Skip to content

build(deps): bump the production-weekly group with 10 updates - #1231

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-weekly-3b54213f23
Oct 16, 2026
Merged

build(deps): bump the production-weekly group with 10 updates#1231
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/production-weekly-3b54213f23

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-weekly group with 10 updates:

Package From To
@aws-sdk/client-s3 3.1147.0 3.1150.0
@aws-sdk/lib-storage 3.1147.0 3.1150.0
@napi-rs/canvas 1.0.10 1.0.11
@tanstack/react-query 5.104.1 5.104.2
@tanstack/react-virtual 3.14.13 3.14.17
dotenv 18.0.6 18.0.7
lucide-react 1.53.0 1.56.0
nodemailer 10.0.16 10.1.0
radix-ui 1.7.0 1.8.1
react-hook-form 7.89.0 7.90.0

Updates @aws-sdk/client-s3 from 3.1147.0 to 3.1150.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1150.0

3.1150.0(2026-10-12)

Documentation Changes
  • client-lambda: Doc updates to reposition Lambda Functions as Lambda Event Functions (618497da)
New Features
  • clients: update client endpoints as of 2026-10-12 (39b07192)
  • client-pcs: Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version. (8085dcda)
  • client-bedrock-agentcore-control: AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies. (93d530e9)
  • client-lambda-core: Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads (7ca09fa2)
  • client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (e817ea05)
  • client-sagemakertrainingsessionruntime: Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop. (9c1af7bd)
  • client-sagemaker: Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management. (94f32429)
  • client-observabilityadmin: Adding support for TransactionSearch telemetry rules. (49992d7e)
  • client-glue: Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine. (0f677b72)
  • client-bedrock-agentcore: AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs. (39cfa46b)
  • client-pinpoint-sms-voice-v2: DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing. (47e4631e)
  • client-omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups. (a5ee15fe)
  • client-devops-agent: Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs (1613a423)
  • client-mediaconnect: This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID. (187bb041)
  • client-securityagent: Adds support for Jira integration provider in AWS Security Agent. (892b1e4e)
  • client-cloudwatchomni: Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API (afef0038)
Bug Fixes
  • core/httpAuthSchemes: skip clock-skew sampling for event-stream outputs (#8346) (345466f4)

For list of updated packages, view updated-packages.md in assets-3.1150.0.zip

v3.1149.0

3.1149.0(2026-10-09)

Chores
  • codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)
New Features
  • client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
  • client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
  • client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
  • client-mediatailor: Add caching settings to http functions (7ac7530b)
  • client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/client-s3

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/client-s3

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/client-s3

Commits

Updates @aws-sdk/lib-storage from 3.1147.0 to 3.1150.0

Release notes

Sourced from @​aws-sdk/lib-storage's releases.

v3.1150.0

3.1150.0(2026-10-12)

