Repository navigation
fix(deps): update all non-major dependencies - #496
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
October 9, 2026 05:54
c4f70b6 to
bb87f08
Compare
|
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
9 times, most recently
from
October 16, 2026 09:14
aace3d2 to
455f863
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
5 times, most recently
from
October 19, 2026 10:08
3557a67 to
ba66bf4
Compare
renovate
Bot
force-pushed
the
renovate/all-minor-patch
branch
from
October 20, 2026 09:13
ba66bf4 to
0a45b36
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
3.7.0→3.8.03.5.0→3.6.03.2.0→3.3.03.3.0→3.4.03.5.0→3.6.05.9.1→5.9.22.12.0→2.13.010.6.0→10.6.210.6.0→10.6.210.6.0→10.6.210.6.0→10.6.214.6.7→14.6.824.13.6→24.19.24.1.11→4.1.1226.4.2→26.4.717.5.1→17.6.03.9.9→3.9.1019.3.0→19.3.119.3.0→19.3.17.88.0→7.90.017.0.15→17.0.201.105.0→1.105.210.6.0→10.6.217.15.0→17.16.07.3.6→7.3.74.6.5→4.6.7Release Notes
Commencis/js-toolkit (@commencis/eslint-config)
v3.8.0Compare Source
Minor Changes
#4766d719dd@ymehmetcanCommencis/js-toolkit (@commencis/eslint-plugin)
v3.6.0Compare Source
Minor Changes
#4761c8837e@ymehmetcanCommencis/js-toolkit (@commencis/lint-staged-config)
v3.3.0Compare Source
Minor Changes
#47672c72be@ymehmetcanCommencis/js-toolkit (@commencis/prettier-config)
v3.4.0Compare Source
Minor Changes
#4769e7e10e@ymehmetcanCommencis/js-toolkit (@commencis/stylelint-config)
v3.6.0Compare Source
Minor Changes
#4768290e0f@ymehmetcanreact-hook-form/resolvers (@hookform/resolvers)
v5.9.2Compare Source
Bug Fixes
reduxjs/redux-toolkit (@reduxjs/toolkit)
v2.13.0Compare Source
This feature release updates our build tooling to TSDown and PNPM, adds official TypeScript 7 support, and includes a long list of bugfixes across RTK Query,
createAsyncThunk,createEntityAdapter, andcombineSlices.Changelog
Build Tooling Updates
We've fully modernizing modernized our build tooling across all of the Redux repos. That included switching from Yarn to PNPM, ESLint to Oxlint, Prettier to Oxfmt, and TSUp to TSDown.
The part that matters for users is that we now build the package with TSDown instead of
tsup. The package layout,exportsdefinitions, and exported APIs are all unchanged from 2.12. We've checked the new build withattw, and verified that CJS and ESM entry points load in both dev and prod builds, and that thelegacy-esmartifacts still target ES2017. The contents of the bundles do look a bit different (smaller CJS artifacts, slightly different helper output in thelegacy-esmfiles). If you see any behavior differences that look build-related, please file an issue!This is also our first release published via the updated PNPM-based workflow, still using NPM Trusted Publishing. We've also added
pkg.pr.newpreviews for every commit, so you can try out a PR build before it's released.Docs Updates
We've shipped a new combined Redux libraries docs site! The core docs site at https://redux.js.org now contains the docs for all of our libraries: Redux core and usage guides, Redux Toolkit, React Redux, and Reselect. The prior standalone docs sites for RTK, R-R, and Reselect now redirect to their respective sections of the combined docs. We've also done a major cleanup pass on the docs, deduplicating pages that had similarities (like the Next.js or RTK2 migration pages that lived in both the core and RTK docs), and updating outdated content (modernizing example code snippets, deleting dead links, and making RTK and hooks the default patterns shown). The RTK content now lives at https://redux.js.org/toolkit/ .
TypeScript 7 Support
TS 7.0 (the native Go port) is now out! We fixed the remaining type errors in RTK when checked by TS 7.0 and 7.1, and TS 7.0 is now part of our CI test matrix.
Per our TS support policy of matching DefinitelyTyped's support window, we've also updated our support matrix to TS 5.6+. As always, RTK may still work with earlier versions, but we no longer test against them.
