dependabot[bot] opened a new pull request, #76617: URL: https://github.com/apache/airflow/pull/76617
Bumps the 3-4-auth-ui-package-updates group with 9 updates in the /airflow-core/src/airflow/api_fastapi/auth/managers/simple/ui directory: | Package | From | To | | --- | --- | --- | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.105.0` | `5.105.2` | | [axios](https://github.com/axios/axios) | `1.20.0` | `1.21.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.4` | `7.18.5` | | [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.72.0` | `8.72.1` | | [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.72.0` | `8.72.1` | | [@typescript-eslint/utils](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils) | `8.72.0` | `8.72.1` | | [eslint](https://github.com/eslint/eslint) | `10.13.0` | `10.14.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.72.0` | `8.72.1` | | [vite-plugin-css-injected-by-js](https://github.com/marco-prontera/vite-plugin-css-injected-by-js) | `5.0.2` | `5.0.3` | Updates `@tanstack/react-query` from 5.105.0 to 5.105.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/releases";>@tanstack/react-query's releases</a>.</em></p> <blockquote> <h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.105.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a>, <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a>]: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> <li><code>@tanstack/query-devtools</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5";><code>@5</code></a>.105.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a>, <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a>]: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> </ul> </li> </ul> <h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5";><code>@5</code></a>.105.2</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a>, <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a>]: <ul> <li><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> <li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> </ul> </li> </ul> <h2><code>@tanstack/react-query</code><a href="https://github.com/5";><code>@5</code></a>.105.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/12230";>#12230</a> <a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a> - Update the observer options before subscribing so revealing an <code><Activity></code> tree whose query key changed while hidden no longer fetches the previous key.</p> </li> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/12480";>#12480</a> <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a> - Exclude <code>status</code> from the filters accepted by <code>QueryClient.isMutating</code>, <code>useIsMutating</code>, and <code>injectIsMutating</code>. These APIs always count mutations with <code>status: 'pending'</code>.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/TanStack/query/commit/2ee2fd935acd88532255947c4b5e29baffd21ce8";><code>2ee2fd9</code></a>, <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a>, <a href="https://github.com/TanStack/query/commit/e69cac69d99cc3c4f6f32b2ad8aad53da83b4a72";><code>e69cac6</code></a>, <a href="https://github.com/TanStack/query/commit/f2215d25945e6461252b7c32bf822f31239e507e";><code>f2215d2</code></a>, <a href="https://github.com/TanStack/query/commit/86e79571fd45f29ab7d172102fdd718d3b8bde69";><code>86e7957</code></a>, <a href="https://github.com/TanStack/query/commit/b6576b388f2784839081358fa82744b0aacdeecd";><code>b6576b3</code></a>, <a href="https://github.com/TanStack/query/commit/af0e0ef5fc04e9d232fdc3aebd24ffe528b256d7";><code>af0e0ef</code></a>, <a href="https://github.com/TanStack/query/commit/05d9b6a40b9d4ac49943e9d881789e098db5bdfa";><code>05d9b6a</code></a>]:</p> <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md";>@tanstack/react-query's changelog</a>.</em></p> <blockquote> <h2>5.105.2</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/12230";>#12230</a> <a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a> - Update the observer options before subscribing so revealing an <code><Activity></code> tree whose query key changed while hidden no longer fetches the previous key.</p> </li> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/12480";>#12480</a> <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a> - Exclude <code>status</code> from the filters accepted by <code>QueryClient.isMutating</code>, <code>useIsMutating</code>, and <code>injectIsMutating</code>. These APIs always count mutations with <code>status: 'pending'</code>.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/TanStack/query/commit/2ee2fd935acd88532255947c4b5e29baffd21ce8";><code>2ee2fd9</code></a>, <a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a>, <a href="https://github.com/TanStack/query/commit/e69cac69d99cc3c4f6f32b2ad8aad53da83b4a72";><code>e69cac6</code></a>, <a href="https://github.com/TanStack/query/commit/f2215d25945e6461252b7c32bf822f31239e507e";><code>f2215d2</code></a>, <a href="https://github.com/TanStack/query/commit/86e79571fd45f29ab7d172102fdd718d3b8bde69";><code>86e7957</code></a>, <a href="https://github.com/TanStack/query/commit/b6576b388f2784839081358fa82744b0aacdeecd";><code>b6576b3</code></a>, <a href="https://github.com/TanStack/query/commit/af0e0ef5fc04e9d232fdc3aebd24ffe528b256d7";><code>af0e0ef</code></a>, <a href="https://github.com/TanStack/query/commit/05d9b6a40b9d4ac49943e9d881789e098db5bdfa";><code>05d9b6a</code></a>]:</p> <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.105.2</li> </ul> </li> </ul> <h2>5.105.1</h2> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/11373";>#11373</a> <a href="https://github.com/TanStack/query/commit/7ccba6e959fcb9c51e691db9e2b09ff41d21e0b6";><code>7ccba6e</code></a> - fix({react,preact,angular,solid,vue}-query/infiniteQueryOptions): correct the overload selected for a possibly-undefined 'initialData'</p> </li> <li> <p><a href="https://redirect.github.com/TanStack/query/pull/12390";>#12390</a> <a href="https://github.com/TanStack/query/commit/18e54bfac3dc3756afdb8840418d831c61bc15bf";><code>18e54bf</code></a> - Exclude <code>fetchStatus</code> from the filters accepted by <code>QueryClient.isFetching</code>, <code>useIsFetching</code>, and <code>injectIsFetching</code>. These APIs always count queries with <code>fetchStatus: 'fetching'</code>.