Documentation Changes
  • client-lambda: Doc updates to reposition Lambda Functions as Lambda Event Functions (618497da)
New Features
  • clients: update client endpoints as of 2026-10-12 (39b07192)
  • client-pcs: Adding scheduler version to RegisterComputeNodeGroup API. A compute node uses this value to run the matching scheduler version. (8085dcda)
  • client-bedrock-agentcore-control: AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies. (93d530e9)
  • client-lambda-core: Lambda Network Connector now supports Lambda Web Functions, letting them reach private VPC resources, and adds versioning, each connector update creates an immutable version that revisions pin to, so customers can roll out and roll back networking changes without affecting running workloads (7ca09fa2)
  • client-lambda-web: Lambda Web Functions GA launch. Lambda Web Functions enable customers to run web applications and API backends (e817ea05)
  • client-sagemakertrainingsessionruntime: Amazon SageMaker Training Session Runtime provides APIs for executing operations within active training sessions, including asynchronous training operations, sampling and inference requests, and streaming real-time model responses, enabling programmatic control over the training loop. (9c1af7bd)
  • client-sagemaker: Amazon SageMaker Training Session is a managed service for training on shared GPU infrastructure. It provides full lifecycle management of training sessions and exposes low-level primitive APIs for operations like forward-backward passes, optimizer steps, and state management. (94f32429)
  • client-observabilityadmin: Adding support for TransactionSearch telemetry rules. (49992d7e)
  • client-glue: Adds new AWS Glue Data Quality APIs to retrieve and list data quality evaluation results. The new GetDataQualityResultV2, BatchGetDataQualityResultV2, and ListDataQualityResultsV2 operations return data quality results published from any supported data processing engine. (0f677b72)
  • client-bedrock-agentcore: AgentCore Memory now supports Long-Term Memory Time-to-Live on Batch APIs. (39cfa46b)
  • client-pinpoint-sms-voice-v2: DescribePhoneNumbers and DescribeSenderIds now return an optional PricingTier field that indicates whether a phone number, sender ID, short code, or long code is classified as Domestic or International, enabling customers to identify origination identities eligible for local pricing. (47e4631e)
  • client-omics: AWS HealthOmics now supports private workflow runs using VPC resources shared across accounts via AWS RAM. A new optional vpcOwnerAccountId field in CreateConfiguration's VpcConfig allows customers to specify the account that owns the shared subnets and security groups. (a5ee15fe)
  • client-devops-agent: Adds support for the includedData field in GetAgentSpace and ListAgentSpaces APIs (1613a423)
  • client-mediaconnect: This release adds support for MediaConnect Router high-bitrate tiers. It also adds a configurable audio reference level for NDI flows, and enhanced source metadata that includes color information and transport stream ID. (187bb041)
  • client-securityagent: Adds support for Jira integration provider in AWS Security Agent. (892b1e4e)
  • client-cloudwatchomni: Adds support for updating agentCoreEvaluationRoleArn in UpdateSpace API (afef0038)
Bug Fixes
  • core/httpAuthSchemes: skip clock-skew sampling for event-stream outputs (#8346) (345466f4)

For list of updated packages, view updated-packages.md in assets-3.1150.0.zip

v3.1149.0

3.1149.0(2026-10-09)

Chores
  • codegen: sync for endpoint cache fix and pre-schema error fallback (#8341) (5773a751)
New Features
  • client-quicksight: Adds granular custom permissions for the Gong action connector (GongAction, CreateAndUpdateGongAction, ShareGongAction, UseGongAction) and for create, update, and share operations on 45 data source connectors, such as Amazon S3 and Snowflake, through the Custom Permissions APIs. (c5d26e39)
  • client-deadline: The new ListMemberships API enables users to discover their memberships across Deadline Cloud resources, enabling scoped users of Deadline resources to discover and interact with the resources they have been provided scoped access to. (0d7406c7)
  • client-marketplace-metering: AWS Marketplace Metering Service adds AgreementId to ResolveCustomer API response. (9653f5cc)
  • client-mediatailor: Add caching settings to http functions (7ac7530b)
  • client-securityagent: Adds a test scope field to specify whether a pentest targets a web application or a generative AI application. (1cc5ba6a)

... (truncated)

Changelog

Sourced from @​aws-sdk/lib-storage's changelog.

3.1150.0 (2026-10-12)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1149.0 (2026-10-09)

Note: Version bump only for package @​aws-sdk/lib-storage

3.1148.0 (2026-10-08)

Note: Version bump only for package @​aws-sdk/lib-storage

Commits

Updates @napi-rs/canvas from 1.0.10 to 1.0.11

Release notes

Sourced from @​napi-rs/canvas's releases.

v1.0.11

What's Changed

New Contributors

Full Changelog: Brooooooklyn/canvas@v1.0.10...v1.0.11

Changelog

Sourced from @​napi-rs/canvas's changelog.

