client-rds: Adding new BDD representation of endpoint ruleset (907053d5)
client-securitylake: Adding new BDD representation of endpoint ruleset (60fd3fe7)
client-appconfigdata: Adding new BDD representation of endpoint ruleset (e648b968)
client-snow-device-management: Adding new BDD representation of endpoint ruleset (3dd8d2ad)
client-connectcampaigns: Adding new BDD representation of endpoint ruleset (81d55791)
client-cost-explorer: Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration (bb1e38a5)
client-appfabric: Adding new BDD representation of endpoint ruleset (802d4609)
client-connect: SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them (e18e6189)
client-inspector2: Inspector support for enhanced scanning (c84f4ec3)
client-macie2: Adding new BDD representation of endpoint ruleset (b40f72aa)
client-vpc-lattice: Adding new BDD representation of endpoint ruleset (2ced3aa9)
client-wisdom: Adding new BDD representation of endpoint ruleset (fbac5a35)
client-s3outposts: Adding new BDD representation of endpoint ruleset (5a697389)
client-lakeformation: Adding new BDD representation of endpoint ruleset (82b6e653)
client-transcribe-streaming: Adding new BDD representation of endpoint ruleset (f6c86b79)
client-compute-optimizer: This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. (d6abbe1b)
client-pinpoint-sms-voice: Adding new BDD representation of endpoint ruleset (b44ce4d1)
client-cloudfront: Adding new BDD representation of endpoint ruleset (13166086)
client-waf-regional: Adding new BDD representation of endpoint ruleset (b3ce6f43)
client-iot-events: Adding new BDD representation of endpoint ruleset (c2d17f78)
client-direct-connect: Adding new BDD representation of endpoint ruleset (c407f18c)
client-arc-region-switch: ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. (69c72325)
client-iotsecuretunneling: Adding new BDD representation of endpoint ruleset (573ad2c4)
client-socialmessaging: Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs (5e9c74c6)
client-route53profiles: Adding new BDD representation of endpoint ruleset (fdb24398)
client-apigatewaymanagementapi: Adding new BDD representation of endpoint ruleset (672907d8)
client-dax: Adding new BDD representation of endpoint ruleset (8e47fa8f)
client-cloudwatch-logs: Adding new BDD representation of endpoint ruleset (b4e3e689)
client-resource-groups: Adding new BDD representation of endpoint ruleset (287b030e)
client-firehose: Adding new BDD representation of endpoint ruleset (4064ae73)
client-kinesis: Adding new BDD representation of endpoint ruleset (2094b2d9)
client-ses: Adding new BDD representation of endpoint ruleset (ce4a6b07)
client-application-auto-scaling: Adding new BDD representation of endpoint ruleset (12303442)
client-cloudtrail-data: Adding new BDD representation of endpoint ruleset (43c7e358)
For list of updated packages, view updated-packages.md in assets-3.1061.0.zip
This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.
🔒 Security Fixes
Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)
🚀 New Features
HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)
🐛 Bug Fixes
Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)
🔧 Maintenance & Chores
HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)
🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.
