chore(deps): bump the frontend group across 1 directory with 23 updates by dependabot[bot] · Pull Request #55 · adelfardi/iceguard

dependabot · 2026-08-01T23:49:05Z

Bumps the frontend group with 22 updates in the /frontend directory:

Package	From	To
@fontsource-variable/geist	`5.2.9`	`5.3.0`
@hookform/resolvers	`5.4.0`	`5.5.7`
@tanstack/react-query	`5.101.0`	`5.101.4`
axios	`1.18.0`	`1.19.0`
framer-motion	`12.40.0`	`12.43.0`
lucide-react	`1.21.0`	`1.27.0`
radix-ui	`1.6.0`	`1.6.7`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`
react-hook-form	`7.80.0`	`7.83.0`
react-is	`19.2.7`	`19.2.8`
react-router-dom	`7.18.0`	`7.18.2`
recharts	`3.8.1`	`3.10.1`
shadcn	`4.11.0`	`4.16.0`
vis-timeline	`8.5.1`	`8.5.2`
@tailwindcss/vite	`4.3.1`	`4.3.3`
@types/node	`26.0.0`	`26.1.2`
@vitejs/plugin-react	`6.0.2`	`6.0.4`
eslint	`10.5.0`	`10.8.0`
globals	`17.6.0`	`17.8.0`
typescript-eslint	`8.61.1`	`8.65.0`
vite	`8.0.16`	`8.1.5`

Updates @fontsource-variable/geist from 5.2.9 to 5.3.0

Commits

See full diff in compare view

Updates @hookform/resolvers from 5.4.0 to 5.5.7

Release notes

Sourced from @hookform/resolvers's releases.

v5.5.7

5.5.7 (2026-07-26)

Bug Fixes

npm install fails with ERESOLVE conflict between @hookform/resolvers@5.4.3 and valibot versions (#865) (722ef6e)

v5.5.6

5.5.6 (2026-07-26)

Bug Fixes

module not found when importing zodResolver under Zod v3 (#864) (8df10b0)

v5.5.5

5.5.5 (2026-07-26)

Bug Fixes

yup resolver overrides ref property in errors object with validation metadata when using checkbox input (#863) (0f70063)

v5.5.4

5.5.4 (2026-07-26)

Bug Fixes

AJV Resolver - When ajv schema contains default for certain properties, getValues() returns the form data with properties overwritten (#862) (c4b6aab)

v5.5.3

5.5.3 (2026-07-26)

Bug Fixes

Conditional/dynamic schema resolution no longer working (#861) (f8d6533)

v5.5.2

5.5.2 (2026-07-26)

Bug Fixes

Zod v4 locale and global error customization not picked up (#860) (2126efc)

v5.5.1

5.5.1 (2026-07-25)

... (truncated)

Commits

722ef6e fix: npm install fails with ERESOLVE conflict between @hookform/resolvers@5.4...
8df10b0 fix: module not found when importing zodResolver under Zod v3 (#864)
75f2dcd close #773
0d2bdbf close #664
0f70063 fix: yup resolver overrides ref property in errors object with validation met...
c4b6aab fix: AJV Resolver - When ajv schema contains default for certain properties, ...
e2a8d16 close #760
f8d6533 fix: Conditional/dynamic schema resolution no longer working (#861)
2126efc fix: Zod v4 locale and global error customization not picked up (#860)
0721f88 add unit test (#859)
Additional commits viewable in compare view

Updates @tanstack/react-query from 5.101.0 to 5.101.4

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.101.4

@tanstack/react-query@5.101.4

@tanstack/react-query-next-experimental@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.4

@tanstack/react-query-persist-client@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.4

@tanstack/react-query@5.101.4

@tanstack/react-query@5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.4

@tanstack/react-query-devtools@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.101.3

@tanstack/react-query@5.101.3

@tanstack/react-query-next-experimental@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.101.3

@tanstack/react-query-persist-client@5.101.3

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.101.3

@tanstack/react-query@5.101.3

@tanstack/react-query@5.101.3

Patch Changes

Updated dependencies [7e3c822]:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.101.4

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.4

5.101.3

Patch Changes

Updated dependencies [7e3c822]:

@tanstack/query-core@5.101.3

5.101.2

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.101.2

5.101.1

Patch Changes

Updated dependencies [9eff92e]:

@tanstack/query-core@5.101.1

Commits

86bb8a6 ci: Version Packages (#11094)
181ea82 ci: Version Packages (#11089)
6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
Additional commits viewable in compare view

Updates axios from 1.18.0 to 1.19.0

Release notes

Sourced from axios's releases.