1.0.11 (2026-10-10)

Bug Fixes

  • start a new subpath for each Path2D.addPath call (#1353) (363cbd6)

Features

  • emit CycloneDX SBOMs for platform packages (#1351) (22d9b29)
Commits

Updates @tanstack/react-query from 5.104.1 to 5.104.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.104.2
    • @​tanstack/react-query@​5.104.2

@​tanstack/react-query-next-experimental@​5.104.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.104.2

@​tanstack/react-query-persist-client@​5.104.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.104.2
    • @​tanstack/react-query@​5.104.2

@​tanstack/react-query@​5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2
Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.2

Patch Changes

  • Updated dependencies [03e8c39]:
    • @​tanstack/query-core@​5.104.2
Commits
  • b699b52 ci: Version Packages (#11849)
  • e22e7c4 chore: test TypeScript 7.1 preview and drop 5.6 (#11947)
  • df78a9d chore(*): pass the root 'settings' to the package oxlint configs, which 'exte...
  • 833062c chore: replace prettier with oxfmt (#11939)
  • d0cfa6a chore: replace eslint with oxlint (#11938)
  • 0012ec1 docs(react-query): add JSDoc to the properties of the exported interfaces and...
  • b5e8e7b docs(react-query): add JSDoc to the exported classes, methods, and arrow func...
  • 01abab3 docs(*): note that 'throwOnError' makes the hook rethrow the errors of 'mutat...
  • b42166e docs(react-query): add JSDoc to the exported interfaces and type aliases (#11...
  • 205d422 docs(*): add missing JSDoc descriptions and enforce 'jsdoc/require-descriptio...
  • Additional commits viewable in compare view

Updates @tanstack/react-virtual from 3.14.13 to 3.14.17

Release notes

Sourced from @​tanstack/react-virtual's releases.

@​tanstack/react-virtual@​3.14.17

Patch Changes

@​tanstack/react-virtual@​3.14.16

Patch Changes

@​tanstack/react-virtual@​3.14.15

Patch Changes

@​tanstack/react-virtual@​3.14.14

Patch Changes

  • #1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

    Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

  • Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

    • @​tanstack/virtual-core@​3.18.0
Changelog

Sourced from @​tanstack/react-virtual's changelog.

3.14.17

Patch Changes

3.14.16

Patch Changes

3.14.15

Patch Changes

3.14.14

Patch Changes

  • #1301 ce57b78 - fix(react-virtual): position directDomUpdates rows that mount without the owner re-rendering

    Rows were only positioned by the owner's layout effect or the next onChange. A row mounted by a child that re-renders on its own (local state, context, a resolved Suspense boundary) skipped both when it was fixed-size, and stayed unpositioned until the range changed. Rows are now positioned as they register through measureElement, and containerRef positions the rows that mounted together with the container.

  • Updated dependencies [43675bc, 9df47a3, c644f10, 2a631f4]:

    • @​tanstack/virtual-core@​3.18.0
Commits
  • 7c20899 ci: Version Packages (#1315)
  • cb510cb refactor(virtual-core): describe an in-flight scroll command by one phase (#1...
  • 46f73fb ci: Version Packages (#1312)
  • 6732e00 test(virtual-core): pin the iOS deferral and index-scroll orderings measured ...
  • 84c1502 ci: Version Packages (#1303)
  • 92c697f fix(virtual-core): keep lanes aligned after changing lanes with measureElemen...
  • 259fc1a ci: Version Packages (#1299)
  • 2a631f4 fix(virtual-core): reconcile index scrolls after pending measurements (#1294)
  • ce57b78 fix(react-virtual): position directDomUpdates rows that mount without the own...
  • See full diff in compare view

Updates dotenv from 18.0.6 to 18.0.7

Changelog

Sourced from dotenv's changelog.

18.0.7 (2026-10-09)

Changed

  • Treat undefined settings like quiet: true as null rather than falsey (#1070)
  • CLI should honor DOTENV_QUIET setting in .env file (#1071)
Commits
  • 2953207 18.0.7
  • 9944723 make more readable for undefined -> null
  • d455db0 Merge branch 'master' of github.com:motdotla/dotenv
  • e411e02 changelog
  • 6237c35 Merge pull request #1070 from Utkarsh-Singhal-26/fix/ignore-undefined-config-...
  • 9af8c28 Merge pull request #1071 from himanshu748/fix-cli-env-quiet
  • c7161c6 fix(cli): honor quiet settings loaded from .env
  • 3990466 fix: ignore undefined options so they don't mask DOTENV_* env settings
  • See full diff in compare view

Updates lucide-react from 1.53.0 to 1.56.0

Release notes

Sourced from lucide-react's releases.