🔒 Security Fixes
Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)
🚀 New Features
HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)
🐛 Bug Fixes
Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)
🔧 Maintenance & Chores
HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)
🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/3210
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 6/3/2026
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/prod-minor-updates-042591fdfd`
---
### 📝 Commits (1)
- [`44779fe`](https://github.com/fosrl/pangolin/commit/44779fe612ae4a3bc64df075925d3ed90295ca3d) Bump the prod-minor-updates group across 1 directory with 5 updates
### 📊 Changes
**2 files changed** (+242 additions, -240 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+237 -235)
📝 `package.json` (+5 -5)
</details>
### 📄 Description
Bumps the prod-minor-updates group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1056.0` | `3.1061.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.14` | `5.101.0` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.17.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.76.1` | `7.77.0` |
Updates `@aws-sdk/client-s3` from 3.1056.0 to 3.1061.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aws/aws-sdk-js-v3/releases">@aws-sdk/client-s3's releases</a>.</em></p>
<blockquote>
<h2>v3.1061.0</h2>
<h4>3.1061.0(2026-06-03)</h4>
<h5>Chores</h5>
<ul>
<li><strong>middleware-sdk-s3:</strong> consolidate S3 internal packages (<a href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8026">#8026</a>) (<a href="https://github.com/aws/aws-sdk-js-v3/commit/121609400451d15166872f5dc2a2d8fe75c7d7f6">12160940</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>client-rds:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/907053d559e5b0a4d4e02ca679d919537b91dee5">907053d5</a>)</li>
<li><strong>client-securitylake:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/60fd3fe7e01d12537c8eb624948053b9dbbbabdb">60fd3fe7</a>)</li>
<li><strong>client-appconfigdata:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/e648b9684d6f5553212fa9890e2da3a37b3019c1">e648b968</a>)</li>
<li><strong>client-snow-device-management:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/3dd8d2ad513c9a3d335dda1798cc2f93bc04f4d4">3dd8d2ad</a>)</li>
<li><strong>client-connectcampaigns:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/81d55791c458a324d81ed500db83281dc5cf45a9">81d55791</a>)</li>
<li><strong>client-cost-explorer:</strong> Added support for target-coverage-based Savings Plans purchase analysis. The StartCommitmentPurchaseAnalysis API now accepts a new TARGET AVERAGE COVERAGE value for AnalysisType, as well as an optional SavingsPlansTargetCoverage field in SavingsPlansPurchaseAnalysisConfiguration (<a href="https://github.com/aws/aws-sdk-js-v3/commit/bb1e38a52e1c8eda55aed7f778d790a2ffc0e5a2">bb1e38a5</a>)</li>
<li><strong>client-appfabric:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/802d4609a4bcf3233a5375beb4fe2f4a22e78c6e">802d4609</a>)</li>
<li><strong>client-connect:</strong> SearchContacts Connect API now supports filtering contacts by the AI Agents involved in handling them (<a href="https://github.com/aws/aws-sdk-js-v3/commit/e18e6189fc85180cf6faaf0727a570044c7d10af">e18e6189</a>)</li>
<li><strong>client-inspector2:</strong> Inspector support for enhanced scanning (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c84f4ec3fcbfcc4d92cc9edfed2c0249a0ea1353">c84f4ec3</a>)</li>
<li><strong>client-macie2:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/b40f72aa53ba4a9df077820a4c8809aa4c7d3684">b40f72aa</a>)</li>
<li><strong>client-vpc-lattice:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/2ced3aa90f074030969fbf2be5cdef3bbebf7897">2ced3aa9</a>)</li>
<li><strong>client-wisdom:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/fbac5a35c58251510760edf0fdbf5dad2cf9d40f">fbac5a35</a>)</li>
<li><strong>client-s3outposts:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/5a697389d067341a8bda91d457aa78239b9b7786">5a697389</a>)</li>
<li><strong>client-lakeformation:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/82b6e6530a27310351bd389a097a3ac106b37d19">82b6e653</a>)</li>
<li><strong>client-transcribe-streaming:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/f6c86b79686140d06478951a9bcd5884b3ec4f7c">f6c86b79</a>)</li>
<li><strong>client-compute-optimizer:</strong> This release lets customers extend the lookback period for Amazon EBS volume and Amazon ECS rightsizing recommendations to 32 days. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/d6abbe1b4b37aa7908f38b8af2f90f55bf76335d">d6abbe1b</a>)</li>
<li><strong>client-pinpoint-sms-voice:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/b44ce4d1afea7e56212acbfcefb75d47931ef3c3">b44ce4d1</a>)</li>