RTK Query Fixes
useQueryState(and thususeQuery) was passing a new inline selector touseSelectoron every render, and also reading the store directly during render. The selector is now memoized, and the direct store read is gone. This also fixes a bug whereisSuccesscould flip fromfalsetotrueon an unrelated re-render while a query was refetching after an error.isSuccessnow correctly staysfalsein that case.datanow reflects cache updates made viaupdateQueryDatawhile a refetch is in flight, instead of showing the previous result.Polling now reads the current cache state when each poll fires, rather than the state at the time the poll was scheduled. This means
skipPollingIfUnfocusedrespects focus loss that happens after scheduling, and polls stop if their cache entry was removed.We fixed a race where a duplicate query request rejected by the thunk condition could cause queued tag invalidations to run too early and be lost, leaving stale data in the cache.
Tags with falsy ids like
0now invalidate and clean up correctly.Lazy query hooks now re-subscribe correctly when effects restart while the hook state is preserved, such as with Fast Refresh or
<Activity>.Infinite queries no longer trigger
onQueryStartedwhen fetching past the end of the list, and the infinite query hook result type now includes the page error flags.fetchBaseQueryonly treats a URL as absolute if it starts with a scheme.We also fixed an error when rehydrating state for an endpoint name that has no definition.
Other Fixes
createAsyncThunkno longer swallows aborts that happen before thependingaction is dispatched, and now correctly setsrejectedWithValuewhenrejectWithValueis called with a falsy payload.createEntityAdapter'ssetAllnow keeps the last item when given duplicate IDs, matchingsetMany. The sorted adapter'supdateManynow merges multiple updates for the same ID before applying them.combineSlicesnow keeps its internal state proxy cache per instance, so multiple combined reducers no longer interfere with each other.The immutability check middleware now handles circular references in state.
The dynamic middleware now caches its composed middleware chains when the list of middleware hasn't changed.
What's Changed
pkg.pr.newby @aryaemami59 in #5256entityAdapter):setAllwith duplicate IDs keeps last occurrence (consistent withsetMany) by @JSap0914 in #5321createAsyncThunkaborts that happen before pending by @chatman-media in #5314useRef<T | undefined>(undefined)usages in RTK Query hooks by @DucMinhNe in #5315onQueryStartedfrom triggering at end-of-list by @joseph0926 in #5182remark-typescript-toolsand update to TS7 by @markerikson in #5390rejectedWithValuefor falsyrejectWithValuepayloads by @dfedoryshchev in #5395immutableStateInvariantMiddlewareby @hamed-bavar in #5433useQueryStateandisSuccessduring refetch-after-error by @markerikson in #5456Full Changelog: reduxjs/redux-toolkit@v2.12.0...v2.13.0
storybookjs/storybook (@storybook/addon-a11y)
v10.6.2Compare Source
v10.6.1Compare Source
testing-library/user-event (@testing-library/user-event)
v14.6.8Compare Source
Bug Fixes
vitest-dev/vitest (@vitest/coverage-v8)
v4.1.12Compare Source
🐞 Bug Fixes
View changes on GitHub
i18next/i18next (i18next)
v26.4.7Compare Source
cloneInstance()no longer inheritspreload.loadResources()adds everypreloadlanguage to each load, and clones copiedpreloadfrom the parent, so a clone'sinit()and everychangeLanguage()walked all preloaded languages × all namespaces throughqueueLoad()/hasResourceBundle(), although the parent had already loaded them into the shared store. With i18next-http-middleware (one clone +changeLanguage()per request), 25 preloaded languages and 20 namespaces, that was most of the per-request CPU: the reproduction from the issue went from ~90 µs to ~10 µs per request, the same as with a single language. A clone now only loads what it uses itself: itschangeLanguage()no longer waits for parent preload languages that are still loading (the parent's owninit()still does), andclone.loadNamespaces()loads the new namespace for the clone's language and fallbacks instead of every preloaded language.clone.loadLanguages()works as before, the parent instance is unchanged, and passingpreloadtocloneInstance()keeps the old behavior. Thanks @theMostCuriousHomunculus for the detailed report (#2451).v26.4.6Compare Source