</p> </li> <li> <p>Updated dependencies [<a href="https://github.com/TanStack/query/commit/6f8a48d543b499b6d9b0e95050c28183c8c18ae0";><code>6f8a48d</code></a>, <a href="https://github.com/TanStack/query/commit/18e54bfac3dc3756afdb8840418d831c61bc15bf";><code>18e54bf</code></a>]:</p> <ul> <li><code>@tanstack/query-core</code><a href="https://github.com/5";><code>@5</code></a>.105.1</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/TanStack/query/commit/d6b2b643f64cf29d18563d326700b61cc09fd432";><code>d6b2b64</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/12476";>#12476</a>)</li> <li><a href="https://github.com/TanStack/query/commit/8d0dc278a728a97eb677b6f2baf37d1677c2edc1";><code>8d0dc27</code></a> fix(query-core): exclude status from mutation count filters (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/12480";>#12480</a>)</li> <li><a href="https://github.com/TanStack/query/commit/1e1caa5a32847969f7157627cd805bd8103cd873";><code>1e1caa5</code></a> fix({react,preact}-query): set the observer options before subscribing (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/12230";>#12230</a>)</li> <li><a href="https://github.com/TanStack/query/commit/a6be1cede9b69b56ee0bd6c84641dd3899c86ed2";><code>a6be1ce</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/12391";>#12391</a>)</li> <li><a href="https://github.com/TanStack/query/commit/979695d0a2daa8662bdfcbf9f4ae9c9805d97dec";><code>979695d</code></a> docs({react,preact,angular,solid,svelte,vue}-query): describe when the 'Defin...</li> <li><a href="https://github.com/TanStack/query/commit/7ccba6e959fcb9c51e691db9e2b09ff41d21e0b6";><code>7ccba6e</code></a> fix({react,preact,angular,solid,vue}-query/infiniteQueryOptions): correct the...</li> <li><a href="https://github.com/TanStack/query/commit/18e54bfac3dc3756afdb8840418d831c61bc15bf";><code>18e54bf</code></a> fix(query-core): exclude fetchStatus from fetching filters (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/12390";>#12390</a>)</li> <li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/[email protected]/packages/react-query";>compare view</a></li> </ul> </details> <br /> Updates `axios` from 1.20.0 to 1.21.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/releases";>axios's releases</a>.</em></p> <blockquote> <h2>v1.21.0 — October 21, 2026</h2> <p>This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.</p> <h2>⚠️ Breaking Changes & Deprecations</h2> <ul> <li><strong>Header Defaults:</strong> Only plain objects, null-prototype maps, and compatible <code>AxiosHeaders</code> instances are treated as common or method-specific defaults; literal headers such as <code>Link</code> are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example <code>{ post: { ...customDefaults } }</code>, or compatible <code>AxiosHeaders</code>. Otherwise, those instances become literal header values, including on requests using other methods. (<strong><a href="https://redirect.github.com/axios/axios/pull/11156";>#11156</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Response Timing:</strong> Added <code>response.duration</code>, in milliseconds, including on <code>error.response</code> when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing <code>duration</code> value supplied by a custom adapter. (<strong><a href="https://redirect.github.com/axios/axios/pull/11214";>#11214</a></strong>)</li> <li><strong>UTF-8 Basic Authentication:</strong> Added <code>transitional.encodeBasicAuthUsername: true</code> to support Unicode usernames in XHR and Fetch requests. The option defaults to <code>false</code>, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (<strong><a href="https://redirect.github.com/axios/axios/pull/11159";>#11159</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Fetch Compatibility:</strong> Restored requests in runtimes such as Cloudflare Workers that reject the implicit <code>cache: 'default'</code>, while preserving explicit caller settings. Response-size failures now retain their original <code>ERR_BAD_RESPONSE</code> and request context when runtime wrappers replace the underlying stream error. (<strong><a href="https://redirect.github.com/axios/axios/pull/11194";>#11194</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11179";>#11179</a></strong>)</li> <li><strong>Runtime Consistency:</strong> Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with <code>ERR_BAD_OPTION_VALUE</code>, and sparse or non-index numeric form fields serialize as keyed objects. With <code>proxy: false</code>, native <code>proxyEnv</code> agents using unsupported pool-management or TLS-session lifecycle overrides now reject with <code>ERR_BAD_OPTION_VALUE</code>; construct those agents without <code>proxyEnv</code>. (<strong><a href="https://redirect.github.com/axios/axios/pull/11242";>#11242</a></strong>)</li> <li><strong>Header Handling:</strong> Preserved headers named <code>__proto__</code> using safe casing without changing the <code>AxiosHeaders</code> instance prototype. Function matchers in <code>has()</code>, <code>delete()</code>, and <code>clear()</code> now receive the headers instance as <code>this</code>, matching their declared contract. (<strong><a href="https://redirect.github.com/axios/axios/pull/11134";>#11134</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11216";>#11216</a></strong>)</li> <li><strong>URL and Data URL Parsing:</strong> Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (<strong><a href="https://redirect.github.com/axios/axios/pull/11138";>#11138</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11163";>#11163</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11294";>#11294</a></strong>)</li> <li><strong>Error Diagnostics:</strong> Preserved short reconstructed request stacks and appended wrapped error stacks under <code>Caused by:</code> so tooling that reads only <code>error.stack</code> retains the original failure context. (<strong><a href="https://redirect.github.com/axios/axios/pull/11132";>#11132</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11142";>#11142</a></strong>)</li> <li><strong>Interceptor Removal:</strong> Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (<strong><a href="https://redirect.github.com/axios/axios/pull/11139";>#11139</a></strong>)</li> <li><strong>Proxy TLS:</strong> HTTPS CONNECT tunnels now apply current origin TLS options from an explicit <code>httpsAgent</code>, or from <code>https.globalAgent</code> when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (<strong><a href="https://redirect.github.com/axios/axios/pull/11178";>#11178</a></strong>)</li> <li><strong>XHR Lifecycle:</strong> Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (<strong><a href="https://redirect.github.com/axios/axios/pull/11166";>#11166</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11225";>#11225</a></strong>)</li> <li><strong>HTTP/2 