<li><strong>client-cloudfront:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/1316608643943dd905dfa9be0fa73d4a793d3127">13166086</a>)</li>
<li><strong>client-waf-regional:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/b3ce6f437f8792d3a5c82bea93af60bc92252295">b3ce6f43</a>)</li>
<li><strong>client-iot-events:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c2d17f78972316cafcf918e89f728b3fa3447a5e">c2d17f78</a>)</li>
<li><strong>client-direct-connect:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c407f18cb8edb15df006227dd1996dc1524f0521">c407f18c</a>)</li>
<li><strong>client-arc-region-switch:</strong> ARC Region Switch now supports three new execution blocks for multi-Region database workloads-Amazon Aurora Serverless scaling, Amazon Aurora Provisioned scaling, and Amazon Neptune Global Database failover. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/69c723251329730bc85d33b714d31c02cac647a4">69c72325</a>)</li>
<li><strong>client-iotsecuretunneling:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/573ad2c43a6dcd6552713ffa0289386412205afe">573ad2c4</a>)</li>
<li><strong>client-socialmessaging:</strong> Adding support for WhatsApp flow APIs and adding AccessDeniedByMetaException for Template APIs (<a href="https://github.com/aws/aws-sdk-js-v3/commit/5e9c74c60135388db6cc3066de80465f8a7090c9">5e9c74c6</a>)</li>
<li><strong>client-route53profiles:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/fdb24398918f5389e27031ac73e8a16d639fc6bf">fdb24398</a>)</li>
<li><strong>client-apigatewaymanagementapi:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/672907d8101178bef41bd3c1c20cd2ec986a72dd">672907d8</a>)</li>
<li><strong>client-dax:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/8e47fa8fe5794e337221dc4895d00bc1273f3bd9">8e47fa8f</a>)</li>
<li><strong>client-cloudwatch-logs:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/b4e3e68919af66b27d5fbdc8bad70291cea85555">b4e3e689</a>)</li>
<li><strong>client-resource-groups:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/287b030ecdd635545050c08914bf705a2131f5dd">287b030e</a>)</li>
<li><strong>client-firehose:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/4064ae73c96f688ed16a96cdff13fef6bf1eacf8">4064ae73</a>)</li>
<li><strong>client-kinesis:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/2094b2d98a23cd24e8681136eab368cb388c5785">2094b2d9</a>)</li>
<li><strong>client-ses:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/ce4a6b072757c50e2696cb0bfad19769b48ff575">ce4a6b07</a>)</li>
<li><strong>client-application-auto-scaling:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/1230344280919128f81acfc7f2b1bbc82a3614b7">12303442</a>)</li>
<li><strong>client-cloudtrail-data:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/43c7e358c423ffc1286a4eeb33e6f0bf3bb000b2">43c7e358</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view <strong>updated-packages.md</strong> in <strong>assets-3.1061.0.zip</strong></p>
<h2>v3.1060.0</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md">@aws-sdk/client-s3's changelog</a>.</em></p>
<blockquote>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1060.0...v3.1061.0">3.1061.0</a> (2026-06-03)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1059.0...v3.1060.0">3.1060.0</a> (2026-06-03)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1058.0...v3.1059.0">3.1059.0</a> (2026-06-02)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1057.0...v3.1058.0">3.1058.0</a> (2026-06-01)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1056.0...v3.1057.0">3.1057.0</a> (2026-05-29)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/71df2cc54f319fdbd1a6cd82b0317dbb65b386a7"><code>71df2cc</code></a> Publish v3.1061.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/121609400451d15166872f5dc2a2d8fe75c7d7f6"><code>1216094</code></a> chore(middleware-sdk-s3): consolidate S3 internal packages (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8026">#8026</a>)</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/8aeb92dd6ab42e4b59ebb3ad5a7c43b503af0183"><code>8aeb92d</code></a> Publish v3.1060.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/75bb4fc527454646b0992d69d8910e743d81654b"><code>75bb4fc</code></a> Publish v3.1059.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/6b082a6526a0bb0ba213bb16b4c97a0b1134bc45"><code>6b082a6</code></a> chore(codegen): sync for adaptive retry fix, EAI_AGAIN transient error (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8067">#8067</a>)</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/d7602d4e4256f1c91b499dcfa8e444041fdf96b6"><code>d7602d4</code></a> Publish v3.1058.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/e836d5c0437f234ca692615924cf7f88cf2748c6"><code>e836d5c</code></a> Publish v3.1057.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/e55a38791745be6ed4be7009808d14a2a393adf9"><code>e55a387</code></a> chore(codegen): sync for smithy 1.71.0 and snapshot-testing fix (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8053">#8053</a>)</li>