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)

Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)

HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11024, #11038)

Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)

Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)

Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)

Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)

Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)

Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@afonsojramos (#11028)

@MahinAnowar (#11006)

@yassertawfik4 (#11024)

@AnandSundar (#11029)

@lin-hongkuan (#11035)

@Wali007-lab (#11054)

@magicdawn (#11043)

@andrewkernel (#11053)

@Sagargupta16 (#11059)

@Rpaudel379 (#11078)

... (truncated)

Changelog

Sourced from axios's changelog.

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)

Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)

HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)

Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)

Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)

Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)

Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)

Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

@afonsojramos (#11028)

@MahinAnowar (#11006)

@yassertawfik4 (#11024)

@AnandSundar (#11029)

@lin-hongkuan (#11035)

@Wali007-lab (#11054)

@magicdawn (#11043)

@andrewkernel (#11053)

@Sagargupta16 (#11059)

... (truncated)

Commits

311fcc5 chore(release): prepare release 1.19.0 (#11095)
cb4fd74 chore(deps): bump axios from 1.16.1 to 1.18.1 in /docs (#11088)
004c93a chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 in the github-action...
122edde chore(deps-dev): bump the development_dependencies group with 3 updates (#11089)
c44f8d0 ci: use bundled npm for v1 publish (#11083)
878bb29 fix(sandbox): resolve TypeError on constant variable path assignment (#11073)
a092bae fix(core): synchronous interceptors swallow errors and proceed with request (...
3041b8f feat(HttpStatusCode): add missing 520 status code (#11067)
58b16c8 refactor(helpers): extract duplicated setFormDataHeaders into a shared helper...
3077e62 feat(types): Allow the Params property to be typed, instead of any (#11081)
Additional commits viewable in compare view

Updates framer-motion from 12.40.0 to 12.43.0

Changelog

Sourced from framer-motion's changelog.

[12.43.0] 2026-07-27

Added

Hardware acceleration for backgroundColor in supported browsers.

Hardware acceleration for SVG elements.

Fixed

AnimatePresence: Exiting children no longer interleave with entering children, which could reorder and remount children present in both renders.

motion: Throw error when passing a custom motion component an incorrect ref type.

[12.42.2] 2026-07-01

Fixed

animateView: Cropped group layers now animate border-radius from the old to new radius.

[12.42.1] 2026-06-30

Fixed

animateView: Old layer fade out now cancelled when defining .new().

[12.42.0] 2026-06-24

Changed

animateView: Layers are automatically grouped to match their DOM-hierarchy. New .group(false) method opts-out.

Fixed

animateView: Auto-crop is now aspect-ratio aware, disabling crops for matching aspect-ratios.

animateView: Disabled automatic border-radius animation.

[12.41.0] 2026-06-23

Added

animateView: Moves from Motion+ Early Access and alpha to main library.

animateView: .add() resolves a CSS selector or Element to automatically generate, apply and remove view-transition-name.

animateView: .new() and .old() configures values to animate on new and old layers.

animateView: .layout() can set a custom transition on the size/position animation of the currently selected elements.

animateView: Group layers now automatically crop with children set to cover, with border-radius animating from old radius to new. .crop(false) disables this behaviour.

animateView: .class(name) tags currently selected elements with a view-transition-class as a custom CSS hook.

Fixed

AnimatePresence: Prevent stuck exit animations when children interrupt.

drag: Child e.stopPropagation() no longer break drag end.

... (truncated)

Commits

a4ef40a v12.43.0
14f2d28 adding svg acceleration
1f5a27b Fixing merge
79f0353 Updating changelog
57f179b Updating changelog
695cb39 Merge pull request #3755 from motiondivision/fix-issue-2777
33a1820 Drop the production fallback for non-DOM refs
ebe35f2 Throw an actionable invariant for non-DOM custom component refs
a6ed094 Merge pull request #3754 from motiondivision/fix-3745-popchild-ref-warning
9f251f3 Merge pull request #3763 from motiondivision/advisor/003-color-waapi
Additional commits viewable in compare view

Updates lucide-react from 1.21.0 to 1.27.0

Release notes

Sourced from lucide-react's releases.