Sessions:</strong> Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (<strong><a href="https://redirect.github.com/axios/axios/pull/11210";>#11210</a></strong>)</li> <li><strong>TypeScript Declarations:</strong> Exposed the response-default marker as a public type to resolve <code>TS2527</code> when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (<strong><a href="https://redirect.github.com/axios/axios/pull/11125";>#11125</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Configuration Performance:</strong> Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (<strong><a href="https://redirect.github.com/axios/axios/pull/11208";>#11208</a></strong>)</li> <li><strong>Same-Origin Checks:</strong> Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (<strong><a href="https://redirect.github.com/axios/axios/pull/11174";>#11174</a></strong>)</li> <li><strong>Dependencies:</strong> Updated <code>follow-redirects</code> to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused <code>dayjs</code> from the docs package, root <code>chalk</code>, and <code>chai</code> from CJS module tests. (<strong><a href="https://redirect.github.com/axios/axios/pull/11169";>#11169</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11188";>#11188</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11189";>#11189</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11195";>#11195</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11212";>#11212</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11213";>#11213</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11218";>#11218</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11220";>#112 20</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11221";>#11221</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11230";>#11230</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11234";>#11234</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11244";>#11244</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11245";>#11245</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11266";>#11266</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11267";>#11267</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11268";>#11268</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11269";>#11269</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11270";>#11270</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11271";>#11271</a>< /strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11272";>#11272</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11298";>#11298</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11302";>#11302</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11303";>#11303</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11304";>#11304</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11305";>#11305</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11306";>#11306</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11313";>#11313</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11321";>#11321</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11322";>#11322</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11323";>#11323</a></strong >, <strong><a >href="https://redirect.github.com/axios/axios/pull/11342";>#11342</a></strong>)</li> <li><strong>Documentation:</strong> Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (<strong><a href="https://redirect.github.com/axios/axios/pull/11228";>#11228</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11149";>#11149</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11335";>#11335</a></strong>)</li> <li><strong>Contributor Workflow:</strong> Consolidated agent instructions in <code>AGENTS.md</code>, standardized PR labels, required prerelease notes and validation evidence, and clarified that <code>npm test</code> requires installed Playwright browsers. (<strong><a href="https://redirect.github.com/axios/axios/pull/11238";>#11238</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11273";>#11273</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11223";>#11223</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11284";>#11284</a></strong>)</li> <li><strong>Sponsors and Support:</strong> Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (<strong><a href="https://redirect.github.com/axios/axios/pull/11222";>#11222</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11249";>#11249</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11252";>#11252</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11341";>#11341</a></strong>)</li> <li><strong>Proxy Regression Coverage:</strong> Added a long dotted request-hostname test for <code>NO_PROXY</code> handling, extending coverage of an existing denial-of-service fix. (<strong><a href="https://redirect.github.com/axios/axios/pull/11235";>#11235</a></strong>)</li> <li><strong>Release Preparation:</strong> Updated package version metadata for 1.21.0. (<strong><a href="https://redirect.github.com/axios/axios/pull/11346";>#11346</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>Welcome to our 24 new contributors. Thank you for helping improve Axios:</p> <ul> <li><strong><a href="https://github.com/lazerg";><code>@lazerg</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11194";>#11194</a></strong>)</li> <li><strong><a href="https://github.com/QIU-Guanzong";><code>@QIU-Guanzong</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11228";>#11228</a></strong>)</li> <li><strong><a href="https://github.com/Iams4kura";><code>@Iams4kura</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11125";>#11125</a></strong>)</li> <li><strong><a href="https://github.com/vjymisal0";><code>@vjymisal0</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11179";>#11179</a></strong>)</li> <li><strong><a href="https://github.com/jarrensj";><code>@jarrensj</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11238";>#11238</a></strong>)</li> <li><strong><a href="https://github.com/LineGu";><code>@LineGu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11132";>#11132</a></strong>)</li> <li><strong><a href="https://github.com/luantaraschi";><code>@luantaraschi</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11134";>#11134</a></strong>)</li> <li><strong><a href="https://github.com/Cyberhet";><code>@Cyberhet</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11284";>#11284</a></strong>)</li> <li><strong><a href="https://github.com/nyxst4ck";><code>@nyxst4ck</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11138";>#11138</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md";>axios's changelog</a>.