client-iam: Updating documentation for select service-specific credential APIs (f572228a)
New Features
clients: update client endpoints as of 2026-06-12 (3f89d039)
client-acm: Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. (ca60b0f9)
client-eks: Patches missing enum values for EKS updates (c2df34dc)
client-sagemaker-runtime: Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. (c4e229dd)
client-glue: Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. (f45445f9)
client-firehose: Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. (80837cd3)
client-bedrock-agentcore: Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior (1c06496f)
client-devops-agent: Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. (7139cf1e)
client-bedrock-agentcore-control: Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior (571ac1e7)
For list of updated packages, view updated-packages.md in assets-3.1068.0.zip
v3.1067.0
3.1067.0(2026-06-11)
Documentation Changes
suggest UndiciHttpHandler as an alternative request handler (#8092) (bd18a9f0)
New Features
client-eks: Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. (383363d5)
client-omics: Adds support for workflowName in the ListRuns API response. (fa2f4604)
client-neptune: Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations (ae089f94)
client-bedrock-agentcore: Adds support to perform cross account data plane actions on an AgentCore Memory resource (8d92e480)
client-healthlake: Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. (c74ab005)
client-bedrock-agentcore-control: Supports deterministic metadata for AgentCore Memory (af7a995a)
client-support: Adding new BDD representation of endpoint ruleset (cd9dac21)
For list of updated packages, view updated-packages.md in assets-3.1067.0.zip
Added unstable RadioGroupItemProvider, RadioGroupItemTrigger and RadioGroupItemBubbleInput parts. These expose the previously internal composition of a radio item (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The RadioGroupItem component continues to render them by default.
Added repository.directory to all package.json files
Added unstable Provider and BubbleInput parts to Select. Select.unstable_Provider sets up Select's context and state without implicitly rendering the hidden native select, and Select.unstable_BubbleInput exposes that previously internal native select so consumers can recompose it explicitly. Select continues to render both by default.
Added support for presence-based exit animations in Select
Fixed Select hidden input so it submits empty string when no value is selected
Fixed placeholder rendering when a controlled Select is reset to an empty value
Added missing __selectScope prop to PopperContent component
Fixed Select closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM
Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken
Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @dodomorandi for the original PR)
Fixed SelectValue logging invalid prop errors when used with both asChild and a placeholder
Added repository.directory to all package.json files
Added unstable Provider, Trigger and BubbleInput parts to Switch. These expose the previously internal composition (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The Switch component continues to render them by default.
Added repository.directory to all package.json files
This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.
🔒 Security Fixes
Redirect Header Safety: Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (#10892)
URL And Request Hardening: Rejects malformed http: and https: URLs that omit // with ERR_INVALID_URL, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local NO_PROXY matching. (#11000)
🐛 Bug Fixes
Status Validation: Added transitional.validateStatusUndefinedResolves so applications can opt in to treating validateStatus: undefined like the option was omitted, while validateStatus: null remains the explicit way to accept every status. (#10899)
🔧 Maintenance & Chores
Documentation: Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the proxy request config as Node.js-only in the advanced docs. (#10984, #10988, #10992, #10995)
This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.
🔒 Security Fixes
Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)
🚀 New Features
HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)
🐛 Bug Fixes
Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.
🔒 Security Fixes
Config Hardening: Guarded socketPath, params, and paramsSerializer reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (#10901, #10922)
Release Publishing: Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (#10926)
🚀 New Features
HTTP Compression: Added Node HTTP adapter support for zstd response decompression, with transitional.advertiseZstdAcceptEncoding controlling whether zstd is advertised in Accept-Encoding. (#6792, #10920)
🐛 Bug Fixes
Authentication Handling: Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (#10929, #10896)
Proxy TLS: Preserved user httpsAgent TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (#10957)
React Native FormData: Cleared default Content-Type for React Native FormData so multipart boundaries can be generated correctly. (#10898)
Headers: Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (#10875)
Request Data Merging: Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (#10812)
Bundler Compatibility: Converted resolveConfig from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (#10891)
Types: Corrected AxiosHeaders.toJSON() return types and updated CommonJS isCancel typings to narrow to CanceledError<T>. (#10956, #10952)
Build Tooling: Avoided emitting a null Authorization header from the GitHub build helper when GITHUB_TOKEN is unset. (#10931)
🔧 Maintenance & Chores
HTTP/2 Internals: Extracted Http2Sessions into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (#10861)
Package Publishing: Reduced published package size by switching to a files allowlist and dropping unneeded unminified bundle source maps. (#10939)
CI and Release Automation: Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (#10907, #10911, #10916, #10927, #10935, #10983)
Developer Workflow: Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (#10925, #10914, #10958)
Documentation and Policy: Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (#10890, #10889, #10921, #10945, #10905, #10933, #10915, #10887, #10955)
Dependencies: Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, fs-extra, qs, docs dependencies, and GitHub Actions dependencies including actions/dependency-review-action and zizmorcore/zizmor-action. (#10871, #10879, #10918, #10919, #10934, #10947, #10954, #10960)
🌟 New Contributors
We are thrilled to welcome our new contributors. Thank you for helping improve axios:
#3705d6fc0a5 Thanks @gustavohstrassburger! - feat(feature-flags): support the early_exit condition option in local evaluation. When a flag enables early exit, evaluation now stops and returns false as soon as a condition group's property filters match but the rollout percentage excludes the user, instead of falling through to later groups — matching the server-side evaluation behavior.
(2026-06-12)
#3705d6fc0a5 Thanks @gustavohstrassburger! - feat(feature-flags): support the early_exit condition option in local evaluation. When a flag enables early exit, evaluation now stops and returns false as soon as a condition group's property filters match but the rollout percentage excludes the user, instead of falling through to later groups — matching the server-side evaluation behavior.