toResolveHierarchy()checked the rawfallbackLngvalue against the list, but the list holds formatted codes, so any fallback written differently from its formatted form slipped through:lng: 'de-CH'withfallbackLng: 'de-ch'gavelanguages['de-CH', 'de', 'de-CH'], and the same happened withfallbackLng: 'EN'+cleanCode,lowerCaseLng, and Intl aliases (iw-IL→he-IL). Missing keys were looked up in the same language twice. Only exact duplicates are removed; the order is unchanged. Thanks @lprnmns (#2450).v26.4.5Compare Source
hasLoadedNamespace(ns, { lng })no longer staysfalseforever when the passed inlngis loaded under another code, or not at all. It checked the load state of the rawlng, butloadLanguages()stores a language under its resolved code (de-ch→de-CH,de-CH→dewithload: 'languageOnly') and skips alngoutsidesupportedLngsentirely (only the fallback gets loaded), so that state never got set. react-i18next'suseTranslation(ns, { lng })then never became ready: withuseSuspenseit kept throwing an already resolved promise and React retried forever (100% CPU, SSR never finished), without it the load effect re-rendered in a loop. It now checks the code the language is actually loaded under, and for alngoutsidesupportedLngsonly waits for the fallback, which is also whatt()resolves to. Calls withoutlngand theprecheck(react-i18next'sbindI18n: 'languageChanging') are unchanged (react-i18next#1934).v26.4.4Compare Source
$t(. Its repeated group had overlapping alternatives ([^()"']+inside(?:...)*?, and inside parentheses[^()]also matched quotes), so a string containing$t(without a closing)made the engine try every way to split the text: about 2x the runtime per extra character, and a ~25 character value hungt()for minutes. With the default config this was reachable through any interpolated value (t('greet', { name: '$t(aaaaaaaaaaaaaaaaaaaaaaaa' })): escaping does not touch$,tor(, and theskipOnVariablescheck runs the regexp on the interpolated result, sonest: falsedid not help either. Every alternative now starts with a different character (plain char,",'or(), so there is only one way to match and the cost is linear. Quoted strings and one level of parentheses in nesting options keep working (#2336). The only difference: a lone"or'inside unquoted parentheses within$t(...)is no longer matched. Affects 25.3.3 to 26.4.3. See advisory GHSA-5jr9-983r-c8x4, CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Thanks to Anisetti Chaitanya Eshwar Prasad for the responsible disclosure.nest()now resolves$t(...)in a single pass and no longer nests text that came out of a resolved value. Every nested lookup reset the shared nesting regexp, so the loop started over from the beginning of the string after each match. That had two effects. First, a$t(...)inside a variable that the nested lookup deliberately kept literal (defaultskipOnVariables: true) was resolved anyway by the outer loop: withouter: 'A $t(inner) B'andinner: 'Hi {{name}}',t('outer', { name: '$t(secret)' })rendered thesecrettranslation. It now staysA Hi $t(secret) B, the same as without the outer nesting; withskipOnVariables: falseit is still resolved. Second, the cost was quadratic when an unclosed$t(preceded many nestings, which matters when an app passes untrusted input as the key itself (t(userInput)): 20,000 nestings took ~1.4 s, now ~25 ms. The resolved value is now sliced into the result instead of going throughString.replace, so$&,$`,$'and$$stay literal as before (26.4.2).v26.4.3Compare Source
ResourceStore.hasLanguageSomeTranslations()no longer enumerates every key of a large bundle on each call. It ranObject.keys()on the whole bundle just to learn whether it had at least one key, andinit()/changeLanguage()reach it three times per instance (once while picking the language, twice viasetResolvedLanguage()). With large flat bundles and one i18next instance per SSR request reusing the same resources, that showed up as measurable CPU work before anyt()call. Bundle objects already found non-empty are now remembered in aWeakSetshared across instances, so later checks are O(1): 2,000 inits with a 6,800-key bundle went from ~750 ms to ~20 ms, the same as a one-key bundle. Only the non-empty result is cached. No API removes single keys from a bundle, so a non-empty bundle stays non-empty, and empty bundles are re-checked every time, so keys added later (backend loads,addResource,addResourceBundle, direct or silent changes) count right away. The only edge case: a bundle emptied by hand withdeleteon every key while it is still in the store keeps counting as having translations; useremoveResourceBundle()for that. Thanks @dmchoi77 for the detailed report (#2449).lint-staged/lint-staged (lint-staged)
v17.6.0Compare Source
Minor Changes
#1850