<li>See full diff in <a href="https://github.com/aws/aws-sdk-js-v3/commits/v3.1061.0/clients/client-s3">compare view</a></li>
</ul>
</details>
<br />
Updates `@tanstack/react-query` from 5.100.14 to 5.101.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/releases">@tanstack/react-query's releases</a>.</em></p>
<blockquote>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/3042860e3c8731c94ca4dec0e277e415d0484fce"><code>3042860</code></a>, <a href="https://github.com/TanStack/query/commit/e631dc3fa17bff71f413246b7a770a730016d346"><code>e631dc3</code></a>]:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/TanStack/query/pull/10857">#10857</a> <a href="https://github.com/TanStack/query/commit/7cf5923308fb91f3eff0fe952d8c64676e2bdad7"><code>7cf5923</code></a> - fix(react-query-next-experimental): replace deprecated 'isServer' with 'environmentManager.isServer()'</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md">@tanstack/react-query's changelog</a>.</em></p>
<blockquote>
<h2>5.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/TanStack/query/commit/f3d8d2abbf15bf81ff7575d3be9845d7b402f25a"><code>f3d8d2a</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10774">#10774</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/532bb298fba15e945e69c6ee4edc0c759ff21324"><code>532bb29</code></a> fix(tests): disable local coverage instrumentation (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10776">#10776</a>)</li>
<li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.0/packages/react-query">compare view</a></li>
</ul>
</details>
<br />
Updates `axios` from 1.16.1 to 1.17.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p>
<blockquote>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
<li><strong>Headers:</strong> Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10875">#10875</a></strong>)</li>
<li><strong>Request Data Merging:</strong> Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong>Bundler Compatibility:</strong> Converted <code>resolveConfig</code> from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code> return types and updated CommonJS <code>isCancel</code> typings to narrow to <code>CanceledError<T></code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10956">#10956</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10952">#10952</a></strong>)</li>
<li><strong>Build Tooling:</strong> Avoided emitting a null <code>Authorization</code> header from the GitHub build helper when <code>GITHUB_TOKEN</code> is unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li><strong>HTTP/2 Internals:</strong> Extracted <code>Http2Sessions</code> into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong>Package Publishing:</strong> Reduced published package size by switching to a <code>files</code> allowlist and dropping unneeded unminified bundle source maps. (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong>CI and Release Automation:</strong> Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (<strong><a href="https://redirect.github.com/axios/axios/issues/10907">#10907</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10911">#10911</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10916">#10916</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10927">#10927</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10935">#10935</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10983">#10983</a></strong>)</li>
<li><strong>Developer Workflow:</strong> Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10925">#10925</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10914">#10914</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10958">#10958</a></strong>)</li>
<li><strong>Documentation and Policy:</strong> Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (<strong><a href="https://redirect.github.com/axios/axios/issues/10890">#10890</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10889">#10889</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10921">#10921</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10945">#10945</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10933">#10933</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10915">#10915</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10887">#10887</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10955">#10955</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>, <code>qs</code>, docs dependencies, and GitHub Actions dependencies including <code>actions/dependency-review-action</code> and <code>zizmorcore/zizmor-action</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10871">#10871</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10879">#10879</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10918">#10918</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10919">#10919</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10934">#10934</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10947">#10947</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10954">#10954</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10960">#10960</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p>