(2026-06-12)
🚷 feat: use field array disabled (#13520)
🐞 fix controller onChange promise (#13518)
🐞 fix: track visited pairs in deepEqual to avoid false positives with shared object references (#13515)
🐞 fix #12651 issue: field validation with shouldUseNativeValidation does not behave native like for radio groups (#13512)
🐞 fix #12754 createFormControl breaks with fast refresh in dev mode (#13511)
🐞 close #12709#12750 StrictMode would remove field value & get mounted again (#13508)
🐞 fix #13505 issue: In v8 with React compiler, a change in formState errors does not cause child components to re-render (#13510)
🦷 update type dirtyFields typing for field arrays with undefined entries (#13492)
🐞 fix: recover Controller fields after reset without rerender (RN issue #13455) (#13497)
🐞 fix useFormState().isDirty race with async resolver in onChange mode (#13495)
🐞 fix: use reactive values prop over defaultValues when shouldUnregister is true (#13485)
🐞 fix deepEqual for empty non-plain objects (#13493)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
## 📋 Pull Request Information
**Original PR:** https://github.com/fosrl/pangolin/pull/3281
**Author:** [@dependabot[bot]](https://github.com/apps/dependabot)
**Created:** 6/15/2026
**Status:** ❌ Closed
**Base:** `main` ← **Head:** `dependabot/npm_and_yarn/prod-minor-updates-b324a82c34`
---
### 📝 Commits (1)
- [`f41bcfb`](https://github.com/fosrl/pangolin/commit/f41bcfb3aaa8c88b8d87381974af3bf7a2af00cf) Bump the prod-minor-updates group across 1 directory with 10 updates
### 📊 Changes
**2 files changed** (+1283 additions, -609 deletions)
<details>
<summary>View changed files</summary>
📝 `package-lock.json` (+1273 -599)
📝 `package.json` (+10 -10)
</details>
### 📄 Description
Bumps the prod-minor-updates group with 10 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1056.0` | `3.1068.0` |
| [@radix-ui/react-radio-group](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radio-group) | `1.3.8` | `1.4.0` |
| [@radix-ui/react-select](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/select) | `2.2.6` | `2.3.0` |
| [@radix-ui/react-switch](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/switch) | `1.2.6` | `1.3.0` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.100.14` | `5.101.0` |
| [axios](https://github.com/axios/axios) | `1.16.1` | `1.18.0` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `4.1.1` | `4.2.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.17.0` | `1.18.0` |
| [posthog-node](https://github.com/PostHog/posthog-js/tree/HEAD/packages/node) | `5.35.6` | `5.37.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.76.1` | `7.79.0` |
Updates `@aws-sdk/client-s3` from 3.1056.0 to 3.1068.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aws/aws-sdk-js-v3/releases">@aws-sdk/client-s3's releases</a>.</em></p>
<blockquote>
<h2>v3.1068.0</h2>
<h4>3.1068.0(2026-06-12)</h4>
<h5>Documentation Changes</h5>
<ul>
<li><strong>client-iam:</strong> Updating documentation for select service-specific credential APIs (<a href="https://github.com/aws/aws-sdk-js-v3/commit/f572228a35ccda02e702a3614a997ee889f20f30">f572228a</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>clients:</strong> update client endpoints as of 2026-06-12 (<a href="https://github.com/aws/aws-sdk-js-v3/commit/3f89d039a6e67ad96c3c7c4593d2906d2b2b6abd">3f89d039</a>)</li>
<li><strong>client-acm:</strong> Certificate transparency logging opt-out is no longer available. Per compliance requirements, all public ACM certificates are automatically recorded in certificate transparency logs. The CertificateTransparencyLoggingPreference option is deprecated. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/ca60b0f934de6000d65c60d217217cd179949e60">ca60b0f9</a>)</li>
<li><strong>client-eks:</strong> Patches missing enum values for EKS updates (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c2df34dc67e001dbe5eb49b77a567f65136202d3">c2df34dc</a>)</li>
<li><strong>client-sagemaker-runtime:</strong> Added support for inline request payloads to the InvokeEndpointAsync operation to allow users to provide the inference payload directly in the request Body (up to 128,000 bytes) as an alternative to uploading the payload to Amazon S3 and passing InputLocation. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c4e229ddd3e868a668e2e97458c2330d767fa369">c4e229dd</a>)</li>
<li><strong>client-glue:</strong> Adds support for retrieving Apache Iceberg table metadata via GetTable. Use the new AttributesToGet parameter with LATEST ICEBERG METADATA to receive schema, partition specs, sort orders, and table properties in the response. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/f45445f9f2218542a4800a1f0b65b506ccbde2b8">f45445f9</a>)</li>
<li><strong>client-firehose:</strong> Update KeyARN in DeliveryStreamEncryptionConfigurationInput to accept KMS key ARNs only (not alias ARNs), matching service behavior. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/80837cd31669d8be732a9e2b9bf2b13808099242">80837cd3</a>)</li>
<li><strong>client-bedrock-agentcore:</strong> Added tagging and CMK support across optimization, an explanation field in recommendation output, and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior (<a href="https://github.com/aws/aws-sdk-js-v3/commit/1c06496ff0a14ee1a5a5862de03d70cd149fe6f6">1c06496f</a>)</li>
<li><strong>client-devops-agent:</strong> Adds support for Trigger CRUD APIs (CreateTrigger, GetTrigger, UpdateTrigger, DeleteTrigger, ListTriggers) for managing schedule-based automation triggers in DevOps Agent agent spaces. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/7139cf1ecc18c1497ad029bb6073ef8c39bd7fb3">7139cf1e</a>)</li>
<li><strong>client-bedrock-agentcore-control:</strong> Added tagging and CMK support for optimizations and an insights feature to identify failure patterns, extract user intents, and summarize execution behavior (<a href="https://github.com/aws/aws-sdk-js-v3/commit/571ac1e7ab21fed49d403db02046705f55226622">571ac1e7</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view <strong>updated-packages.md</strong> in <strong>assets-3.1068.0.zip</strong></p>
<h2>v3.1067.0</h2>
<h4>3.1067.0(2026-06-11)</h4>
<h5>Documentation Changes</h5>
<ul>
<li>suggest UndiciHttpHandler as an alternative request handler (<a href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8092">#8092</a>) (<a href="https://github.com/aws/aws-sdk-js-v3/commit/bd18a9f0c8df55d47e7af27f09257c7a01a80fe2">bd18a9f0</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>client-eks:</strong> Introduce new CreateCluster parameters for Amazon EKS local clusters on AWS Outposts. Added etcdInstanceType for configuring the EC2 instance type for dedicated etcd instances, and spreadLevel for configuring the placement group spread level for Kubernetes control plane and etcd instances. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/383363d5724d0212f22891283d3b606669a00862">383363d5</a>)</li>
<li><strong>client-omics:</strong> Adds support for workflowName in the ListRuns API response. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/fa2f460474a394301d86a980325c2f5c09dd15b2">fa2f4604</a>)</li>
<li><strong>client-neptune:</strong> Amazon Neptune now supports IPv6 dual-stack networking. You can create and manage Neptune DB clusters accessible over both IPv4 and IPv6 by specifying NetworkType as DUAL in CreateDBCluster, ModifyDBCluster, RestoreDBClusterFromSnapshot, and RestoreDBClusterToPointInTime API operations (<a href="https://github.com/aws/aws-sdk-js-v3/commit/ae089f94ad19eaebd056378561636647aa944053">ae089f94</a>)</li>
<li><strong>client-bedrock-agentcore:</strong> Adds support to perform cross account data plane actions on an AgentCore Memory resource (<a href="https://github.com/aws/aws-sdk-js-v3/commit/8d92e480ebd75d7aba85a8e759c252363c005d63">8d92e480</a>)</li>
<li><strong>client-healthlake:</strong> Adds the UpdateFHIRDatastore API and adds analytics, NLP, and profile configuration support to CreateFHIRDatastore and DescribeFHIRDatastore. (<a href="https://github.com/aws/aws-sdk-js-v3/commit/c74ab0051493446397950ebe16fb42c162a3afc8">c74ab005</a>)</li>
<li><strong>client-bedrock-agentcore-control:</strong> Supports deterministic metadata for AgentCore Memory (<a href="https://github.com/aws/aws-sdk-js-v3/commit/af7a995a2fa892857f852231715edb0845102315">af7a995a</a>)</li>