938d3f4- Task functions like{ title, task }can now use a logger functionlog()to emit output while the task runs. By default, the output will only be visible if the task fails, unless the--verboseoption was used. Additionally, when the task rejects, the error will be shown in the output.#1854
30562bc- lint-staged now stages changes to all tracked files modified by tasks, including files that weren’t originally staged or didn’t match the configured globs. This can happen when your task has side-effects, or it's a function that ignores the staged files like() => "prettier --write .".If you have unstaged changes in a file and the task also edits that file, your unstaged changes will be staged too. Use
--hide-unstagedto hide your changes while tasks run.Patch Changes
#1860
4296532- The assignment of staged files to lint-staged configuration files (when using multiple, for example in a monorepo) has been rewritten to be more efficient. As a reminder, each staged file is assigned to exactly one configuration (the closest one), even if that config doesn't match the file in its globs.#1861
c45f28a- Fix running parallel tasks for a single glob, when tasks are created by a function. Nesting one level of arrays inside an array of tasks will result in the inner tasks running in parallel. This behavior should now be consistent when creating tasks using functions. In the following exampleeslintandprettierwill run in parallel (for all files, when any JS files are staged):#1859
f0ea69d- Various performance improvements from skipping redundant internal Git calls.#1856
69d7d17- Partially staged changes are hidden in a uniquely-named patch file to avoid multiple invocations of lint-staged overwriting it. This makes it safer to run lint-staged in multiple worktrees at the same time.prettier/prettier (prettier)
v3.9.10Compare Source
diff
Markdown: Update
micromark-extension-gfm-tableto fix the table parse issue on performance (#20266 by @fisker)See micromark/micromark-extension-gfm-table@
4f43eadfor details.react/react (react)
v19.3.1: 19.3.1 (October 14th, 2026)Compare Source
React Server Components
react-hook-form/react-hook-form (react-hook-form)
v7.90.0Compare Source
Changed
watch,subscribe, scoped subscriptions, dirty field checks and form state fan-outFixed
Object.prototypemembers not being marked as touched on blur andsetValuehasOwnPropertycloneObjectdropping the length of sparse arrayscloneObjectfailing on objects with a null prototyperemove()mishandling duplicated indexes and mutating the indexes passed inuseFieldArrayunregistering fields while a parent array reindexesuseWatchnot updating watched objects after an<Activity>subtree reconnectsuseWatchpreferring its owndefaultValueover formdefaultValuesfor array namesresetwithout values andkeepDefaultValuessettingisDirtyto trueControllerblur validation not working afterresetwatchreading a staleshouldUnregisteroption when a field registersshouldUseNativeValidationoption when stopping at the first errorrefkey not being compared correctlysetError,clearErrorsand remaining error updates not producing a newerrorsreferencev7.89.0Compare Source
Changed
@types/reactpeer dependencyFixed
validateFieldcallingsetCustomValidityon refs that don't implement it under native validationvalidaterunning a stale function instead of the latest onevalidate) being applied afterresetinonChangeandhandleSubmitdelayErrortimers for nested paths not being cancelled when a parent validates clean or is reset viaresetFieldgetValues(names, { dirtyFields })returning every row of a field array instead of only the marked entriestouchedFieldsis not subscribeduseFieldArrayemittingtouchedFieldsin form state updates when unnecessaryuseFieldArraymarking the form dirty when the array default isnullsetValuewithshouldValidatenot revalidatingdepssetValuewithshouldValidatenot triggering validation for a field array rootregisteroptions at runtime still being applieduseControllervalidatingrequiredagainst the input value instead of the controlled valueisValidnot recomputing when theerrorsprop is emptiedgetFieldState(name, formState)with a resolver afterreset()i18next/react-i18next (react-i18next)
v17.0.20Compare Source
useTranslationno longer suspends when a missing namespace is loaded by a synchronous backend. WithuseSuspense(the default), a namespace that wasn't in the store yet always made the component throw the loading promise, even when the backend had already delivered the resources while that promise was being created. React then showed theSuspensefallback and rendered again right away, which appears as a fallback flash (a white flash in React Native) and costs performance. The hook now starts the load first, checks the store again and only suspends if the namespace is still missing. This helps every backend that calls back synchronously, for examplei18next-resources-to-backendwith a static resources object or a loader that returns the data directly. Async backends, and an instance that isn't initialized yet, still suspend as before. Thanks @oblador (#1937).v17.0.19Compare Source