<ul>
<li><strong><a href="https://github.com/BasixKOR"><code>@BasixKOR</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>)</li>
<li><strong><a href="https://github.com/carladams1299-lab"><code>@carladams1299-lab</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong><a href="https://github.com/LaplaceYoung"><code>@LaplaceYoung</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong><a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong><a href="https://github.com/RonGamzu"><code>@RonGamzu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>)</li>
<li><strong><a href="https://github.com/sapirbaruch"><code>@sapirbaruch</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong><a href="https://github.com/nezukoagent"><code>@nezukoagent</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>)</li>
<li><strong><a href="https://github.com/devareddy05"><code>@devareddy05</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>)</li>
<li><strong><a href="https://github.com/Mohammad-Faiz-Cloud-Engineer"><code>@Mohammad-Faiz-Cloud-Engineer</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong><a href="https://github.com/azandabot"><code>@azandabot</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
<li><strong><a href="https://github.com/niksy"><code>@niksy</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
</ul>
<p><a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0">Full Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p>
<blockquote>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
<li><strong>Headers:</strong> Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10875">#10875</a></strong>)</li>
<li><strong>Request Data Merging:</strong> Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong>Bundler Compatibility:</strong> Converted <code>resolveConfig</code> from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code> return types and updated CommonJS <code>isCancel</code> typings to narrow to <code>CanceledError<T></code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10956">#10956</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10952">#10952</a></strong>)</li>
<li><strong>Build Tooling:</strong> Avoided emitting a null <code>Authorization</code> header from the GitHub build helper when <code>GITHUB_TOKEN</code> is unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li><strong>HTTP/2 Internals:</strong> Extracted <code>Http2Sessions</code> into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong>Package Publishing:</strong> Reduced published package size by switching to a <code>files</code> allowlist and dropping unneeded unminified bundle source maps. (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong>CI and Release Automation:</strong> Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (<strong><a href="https://redirect.github.com/axios/axios/issues/10907">#10907</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10911">#10911</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10916">#10916</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10927">#10927</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10935">#10935</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10983">#10983</a></strong>)</li>
<li><strong>Developer Workflow:</strong> Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10925">#10925</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10914">#10914</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10958">#10958</a></strong>)</li>