<li><strong>client-support:</strong> Adding new BDD representation of endpoint ruleset (<a href="https://github.com/aws/aws-sdk-js-v3/commit/cd9dac213e3d7ece5cfc0f84e70631fc367606f7">cd9dac21</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view <strong>updated-packages.md</strong> in <strong>assets-3.1067.0.zip</strong></p>
<h2>v3.1066.0</h2>
<h4>3.1066.0(2026-06-10)</h4>
<h5>New Features</h5>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md">@aws-sdk/client-s3's changelog</a>.</em></p>
<blockquote>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1067.0...v3.1068.0">3.1068.0</a> (2026-06-12)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1066.0...v3.1067.0">3.1067.0</a> (2026-06-11)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1065.0...v3.1066.0">3.1066.0</a> (2026-06-10)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1064.0...v3.1065.0">3.1065.0</a> (2026-06-09)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1063.0...v3.1064.0">3.1064.0</a> (2026-06-08)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1062.0...v3.1063.0">3.1063.0</a> (2026-06-05)</h1>
<p><strong>Note:</strong> Version bump only for package <code>@aws-sdk/client-s3</code></p>
<h1><a href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1061.0...v3.1062.0">3.1062.0</a> (2026-06-04)</h1>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/0632f6dc8842caaa916c5f43a5043342ff9ba6bb"><code>0632f6d</code></a> Publish v3.1068.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/0a3246f174335af55a6981b4891f0f4c10dfe4c4"><code>0a3246f</code></a> Publish v3.1067.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/4b11912aef8adc845f81b7e9922bd180c5cf1d90"><code>4b11912</code></a> Publish v3.1066.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/e4ef6c57d8fd97d15e0a7a27a24396990d704307"><code>e4ef6c5</code></a> test: use crypto.randomUUID for resource names in e2e tests (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8091">#8091</a>)</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/62daf07c545b1fbac5753c554e2c8298ae6b820f"><code>62daf07</code></a> Publish v3.1065.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/bac71756a62d28fb08dce3e219176b365118eae4"><code>bac7175</code></a> Publish v3.1064.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/86792c5e3b9c0b697161a5a14ef119153d1c17f5"><code>86792c5</code></a> chore(scripts): update pkg json linting (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8082">#8082</a>)</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/85dabf4ef0c81d9db5405c483b3bfbd2126075d4"><code>85dabf4</code></a> Publish v3.1063.0</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/9bd1a86b9bec0f69c58dcfdda481c9e1797dd73f"><code>9bd1a86</code></a> chore: update author URL in package.json (<a href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3/issues/8080">#8080</a>)</li>
<li><a href="https://github.com/aws/aws-sdk-js-v3/commit/f5235bbaa2e234435fed935ae69df09b33149d0c"><code>f5235bb</code></a> Publish v3.1062.0</li>
<li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-js-v3/commits/v3.1068.0/clients/client-s3">compare view</a></li>
</ul>
</details>
<br />
Updates `@radix-ui/react-radio-group` from 1.3.8 to 1.4.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/radix-ui/primitives/blob/main/packages/react/radio-group/CHANGELOG.md">@radix-ui/react-radio-group's changelog</a>.</em></p>
<blockquote>
<h2>1.4.0</h2>
<ul>
<li>Added unstable <code>RadioGroupItemProvider</code>, <code>RadioGroupItemTrigger</code> and <code>RadioGroupItemBubbleInput</code> parts. These expose the previously internal composition of a radio item (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The <code>RadioGroupItem</code> component continues to render them by default.</li>
<li>Added repository.directory to all package.json files</li>
<li>Updated dependencies: <code>@radix-ui/react-presence@1.1.6</code>, <code>@radix-ui/react-direction@1.1.2</code>, <code>@radix-ui/primitive@1.1.4</code>, <code>@radix-ui/react-compose-refs@1.1.3</code>, <code>@radix-ui/react-context@1.1.4</code>, <code>@radix-ui/react-primitive@2.1.5</code>, <code>@radix-ui/react-roving-focus@1.1.12</code>, <code>@radix-ui/react-use-controllable-state@1.2.3</code>, <code>@radix-ui/react-use-previous@1.1.2</code>, <code>@radix-ui/react-use-size@1.1.2</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radio-group">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@radix-ui/react-radio-group</code> since your current version.</p>
</details>
<br />
Updates `@radix-ui/react-select` from 2.2.6 to 2.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/radix-ui/primitives/blob/main/packages/react/select/CHANGELOG.md">@radix-ui/react-select's changelog</a>.</em></p>
<blockquote>
<h2>2.3.0</h2>
<ul>
<li>Added unstable <code>Provider</code> and <code>BubbleInput</code> parts to Select. <code>Select.unstable_Provider</code> sets up Select's context and state without implicitly rendering the hidden native <code>select</code>, and <code>Select.unstable_BubbleInput</code> exposes that previously internal native <code>select</code> so consumers can recompose it explicitly. <code>Select</code> continues to render both by default.</li>
<li>Added support for presence-based exit animations in Select</li>
<li>Fixed Select hidden input so it submits empty string when no value is selected</li>
<li>Fixed placeholder rendering when a controlled Select is reset to an empty value</li>
<li>Added missing <code>__selectScope</code> prop to <code>PopperContent</code> component</li>
<li>Fixed <code>Select</code> closing unexpectedly after touch-scrolling its content when rendered inside an open shadow DOM</li>
<li>Fixed a bug where iOS text selection and editing on HTML inputs within <code>react-dialog</code> were broken</li>
<li>Fixed triggers referencing a non-existent element via <code>aria-controls</code> when their content is removed from the DOM (credit to <a href="https://github.com/dodomorandi"><code>@dodomorandi</code></a> for the <a href="https://redirect.github.com/radix-ui/primitives/pull/3243">original PR</a>)</li>
<li>Fixed <code>SelectValue</code> logging invalid prop errors when used with both <code>asChild</code> and a placeholder</li>
<li>Added repository.directory to all package.json files</li>
<li>Updated dependencies: <code>@radix-ui/react-presence@1.1.6</code>, <code>@radix-ui/react-popper@1.3.0</code>, <code>@radix-ui/react-slot@1.2.5</code>, <code>@radix-ui/react-focus-guards@1.1.4</code>, <code>@radix-ui/react-dismissable-layer@1.1.12</code>, <code>@radix-ui/react-collection@1.1.9</code>, <code>@radix-ui/react-direction@1.1.2</code>, <code>@radix-ui/number@1.1.2</code>, <code>@radix-ui/primitive@1.1.4</code>, <code>@radix-ui/react-compose-refs@1.1.3</code>, <code>@radix-ui/react-context@1.1.4</code>, <code>@radix-ui/react-focus-scope@1.1.9</code>, <code>@radix-ui/react-id@1.1.2</code>, <code>@radix-ui/react-portal@1.1.11</code>, <code>@radix-ui/react-primitive@2.1.5</code>, <code>@radix-ui/react-use-callback-ref@1.1.2</code>, <code>@radix-ui/react-use-controllable-state@1.2.3</code>, <code>@radix-ui/react-use-layout-effect@1.1.2</code>, <code>@radix-ui/react-use-previous@1.1.2</code>, <code>@radix-ui/react-visually-hidden@1.2.5</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/radix-ui/primitives/commits/HEAD/packages/react/select">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@radix-ui/react-select</code> since your current version.</p>
</details>
<br />
Updates `@radix-ui/react-switch` from 1.2.6 to 1.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/radix-ui/primitives/blob/main/packages/react/switch/CHANGELOG.md">@radix-ui/react-switch's changelog</a>.</em></p>
<blockquote>
<h2>1.3.0</h2>
<ul>
<li>Added unstable <code>Provider</code>, <code>Trigger</code> and <code>BubbleInput</code> parts to Switch. These expose the previously internal composition (context provider, the interactive control, and the hidden form input) so consumers can directly access and recompose them. The <code>Switch</code> component continues to render them by default.</li>
<li>Added repository.directory to all package.json files</li>