Version 1.27.0

What's Changed

feat(icons): removed brand names from tags & revised brand stopwords by @karsa-mistmere in lucide-icons/lucide#4575

fix(docs): Fix site build by @ericfennis in lucide-icons/lucide#4582

fix(icons): optimised square-scissors icons by @karsa-mistmere in lucide-icons/lucide#4581

fix(packages/angular): add more supported attributes for SVG nodes by @karsa-mistmere in lucide-icons/lucide#4570

feat(icons): added pending-cw icon by @NielsLazaroms in lucide-icons/lucide#4439

fix(icons): changed zap and zap-off icons by @kapowaz in lucide-icons/lucide#4536

feat(icons): add square-off icon by @october-learns in lucide-icons/lucide#4496

chore(deps-dev): bump astro from 6.4.8 to 7.1.0 by @dependabot[bot] in lucide-icons/lucide#4572

fix(icons): changed toolbox icon by @karsa-mistmere in lucide-icons/lucide#4571

feat(icons): add scan-square by @samuelalake in lucide-icons/lucide#4550

feat(icons): added user-shield icon by @MArtytraM99 in lucide-icons/lucide#3099

feat(icons): added mosque icon by @iskepr in lucide-icons/lucide#4494

fix(request-review): Remove pull_request_target by @ericfennis in lucide-icons/lucide#4593

fix(icons): changed feather icon by @karsa-mistmere in lucide-icons/lucide#4584

feat(ci): added custom prettier plugin for icon SVG files by @karsa-mistmere in lucide-icons/lucide#4576

ci(ci.yml): Remove concurrency in ci.yml by @ericfennis in lucide-icons/lucide#4595

fix(icons): changed barrel icon by @karsa-mistmere in lucide-icons/lucide#4592

feat(lab): Migrate lab to main repo. by @ericfennis in lucide-icons/lucide#4521

fix(icons): changed trophy icon by @karsa-mistmere in lucide-icons/lucide#4591

feat(analytics): add utm source and medium by @jguddas in lucide-icons/lucide#4596

feat(docs): Add lab requirement in pull_request_template.md by @danielbayley in lucide-icons/lucide#3651

feat(icons): replaces podcast icon with new mic-* icons by @karsa-mistmere in lucide-icons/lucide#4583

feat(icons): add layout-freeform by @samuelalake in lucide-icons/lucide#4543

New Contributors

@NielsLazaroms made their first contribution in lucide-icons/lucide#4439

@kapowaz made their first contribution in lucide-icons/lucide#4536

@october-learns made their first contribution in lucide-icons/lucide#4496

@samuelalake made their first contribution in lucide-icons/lucide#4550

@iskepr made their first contribution in lucide-icons/lucide#4494

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

Version 1.26.0

What's Changed

fix(docs): fix home page package links & accessible labels by @karsa-mistmere in lucide-icons/lucide#4540

fix(icons): changed columns-3-cog icon by @kamilasw in lucide-icons/lucide#4578

fix(icons): extended metadata of ad icon by @karsa-mistmere in lucide-icons/lucide#4579

fix(icons): changed book-open icons by @karsa-mistmere in lucide-icons/lucide#4565

feat(icons): added shield-keyhole icon by @karsa-mistmere in lucide-icons/lucide#4580

New Contributors

@kamilasw made their first contribution in lucide-icons/lucide#4578

Full Changelog: lucide-icons/lucide@1.25.0...1.26.0

Version 1.25.0

What's Changed

... (truncated)

Commits

f229f83 chore(depedencies): Update dependencies (#4553)
See full diff in compare view

Updates radix-ui from 1.6.0 to 1.6.7

Changelog

Sourced from radix-ui's changelog.

1.6.6, 1.6.7

Reverted breaking changes that caused compatibility issues with React Server Components.

1.6.5

Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

1.6.4

Fixed a regression where importing primitives from the root radix-ui entry point erased every primitive's types to any.

1.6.3

Dialog

Fixed broken ARIA references in Dialogs where title or description elements are not rendered.