Version 1.56.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.55.0...1.56.0

Version 1.55.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.54.0...1.55.0

Version 1.54.0

What's Changed

Full Changelog: lucide-icons/lucide@1.53.0...1.54.0

Commits
  • 949bc6d test(lucide-react): add tests for DynamicIcon fallback and ref forwarding (#4...
  • See full diff in compare view

Updates nodemailer from 10.0.16 to 10.1.0

Release notes

Sourced from nodemailer's releases.

v10.1.0

10.1.0 (2026-10-10)

Behaviour changes

  • Pooled connections are closed after 4 minutes without a message (new idleTimeout pool option, set it to 0 to keep them open). A message whose recipients are rejected no longer closes the pooled connection, it is reset with RSET and reused, and a message is requeued when the server dropped a reused connection before any of it was sent.
  • connectionTimeout covers setting the session up as a whole: the DNS lookup, a proxy handshake, the TCP connection, TLS, the greeting and a STARTTLS upgrade. greetingTimeout still bounds the greeting and the STARTTLS handshake within it.
  • Any 421 reply ends the SMTP session. When the server closes an idle connection, SMTPConnection emits only end, not an ECONNECTION error.
  • A content stream that was already read or destroyed fails the message with ESTREAM instead of producing an empty attachment. Content streams of a message that fails are destroyed.
  • With opportunisticTLS, authentication is skipped on the unencrypted connection after a failed STARTTLS, unless forceAuth is set.
  • The envelope is pipelined (MAIL FROM, RCPT TO and DATA in one batch) when the server announces PIPELINING.
  • Errors carry originalCode (the system error code Nodemailer replaced, such as ECONNREFUSED) and, for ETIMEDOUT, timeoutType.

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Changelog

Sourced from nodemailer's changelog.

10.1.0 (2026-10-10)

Features

  • harden message streams, SMTP connections and the connection pool (8009da6)

Bug Fixes

  • do not read the environment or the interface table on import (094179d)
  • end the SMTP session on any 421 reply and drive the envelope through one step (5638ac1)
  • keep ERR_ACCESS_DENIED from the Node.js permission model (8b33a3d)
  • let the proxy handshake and the SMTP connection share one deadline (91ed683)
  • mime-node: decode an SMTPUTF8 domain from its A-label form (e436f4d)
  • mime-node: finish an encoded part only after its output was read (ec97d8f)
  • qp: encode a lone CR or LF in binary quoted-printable parts (42b91d9)
  • smtp-connection: count the wait for the greeting against connectionTimeout (bdcd046)
  • smtp-connection: drop the connection when DATA is taken after a refused sender (f90fb04)
  • smtp-connection: refuse a second connect() call (24ba2e0)
  • turn Nagle off for SMTP sockets and report an early sendmail exit as such (fa9b8d3)

Performance Improvements

  • encode base64 and quoted-printable without per-chunk delays (fd377bb)
Commits
  • 0780032 chore(master): release 10.1.0 (#1890)
  • 42b91d9 fix(qp): encode a lone CR or LF in binary quoted-printable parts
  • b9b8c84 test(smtp-pool): fail the clear event test with the pool state instead of han...
  • 4f1a34a test(smtp-connection): keep the scripted server silent after a stalled STARTTLS
  • f90fb04 fix(smtp-connection): drop the connection when DATA is taken after a refused ...
  • bdcd046 fix(smtp-connection): count the wait for the greeting against connectionTimeout
  • 751330a test(smtp-pool): measure the rate limit against a window wider than connecting
  • ec97d8f fix(mime-node): finish an encoded part only after its output was read
  • 24ba2e0 fix(smtp-connection): refuse a second connect() call
  • 91ed683 fix: let the proxy handshake and the SMTP connection share one deadline
  • Additional commits viewable in compare view

Updates radix-ui from 1.7.0 to 1.8.1

Changelog

Sourced from radix-ui's changelog.