<li><strong>Documentation and Policy:</strong> Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (<strong><a href="https://redirect.github.com/axios/axios/issues/10890">#10890</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10889">#10889</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10921">#10921</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10945">#10945</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10933">#10933</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10915">#10915</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10887">#10887</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10955">#10955</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>, <code>qs</code>, docs dependencies, and GitHub Actions dependencies including <code>actions/dependency-review-action</code> and <code>zizmorcore/zizmor-action</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10871">#10871</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10879">#10879</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10918">#10918</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10919">#10919</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10934">#10934</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10947">#10947</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10954">#10954</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10960">#10960</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p>
<ul>
<li><strong><a href="https://github.com/BasixKOR"><code>@BasixKOR</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>)</li>
<li><strong><a href="https://github.com/carladams1299-lab"><code>@carladams1299-lab</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong><a href="https://github.com/LaplaceYoung"><code>@LaplaceYoung</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong><a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong><a href="https://github.com/RonGamzu"><code>@RonGamzu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>)</li>
<li><strong><a href="https://github.com/sapirbaruch"><code>@sapirbaruch</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong><a href="https://github.com/nezukoagent"><code>@nezukoagent</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>)</li>
<li><strong><a href="https://github.com/devareddy05"><code>@devareddy05</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>)</li>
<li><strong><a href="https://github.com/Mohammad-Faiz-Cloud-Engineer"><code>@Mohammad-Faiz-Cloud-Engineer</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong><a href="https://github.com/azandabot"><code>@azandabot</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
<li><strong><a href="https://github.com/niksy"><code>@niksy</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
</ul>
<p><a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0">Full Changelog</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/axios/axios/commit/4306df21e84332fc576e98c2de549347c06bfb76"><code>4306df2</code></a> chore: add fun 88 sponsorship</li>
<li><a href="https://github.com/axios/axios/commit/931cc8f0106db4c9885403f85364b9e09ae1f6dc"><code>931cc8f</code></a> chore(release): prepare release 1.17.0 (<a href="https://redirect.github.com/axios/axios/issues/10983">#10983</a>)</li>
<li><a href="https://github.com/axios/axios/commit/38ba1b3d2b0aa5ada0463a37a548feb83a84dfa1"><code>38ba1b3</code></a> fix(fetch): support basic auth from URL (<a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a>)</li>
<li><a href="https://github.com/axios/axios/commit/32e2515f1e09b649723e4acd89d920df13eee77e"><code>32e2515</code></a> fix: replace ternary side effect in script (<a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a>)</li>
<li><a href="https://github.com/axios/axios/commit/030e7223831b0f562af3eb7501b24242c8a4c5ba"><code>030e722</code></a> chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs (<a href="https://redirect.github.com/axios/axios/issues/10960">#10960</a>)</li>
<li><a href="https://github.com/axios/axios/commit/ec63164ac6b7a1fcd6b742a8628d3fffe23ce001"><code>ec63164</code></a> chore: remove openspec (<a href="https://redirect.github.com/axios/axios/issues/10958">#10958</a>)</li>
<li><a href="https://github.com/axios/axios/commit/3dec28f94ce29d396d5f2d9718805b47428dc7ab"><code>3dec28f</code></a> fix(http): preserve TLS options for proxy tunnels (<a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a>)</li>
<li><a href="https://github.com/axios/axios/commit/a2390a5c059342bcac2a5297728181dd9939f562"><code>a2390a5</code></a> fix: correct isCancel type to narrow to CanceledError<T> (<a href="https://redirect.github.com/axios/axios/issues/10952">#10952</a>)</li>
<li><a href="https://github.com/axios/axios/commit/fa01b9255d71e72599826428bc6c60f34994c6ce"><code>fa01b92</code></a> chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /docs (<a href="https://redirect.github.com/axios/axios/issues/10954">#10954</a>)</li>
<li><a href="https://github.com/axios/axios/commit/2d2314a1ac29ce6723eb53e130b4a36617fd201c"><code>2d2314a</code></a> fix: AxiosHeaders <code>toJSON()</code> return types (<a href="https://redirect.github.com/axios/axios/issues/10956">#10956</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.16.1...v1.17.0">compare view</a></li>
</ul>
</details>