Slider

Fixed a bug where onValueCommit was not called when a slider thumb was dragged across another thumb.

Toast

Fixed Toast removing non-focused toasts when pressing Escape.

Tooltip

Fixed a bug where Tooltip.Content children were mounted to the DOM twice.

Other updates

Fixed overriding inline animation style in Popper.Content.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Widened virtualRef prop type to allow RefObject<Measurable | null> in popover components.

Fixed dev-only checks with conditional exports to drop dev-warnings from production builds.

Added per-primitive subpath entry points so each primitive can be imported directly, eg. import { Accordion } from 'radix-ui/accordion' or import * as Accordion from 'radix-ui/accordion'. This mirrors the namespaced exports available from the root radix-ui entry point.

Fixed a bug where updating a Checkbox, Switch, or RadioGroup value programmatically (eg. a "select all" control) while inside a <form> would dispatch a click event from the hidden bubble input that propagated to ancestor onClick handlers.

1.6.2

Other updates

Added CSS custom properties for Navigation Menu item indicators' translate values.

Fixed a bug in Dismissable Layer causing background nested popovers to close all layers on outside click

Fixed runtime errors for Form.Message, Form.Control, Form.Label and Form.ValidityState that are correctly rendered outside of Form.Field components

Fixed a bug in form control components to ensure their values are updated when their associated form's is reset. This affects RadioGroup, Slider, Select, and Switch.

Fixed menu items, tab triggers, toolbar links, and select items intercepting Space/Enter keys that originate from focusable descendants.

Fixed a bug where calling an event handler without an argument would throw, preventing successive event handlers from being called. This affected all components that accept event handlers with internal implementations.

Fixed a bug in Context Menu to ensure that the menu properly re-anchors to the latest pointer position when re-triggered in its open state.

... (truncated)

Commits

See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-hook-form from 7.80.0 to 7.83.0

Release notes

Sourced from react-hook-form's releases.

Version 7.83.0

⚡ Improvements

enhance getEventValue to handle file inputs (#13289)

type perf: improve TypeScript performance with a hard cap at 10 levels of recursive type depth (#13529)

type perf: improve type performance (#13528)

🐞 Fixes

fix: clear internal errors state on argument-less clearErrors() (#13613)

fix: preserve dirtyFields reference stability (#13612)

fix: old checkbox/radio elements polluting internal field state (#13080)

fix(useController): re-subscribe onChange/onBlur when control changes (#13603)

fix(types): allow validation messages to be defined even if their related value is undefined (#13287)

Thanks to @candymask0712, @wanxiankai, @bluebill1049, @EduardF1, @johnstrand, and @in-ch for their contributions! 🎉

Version 7.82.0

🚀 feat: add opt-in delayError option for setValue (#13337)
setValue("firstName", "Bill", {
  delayError: 500, // delay validation error updates by 500ms
  shouldValidate: true
});
⚡ perf: improve getDirtyFields performance (#13590)

Improved dirty field calculation, especially for larger forms and deeply nested values.

🐞 fix: expose resetDefaultValues through form context (#13598)
const { resetDefaultValues } = useFormContext();
resetDefaultValues();
🐞 fix: setValue with shouldDirty now correctly updates dirty state when the form is disabled (#13594) 🐞 fix: preserve dirtyFields boolean values for registered array fields (#13586) 🐞 fix: restore FieldArray component export (#13596) 🧪 test: migrate test suite to Playwright and improve delayError test reliability (#13589)

thanks to @candymask0712, @wanxiankai, @a-y-ibrahim, @ankit1324 & @abnud11

Version 7.81.0

⚜️ feat: FieldArray component (#13394)
</tr></table> 

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.83.0] - 2026-07-25

Improvements

Enhance getEventValue to handle file inputs

Improve TypeScript performance with a hard cap at 10 levels of recursive type depth

Fixed

Clear internal errors state on argument-less clearErrors()

Preserve dirtyFields reference stability

Old checkbox/radio elements polluting internal field state

useController not re-subscribing onChange/onBlur when control changes

Allow validation messages to be defined even if their related value is undefined

[7.82.0] - 2026-07-18

Added

Opt-in delayError option for setValue to delay validation error updates

Fixed

Expose resetDefaultValues through form context

setValue with shouldDirty not updating dirty state correctly when the form is disabled