</em></p> <blockquote> <h2>v1.21.0 — October 21, 2026</h2> <p>This release adds response timing and opt-in UTF-8 Basic authentication, improves request handling across runtimes, and changes how header defaults are recognized.</p> <h2>⚠️ Breaking Changes & Deprecations</h2> <ul> <li><strong>Header Defaults:</strong> Only plain objects, null-prototype maps, and compatible <code>AxiosHeaders</code> instances are treated as common or method-specific defaults; literal headers such as <code>Link</code> are now preserved. Applications using custom class instances as defaults must convert them to plain maps, for example <code>{ post: { ...customDefaults } }</code>, or compatible <code>AxiosHeaders</code>. Otherwise, those instances become literal header values, including on requests using other methods. (<strong><a href="https://redirect.github.com/axios/axios/pull/11156";>#11156</a></strong>)</li> </ul> <h2>🚀 New Features</h2> <ul> <li><strong>Response Timing:</strong> Added <code>response.duration</code>, in milliseconds, including on <code>error.response</code> when present. Timing measures adapter execution and excludes interceptors and transforms; streamed responses stop timing when the stream becomes available. Axios replaces any existing <code>duration</code> value supplied by a custom adapter. (<strong><a href="https://redirect.github.com/axios/axios/pull/11214";>#11214</a></strong>)</li> <li><strong>UTF-8 Basic Authentication:</strong> Added <code>transitional.encodeBasicAuthUsername: true</code> to support Unicode usernames in XHR and Fetch requests. The option defaults to <code>false</code>, preserving existing authentication behavior; applications opting in should supply the original Unicode username and remove manual pre-encoding workarounds. (<strong><a href="https://redirect.github.com/axios/axios/pull/11159";>#11159</a></strong>)</li> </ul> <h2>🐛 Bug Fixes</h2> <ul> <li><strong>Fetch Compatibility:</strong> Restored requests in runtimes such as Cloudflare Workers that reject the implicit <code>cache: 'default'</code>, while preserving explicit caller settings. Response-size failures now retain their original <code>ERR_BAD_RESPONSE</code> and request context when runtime wrappers replace the underlying stream error. (<strong><a href="https://redirect.github.com/axios/axios/pull/11194";>#11194</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11179";>#11179</a></strong>)</li> <li><strong>Runtime Consistency:</strong> Aligned encoded-byte size accounting, multipart uploads, proxy routing, same-origin resolution, parameter merging, and form serialization across adapters. Circular parameters now reject with <code>ERR_BAD_OPTION_VALUE</code>, and sparse or non-index numeric form fields serialize as keyed objects. With <code>proxy: false</code>, native <code>proxyEnv</code> agents using unsupported pool-management or TLS-session lifecycle overrides now reject with <code>ERR_BAD_OPTION_VALUE</code>; construct those agents without <code>proxyEnv</code>. (<strong><a href="https://redirect.github.com/axios/axios/pull/11242";>#11242</a></strong>)</li> <li><strong>Header Handling:</strong> Preserved headers named <strong><code>__proto__</code></strong> using safe casing without changing the <code>AxiosHeaders</code> instance prototype. Function matchers in <code>has()</code>, <code>delete()</code>, and <code>clear()</code> now receive the headers instance as <code>this</code>, matching their declared contract. (<strong><a href="https://redirect.github.com/axios/axios/pull/11134";>#11134</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11216";>#11216</a></strong>)</li> <li><strong>URL and Data URL Parsing:</strong> Accepted case-insensitive supported URL schemes and Base64 markers, and corrected decoding of percent-encoded Base64 data URLs. Node data URL allocation estimates remain aligned with decoding so configured size limits apply before allocation. (<strong><a href="https://redirect.github.com/axios/axios/pull/11138";>#11138</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11163";>#11163</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11294";>#11294</a></strong>)</li> <li><strong>Error Diagnostics:</strong> Preserved short reconstructed request stacks and appended wrapped error stacks under <code>Caused by:</code> so tooling that reads only <code>error.stack</code> retains the original failure context. (<strong><a href="https://redirect.github.com/axios/axios/pull/11132";>#11132</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11142";>#11142</a></strong>)</li> <li><strong>Interceptor Removal:</strong> Restored removal through canonical numeric-string interceptor IDs, including after registry compaction. (<strong><a href="https://redirect.github.com/axios/axios/pull/11139";>#11139</a></strong>)</li> <li><strong>Proxy TLS:</strong> HTTPS CONNECT tunnels now apply current origin TLS options from an explicit <code>httpsAgent</code>, or from <code>https.globalAgent</code> when no explicit agent is supplied. This preserves process-wide custom CA settings through proxy tunnels. (<strong><a href="https://redirect.github.com/axios/axios/pull/11178";>#11178</a></strong>)</li> <li><strong>XHR Lifecycle:</strong> Used asynchronous Cookie Store reads for XSRF tokens where supported, preserving cookie fallback, timeout accounting, and cancellation. Upload and download progress listeners are now removed on completion, failure, timeout, and cancellation. (<strong><a href="https://redirect.github.com/axios/axios/pull/11166";>#11166</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11225";>#11225</a></strong>)</li> <li><strong>HTTP/2 Sessions:</strong> Stopped reusing sessions immediately after GOAWAY and prevented draining sessions from scheduling idle timers that could delay process exit. (<strong><a href="https://redirect.github.com/axios/axios/pull/11210";>#11210</a></strong>)</li> <li><strong>TypeScript Declarations:</strong> Exposed the response-default marker as a public type to resolve <code>TS2527</code> when consumers emit declarations involving unresolved response generics, covering both ESM and CommonJS. (<strong><a href="https://redirect.github.com/axios/axios/pull/11125";>#11125</a></strong>)</li> </ul> <h2>🔧 Maintenance & Chores</h2> <ul> <li><strong>Configuration Performance:</strong> Reduced request configuration merge overhead, particularly for requests with many headers, while preserving merge semantics