<li>Updated dependencies: <code>@radix-ui/primitive@1.1.4</code>, <code>@radix-ui/react-compose-refs@1.1.3</code>, <code>@radix-ui/react-context@1.1.4</code>, <code>@radix-ui/react-primitive@2.1.5</code>, <code>@radix-ui/react-use-controllable-state@1.2.3</code>, <code>@radix-ui/react-use-previous@1.1.2</code>, <code>@radix-ui/react-use-size@1.1.2</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/radix-ui/primitives/commits/HEAD/packages/react/switch">compare view</a></li>
</ul>
</details>
<details>
<summary>Maintainer changes</summary>
<p>This version was pushed to npm by <a href="https://www.npmjs.com/~GitHub%20Actions">GitHub Actions</a>, a new releaser for <code>@radix-ui/react-switch</code> since your current version.</p>
</details>
<br />
Updates `@tanstack/react-query` from 5.100.14 to 5.101.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/releases">@tanstack/react-query's releases</a>.</em></p>
<blockquote>
<h2><code>@tanstack/react-query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/TanStack/query/commit/3042860e3c8731c94ca4dec0e277e415d0484fce"><code>3042860</code></a>, <a href="https://github.com/TanStack/query/commit/e631dc3fa17bff71f413246b7a770a730016d346"><code>e631dc3</code></a>]:
<ul>
<li><code>@tanstack/query-devtools</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-next-experimental</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>
<p><a href="https://redirect.github.com/TanStack/query/pull/10857">#10857</a> <a href="https://github.com/TanStack/query/commit/7cf5923308fb91f3eff0fe952d8c64676e2bdad7"><code>7cf5923</code></a> - fix(react-query-next-experimental): replace deprecated 'isServer' with 'environmentManager.isServer()'</p>
</li>
<li>
<p>Updated dependencies []:</p>
<ul>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query-persist-client</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-persist-client-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
<li><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
<h2><code>@tanstack/react-query</code><a href="https://github.com/5"><code>@5</code></a>.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md">@tanstack/react-query's changelog</a>.</em></p>
<blockquote>
<h2>5.101.0</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@tanstack/query-core</code><a href="https://github.com/5"><code>@5</code></a>.101.0</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/TanStack/query/commit/f3d8d2abbf15bf81ff7575d3be9845d7b402f25a"><code>f3d8d2a</code></a> ci: Version Packages (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10774">#10774</a>)</li>
<li><a href="https://github.com/TanStack/query/commit/532bb298fba15e945e69c6ee4edc0c759ff21324"><code>532bb29</code></a> fix(tests): disable local coverage instrumentation (<a href="https://github.com/TanStack/query/tree/HEAD/packages/react-query/issues/10776">#10776</a>)</li>
<li>See full diff in <a href="https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.0/packages/react-query">compare view</a></li>
</ul>
</details>
<br />
Updates `axios` from 1.16.1 to 1.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/releases">axios's releases</a>.</em></p>
<blockquote>
<h2>v1.18.0 — June 13, 2026</h2>
<p>This release hardens redirect and URL handling, improves the validateStatus configuration semantics, and includes updates to documentation, dependencies, and release metadata.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li>
<p><strong>Redirect Header Safety:</strong> Added Node HTTP adapter support for stripping caller-specified sensitive headers on cross-origin redirects, helping prevent custom auth headers such as API keys from leaking to another origin. (<strong><a href="https://redirect.github.com/axios/axios/issues/10892">#10892</a></strong>)</p>
</li>
<li>
<p><strong>URL And Request Hardening:</strong> Rejects malformed <code>http:</code> and <code>https:</code> URLs that omit <code>//</code> with <code>ERR_INVALID_URL</code>, while tightening prototype-pollution-safe config reads, stream size limits, FormData depth handling, data URL sizing, and local <code>NO_PROXY</code> matching. (<strong><a href="https://redirect.github.com/axios/axios/issues/11000">#11000</a></strong>)</p>
</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Status Validation:</strong> Added <code>transitional.validateStatusUndefinedResolves</code> so applications can opt in to treating <code>validateStatus: undefined</code> like the option was omitted, while <code>validateStatus: null</code> remains the explicit way to accept every status. (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li>
<p><strong>Documentation:</strong> Published the v1.17.0 release notes, fixed a changelog typo, clarified the package update PR policy, and marked the <code>proxy</code> request config as Node.js-only in the advanced docs. (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10988">#10988</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10992">#10992</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</p>
</li>
<li>
<p><strong>Dependencies:</strong> Bumped <code>@babel/core</code>, <code>@babel/preset-env</code>, <code>@commitlint/cli</code>, <code>@commitlint/config-conventional</code>, <code>@rollup/plugin-babel</code>, <code>@rollup/plugin-commonjs</code>, <code>@vitest/browser</code>, <code>@vitest/browser-playwright</code>, <code>eslint</code>, <code>lint-staged</code>, <code>rollup</code>, <code>vitest</code>, and <code>actions/checkout</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10989">#10989</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10996">#10996</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10997">#10997</a></strong>)</p>
</li>
<li>
<p><strong>Release Metadata:</strong> Prepared the 1.18.0 release by updating package metadata and the runtime <code>VERSION</code> value. (<strong><a href="https://redirect.github.com/axios/axios/issues/11003">#11003</a></strong>)</p>
</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p>
<ul>
<li><strong><a href="https://github.com/drori12"><code>@drori12</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10984">#10984</a></strong>)</li>
<li><strong><a href="https://github.com/eyupcanakman"><code>@eyupcanakman</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a></strong>)</li>
<li><strong><a href="https://github.com/Adi-Beker"><code>@Adi-Beker</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a></strong>)</li>
</ul>
<p><a href="https://github.com/axios/axios/compare/v1.17.0...v1.18.0">Full Changelog</a></p>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/axios/axios/blob/v1.x/CHANGELOG.md">axios's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>v1.17.0 — June 1, 2026</h2>
<p>This release adds Node HTTP zstd decompression, hardens config and release workflows, and fixes authentication, header, proxy, and type-handling regressions.</p>
<h2>🔒 Security Fixes</h2>
<ul>
<li><strong>Config Hardening:</strong> Guarded <code>socketPath</code>, <code>params</code>, and <code>paramsSerializer</code> reads with own-property checks to prevent inherited prototype values from affecting request behavior, including SSRF-sensitive paths. (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong>Release Publishing:</strong> Switched the publish workflow to npm staged publishing for safer, auditable package releases with provenance. (<strong><a href="https://redirect.github.com/axios/axios/issues/10926">#10926</a></strong>)</li>
</ul>
<h2>🚀 New Features</h2>
<ul>
<li><strong>HTTP Compression:</strong> Added Node HTTP adapter support for zstd response decompression, with <code>transitional.advertiseZstdAcceptEncoding</code> controlling whether <code>zstd</code> is advertised in <code>Accept-Encoding</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10920">#10920</a></strong>)</li>
</ul>
<h2>🐛 Bug Fixes</h2>
<ul>
<li><strong>Authentication Handling:</strong> Restored Basic auth on same-origin Node redirects while continuing to strip credentials cross-origin, and aligned the fetch adapter with HTTP adapter behavior for URL-embedded Basic auth. (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
<li><strong>Proxy TLS:</strong> Preserved user <code>httpsAgent</code> TLS options when tunneling HTTPS requests through HTTP CONNECT proxies. (<strong><a href="https://redirect.github.com/axios/axios/issues/10957">#10957</a></strong>)</li>