Preserve dirtyFields boolean values for registered array fields

Restore FieldArray component export

Performance

Improve getDirtyFields performance, especially for larger forms and deeply nested values

[7.81.0] - 2026-07-05

Added

FieldArray component built on useFieldArray for controlled field-array rendering

Fixed

clearErrors changing the name value from form.subscribe

reset triggering subscribe with the latest name instead of undefined

setValues leaving stale elements behind when shrinking a field array

flatten preserving Date values as leaf nodes

useFieldArray min length validation error changing location in the errors object

useController not reflecting a cleared parent object in controlled fields

Security

Harden unset() against prototype-path traversal (__proto__ / constructor / prototype), matching the existing set() guard

... (truncated)

Commits

ca8106d 7.83.0
69da954 🐞 fix: clear internal errors state on argument-less clearErrors() (#13613)
d96c5ce 🐞 fix: preserve dirtyFields reference stability (#13612)
ee7593e 🧪 update old checkbox/radio elements polluting internal field state e2e spec ...
2726d81 🐞 fix: old checkbox/radio elements polluting internal field state (#13080)
4ca98df ✋ fix repo grammar to prevent those silly one line prs
d920e93 🧪 add test for enhance getEventValue to handle file inputs (#13289)
2ebc8d0 🍖 enhance getEventValue to handle file inputs (<...
Description has been truncated

Bumps the frontend group with 22 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@fontsource-variable/geist](https://github.com/fontsource/font-files/tree/HEAD/fonts/variable/geist) | `5.2.9` | `5.3.0` | | [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.4.0` | `5.5.7` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.101.0` | `5.101.4` | | [axios](https://github.com/axios/axios) | `1.18.0` | `1.19.0` | | [framer-motion](https://github.com/motiondivision/motion) | `12.40.0` | `12.43.0` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.21.0` | `1.27.0` | | [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.6.0` | `1.6.7` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.80.0` | `7.83.0` | | [react-is](https://github.com/react/react/tree/HEAD/packages/react-is) | `19.2.7` | `19.2.8` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.0` | `7.18.2` | | [recharts](https://github.com/recharts/recharts) | `3.8.1` | `3.10.1` | | [shadcn](https://github.com/shadcn-ui/ui/tree/HEAD/packages/shadcn) | `4.11.0` | `4.16.0` | | [vis-timeline](https://github.com/visjs/vis-timeline) | `8.5.1` | `8.5.2` | | [@tailwindcss/vite](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-vite) | `4.3.1` | `4.3.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.0.0` | `26.1.2` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.2` | `6.0.4` | | [eslint](https://github.com/eslint/eslint) | `10.5.0` | `10.8.0` | | [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.8.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.61.1` | `8.65.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.5` | Updates `@fontsource-variable/geist` from 5.2.9 to 5.3.0 - [Changelog](https://github.com/fontsource/font-files/blob/main/CHANGELOG.md) - [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/variable/geist) Updates `@hookform/resolvers` from 5.4.0 to 5.5.7 - [Release notes](https://github.com/react-hook-form/resolvers/releases) - [Commits](react-hook-form/resolvers@v5.4.0...v5.5.7) Updates `@tanstack/react-query` from 5.101.0 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `axios` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.18.0...v1.19.0) Updates `framer-motion` from 12.40.0 to 12.43.0 - [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md) - [Commits](motiondivision/motion@v12.40.0...v12.43.0) Updates `lucide-react` from 1.21.0 to 1.27.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.27.0/packages/lucide-react) Updates `radix-ui` from 1.6.0 to 1.6.7 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/1.6.7/packages/react/radix-ui) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-hook-form` from 7.80.0 to 7.83.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.80.0...v7.83.0) Updates `react-is` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-is) Updates `react-router-dom` from 7.18.0 to 7.18.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.2/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.2/packages/react-router-dom) Updates `recharts` from 3.8.1 to 3.10.1 - [Release notes](https://github.com/recharts/recharts/releases) - [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md) - [Commits](recharts/recharts@v3.8.1...v3.10.1) Updates `shadcn` from 4.11.0 to 4.16.0 - [Release notes](https://github.com/shadcn-ui/ui/releases) - [Changelog](https://github.com/shadcn-ui/ui/blob/main/packages/shadcn/CHANGELOG.md) - [Commits](https://github.com/shadcn-ui/ui/commits/shadcn@4.16.0/packages/shadcn) Updates `vis-timeline` from 8.5.1 to 8.5.2 - [Release notes](https://github.com/visjs/vis-timeline/releases) - [Changelog](https://github.com/visjs/vis-timeline/blob/master/HISTORY.md) - [Commits](visjs/vis-timeline@v8.5.1...v8.5.2) Updates `@tailwindcss/vite` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-vite) Updates `@types/node` from 26.0.0 to 26.1.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitejs/plugin-react` from 6.0.2 to 6.0.4 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.4/packages/plugin-react) Updates `eslint` from 10.5.0 to 10.8.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.5.0...v10.8.0) Updates `globals` from 17.6.0 to 17.8.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.6.0...v17.8.0) Updates `tailwindcss` from 4.3.1 to 4.3.3 - [Release notes](https://github.com/tailwindlabs/tailwindcss/releases) - [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss) Updates `typescript-eslint` from 8.61.1 to 8.65.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.65.0/packages/typescript-eslint) Updates `vite` from 8.0.16 to 8.1.5 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.5/packages/vite) --- updated-dependencies: - dependency-name: "@fontsource-variable/geist" dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@hookform/resolvers" dependency-version: 5.5.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: axios dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: framer-motion dependency-version: 12.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: lucide-react dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: radix-ui dependency-version: 1.6.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: react-hook-form dependency-version: 7.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: react-is dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: react-router-dom dependency-version: 7.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: recharts dependency-version: 3.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: shadcn dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vis-timeline dependency-version: 8.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@tailwindcss/vite" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: eslint dependency-version: 10.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: globals dependency-version: 17.8.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: tailwindcss dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend - dependency-name: typescript-eslint dependency-version: 8.65.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend - dependency-name: vite dependency-version: 8.1.5 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-01T23:49:05Z