<br />
Updates `js-yaml` from 4.1.1 to 4.2.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p>
<blockquote>
<h2>[4.2.0] - 2026-06-01</h2>
<h3>Added</h3>
<ul>
<li>Added <code>docs/safety.md</code> with notes about processing untrusted YAML.</li>
<li>Added <code>maxDepth</code> (100) loader option. Not a problem, but gives a better
exception instead of RangeError on stack overflow.</li>
<li>Added <code>maxMergeSeqLength</code> (20) loader option. Not a problem after <code>merge</code> fix,
but an additional restriction for safety.</li>
<li>Added sourcemaps to <code>dist/</code> builds.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Stop resolving numbers with underscores as numeric scalars, <a href="https://redirect.github.com/nodeca/js-yaml/issues/627">#627</a>.</li>
<li>Switched dev toolchains to Vite / neostandard.</li>
<li>Updated demo.</li>
<li>Reorganized tests.</li>
<li><code>dist/</code> files are no longer kept in the repository.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix parsing of properties on the first implicit block mapping key, <a href="https://redirect.github.com/nodeca/js-yaml/issues/62">#62</a>.</li>
<li>Fix trailing whitespace handling when folding flow scalar lines, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li>
<li>Reject top-level block scalars without content indentation, <a href="https://redirect.github.com/nodeca/js-yaml/issues/280">#280</a>.</li>
<li>Ensure numbers survive round-trip, <a href="https://redirect.github.com/nodeca/js-yaml/issues/737">#737</a>.</li>
<li>Fix test coverage for issue <a href="https://redirect.github.com/nodeca/js-yaml/issues/221">#221</a>.</li>
<li>Fix flow scalar trailing whitespace folding, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li>
<li>Fix digits in YAML named tag handles.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Fix potential DoS via quadratic complexity in merge - deduplicate repeated
elements (makes sense for malformed files > 10K).</li>
</ul>
<h2>[3.14.2] - 2025-11-15</h2>
<h3>Security</h3>
<ul>
<li>Backported v4.1.1 fix to v3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/nodeca/js-yaml/commits">compare view</a></li>
</ul>
</details>
<br />
Updates `react-hook-form` from 7.76.1 to 7.77.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/releases">react-hook-form's releases</a>.</em></p>
<blockquote>
<h2>Version 7.77.0</h2>
<p>🥡 feat: add resetDefaultValues API (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13427">#13427</a>)</p>
<p><a href="https://react-hook-form.com/docs/useform/resetdefaultvalues">https://react-hook-form.com/docs/useform/resetdefaultvalues</a></p>
<pre lang="tsx"><code>const { resetDefaultValues } = useForm();
<p>resetDefaultValues(currentValues);
</code></pre></p>
<p>🐚 harden get() against prototype-path traversal (<strong>proto</strong> / constructor / prototype) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13479">#13479</a>)
🐞 fix FieldArray errors overriding nested fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13476">#13476</a>)
🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13473">#13473</a>)
🐞 fix: preserve values with shouldUnregister (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13464">#13464</a>)
🐞 fix stale isDirty in subscribe payload after reset(..., { keepValues: true }) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13461">#13461</a>)
👝 save bundle size (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13468">#13468</a>)</p>
<p>thanks to <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a> & <a href="https://github.com/dfedoryshchev"><code>@dfedoryshchev</code></a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md">react-hook-form's changelog</a>.</em></p>
<blockquote>
<h2>[7.77.0] - 2026-05-31</h2>
<h3>Added</h3>
<ul>
<li><code>resetDefaultValues</code> API</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stale <code>isDirty</code> in <code>subscribe</code> payload after <code>reset(..., { keepValues: true })</code></li>
<li>Preserve values with <code>shouldUnregister</code></li>
<li>Inconsistent <code>reset({})</code> behavior requiring double-call to take effect</li>
<li><code>FieldArray</code> errors overriding nested fields</li>
</ul>
<h3>Security</h3>
<ul>