<li><strong>React Native FormData:</strong> Cleared default <code>Content-Type</code> for React Native <code>FormData</code> so multipart boundaries can be generated correctly. (<strong><a href="https://redirect.github.com/axios/axios/issues/10898">#10898</a></strong>)</li>
<li><strong>Headers:</strong> Silently skipped empty or whitespace-only header names instead of throwing, matching parsed-header behavior and avoiding React Native response crashes. (<strong><a href="https://redirect.github.com/axios/axios/issues/10875">#10875</a></strong>)</li>
<li><strong>Request Data Merging:</strong> Preserved enumerable symbol keys when cloning plain request data through axios merge logic. (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong>Bundler Compatibility:</strong> Converted <code>resolveConfig</code> from an arrow default export to a named function export to avoid webpack and Babel transform interop failures. (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong>Types:</strong> Corrected <code>AxiosHeaders.toJSON()</code> return types and updated CommonJS <code>isCancel</code> typings to narrow to <code>CanceledError<T></code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10956">#10956</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10952">#10952</a></strong>)</li>
<li><strong>Build Tooling:</strong> Avoided emitting a null <code>Authorization</code> header from the GitHub build helper when <code>GITHUB_TOKEN</code> is unset. (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
</ul>
<h2>🔧 Maintenance & Chores</h2>
<ul>
<li><strong>HTTP/2 Internals:</strong> Extracted <code>Http2Sessions</code> into its own helper module and added direct unit coverage for session pooling, timeout, and cleanup behavior. (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong>Package Publishing:</strong> Reduced published package size by switching to a <code>files</code> allowlist and dropping unneeded unminified bundle source maps. (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong>CI and Release Automation:</strong> Added bundle-size reporting, moved reports to the job summary, fixed bundle-size comparison coverage, added Node 26 to the matrix, pinned npm for staged publishing, and prepared the 1.17.0 release. (<strong><a href="https://redirect.github.com/axios/axios/issues/10907">#10907</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10911">#10911</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10916">#10916</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10927">#10927</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10935">#10935</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10983">#10983</a></strong>)</li>
<li><strong>Developer Workflow:</strong> Added a dev container and iterated on OpenSpec workflow files before removing them from the release branch. (<strong><a href="https://redirect.github.com/axios/axios/issues/10925">#10925</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10914">#10914</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10958">#10958</a></strong>)</li>
<li><strong>Documentation and Policy:</strong> Updated disclosure, contributor, collaboration, threat-model, advanced docs, README badges, release notes, moderator configuration, and project metadata. (<strong><a href="https://redirect.github.com/axios/axios/issues/10890">#10890</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10889">#10889</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10921">#10921</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10945">#10945</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10933">#10933</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10915">#10915</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10887">#10887</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10955">#10955</a></strong>)</li>
<li><strong>Dependencies:</strong> Bumped Babel tooling, Commitlint, ESLint, Rollup, Globals, Vitest, Playwright, <code>fs-extra</code>, <code>qs</code>, docs dependencies, and GitHub Actions dependencies including <code>actions/dependency-review-action</code> and <code>zizmorcore/zizmor-action</code>. (<strong><a href="https://redirect.github.com/axios/axios/issues/10871">#10871</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10879">#10879</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10918">#10918</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10919">#10919</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10934">#10934</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10947">#10947</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10954">#10954</a></strong>, <strong><a href="https://redirect.github.com/axios/axios/issues/10960">#10960</a></strong>)</li>
</ul>
<h2>🌟 New Contributors</h2>
<p>We are thrilled to welcome our new contributors. Thank you for helping improve axios:</p>
<ul>
<li><strong><a href="https://github.com/BasixKOR"><code>@BasixKOR</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/6792">#6792</a></strong>)</li>
<li><strong><a href="https://github.com/carladams1299-lab"><code>@carladams1299-lab</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10861">#10861</a></strong>)</li>
<li><strong><a href="https://github.com/LaplaceYoung"><code>@LaplaceYoung</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10812">#10812</a></strong>)</li>
<li><strong><a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10939">#10939</a></strong>)</li>
<li><strong><a href="https://github.com/RonGamzu"><code>@RonGamzu</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10905">#10905</a></strong>)</li>
<li><strong><a href="https://github.com/sapirbaruch"><code>@sapirbaruch</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10891">#10891</a></strong>)</li>
<li><strong><a href="https://github.com/nezukoagent"><code>@nezukoagent</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10901">#10901</a></strong>)</li>
<li><strong><a href="https://github.com/devareddy05"><code>@devareddy05</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10929">#10929</a></strong>)</li>
<li><strong><a href="https://github.com/Mohammad-Faiz-Cloud-Engineer"><code>@Mohammad-Faiz-Cloud-Engineer</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10922">#10922</a></strong>)</li>
<li><strong><a href="https://github.com/azandabot"><code>@azandabot</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10931">#10931</a></strong>)</li>
<li><strong><a href="https://github.com/niksy"><code>@niksy</code></a></strong> (<strong><a href="https://redirect.github.com/axios/axios/issues/10896">#10896</a></strong>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/axios/axios/commit/2d06f96e8602c2db13b65a26340ee4a1bbc0b61f"><code>2d06f96</code></a> chore(release): prepare release 1.18.0 (<a href="https://redirect.github.com/axios/axios/issues/11003">#11003</a>)</li>
<li><a href="https://github.com/axios/axios/commit/32fc489632377d214db55bfa4e2c48486a7d7ce2"><code>32fc489</code></a> fix: malformed http urls (<a href="https://redirect.github.com/axios/axios/issues/11000">#11000</a>)</li>
<li><a href="https://github.com/axios/axios/commit/b40ce498abfa10d90b873b4fd08f520afa5d2545"><code>b40ce49</code></a> chore(deps-dev): bump the development_dependencies group with 10 updates (<a href="https://redirect.github.com/axios/axios/issues/10">#10</a>...</li>
<li><a href="https://github.com/axios/axios/commit/fe964f960ecb52c3e1155b0daf7be77541956b01"><code>fe964f9</code></a> docs: mark proxy config as Node.js only (<a href="https://redirect.github.com/axios/axios/issues/10995">#10995</a>)</li>
<li><a href="https://github.com/axios/axios/commit/5f229d2d1f018d1db3dab6bbe034dbf3f9041b99"><code>5f229d2</code></a> chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions ...</li>
<li><a href="https://github.com/axios/axios/commit/fae9d4e7db6a858c407c75e607a071c533c5c4f6"><code>fae9d4e</code></a> docs: clarify package update PR policy (<a href="https://redirect.github.com/axios/axios/issues/10992">#10992</a>)</li>
<li><a href="https://github.com/axios/axios/commit/28ab2ced820e55192806c53472ab3eb0cbb68dc2"><code>28ab2ce</code></a> chore(deps-dev): bump the development_dependencies group with 2 updates (<a href="https://redirect.github.com/axios/axios/issues/10989">#10989</a>)</li>