1.8.1

  • Fixed a type regression where callback props that were previously declared as methods rejected handlers whose parameter is narrower than the prop's.
  • Updated dependencies: @radix-ui/react-accordion@1.3.1, @radix-ui/react-avatar@1.3.1, @radix-ui/react-checkbox@1.4.1, @radix-ui/react-collapsible@1.2.1, @radix-ui/react-context-menu@2.4.1, @radix-ui/react-dialog@1.3.1, @radix-ui/react-dismissable-layer@1.2.1, @radix-ui/react-dropdown-menu@2.2.1, @radix-ui/react-focus-scope@1.3.1, @radix-ui/react-hover-card@1.2.1, @radix-ui/react-menu@2.2.1, @radix-ui/react-menubar@1.2.1, @radix-ui/react-navigation-menu@1.4.1, @radix-ui/react-one-time-password-field@0.2.1, @radix-ui/react-password-toggle-field@0.2.1, @radix-ui/react-popover@1.3.1, @radix-ui/react-progress@1.2.1, @radix-ui/react-roving-focus@1.2.1, @radix-ui/react-select@2.4.1, @radix-ui/react-slider@1.6.1, @radix-ui/react-switch@1.4.1, @radix-ui/react-tabs@1.2.1, @radix-ui/react-toast@1.3.1, @radix-ui/react-toggle@1.2.1, @radix-ui/react-toggle-group@1.2.1, @radix-ui/react-tooltip@1.4.1, @radix-ui/react-alert-dialog@1.2.1, @radix-ui/react-radio-group@1.5.1, @radix-ui/react-toolbar@1.2.1

1.8.0

Context Menu

  • Allowed side, sideOffset, and align props to be overridden on ContextMenu.Content.

Navigation Menu

  • Added data-state attribute to the content element when using NavigationMenu.Viewport for consistency.

Popover

  • Fixed aria-controls being set on Popover.Trigger while the popover is closed.

Select

  • Fixed content alignment when all items are disabled.
  • Fixed a bug where updating a Select value programmatically while inside a <form> would dispatch a click event from the hidden bubble select that propagated to ancestor onClick handlers.

Slider

  • Fixed a bug where updating a Slider value programmatically while inside a <form> would dispatch an input event that propagated to ancestor onInput handlers.

Slot

  • Fixed Slot throwing when an asChild child is a lazy reference whose resolved value is itself a lazy reference.

Toast

  • Fixed Toast.Viewport forcing a still-hydrating Suspense boundary to client-render.

Tooltip

  • Fixed a bug where tabbing away from a focusable tooltip trigger nested in a modal popover moved focus to the popover's root instead of the next element in the popover.

Other updates

  • Allow explicit undefined for all optional types for compatibility with TypeScript's exactOptionalPropertyTypes flag.
  • Fixed bugs in form-nested control components where a user-driven change was treated as programmatic in some cases, preventing bubbled event handlers from being called.
  • Fixed timing bugs in useCallbackRef.
  • Fixed FocusScope throwing a TypeError in test environments after teardown.
  • Fixed a bug resulting from incorrect tree-shaking in SWC-minified code.
  • Some small and breaking changes in unstable collection APIs. This package is an internal utility, undocumented, and unstable APIs may change without a major version bump. Capturing those changes here just in case you did a naughty and used them.
    • Renamed unstable_CollectionProps to unstable_CollectionSlotProps and unstable_CollectionItemMap to unstable_CollectionDict.
    • Added useGetCollection to the functions returned from unstable_createCollection.

... (truncated)

Commits

Updates react-hook-form from 7.89.0 to 7.90.0

Release notes

Sourced from react-hook-form's releases.

Version 7.90.0

🐞 Fixes

  • Fix useForm marking fields named after Object.prototype members as touched on blur and setValue (#13833)
  • Fix cloneObject preserving the length of sparse arrays (#13834)
  • Fix dirty values extraction for fields named hasOwnProperty (#13832)
  • Fix useForm retaining options removed from props on re-render (#13831)
  • Fix useFieldArray handling duplicate indexes in remove() without mutating the provided indexes (#13830)
  • Fix useFieldArray unregistering fields while a parent array reindexes (#13828)
  • Fix input values edited before the form is ready being lost (#13827)
  • Fix useWatch not updating watched objects after an Activity subtree reconnects (#13819)
  • Fix reset() incorrectly setting isDirty when using keepDefaultValues without values (#13820)
  • Fix Controller blur validation not working after reset() (#13817)
  • Fix watch using stale shouldUnregister options when registering fields (#13814)
  • Fix form value comparison for fields named ref (#13812)
  • Fix native validation using stale shouldUseNativeValidation options (#13806)
  • Fix cloneObject not cloning objects with a null prototype (#13808)
  • Fix useWatch array names not prioritizing form defaultValues (#13805...