and prototype-pollution guards. (<strong><a href="https://redirect.github.com/axios/axios/pull/11208";>#11208</a></strong>)</li> <li><strong>Same-Origin Checks:</strong> Removed obsolete Internet Explorer detection without changing origin decisions in supported environments. (<strong><a href="https://redirect.github.com/axios/axios/pull/11174";>#11174</a></strong>)</li> <li><strong>Dependencies:</strong> Updated <code>follow-redirects</code> to 1.16.1 and refreshed development, documentation, test, and GitHub Actions dependencies. Removed unused <code>dayjs</code> from the docs package, root <code>chalk</code>, and <code>chai</code> from CJS module tests. (<strong><a href="https://redirect.github.com/axios/axios/pull/11169";>#11169</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11188";>#11188</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11189";>#11189</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11195";>#11195</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11212";>#11212</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11213";>#11213</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11218";>#11218</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11220";>#112 20</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11221";>#11221</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11230";>#11230</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11234";>#11234</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11244";>#11244</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11245";>#11245</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11266";>#11266</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11267";>#11267</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11268";>#11268</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11269";>#11269</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11270";>#11270</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11271";>#11271</a>< /strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11272";>#11272</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11298";>#11298</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11302";>#11302</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11303";>#11303</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11304";>#11304</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11305";>#11305</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11306";>#11306</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11313";>#11313</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11321";>#11321</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11322";>#11322</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11323";>#11323</a></strong >, <strong><a >href="https://redirect.github.com/axios/axios/pull/11342";>#11342</a></strong>)</li> <li><strong>Documentation:</strong> Fixed interceptor test links, updated README CDN examples to the published 1.20.0 bundle, and corrected guidance on interceptor options and request lifecycle ordering. (<strong><a href="https://redirect.github.com/axios/axios/pull/11228";>#11228</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11149";>#11149</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11335";>#11335</a></strong>)</li> <li><strong>Contributor Workflow:</strong> Consolidated agent instructions in <code>AGENTS.md</code>, standardized PR labels, required prerelease notes and validation evidence, and clarified that <code>npm test</code> requires installed Playwright browsers. (<strong><a href="https://redirect.github.com/axios/axios/pull/11238";>#11238</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11273";>#11273</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11223";>#11223</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11284";>#11284</a></strong>)</li> <li><strong>Sponsors and Support:</strong> Added HeroDevs, Code for Japan, and Sweepico sponsor listings, refreshed sponsor data, and documented extended security support for Axios v0. (<strong><a href="https://redirect.github.com/axios/axios/pull/11222";>#11222</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11249";>#11249</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11252";>#11252</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/pull/11341";>#11341</a></strong>)</li> <li><strong>Proxy Regression Coverage:</strong> Added a long dotted request-hostname test for <code>NO_PROXY</code> handling, extending coverage of an existing denial-of-service fix. (<strong><a href="https://redirect.github.com/axios/axios/pull/11235";>#11235</a></strong>)</li> <li><strong>Release Preparation:</strong> Updated package version metadata for 1.21.0. (<strong><a href="https://redirect.github.com/axios/axios/pull/11346";>#11346</a></strong>)</li> </ul> <h2>🌟 New Contributors</h2> <p>Welcome to our 24 new contributors. Thank you for helping improve Axios:</p> <ul> <li><strong><a href="https://github.com/lazerg";><code>@lazerg</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11194";>#11194</a></strong>)</li> <li><strong><a href="https://github.com/QIU-Guanzong";><code>@QIU-Guanzong</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11228";>#11228</a></strong>)</li> <li><strong><a href="https://github.com/Iams4kura";><code>@Iams4kura</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11125";>#11125</a></strong>)</li> <li><strong><a href="https://github.com/vjymisal0";><code>@vjymisal0</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11179";>#11179</a></strong>)</li> <li><strong><a href="https://github.com/jarrensj";><code>@jarrensj</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11238";>#11238</a></strong>)</li> <li><strong><a href="https://github.com/LineGu";><code>@LineGu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11132";>#11132</a></strong>)</li> <li><strong><a href="https://github.com/luantaraschi";><code>@luantaraschi</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11134";>#11134</a></strong>)</li> <li><strong><a href="https://github.com/Cyberhet";><code>@Cyberhet</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11284";>#11284</a></strong>)</li> <li><strong><a href="https://github.com/nyxst4ck";><code>@nyxst4ck</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/pull/11138";>#11138</a></strong>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/axios/axios/commit/aa54a5e1e0e50cd1a2561b854ae5490ff589d065";><code>aa54a5e</code></a> docs: remove cancelled sponsors from README (<a