<li><a href="https://github.com/axios/axios/commit/a8e4f13aeecc45a3b8fab3ecfd9ddb5d70fb772b"><code>a8e4f13</code></a> fix(core): keep default validateStatus when request passes undefined (<a href="https://redirect.github.com/axios/axios/issues/10899">#10899</a>)</li>
<li><a href="https://github.com/axios/axios/commit/614f4552a17de757d4171ad7c3bd38c9c1025fd8"><code>614f455</code></a> docs: publish v1.17.0 release notes (<a href="https://redirect.github.com/axios/axios/issues/10988">#10988</a>)</li>
<li><a href="https://github.com/axios/axios/commit/6bb12c191f5380fad321322fb90216ae0dc36985"><code>6bb12c1</code></a> fix: custom auth headers not stripped on cross-origin redirects (<a href="https://redirect.github.com/axios/axios/issues/10892">#10892</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/axios/axios/compare/v1.16.1...v1.18.0">compare view</a></li>
</ul>
</details>
<br />
Updates `js-yaml` from 4.1.1 to 4.2.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md">js-yaml's changelog</a>.</em></p>
<blockquote>
<h2>[4.2.0] - 2026-06-01</h2>
<h3>Added</h3>
<ul>
<li>Added <code>docs/safety.md</code> with notes about processing untrusted YAML.</li>
<li>Added <code>maxDepth</code> (100) loader option. Not a problem, but gives a better
exception instead of RangeError on stack overflow.</li>
<li>Added <code>maxMergeSeqLength</code> (20) loader option. Not a problem after <code>merge</code> fix,
but an additional restriction for safety.</li>
<li>Added sourcemaps to <code>dist/</code> builds.</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Stop resolving numbers with underscores as numeric scalars, <a href="https://redirect.github.com/nodeca/js-yaml/issues/627">#627</a>.</li>
<li>Switched dev toolchains to Vite / neostandard.</li>
<li>Updated demo.</li>
<li>Reorganized tests.</li>
<li><code>dist/</code> files are no longer kept in the repository.</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix parsing of properties on the first implicit block mapping key, <a href="https://redirect.github.com/nodeca/js-yaml/issues/62">#62</a>.</li>
<li>Fix trailing whitespace handling when folding flow scalar lines, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li>
<li>Reject top-level block scalars without content indentation, <a href="https://redirect.github.com/nodeca/js-yaml/issues/280">#280</a>.</li>
<li>Ensure numbers survive round-trip, <a href="https://redirect.github.com/nodeca/js-yaml/issues/737">#737</a>.</li>
<li>Fix test coverage for issue <a href="https://redirect.github.com/nodeca/js-yaml/issues/221">#221</a>.</li>
<li>Fix flow scalar trailing whitespace folding, <a href="https://redirect.github.com/nodeca/js-yaml/issues/307">#307</a>.</li>
<li>Fix digits in YAML named tag handles.</li>
</ul>
<h3>Security</h3>
<ul>
<li>Fix potential DoS via quadratic complexity in merge - deduplicate repeated
elements (makes sense for malformed files > 10K).</li>
</ul>
<h2>[3.14.2] - 2025-11-15</h2>
<h3>Security</h3>
<ul>
<li>Backported v4.1.1 fix to v3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/nodeca/js-yaml/commits">compare view</a></li>
</ul>
</details>
<br />
Updates `lucide-react` from 1.17.0 to 1.18.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/lucide-icons/lucide/releases">lucide-react's releases</a>.</em></p>
<blockquote>
<h2>Version 1.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>chore(site): Remove survey from site by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4417">lucide-icons/lucide#4417</a></li>
<li>feat(icons): added <code>play-off</code> icon by <a href="https://github.com/Ahmed-Dghaies"><code>@Ahmed-Dghaies</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4412">lucide-icons/lucide#4412</a></li>
<li>fix(metadata): add missing use-cases prop on play-off.json by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4423">lucide-icons/lucide#4423</a></li>
<li>fix(docs): force hide #bb-banner, if html.has-bb-banner is missing by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4422">lucide-icons/lucide#4422</a></li>
<li>fix(docs): Remove <code>@next</code> from installation instructions for<code>@lucide/svelte</code> by <a href="https://github.com/alecglassford"><code>@alecglassford</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4432">lucide-icons/lucide#4432</a></li>
<li>feat(packages/angular): add support for Angular v22 and onwards by <a href="https://github.com/karsa-mistmere"><code>@karsa-mistmere</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4450">lucide-icons/lucide#4450</a></li>
<li>fix(ci): add check to skip release if latest tag was created today by <a href="https://github.com/ericfennis"><code>@ericfennis</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4085">lucide-icons/lucide#4085</a></li>
<li>feat(icons): added <code>webcam-off</code> icon by <a href="https://github.com/jordan-burnett"><code>@jordan-burnett</code></a> in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4242">lucide-icons/lucide#4242</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/alecglassford"><code>@alecglassford</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4432">lucide-icons/lucide#4432</a></li>
<li><a href="https://github.com/jordan-burnett"><code>@jordan-burnett</code></a> made their first contribution in <a href="https://redirect.github.com/lucide-icons/lucide/pull/4242">lucide-icons/lucide#4242</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/lucide-icons/lucide/compare/1.17.0...1.18.0">https://github.com/lucide-icons/lucide/compare/1.17.0...1.18.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/lucide-icons/lucide/commits/1.18.0/packages/lucide-react">compare view</a></li>
</ul>
</details>
<br />
Updates `posthog-node` from 5.35.6 to 5.37.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/PostHog/posthog-js/releases">posthog-node's releases</a>.</em></p>
<blockquote>
<h2>posthog-node@5.37.0</h2>
<h2>5.37.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><a href="https://redirect.github.com/PostHog/posthog-js/pull/3705">#3705</a> <a href="https://github.com/PostHog/posthog-js/commit/d6fc0a50fa2c2650869e3444a030533753ff0b4f"><code>d6fc0a5</code></a> Thanks <a href="https://github.com/gustavohstrassburger"><code>@gustavohstrassburger</code></a>! - feat(feature-flags): support the <code>early_exit</code> condition option in local evaluation. When a flag enables early exit, evaluation now stops and returns <code>false</code> as soon as a condition group's property filters match but the rollout percentage excludes the user, instead of falling through to later groups — matching the server-side evaluation behavior.
(2026-06-12)</li>
</ul>
<h2>posthog-node@5.36.17</h2>
<h2>5.36.17</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.3</li>
</ul>
</li>
</ul>
<h2>posthog-node@5.36.16</h2>
<h2>5.36.16</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/PostHog/posthog-js/commit/25822acc0d16f9f1d6fbbd65da57b3e060c6c558"><code>25822ac</code></a>]:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.2</li>
</ul>
</li>
</ul>
<h2>posthog-node@5.36.15</h2>
<h2>5.36.15</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.1</li>
</ul>
</li>
</ul>
<h2>posthog-node@5.36.14</h2>
<h2>5.36.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/PostHog/posthog-js/commit/612f97adebd3d863602533180ac4bee3f3ed731d"><code>612f97a</code></a>]:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.0</li>
</ul>
</li>
</ul>
<h2>posthog-node@5.36.13</h2>
<h2>5.36.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.31.4</li>
</ul>
</li>
</ul>
<h2>posthog-node@5.36.12</h2>
<h2>5.36.12</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/PostHog/posthog-js/blob/main/packages/node/CHANGELOG.md">posthog-node's changelog</a>.</em></p>
<blockquote>
<h2>5.37.0</h2>
<h3>Minor Changes</h3>
<ul>
<li><a href="https://redirect.github.com/PostHog/posthog-js/pull/3705">#3705</a> <a href="https://github.com/PostHog/posthog-js/commit/d6fc0a50fa2c2650869e3444a030533753ff0b4f"><code>d6fc0a5</code></a> Thanks <a href="https://github.com/gustavohstrassburger"><code>@gustavohstrassburger</code></a>! - feat(feature-flags): support the <code>early_exit</code> condition option in local evaluation. When a flag enables early exit, evaluation now stops and returns <code>false</code> as soon as a condition group's property filters match but the rollout percentage excludes the user, instead of falling through to later groups — matching the server-side evaluation behavior.