useTranslationwith an inline selectorkeyPrefix(useTranslation('ns', { keyPrefix: ($) => $.role })) returned a newton every render, so every effect,useCallbackanduseMemodepending ontran again each time. The cachedtwas compared against thekeyPrefixfunction itself, and an inline arrow is a new function on every render. It is now compared against the key the selector resolves to (with the same options and namespace listgetFixedTresolves it with), sotkeeps its identity as long as the resolved prefix does, just like a stringkeyPrefix. A selector that resolves to a different key still gets a newt, and i18next still resolves the selector on eachtcall as before. Fixes #1936.useTranslationkept returning the previoustwhen only the namespace (useTranslation('a')→useTranslation('b')) or only the i18n instance (another instance with the same language, via props orI18nextProvider) changed on a mounted component. Thattkept resolving against the old namespace or instance until something else (the language, the ready state, a bound i18n event) produced a new one. Both are now part of the check that decides whether the cachedtcan be reused.v17.0.18Compare Source
shouldUnescape, the defaultunescapenow turns and&#​160;into a no-break space (U+00A0) instead of a regular space (U+0020). The regular space dropped what the entity is for:u násor10 kmcould wrap across lines, and consecutive s collapsed into one space. This also matchesIcuTrans, whose entity decoder already mapped to U+00A0. Compatibility note: only affectsshouldUnescape; snapshots or exacttextContentcomparisons of such text now contain U+00A0 (Testing Library's default normalizer still matches it as a space). A customreact.unescapefunction can restore the old mapping for text nodes. Thanks @lprnmns (#1935).v17.0.17Compare Source
useTranslationno longer unsubscribes and resubscribes its i18n listeners on every render. Thesubscribecallback handed touseSyncExternalStoredepended on the merged options object, which is rebuilt wheneverpropsis a new object: with no options (the{}default), with options passed inline (useTranslation('ns', { keyPrefix })), and throughwithTranslationand<Translation>. A newsubscribemakes React resubscribe, so each render of each caller rani18n.offandi18n.onin an extra effect. It now depends only on the instance and thebindI18n/bindI18nStoreevent names. No updates were ever missed, because React re-checks the snapshot after resubscribing; this only removes the churn, which adds up with many mounted components that re-render often. Reported via next-i18next#2349.v17.0.16Compare Source
i18nKeythat points into a secondary namespace ofuseTranslationnow resolves the same wayt()does. Withconst { t } = useTranslation(['ns1', 'ns2']),t($ => $.ns2.message)works since 17.0.7, but<Trans t={t} i18nKey={$ => $.ns2.message} />rendered the raw key (or its children).Transalways passed annsoption tot, filled fromt.ns(the primary namespace only), and an explicitnsmakes i18next's fixedtskip the hook's full namespace list (scopeNs). WhenTransorTransWithoutContextgets atthat carries its own namespace and nonsprop, it now leavesnsout and lets thattapply its own. String keys,keyPrefix,nsMode: 'fallback', an explicitnsprop andTranswithout atprop behave as before. Compatibility note: if the primary namespace has a nested object named like a secondary namespace (ns1→ns2.message),Transnow resolves$ => $.ns2.messagetons2:message, ast()already does. Fixes #1933.sass/embedded-host-node (sass-embedded)
v1.105.2Compare Source
Node.js Embedded Host
v1.105.1Compare Source
@extends across different media queries.stylelint/stylelint (stylelint)
v17.16.0Compare Source
It fixes 2 bugs in the
layout-mappingsrules. This will likely be the last17.xrelease, as we prepare for18.0.0.property-layout-mappingsandunit-layout-mappingsfalse negatives for uppercase property names and units (#9485) (@giaBaoJS).value-keyword-layout-mappingsfalse positives forcaption-side(#9483) (@giaBaoJS).vitejs/vite (vite)
v7.3.7Compare Source
Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v7.3.7/packages/vite/C
Configuration
📅 Schedule: (in timezone Europe/Istanbul)
* 7-9 * * 1)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.