Labels

The following labels could not be found: dependencies, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

chore(deps): bump the frontend group across 1 directory with 23 updates - #55

chore(deps): bump the frontend group across 1 directory with 23 updates#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/frontend-a5d91f4ff7

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 1, 2026

v5.5.7

5.5.7 (2026-07-26)

Bug Fixes

v5.5.6

5.5.6 (2026-07-26)

Bug Fixes

v5.5.5

5.5.5 (2026-07-26)

Bug Fixes

v5.5.4

5.5.4 (2026-07-26)

Bug Fixes

v5.5.3

5.5.3 (2026-07-26)

Bug Fixes

v5.5.2

5.5.2 (2026-07-26)

Bug Fixes

v5.5.1

5.5.1 (2026-07-25)

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

@​tanstack/react-query@​5.101.4

Patch Changes

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

@​tanstack/react-query@​5.101.3

Patch Changes

5.101.4

Patch Changes

5.101.3

Patch Changes

5.101.2

Patch Changes

5.101.1

Patch Changes

v1.19.0 - July 22, 2026

🔒 Security Fixes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

v1.19.0 — July 22, 2026

🔒 Security Fixes

🚀 New Features

🐛 Bug Fixes

🔧 Maintenance & Chores

🌟 New Contributors

[12.43.0] 2026-07-27

Added

Fixed

[12.42.2] 2026-07-01

Fixed

[12.42.1] 2026-06-30

Fixed

[12.42.0] 2026-06-24

Changed

Fixed

[12.41.0] 2026-06-23

Added

Fixed

Version 1.27.0

What's Changed

New Contributors

Version 1.26.0

What's Changed

New Contributors

Version 1.25.0

What's Changed

1.6.6, 1.6.7

`@tanstack/react-query-devtools@5`.101.4

`@tanstack/react-query-next-experimental@5`.101.4

`@tanstack/react-query-persist-client@5`.101.4

`@tanstack/react-query@5`.101.4

`@tanstack/react-query-devtools@5`.101.3

`@tanstack/react-query-next-experimental@5`.101.3

`@tanstack/react-query-persist-client@5`.101.3

`@tanstack/react-query@5`.101.3