href="https://redirect.github.com/axios/axios/issues/11369";>#11369</a>)</li> <li><a href="https://github.com/axios/axios/commit/e6b79d9cef796ca3a903bb83e51d4752b019fd67";><code>e6b79d9</code></a> chore(release): prepare release 1.21.0 (<a href="https://redirect.github.com/axios/axios/issues/11346";>#11346</a>)</li> <li><a href="https://github.com/axios/axios/commit/fceeb10997ea71778ad8bc9671ad53e9195a707c";><code>fceeb10</code></a> chore(deps-dev): bump the development_dependencies group with 4 updates (<a href="https://redirect.github.com/axios/axios/issues/11342";>#11342</a>)</li> <li><a href="https://github.com/axios/axios/commit/7d15df3f4cff1be2f1ed397f98170aadef399071";><code>7d15df3</code></a> docs: refresh sponsor data (<a href="https://redirect.github.com/axios/axios/issues/11341";>#11341</a>)</li> <li><a href="https://github.com/axios/axios/commit/8d8e84401d38c2a9c62acd18b3df17478a0caf6b";><code>8d8e844</code></a> docs: correct interceptor options and request lifecycle guide (<a href="https://redirect.github.com/axios/axios/issues/11335";>#11335</a>)</li> <li><a href="https://github.com/axios/axios/commit/326843a3902d73c9f6af9bad7b55e2412566a251";><code>326843a</code></a> test(no-proxy): cover the request-hostname path with a long dotted host (<a href="https://redirect.github.com/axios/axios/issues/11235";>#11235</a>)</li> <li><a href="https://github.com/axios/axios/commit/e5195ecf405cf791b7ad2715156d6bc98b5f3928";><code>e5195ec</code></a> feat(core): expose request duration on the response (<a href="https://redirect.github.com/axios/axios/issues/11214";>#11214</a>)</li> <li><a href="https://github.com/axios/axios/commit/8d415e6af9cd50a8ae27331a53b4aaf9f7e24612";><code>8d415e6</code></a> fix(headers): bind matcher callbacks to the headers instance (<a href="https://redirect.github.com/axios/axios/issues/11216";>#11216</a>)</li> <li><a href="https://github.com/axios/axios/commit/b16dd7787807f7f15e5fb1a3e39b7d190c312b2e";><code>b16dd77</code></a> fix(xhr): remove progress event listeners on request completion (<a href="https://redirect.github.com/axios/axios/issues/11225";>#11225</a>)</li> <li><a href="https://github.com/axios/axios/commit/790b2ca8b6d8486dde3ce54cda20990ba91b0831";><code>790b2ca</code></a> chore(deps): bump the github-actions group with 3 updates (<a href="https://redirect.github.com/axios/axios/issues/11323";>#11323</a>)</li> <li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.20.0...v1.21.0";>compare view</a></li> </ul> </details> <br /> Updates `react-router-dom` from 7.18.4 to 7.18.5 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/remix-run/react-router/blob/[email protected]/packages/react-router-dom/CHANGELOG.md";>react-router-dom's changelog</a>.</em></p> <blockquote> <h2>v7.18.5</h2> <h3>Patch Changes</h3> <ul> <li>Updated dependencies: <ul> <li><a href="https://github.com/remix-run/react-router/releases/tag/[email protected]";><code>[email protected]</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/remix-run/react-router/commit/1ad93b4cb4b045366b7d73639de34787812ad5b5";><code>1ad93b4</code></a> Release v7.18.5 (<a href="https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom/issues/15705";>#15705</a>)</li> <li>See full diff in <a href="https://github.com/remix-run/react-router/commits/[email protected]/packages/react-router-dom";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/eslint-plugin` from 8.72.0 to 8.72.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/eslint-plugin's releases</a>.</em></p> <blockquote> <h2>v8.72.1</h2> <h2>8.72.1 (2026-10-26)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] false positives on unresolved conditional types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13062";>#13062</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13039";>#13039</a>)</li> <li><strong>typescript-estree:</strong> use one Program per tsconfig for the project service in single-run mode (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12988";>#12988</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>Josh Ghoulberg 👻</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md";>@typescript-eslint/eslint-plugin's changelog</a>.</em></p> <blockquote> <h2>8.72.1 (2026-10-26)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13039";>#13039</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] false positives on unresolved conditional types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13062";>#13062</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>Josh Ghoulberg 👻</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ad6b7553781fa3c93fc26642d7219d2e6624504";><code>4ad6b75</code></a> chore(release): publish 8.72.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/77576945345c1537635e617ea0d4b34b003b15ff";><code>7757694</code></a> chore: cleanup typecheck & build and fix race condition (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/13071";>#13071</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/1166ba20e9e484167ebfe216fdb38e605e3f7598";><code>1166ba2</code></a> chore(type-utils): detect methods in isTypeReadonly without reading the inter...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/2f0343a694bee1ba9815e4a0f946295452deb082";><code>2f0343a</code></a> fix(eslint-plugin): [no-unnecessary-type-assertion] bound recursive type trav...</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/c49d287f046c794133b12fa94207e5ee3b846ddd";><code>c49d287</code></a> chore: [ci] test on oldest supported TS version (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin/issues/13024";>#13024</a>)</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/594fe286ec518c6899a9b89141cf3220bcfb9f72";><code>594fe28</code></a> fix(eslint-plugin): [no-unnecessary-condition] false positives on unresolved ...</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/eslint-plugin";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/parser` from 8.72.0 to 8.72.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/parser's releases</a>.</em></p> <blockquote> <h2>v8.72.1</h2> <h2>8.72.1 (2026-10-26)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] false positives on unresolved conditional types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13062";>#13062</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13039";>#13039</a>)</li> <li><strong>typescript-estree:</strong> use one Program per tsconfig for the project service in single-run mode (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12988";>#12988</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>Josh Ghoulberg 👻</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md";>@typescript-eslint/parser's changelog</a>.