(2026-06-12)</li>
</ul>
<h2>5.36.17</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.3</li>
</ul>
</li>
</ul>
<h2>5.36.16</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/PostHog/posthog-js/commit/25822acc0d16f9f1d6fbbd65da57b3e060c6c558"><code>25822ac</code></a>]:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.2</li>
</ul>
</li>
</ul>
<h2>5.36.15</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.1</li>
</ul>
</li>
</ul>
<h2>5.36.14</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies [<a href="https://github.com/PostHog/posthog-js/commit/612f97adebd3d863602533180ac4bee3f3ed731d"><code>612f97a</code></a>]:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.32.0</li>
</ul>
</li>
</ul>
<h2>5.36.13</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.31.4</li>
</ul>
</li>
</ul>
<h2>5.36.12</h2>
<h3>Patch Changes</h3>
<ul>
<li>Updated dependencies []:
<ul>
<li><code>@posthog/core</code><a href="https://github.com/1"><code>@1</code></a>.31.3</li>
</ul>
</li>
</ul>
<h2>5.36.11</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/PostHog/posthog-js/commit/5e8c4b7ea432290621296c64ce19ad44ef163f9b"><code>5e8c4b7</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/d6fc0a50fa2c2650869e3444a030533753ff0b4f"><code>d6fc0a5</code></a> feat(flags): support early_exit in posthog-node local evaluation (<a href="https://github.com/PostHog/posthog-js/tree/HEAD/packages/node/issues/3705">#3705</a>)</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/be08a6477588e0201770ef80618a45d5c1398ffa"><code>be08a64</code></a> docs: centralize SDK examples in official docs (<a href="https://github.com/PostHog/posthog-js/tree/HEAD/packages/node/issues/3825">#3825</a>)</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/1f2c06b853581a574409b750adb70e6cd721e28b"><code>1f2c06b</code></a> chore: make workspace releases explicit (<a href="https://github.com/PostHog/posthog-js/tree/HEAD/packages/node/issues/3803">#3803</a>)</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/c7abf85f7af52b8b01fbd61b5749eb7649360287"><code>c7abf85</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/5fe3bd488c9809d7ef84e365a2435664ff7fa91d"><code>5fe3bd4</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/defbc62fc22d64fe57ee22e0ade43d1758866a76"><code>defbc62</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/50a666fe03ce61b889c335593cade36dacb74270"><code>50a666f</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/f4d4c8b84663c983d67fffe02e284d9496cff5f1"><code>f4d4c8b</code></a> chore: update versions and lockfile [version bump]</li>
<li><a href="https://github.com/PostHog/posthog-js/commit/8b8b196a19bc32e91970212c26a41119c84c2f32"><code>8b8b196</code></a> chore: update versions and lockfile [version bump]</li>
<li>Additional commits viewable in <a href="https://github.com/PostHog/posthog-js/commits/posthog-node@5.37.0/packages/node">compare view</a></li>
</ul>
</details>
<br />
Updates `react-hook-form` from 7.76.1 to 7.79.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/releases">react-hook-form's releases</a>.</em></p>
<blockquote>
<h2>Version 7.79.0</h2>
<p>🚷 feat: use field array disabled (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13520">#13520</a>)
🐞 fix controller onChange promise (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13518">#13518</a>)
🐞 fix: track visited pairs in deepEqual to avoid false positives with shared object references (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13515">#13515</a>)
🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12651">#12651</a> issue: field validation with shouldUseNativeValidation does not behave native like for radio groups (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13512">#13512</a>)
🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12754">#12754</a> createFormControl breaks with fast refresh in dev mode (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13511">#13511</a>)
🐞 close <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12709">#12709</a> <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12750">#12750</a> StrictMode would remove field value & get mounted again (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13508">#13508</a>)
🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13505">#13505</a> issue: In v8 with React compiler, a change in formState errors does not cause child components to re-render (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13510">#13510</a>)</p>
<p>thanks to <a href="https://github.com/DucMinhNe"><code>@DucMinhNe</code></a> & <a href="https://github.com/louzhedong"><code>@louzhedong</code></a></p>
<h2>Version 7.78.0</h2>
<p>🦷 update type dirtyFields typing for field arrays with undefined entries (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13492">#13492</a>)
🐞 fix: recover Controller fields after reset without rerender (RN issue <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13455">#13455</a>) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13497">#13497</a>)
🐞 fix useFormState().isDirty race with async resolver in onChange mode (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13495">#13495</a>)
🐞 fix: use reactive values prop over defaultValues when shouldUnregister is true (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13485">#13485</a>)
🐞 fix deepEqual for empty non-plain objects (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13493">#13493</a>)</p>
<p>thanks to <a href="https://github.com/cyphercodes"><code>@cyphercodes</code></a></p>
<h2>Version 7.77.0</h2>
<p>🥡 feat: add resetDefaultValues API (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13427">#13427</a>)</p>
<p><a href="https://react-hook-form.com/docs/useform/resetdefaultvalues">https://react-hook-form.com/docs/useform/resetdefaultvalues</a></p>
<pre lang="tsx"><code>const { resetDefaultValues } = useForm();
<p>resetDefaultValues(currentValues);
</code></pre></p>
<p>🐚 harden get() against prototype-path traversal (<strong>proto</strong> / constructor / prototype) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13479">#13479</a>)
🐞 fix FieldArray errors overriding nested fields (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13476">#13476</a>)
🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13473">#13473</a>)
🐞 fix: preserve values with shouldUnregister (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13464">#13464</a>)
🐞 fix stale isDirty in subscribe payload after reset(..., { keepValues: true }) (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13461">#13461</a>)
👝 save bundle size (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13468">#13468</a>)</p>
<p>thanks to <a href="https://github.com/puneetdixit200"><code>@puneetdixit200</code></a> & <a href="https://github.com/dfedoryshchev"><code>@dfedoryshchev</code></a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md">react-hook-form's changelog</a>.</em></p>
<blockquote>
<h2>[7.79.0] - 2026-06-13</h2>
<h3>Added</h3>
<ul>
<li><code>disabled</code> option to <code>useFieldArray</code></li>
</ul>
<h3>Fixed</h3>
<ul>
<li><code>Controller</code> <code>onChange</code> promise return type</li>
<li><code>deepEqual</code> false positives with shared object references</li>
<li><code>shouldUseNativeValidation</code> behavior for radio groups</li>
<li><code>createFormControl</code> stability with fast refresh in dev mode</li>
<li><code>StrictMode</code> value preservation during remount</li>
<li><code>formState.errors</code> reactivity with React compiler</li>
</ul>
<h2>[7.78.0] - 2026-06-08</h2>
<h3>Fixed</h3>
<ul>
<li>Recover <code>Controller</code> fields after <code>reset</code> without rerender (RN issue <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13455">#13455</a>)</li>
<li><code>useFormState().isDirty</code> race with async resolver in <code>onChange</code> mode</li>
<li>Use reactive <code>values</code> prop over <code>defaultValues</code> when <code>shouldUnregister</code> is true</li>
<li><code>deepEqual</code> for empty non-plain objects</li>
</ul>
<h3>Types</h3>
<ul>
<li>Update <code>dirtyFields</code> typing for field arrays with undefined entries</li>
</ul>
<h2>[7.77.0] - 2026-05-31</h2>
<h3>Added</h3>
<ul>
