd25</code></a> ci: run Discord alert for ecosystem test failures (<a href="https://redirect.github.com/eslint/eslint/issues/20873";>#20873</a>) (Copilot)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/4a3d15a99c452c4db2fd56b577fa7597e98ab0c2";><code>4a3d15a</code></a> 10.4.1</li> <li><a href="https://github.com/eslint/eslint/commit/43e7e2bdc5c6cacc535446b7d23c10f780384ba8";><code>43e7e2b</code></a> Build: changelog update for 10.4.1</li> <li><a href="https://github.com/eslint/eslint/commit/e557467db7496220eebcbe2ac5ea6d38c12bb1ec";><code>e557467</code></a> fix: update <code>@eslint/plugin-kit</code> version... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