</em></p> <blockquote> <h2>8.72.1 (2026-10-26)</h2> <p>This was a version bump only for parser to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ad6b7553781fa3c93fc26642d7219d2e6624504";><code>4ad6b75</code></a> chore(release): publish 8.72.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/77576945345c1537635e617ea0d4b34b003b15ff";><code>7757694</code></a> chore: cleanup typecheck & build and fix race condition (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser/issues/13071";>#13071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/parser";>compare view</a></li> </ul> </details> <br /> Updates `@typescript-eslint/utils` from 8.72.0 to 8.72.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>@typescript-eslint/utils's releases</a>.</em></p> <blockquote> <h2>v8.72.1</h2> <h2>8.72.1 (2026-10-26)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] false positives on unresolved conditional types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13062";>#13062</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13039";>#13039</a>)</li> <li><strong>typescript-estree:</strong> use one Program per tsconfig for the project service in single-run mode (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12988";>#12988</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>Josh Ghoulberg 👻</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/utils/CHANGELOG.md";>@typescript-eslint/utils's changelog</a>.</em></p> <blockquote> <h2>8.72.1 (2026-10-26)</h2> <p>This was a version bump only for utils to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ad6b7553781fa3c93fc26642d7219d2e6624504";><code>4ad6b75</code></a> chore(release): publish 8.72.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/77576945345c1537635e617ea0d4b34b003b15ff";><code>7757694</code></a> chore: cleanup typecheck & build and fix race condition (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/utils/issues/13071";>#13071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/utils";>compare view</a></li> </ul> </details> <br /> Updates `eslint` from 10.13.0 to 10.14.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/eslint/eslint/releases";>eslint's releases</a>.</em></p> <blockquote> <h2>v10.14.0</h2> <h2>Features</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/d23a7f9eed78e2733fa2d17d7d7dbb9891bbb692";><code>d23a7f9</code></a> feat: fix property descriptor handling in <code>func-name-matching</code> (<a href="https://redirect.github.com/eslint/eslint/issues/21400";>#21400</a>) (xbinaryx)</li> </ul> <h2>Bug Fixes</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/4a12580eefdb240bd9b6ae83428638120e9a5f66";><code>4a12580</code></a> fix: require minimatch <code>10.2.6</code> to avoid vulnerable brace-expansion (<a href="https://redirect.github.com/eslint/eslint/issues/21460";>#21460</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/827a8f3cca710d3efd76c1d7088d894deff08434";><code>827a8f3</code></a> fix: <code>no-restricted-globals</code> crash on global objects as property values (<a href="https://redirect.github.com/eslint/eslint/issues/21449";>#21449</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/161558ae1391a8649a8d69a8b2c2e555b40121b9";><code>161558a</code></a> fix: handle LS, PS and empty hashbang comments (<a href="https://redirect.github.com/eslint/eslint/issues/21419";>#21419</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/6194939873960e605b9df3892aa1f5acd648df34";><code>6194939</code></a> fix: <code>no-invalid-this</code> crash on <code>accessor</code> fields without initializer (<a href="https://redirect.github.com/eslint/eslint/issues/21442";>#21442</a>) (xbinaryx)</li> <li><a href="https://github.com/eslint/eslint/commit/9155e14781bf0a5549f9a747691f7d98c8c66dcd";><code>9155e14</code></a> fix: Update <code>@humanfs/node</code> dependency version (<a href="https://redirect.github.com/eslint/eslint/issues/21434";>#21434</a>) (Nicholas C. Zakas)</li> <li><a href="https://github.com/eslint/eslint/commit/cb2b9d47a1a14e287ffd473083e97370801ea21e";><code>cb2b9d4</code></a> fix: avoid invalid object-shorthand fixes for super methods (<a href="https://redirect.github.com/eslint/eslint/issues/21323";>#21323</a>) (dvd233)</li> <li><a href="https://github.com/eslint/eslint/commit/5ee39156b5abb606170a289844cd25aebda6d302";><code>5ee3915</code></a> fix: yoda invalid autofix at statement start (<a href="https://redirect.github.com/eslint/eslint/issues/21424";>#21424</a>) (Daniel Pinto)</li> </ul> <h2>Documentation</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/0f94f47b3cf188534d6ac24c0ef4108dd004492b";><code>0f94f47</code></a> docs: remove <code>zh-hans</code> from docs language switcher (<a href="https://redirect.github.com/eslint/eslint/issues/21437";>#21437</a>) (lumir)</li> <li><a href="https://github.com/eslint/eslint/commit/dab466e5cd43f4b9156a4d00b3423be2ed0088cc";><code>dab466e</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/97431f86d5dc7cd60ade6415393b906cf08fe46c";><code>97431f8</code></a> docs: replace <code>--rulesdir</code> with a virtual plugin in custom rules docs (<a href="https://redirect.github.com/eslint/eslint/issues/21452";>#21452</a>) (Pixel)</li> <li><a href="https://github.com/eslint/eslint/commit/76975502cb1370f2ae4d9427fa1daf7effabe909";><code>7697550</code></a> docs: Update README (GitHub Actions Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/0c699d52d2c4596a56e8f8aa0c8f5732558cf552";><code>0c699d5</code></a> docs: Remove Tidelift commercial support (<a href="https://redirect.github.com/eslint/eslint/issues/21416";>#21416</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/088066663aae84ad6edfa902a27a90c4c08785f3";><code>0880666</code></a> docs: update loadESLint() documentation for v10 (<a href="https://redirect.github.com/eslint/eslint/issues/21374";>#21374</a>) (Minseon Kim)</li> <li><a href="https://github.com/eslint/eslint/commit/e06fe87c41cc6210269260a097c61cefb92f456a";><code>e06fe87</code></a> docs: Revise AI acknowledgment options in PR template (<a href="https://redirect.github.com/eslint/eslint/issues/21414";>#21414</a>) (Nicholas C. Zakas)</li> </ul> <h2>Chores</h2> <ul> <li><a href="https://github.com/eslint/eslint/commit/0e2ab702714a66829fe2798c77190b48a3a88645";><code>0e2ab70</code></a> ci: disable <code>eslint-plugin-unicorn</code> ecosystem test (<a href="https://redirect.github.com/eslint/eslint/issues/21462";>#21462</a>) (Francesco Trotta)</li> <li><a href="https://github.com/eslint/eslint/commit/6e3f9888cca518fbb9ba399e88b3033577d9f4ad";><code>6e3f988</code></a> chore: update github/codeql-action action to v4.39.