<li><code>resetDefaultValues</code> API</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stale <code>isDirty</code> in <code>subscribe</code> payload after <code>reset(..., { keepValues: true })</code></li>
<li>Preserve values with <code>shouldUnregister</code></li>
<li>Inconsistent <code>reset({})</code> behavior requiring double-call to take effect</li>
<li><code>FieldArray</code> errors overriding nested fields</li>
</ul>
<h3>Security</h3>
<ul>
<li>Harden <code>get()</code> against prototype-path traversal (<code>__proto__</code> / <code>constructor</code> / <code>prototype</code>)</li>
</ul>
<h3>Performance</h3>
<ul>
<li>Bundle size reduction</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/3f1d2bdd06417d205e9b9a1e76a4022c7fd7a2db"><code>3f1d2bd</code></a> 7.79.0</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/c344c4f7fa7ac28f60f189dae8777d0cdba9457a"><code>c344c4f</code></a> 📖 update changelog v7.78.0</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/351a9583d07084f823e3500e2efc4bc090395130"><code>351a958</code></a> 🏟️ build(deps): bump joi from 17.13.3 to 18.2.1 in /app (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13521">#13521</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/e3d8172b31d9ec8d8b6f2d50beb2544d690cdc9f"><code>e3d8172</code></a> 🚷 feat: use field array disabled (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13520">#13520</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/00f6c285df0bf35fc3cc66b68db484f91aff3680"><code>00f6c28</code></a> 🐞 fix controller onChange promise (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13518">#13518</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/a338076ef0de07ae90de7b469ef88ca2178b542d"><code>a338076</code></a> 🚷 feat: add <code>disabled</code> option to useFieldArray (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13519">#13519</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/a2a3c9c8c946e327ed8661920ad09d1262b3dc3a"><code>a2a3c9c</code></a> 🐞 fix: track visited pairs in deepEqual to avoid false positives with shared ...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/1e00a1b18643d6de6cd9a92bcb05b996ac163455"><code>1e00a1b</code></a> 🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12651">#12651</a> issue: field validation with shouldUseNativeValidation does not ...</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/bb2ce17575bd410cae6859e2878f9108a93bd6bc"><code>bb2ce17</code></a> 🐞 fix <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12754">#12754</a> createFormControl breaks with fast refresh in dev mode (<a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/13511">#13511</a>)</li>
<li><a href="https://github.com/react-hook-form/react-hook-form/commit/b377376fabdb02e9710e2f95911f24cc1420d2c8"><code>b377376</code></a> 🐞 close <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12709">#12709</a> <a href="https://redirect.github.com/react-hook-form/react-hook-form/issues/12750">#12750</a> StrictMode would remove field value & get mounted again...</li>
<li>Additional commits viewable in <a href="https://github.com/react-hook-form/react-hook-form/compare/v7.76.1...v7.79.0">compare view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions
</details>
---
<sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror
changed title from [PR #3281] Bump the prod-minor-updates group across 1 directory with 10 updates to [PR #3281] [CLOSED] Bump the prod-minor-updates group across 1 directory with 10 updates2026-06-17 04:18:47 -05:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
📋 Pull Request Information
Original PR: https://github.com/fosrl/pangolin/pull/3281
Author: @dependabot[bot]
Created: 6/15/2026
Status: ❌ Closed
Base:
main← Head:dependabot/npm_and_yarn/prod-minor-updates-b324a82c34📝 Commits (1)
f41bcfbBump the prod-minor-updates group across 1 directory with 10 updates📊 Changes
2 files changed (+1283 additions, -609 deletions)
View changed files
📝
package-lock.json(+1273 -599)📝
package.json(+10 -10)📄 Description
Bumps the prod-minor-updates group with 10 updates in the / directory:
3.1056.03.1068.01.3.81.4.02.2.62.3.01.2.61.3.05.100.145.101.01.16.11.18.04.1.14.2.01.17.01.18.05.35.65.37.07.76.17.79.0Updates
@aws-sdk/client-s3from 3.1056.0 to 3.1068.0Release notes
Sourced from @aws-sdk/client-s3's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-s3's changelog.
... (truncated)
Commits
0632f6dPublish v3.1068.00a3246fPublish v3.1067.04b11912Publish v3.1066.0e4ef6c5test: use crypto.randomUUID for resource names in e2e tests (#8091)62daf07Publish v3.1065.0bac7175Publish v3.1064.086792c5chore(scripts): update pkg json linting (#8082)85dabf4Publish v3.1063.09bd1a86chore: update author URL in package.json (#8080)f5235bbPublish v3.1062.0Updates
@radix-ui/react-radio-groupfrom 1.3.8 to 1.4.0Changelog
Sourced from @radix-ui/react-radio-group's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-radio-groupsince your current version.Updates
@radix-ui/react-selectfrom 2.2.6 to 2.3.0Changelog
Sourced from @radix-ui/react-select's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-selectsince your current version.Updates
@radix-ui/react-switchfrom 1.2.6 to 1.3.0Changelog
Sourced from @radix-ui/react-switch's changelog.
Commits
Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@radix-ui/react-switchsince your current version.Updates
@tanstack/react-queryfrom 5.100.14 to 5.101.0Release notes
Sourced from @tanstack/react-query's releases.
Changelog
Sourced from @tanstack/react-query's changelog.
Commits
f3d8d2aci: Version Packages (#10774)532bb29fix(tests): disable local coverage instrumentation (#10776)Updates
axiosfrom 1.16.1 to 1.18.0Release notes
Sourced from axios's releases.
... (truncated)
Changelog
Sourced from axios's changelog.
... (truncated)
Commits
2d06f96chore(release): prepare release 1.18.0 (#11003)32fc489fix: malformed http urls (#11000)b40ce49chore(deps-dev): bump the development_dependencies group with 10 updates (#10...fe964f9docs: mark proxy config as Node.js only (#10995)5f229d2chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions ...fae9d4edocs: clarify package update PR policy (#10992)28ab2cechore(deps-dev): bump the development_dependencies group with 2 updates (#10989)a8e4f13fix(core): keep default validateStatus when request passes undefined (#10899)614f455docs: publish v1.17.0 release notes (#10988)6bb12c1fix: custom auth headers not stripped on cross-origin redirects (#10892)Updates
js-yamlfrom 4.1.1 to 4.2.0Changelog
Sourced from js-yaml's changelog.
Commits
Updates
lucide-reactfrom 1.17.0 to 1.18.0Release notes
Sourced from lucide-react's releases.
Commits
Updates
posthog-nodefrom 5.35.6 to 5.37.0Release notes
Sourced from posthog-node's releases.
... (truncated)
Changelog
Sourced from posthog-node's changelog.
... (truncated)
Commits
5e8c4b7chore: update versions and lockfile [version bump]d6fc0a5feat(flags): support early_exit in posthog-node local evaluation (#3705)be08a64docs: centralize SDK examples in official docs (#3825)1f2c06bchore: make workspace releases explicit (#3803)c7abf85chore: update versions and lockfile [version bump]5fe3bd4chore: update versions and lockfile [version bump]defbc62chore: update versions and lockfile [version bump]50a666fchore: update versions and lockfile [version bump]f4d4c8bchore: update versions and lockfile [version bump]8b8b196chore: update versions and lockfile [version bump]Updates
react-hook-formfrom 7.76.1 to 7.79.0Release notes
Sourced from react-hook-form's releases.
Changelog
Sourced from react-hook-form's changelog.
Commits
3f1d2bd7.79.0c344c4f📖 update changelog v7.78.0351a958🏟️ build(deps): bump joi from 17.13.3 to 18.2.1 in /app (#13521)e3d8172🚷 feat: use field array disabled (#13520)00f6c28🐞 fix controller onChange promise (#13518)a338076🚷 feat: adddisabledoption to useFieldArray (#13519)a2a3c9c🐞 fix: track visited pairs in deepEqual to avoid false positives with shared ...1e00a1b🐞 fix #12651 issue: field validation with shouldUseNativeValidation does not ...bb2ce17🐞 fix #12754 createFormControl breaks with fast refresh in dev mode (#13511)b377376🐞 close #12709 #12750 StrictMode would remove field value & get mounted again...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.
[PR #3281] Bump the prod-minor-updates group across 1 directory with 10 updatesto [PR #3281] [CLOSED] Bump the prod-minor-updates group across 1 directory with 10 updates