<li>Harden <code>get()</code> against prototype-path traversal (<code>__proto__</code> / <code>constructor</code> / <code>prototype</code>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Bundle size reduction</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/5b2074157e342d0ecf2924bbd044196bfcc067fd"><code>5b20741</code></a> 7.77.0</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/f1a02d3fb0b97b1f1abe68bc522ff00989e3d8d5"><code>f1a02d3</code></a> 🧪 add regression coverage for createFormControl + useController remount defau...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/ba88c3d5bbfdad726f79c028a9377f109c5edaf0"><code>ba88c3d</code></a> 📚 docs: fix JSDoc for UseFormWatch (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13486">#13486</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/54198d9d807df801249ec0d33438643dcc77159d"><code>54198d9</code></a> 🥡 feat: add <code>resetDefaultValues</code> API (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13427">#13427</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/fe8276e531f897ffcbc0c64d3d466ad49ceb072c"><code>fe8276e</code></a> 📚 docs: fix duplicate "de" in es-ES README image alt text (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13481">#13481</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/6aa81f9e1835c85c1cba08fb929b16fbff7aa813"><code>6aa81f9</code></a> 🐚 harden <code>get()</code> against prototype-path traversal (<code>__proto__</code> / `constructor...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/645478be493ee2d992275db6bf7bb98d64de459b"><code>645478b</code></a> 🐞 fix FieldArray errors overriding nested fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13476">#13476</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/889c7523d6c5c68bfc3c78142782cb0a3310729d"><code>889c752</code></a> 🧪 add regression coverage for dynamic nested names with useController and wat...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/581321c8ab8bfb5d3fe11ce7ed7004aa282f0976"><code>581321c</code></a> 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/f8eb2d7d237e290c42ec0785d2708cce942e7d54"><code>f8eb2d7</code></a> 🌭 upgrade deps (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13470">#13470</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/react-hook-form/react-hook-form/compare/v7.76.1...v7.77.0">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/3210
Author: @dependabot[bot]
Created: 6/3/2026
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/prod-minor-updates-042591fdfd📝 Commits (1)
44779feBump the prod-minor-updates group across 1 directory with 5 updates📊 Changes
2 files changed (+242 additions, -240 deletions)
View changed files
📝
package-lock.json(+237 -235)📝
package.json(+5 -5)📄 Description
Bumps the prod-minor-updates group with 5 updates in the / directory:
3.1056.03.1061.05.100.145.101.01.16.11.17.04.1.14.2.07.76.17.77.0Updates
@aws-sdk/client-s3from 3.1056.0 to 3.1061.0Release notes
Sourced from @aws-sdk/client-s3's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-s3's changelog.
Commits
71df2ccPublish v3.1061.01216094chore(middleware-sdk-s3): consolidate S3 internal packages (#8026)8aeb92dPublish v3.1060.075bb4fcPublish v3.1059.06b082a6chore(codegen): sync for adaptive retry fix, EAI_AGAIN transient error (#8067)d7602d4Publish v3.1058.0e836d5cPublish v3.1057.0e55a387chore(codegen): sync for smithy 1.71.0 and snapshot-testing fix (#8053)Updates
@tanstack/react-queryfrom 5.100.14 to 5.101.0Release notes
Sourced from @tanstack/react-query's releases.
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
f3d8d2aci: Version Packages (#10774)532bb29fix(tests): disable local coverage instrumentation (#10776)Updates
axiosfrom 1.16.1 to 1.17.0Release notes
Sourced from axios's releases.
Changelog
Sourced from axios's changelog.
Commits
4306df2chore: add fun 88 sponsorship931cc8fchore(release): prepare release 1.17.0 (#10983)38ba1b3fix(fetch): support basic auth from URL (#10896)32e2515fix: replace ternary side effect in script (#10931)030e722chore(deps): bump axios from 1.15.2 to 1.16.1 in /docs (#10960)ec63164chore: remove openspec (#10958)3dec28ffix(http): preserve TLS options for proxy tunnels (#10957)a2390a5fix: correct isCancel type to narrow to CanceledError<T> (#10952)fa01b92chore(deps-dev): bump tmp from 0.2.5 to 0.2.7 in /docs (#10954)2d2314afix: AxiosHeaderstoJSON()return types (#10956)Updates
js-yamlfrom 4.1.1 to 4.2.0Changelog
Sourced from js-yaml's changelog.
Commits
Updates
react-hook-formfrom 7.76.1 to 7.77.0Release notes
Sourced from react-hook-form's releases.
Changelog
Sourced from react-hook-form's changelog.
Commits
5b207417.77.0f1a02d3🧪 add regression coverage for createFormControl + useController remount defau...ba88c3d📚 docs: fix JSDoc for UseFormWatch (#13486)54198d9🥡 feat: addresetDefaultValuesAPI (#13427)fe8276e📚 docs: fix duplicate "de" in es-ES README image alt text (#13481)6aa81f9🐚 hardenget()against prototype-path traversal (__proto__/ `constructor...645478b🐞 fix FieldArray errors overriding nested fields (#13476)889c752🧪 add regression coverage for dynamic nested names with useController and wat...581321c🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...f8eb2d7🌭 upgrade deps (#13470)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.