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21450";>#21450</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/a031c40da3c2185279ca8f1f7961fff01fb7b8ff";><code>a031c40</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21445";>#21445</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/67d2ca2d246bf0311d4a60f58282a7b246c44cba";><code>67d2ca2</code></a> chore: add troubleshooting page URL to circular fixes warning message (<a href="https://redirect.github.com/eslint/eslint/issues/21429";>#21429</a>) (Milos Djermanovic)</li> <li><a href="https://github.com/eslint/eslint/commit/276021d5190f62c873002f7aa08cdcb345135bbe";><code>276021d</code></a> chore: update github/codeql-action action to v4.39.0 (<a href="https://redirect.github.com/eslint/eslint/issues/21432";>#21432</a>) (renovate[bot])</li> <li><a href="https://github.com/eslint/eslint/commit/449724e95bfa013fa32c29375925b4111d3924e4";><code>449724e</code></a> chore: update ecosystem plugins (<a href="https://redirect.github.com/eslint/eslint/issues/21420";>#21420</a>) (ESLint Bot)</li> <li><a href="https://github.com/eslint/eslint/commit/8ffeb8c023bea91a5cfa01b1413a52a83838a59a";><code>8ffeb8c</code></a> chore: update dependency prettier to v3.9.10 (<a href="https://redirect.github.com/eslint/eslint/issues/21417";>#21417</a>) (renovate[bot])</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/eslint/eslint/commit/12cbff4125db3f6446f72fa0c48c46b92b120427";><code>12cbff4</code></a> 10.14.0</li> <li><a href="https://github.com/eslint/eslint/commit/6b696e79c5b054ed95bf7eae878370076b3810c1";><code>6b696e7</code></a> Build: changelog update for 10.14.0</li> <li><a href="https://github.com/eslint/eslint/commit/0e2ab702714a66829fe2798c77190b48a3a88645";><code>0e2ab70</code></a> ci: disable <code>eslint-plugin-unicorn</code> ecosystem test (<a href="https://redirect.github.com/eslint/eslint/issues/21462";>#21462</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/4a12580eefdb240bd9b6ae83428638120e9a5f66";><code>4a12580</code></a> fix: require minimatch <code>10.2.6</code> to avoid vulnerable brace-expansion (<a href="https://redirect.github.com/eslint/eslint/issues/21460";>#21460</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/0f94f47b3cf188534d6ac24c0ef4108dd004492b";><code>0f94f47</code></a> docs: remove <code>zh-hans</code> from docs language switcher (<a href="https://redirect.github.com/eslint/eslint/issues/21437";>#21437</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/dab466e5cd43f4b9156a4d00b3423be2ed0088cc";><code>dab466e</code></a> docs: Update README</li> <li><a href="https://github.com/eslint/eslint/commit/827a8f3cca710d3efd76c1d7088d894deff08434";><code>827a8f3</code></a> fix: <code>no-restricted-globals</code> crash on global objects as property values (<a href="https://redirect.github.com/eslint/eslint/issues/21449";>#21449</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/97431f86d5dc7cd60ade6415393b906cf08fe46c";><code>97431f8</code></a> docs: replace <code>--rulesdir</code> with a virtual plugin in custom rules docs (<a href="https://redirect.github.com/eslint/eslint/issues/21452";>#21452</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/6e3f9888cca518fbb9ba399e88b3033577d9f4ad";><code>6e3f988</code></a> chore: update github/codeql-action action to v4.39.1 (<a href="https://redirect.github.com/eslint/eslint/issues/21450";>#21450</a>)</li> <li><a href="https://github.com/eslint/eslint/commit/161558ae1391a8649a8d69a8b2c2e555b40121b9";><code>161558a</code></a> fix: handle LS, PS and empty hashbang comments (<a href="https://redirect.github.com/eslint/eslint/issues/21419";>#21419</a>)</li> <li>Additional commits viewable in <a href="https://github.com/eslint/eslint/compare/v10.13.0...v10.14.0";>compare view</a></li> </ul> </details> <br /> Updates `typescript-eslint` from 8.72.0 to 8.72.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/releases";>typescript-eslint's releases</a>.</em></p> <blockquote> <h2>v8.72.1</h2> <h2>8.72.1 (2026-10-26)</h2> <h3>🩹 Fixes</h3> <ul> <li><strong>eslint-plugin:</strong> [no-unnecessary-condition] false positives on unresolved conditional types (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13062";>#13062</a>)</li> <li><strong>eslint-plugin:</strong> [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/13039";>#13039</a>)</li> <li><strong>typescript-estree:</strong> use one Program per tsconfig for the project service in single-run mode (<a href="https://redirect.github.com/typescript-eslint/typescript-eslint/pull/12988";>#12988</a>)</li> </ul> <h3>❤️ Thank You</h3> <ul> <li>Evyatar Daud <a href="https://github.com/StyleShit";><code>@StyleShit</code></a></li> <li>Josh Ghoulberg 👻</li> </ul> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md";>typescript-eslint's changelog</a>.</em></p> <blockquote> <h2>8.72.1 (2026-10-26)</h2> <p>This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.</p> <p>See <a href="https://github.com/typescript-eslint/typescript-eslint/releases/tag/v8.72.1";>GitHub Releases</a> for more information.</p> <p>You can read about our <a href="https://typescript-eslint.io/users/versioning";>versioning strategy</a> and <a href="https://typescript-eslint.io/users/releases";>releases</a> on our website.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/4ad6b7553781fa3c93fc26642d7219d2e6624504";><code>4ad6b75</code></a> chore(release): publish 8.72.1</li> <li><a href="https://github.com/typescript-eslint/typescript-eslint/commit/77576945345c1537635e617ea0d4b34b003b15ff";><code>7757694</code></a> chore: cleanup typecheck & build and fix race condition (<a href="https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint/issues/13071";>#13071</a>)</li> <li>See full diff in <a href="https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint";>compare view</a></li> </ul> </details> <br /> Updates `vite-plugin-css-injected-by-js` from 5.0.2 to 5.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/marco-prontera/vite-plugin-css-injected-by-js/releases";>vite-plugin-css-injected-by-js's releases</a>.</em></p> <blockquote> <h2>v5.0.3</h2> <h2>What's Changed</h2> <ul> <li><a href="https://redirect.github.com/marco-prontera/vite-plugin-css-injected-by-js/issues/175";>#175</a> fix: publish the virtual module type declarations by <a href="https://github.com/FelixNumworks";><c... _Description has been truncated_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