    Description has been truncated

@dependabot
build(deps): bump the production-weekly group with 10 updates
81f4643 
Bumps the production-weekly group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1147.0` | `3.1150.0` |
| [@aws-sdk/lib-storage](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/lib/lib-storage) | `3.1147.0` | `3.1150.0` |
| [@napi-rs/canvas](https://github.com/Brooooooklyn/canvas) | `1.0.10` | `1.0.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.104.1` | `5.104.2` |
| [@tanstack/react-virtual](https://github.com/TanStack/virtual/tree/HEAD/packages/react-virtual) | `3.14.13` | `3.14.17` |
| [dotenv](https://github.com/motdotla/dotenv) | `18.0.6` | `18.0.7` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.53.0` | `1.56.0` |
| [nodemailer](https://github.com/nodemailer/nodemailer) | `10.0.16` | `10.1.0` |
| [radix-ui](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/radix-ui) | `1.7.0` | `1.8.1` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.89.0` | `7.90.0` |


Updates `@aws-sdk/client-s3` from 3.1147.0 to 3.1150.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1150.0/clients/client-s3)

Updates `@aws-sdk/lib-storage` from 3.1147.0 to 3.1150.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/lib/lib-storage/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1150.0/lib/lib-storage)

Updates `@napi-rs/canvas` from 1.0.10 to 1.0.11
- [Release notes](https://github.com/Brooooooklyn/canvas/releases)
- [Changelog](https://github.com/Brooooooklyn/canvas/blob/main/CHANGELOG.md)
- [Commits](Brooooooklyn/canvas@v1.0.10...v1.0.11)

Updates `@tanstack/react-query` from 5.104.1 to 5.104.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.104.2/packages/react-query)

Updates `@tanstack/react-virtual` from 3.14.13 to 3.14.17
- [Release notes](https://github.com/TanStack/virtual/releases)
- [Changelog](https://github.com/TanStack/virtual/blob/main/packages/react-virtual/CHANGELOG.md)
- [Commits](https://github.com/TanStack/virtual/commits/@tanstack/react-virtual@3.14.17/packages/react-virtual)

Updates `dotenv` from 18.0.6 to 18.0.7
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v18.0.6...v18.0.7)

Updates `lucide-react` from 1.53.0 to 1.56.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.56.0/packages/lucide-react)

Updates `nodemailer` from 10.0.16 to 10.1.0
- [Release notes](https://github.com/nodemailer/nodemailer/releases)
- [Changelog](https://github.com/nodemailer/nodemailer/blob/master/CHANGELOG.md)
- [Commits](nodemailer/nodemailer@v10.0.16...v10.1.0)

Updates `radix-ui` from 1.7.0 to 1.8.1
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/radix-ui/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/radix-ui)

Updates `react-hook-form` from 7.89.0 to 7.90.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.89.0...v7.90.0)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1150.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
- dependency-name: "@aws-sdk/lib-storage"
  dependency-version: 3.1150.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
- dependency-name: "@napi-rs/canvas"
  dependency-version: 1.0.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-weekly
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.104.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-weekly
- dependency-name: "@tanstack/react-virtual"
  dependency-version: 3.14.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-weekly
- dependency-name: dotenv
  dependency-version: 18.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-weekly
- dependency-name: lucide-react
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
- dependency-name: nodemailer
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
- dependency-name: radix-ui
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
- dependency-name: react-hook-form
  dependency-version: 7.90.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-weekly
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 16, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 16, 2026 08:18
@github-actions
github-actions Bot merged commit abc8ebd into main Oct 16, 2026
25 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-weekly-3b54213f23 branch October 16, 2026 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants