Skip to content

chore(deps): bump the npm-rest group across 1 directory with 14 updates#1184

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984
Closed

chore(deps): bump the npm-rest group across 1 directory with 14 updates#1184
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-rest group with 13 updates in the /frontend directory:

Package From To
@hookform/resolvers 5.2.2 5.4.0
@marsidev/react-turnstile 1.4.2 1.5.3
@radix-ui/react-tooltip 1.2.8 1.2.11
@serwist/next 9.5.6 9.5.11
@tanstack/react-query 5.90.21 5.101.2
@upstash/redis 1.37.0 1.38.0
@zxing/browser 0.1.5 0.2.0
@zxing/library 0.21.3 0.23.0
lucide-react 1.14.0 1.23.0
react-hook-form 7.71.2 7.81.0
web-vitals 5.1.0 5.3.0
zustand 5.0.11 5.0.14
@eslint/compat 2.0.3 2.1.0

Updates @hookform/resolvers from 5.2.2 to 5.4.0

Release notes

Sourced from @​hookform/resolvers's releases.

v5.4.0

5.4.0 (2026-05-21)

Features

  • feat: add ata-validator resolver (#845)

Fixes

  • fix issue with toNestErrors.ts (#848)
  • add guidance on passing context to yupResolver (useForm context) (#835) (3d29924)
Commits

Updates @marsidev/react-turnstile from 1.4.2 to 1.5.3

Release notes

Sourced from @​marsidev/react-turnstile's releases.

@​marsidev/react-turnstile@​1.5.3

Patch Changes

  • #167 32ab55e Thanks @​marsidev! - Fix nonce from scriptOptions not being set on the injected <script> tag. The script was assigned via the nonce IDL property, which only writes the element's internal slot and never reflects to the nonce content attribute in real browsers. It is now set with setAttribute, so the attribute appears on the tag and CSP nonce-... allowlists work as expected.
Commits
  • bf32035 Version Packages (#168)
  • 32ab55e fix: set script nonce via setAttribute so it lands on the tag (#167)
  • 3efdb3b chore: bump oxfmt from 0.51.0 to 0.52.0 (#163)
  • 3932d89 chore: bump @​typescript/native-preview (#162)
  • 6294141 chore: bump the dependencies group across 3 directories with 5 updates (#165)
  • 8fed856 chore: bump oxlint from 1.66.0 to 1.67.0 (#161)
  • 7a13074 chore: bump tsdown from 0.22.0 to 0.22.1 (#160)
  • 69e4a75 chore: bump oxfmt from 0.50.0 to 0.51.0 (#156)
  • 39a03f2 chore: bump oxlint-tsgolint from 0.22.1 to 0.23.0 (#157)
  • b0e1617 chore: bump @​typescript/native-preview (#158)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​marsidev/react-turnstile since your current version.


Updates @radix-ui/react-tooltip from 1.2.8 to 1.2.11

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.11

  • Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-popper@1.3.2, @radix-ui/react-portal@1.1.13, @radix-ui/react-visually-hidden@1.2.7

1.2.10

  • Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

1.2.9

  • Fixed runtime error when event target is non-Node
  • Fixed a Tooltip bug so that skipDelayDuration={0} works as expected. Previously, the open delay could still be skipped when moving between triggers.
  • Added repository.directory to all package.json files
  • Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-popper@1.3.0, @radix-ui/react-slot@1.2.5, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-visually-hidden@1.2.5
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​radix-ui/react-tooltip since your current version.


Updates @serwist/next from 9.5.6 to 9.5.11

Release notes

Sourced from @​serwist/next's releases.

@​serwist/next@​9.5.11

Patch Changes

  • 47a2b2a Thanks @​DuCanhGH! - chore(next, turbo): added "use client" to index.react.tsx

    • Rolldown allows the usage of additional directives such as "use client" when the directive is not in the top-level scope or when the directive is in the top-level scope, and either the module is an entry module, or output.preserveModules is enabled. Given that index.react.tsx is an entry module, we can add the "use client" directive to it, and it will be preserved in the output. This allows users to import the file directly in React Server Components without needing to add the directive themselves.

  • Updated dependencies []:

    • @​serwist/build@​9.5.11
    • @​serwist/utils@​9.5.11
    • @​serwist/webpack-plugin@​9.5.11
    • @​serwist/window@​9.5.11
    • serwist@9.5.11

@​serwist/next@​9.5.10

Patch Changes

  • Updated dependencies []:
    • @​serwist/build@​9.5.10
    • @​serwist/utils@​9.5.10
    • @​serwist/webpack-plugin@​9.5.10
    • @​serwist/window@​9.5.10
    • serwist@9.5.10

@​serwist/next@​9.5.9

Patch Changes

  • d287534 Thanks @​DuCanhGH! - fix(turbo, next): set "jsx" to "react-jsx"

    • This tells tsdown to transpile JSX when building packages.

  • Updated dependencies []:

    • @​serwist/build@​9.5.9
    • @​serwist/utils@​9.5.9
    • @​serwist/webpack-plugin@​9.5.9
    • @​serwist/window@​9.5.9
    • serwist@9.5.9

@​serwist/next@​9.5.8

Patch Changes

  • #351 be7d645 Thanks @​DuCanhGH! - feat: migrate to tsdown

    • Migrated to tsdown for easier configuration and better build performance.

    • Updated dependencies and removed unused ones.

  • Updated dependencies [be7d645]:

    • @​serwist/webpack-plugin@​9.5.8
    • @​serwist/window@​9.5.8

... (truncated)

Commits
  • 49a3c55 chore(packages): publish packages (#358)
  • 47a2b2a chore(next, turbo): added "use client" to index.react.tsx
  • 8baed58 chore(cli): document serwist build
  • 5c44958 fix(tests): fixed deprecated spawn usage with shell: true and args
  • 8db92b7 chore(packages): publish packages (#356)
  • b29bb67 fix(cli): fix dist import
  • e4f6bcf chore(packages): publish packages (#354)
  • d287534 fix(turbo, next): set "jsx" to "react-jsx"
  • 994956c chore(packages): publish packages (#352)
  • ddf9e17 fix: fixed TypeScript issues
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.90.21 to 5.101.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.2

Patch Changes

@​tanstack/react-query-next-experimental@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query-persist-client@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.2
    • @​tanstack/react-query@​5.101.2

@​tanstack/react-query@​5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

@​tanstack/react-query-devtools@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-next-experimental@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query-persist-client@​5.101.1

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.101.1
    • @​tanstack/react-query@​5.101.1

@​tanstack/react-query@​5.101.1

Patch Changes

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.2

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

  • Updated dependencies [9eff92e]:
    • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.101.0

5.100.14

Patch Changes

  • fix(react-query): do not go into optimistic fetching state when not subscribed (#10759)

  • Updated dependencies []:

    • @​tanstack/query-core@​5.100.14

5.100.13

Patch Changes

  • Updated dependencies [d423168]:
    • @​tanstack/query-core@​5.100.13

5.100.12

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.12

5.100.11

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.11

... (truncated)

Commits
  • 610e8d1 ci: Version Packages (#10996)
  • 1f84256 docs: document the select typing caveat for parallel-queries hooks (#10984)
  • b809297 ci: Version Packages (#10977)
  • ccc843e test({react,preact}-query/useQueries): move type-only tests to 'useQueries.te...
  • 4154613 test({react,preact}-query/useMutation): split 'should handle conditional logi...
  • 8bb5fde test({react,preact}-query/useMutation): split 'should pass meta to mutation' ...
  • 87426a3 test(react-query): replace deprecated 'toBeCalledTimes' with 'toHaveBeenCalle...
  • feb1efd test(*): move 'vi.useRealTimers' to the end of 'afterEach' so cleanup runs un...
  • f3d8d2a ci: Version Packages (#10774)
  • 532bb29 fix(tests): disable local coverage instrumentation (#10776)
  • Additional commits viewable in compare view

Updates @upstash/redis from 1.37.0 to 1.38.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.0

Minor Changes

  • c71f581: Separate read/write commands into separate pipelines in auto pipeline. As a result, mixed read/write Promise.all batches may now be split across multiple pipeline HTTP requests instead of a single request, and read-after-write ordering may no longer be preserved within those mixed batches.

@upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.37.0...@​upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

Commits

Updates @zxing/browser from 0.1.5 to 0.2.0

Release notes

Sourced from @​zxing/browser's releases.

v0.2.0

0.2.0

Breaking Changes

  • Peer dependency bumped to @zxing/library@^0.22.0 — projects still on 0.21.x must upgrade.
  • BrowserCodeReader.options type narrowed — the protected readonly options property is now typed as Required<IBrowserCodeReaderOptions> instead of IBrowserCodeReaderOptions. TypeScript subclasses that read option properties will now receive number instead of number | undefined; runtime behaviour is unchanged.

Bug Fixes

  • Removed invalid --screw-ie8 flag from the Terser minification script, which caused the build:umd:min step to fail with modern Terser.
  • Fixed syntax error in the async dynamic-import example in the README.
  • Corrected BrowserPDF417CodeReader → BrowserPDF417Reader in the README reader list.
  • Corrected the description of BrowserCodeReader in the README (it is a concrete base class, not abstract).

Tooling & Infrastructure

  • Migrated from Yarn to npm. yarn.lock removed; package-lock.json is now the lock file. Install with npm ci.
  • Replaced Cypress with Jest for testing. Tests now run in Node.js via ts-jest and node-canvas, removing the need for a browser or a local HTTP server. Run with npm test.
  • Migrated from TSLint to ESLint (with typescript-eslint). TSLint has been unmaintained since 2019. The new config lives in eslint.config.mjs using the ESLint 10 flat config format.
  • Rollup config renamed rollup.config.js → rollup.config.mjs for explicit ESM; upgraded to Rollup 4. UMD build warnings (circular deps in @zxing/library, this-rewrite) are now suppressed via onwarn and context: 'window'.
  • GitHub Actions modernised:
    • All actions bumped to latest versions (checkout@v4, setup-node@v4, cache@v4, upload-artifact@v4, download-artifact@v4).
    • Node.js upgraded from 18 → 24.
    • Deprecated ::set-output replaced with $GITHUB_OUTPUT.
    • Yarn cache steps replaced with setup-node's built-in cache: npm.

Dependency Updates

Package Before After
typescript 4.5.5 6.0.3
rollup 2.67.0 4.60.2
@rollup/plugin-node-resolve 13.1.3 16.0.3
eslint 8.8.0 10.2.1
terser 5.14.2 5.46.2
shx 0.3.4 0.4.0
tslint (removed) 5.20.1 —
tslint-no-circular-imports (removed) 0.7.0 —
cypress (removed) 9.4.1 —
pm2 (removed) 5.1.2 —
chai / @types/chai (removed) 4.x —
jest (added) — 29.7.0
ts-jest (added) — 29.3.2
canvas (added) — 3.1.0
typescript-eslint (added) — 8.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​zxing/browser since your current version.


Updates @zxing/library from 0.21.3 to 0.23.0

Release notes

Sourced from @​zxing/library's releases.

v0.23.0

Changelog

Error Robustness

  • MultiFormatReader: Non-ReaderException errors (TypeError, RangeError, etc.) are now logged instead of silently swallowed during decode attempts. Previously, programming errors were invisible and produced misleading "no barcode found" results. (src/core/MultiFormatReader.ts)
  • MultiFormatReader: Skip redundant setHints() calls when the same hints object is passed to decode() repeatedly, avoiding unnecessary reader reconstruction. (src/core/MultiFormatReader.ts)
  • BrowserCodeReader: Unexpected errors in the continuous scan loop are now logged via console.error. Previously the loop would stop silently with no indication of what went wrong. (src/browser/BrowserCodeReader.ts)

Scanning Quality

  • OneDReader: Increased default row sampling from 15 to 25 lines, covering ~78% of image height (up from ~47%). This improves detection of 1D barcodes positioned away from the image center without requiring TRY_HARDER mode. (src/core/oned/OneDReader.ts)
  • BrowserCodeReader: Added GlobalHistogramBinarizer fallback when HybridBinarizer fails with NotFoundException. Local thresholding can fail on very small barcodes or uniform-background images where a single global threshold works better. The fallback only triggers on failure, so the normal fast path is unaffected. (src/browser/BrowserCodeReader.ts)

Performance

  • HTMLCanvasElementLuminanceSource: Merged two duplicate 25-line grayscale conversion loops (normal vs. inverted) into a single loop using an XOR mask. Reduces code and eliminates a branch. (src/browser/HTMLCanvasElementLuminanceSource.ts)
  • HTMLCanvasElementLuminanceSource: Use subarray() instead of slice() in getRow() to avoid an intermediate buffer copy on every row read. (src/browser/HTMLCanvasElementLuminanceSource.ts)
  • HTMLCanvasElementLuminanceSource + BrowserCodeReader: Added optional grayscale buffer reuse across frames during continuous scanning, avoiding a ~900KB Uint8ClampedArray allocation per frame on 1280x720 video. (src/browser/HTMLCanvasElementLuminanceSource.ts, src/browser/BrowserCodeReader.ts)
  • BitMatrix: Replaced Math.floor(x / 32) with bitwise (x >> 5) in all hot-path methods (get, set, unset, flip, setRegion, constructor). These are the innermost operations in binarization and grid sampling. (src/core/common/BitMatrix.ts)
  • BitMatrix: Replaced manual zeroing loop in clear() with native Int32Array.fill(0). (src/core/common/BitMatrix.ts)
  • DefaultGridSampler: Replaced Math.floor() with bitwise | 0 in the inner grid sampling loop, called per-pixel for every 2D barcode module. (src/core/common/DefaultGridSampler.ts)
  • GlobalHistogramBinarizer: Replaced manual bucket zeroing loop with Int32Array.fill(0). (src/core/common/GlobalHistogramBinarizer.ts)
  • FinderPatternFinder: Replaced manual 5-element array zeroing with Int32Array.fill(0) in 3 locations. (src/core/qrcode/detector/FinderPatternFinder.ts)

New Format: MaxiCode

  • MaxiCodeReader: Full MaxiCode 2D barcode decoding support (modes 2–5), ported from the Java ZXing reference implementation. MaxiCode is a fixed-size hexagonal barcode used primarily by UPS for package sorting. (src/core/maxicode/MaxiCodeReader.ts)
  • MaxiCode Decoder: Reed-Solomon error correction with interleaved EVEN/ODD codeword processing, supporting structured carrier messages (modes 2–3 with postal code, country, and service class) and standard/enhanced error correction messages (modes 4–5). (src/core/maxicode/decoder/Decoder.ts, src/core/maxicode/decoder/BitMatrixParser.ts, src/core/maxicode/decoder/DecodedBitStreamParser.ts)
  • MultiFormatReader: MaxiCode is now included in both format-specific and default reader lists. (src/core/MultiFormatReader.ts)
  • ReedSolomonDecoder: Added decodeWithECCount() method that returns the number of corrected errors, used by the MaxiCode decoder to report error correction statistics. (src/core/common/reedsolomon/ReedSolomonDecoder.ts)
  • ResultMetadataType: Added ERRORS_CORRECTED enum value for reporting error correction counts in decode results. (src/core/ResultMetadataType.ts)

v0.22.0

Changelog: feature/modernize26 vs master

New Feature: MicroQR Code Support

  • Added full MicroQR Code reader implementation (src/core/microqr/)
    • Detector, decoder, bit matrix parser, data masking, format information, version handling
  • Registered MicroQRCodeReader in MultiFormatReader and BarcodeFormat
  • Exported all MicroQR types from src/index.ts
  • Added test suite with black-box tests and 3 sample images (src/test/resources/blackbox/microqr-1/)

Bug Fixes

  • RSS14Reader (src/core/oned/rss/RSS14Reader.ts): Fixed finder pattern center calculation — off-by-one corrected (startEnd[0] + startEnd[1] - 1); non-throwing errors (other than NotFoundException) no longer silently swallowed; new String() replaced with String(); strict equality (===) fixes
  • StringEncoding (src/core/util/StringEncoding.ts): Removed shouldDecodeOnFallback workaround for ISO-8859-1 — Node ≥ 18 native TextDecoder handles all Latin-1 bytes correctly, fixing URIError: URI malformed on characters like ó
  • RSS14Reader finder pattern: findFinderPattern()[1] now correctly points to the outside pixel of the finder pattern

... (truncated)

Commits
  • 1722d07 Merge pull request #647 from zxing-js/feature/modernize26-2
  • 88f78ec Updated readme
  • fc13009 Bumped version
  • 3bc86d8 MaxiCode Support
  • f9a638b Improve error robustness, scanning quality, and performance
  • 139603a using new npm publish workflow
  • 1a10282 Fixed publish workflow
  • ca304af Merge pull request #645 from zxing-js/feature/modernize26
  • c28ae9c Merge pull request #646 from zxing-js/feature/microqr
  • 06b340d Fixed errors and keep compatibility
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​zxing/library since your current version.


Updates lucide-react from 1.14.0 to 1.23.0

Release notes

Sourced from lucide-react's releases.

Version 1.23.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.22.0...1.23.0

Version 1.22.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.21.0...1.22.0

Version 1.21.0

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.20.0...1.21.0

Version 1.20.0

What's Changed

... (truncated)

Commits
  • 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
  • 07c885e fix(docs): fix zephyr-cloud URL in readmes
  • See full diff in compare view

Updates react-hook-form from 7.71.2 to 7.81.0

Release notes

Sourced from react-hook-form's releases.

Version 7.81.0

⚜️ feat: FieldArray component (#13394)

<FieldArray
  control={control}
  name="test"
  render={({ fields }) => null}
/>

🐞 fix #13538 useFieldArray min 1 item validation error changes its location in the errors object (#13539) 🐞 fix #13569 calling reset triggers subscribe with latest name instead of undefined (#13574) 🐞 fix(useController): reflect cleared parent object in controlled fields (#13550) (#13553) 🐞 fix(flatten): preserve Date values as leaf nodes (#13566) 🐛 fix(unset): guard against prototype keyword path traversal (#13559) (#13560) 🏸 improve setValue api with shrink value (#13576) 👝 close #13577 improve re-render with useFieldArray reset (#13578) 🐞 fix #13575 issue: clearErrors changes the name value from form.subscribe (#13579)

thanks to @​DakshSinghDhami, @​JSap0914, @​tran-simon & @​EduardF1

Version 7.80.0

🧄 feat: disable useFieldArray fields (#13535)

const { fields } = useFieldArray({ disabled: true });
fields[0].disabled; // contains disabled props

🛺 perf: make rhf more performant (#13524) 🐞 fix(deepEqual): empty array and empty plain object should not be equal (#13533)

thanks to @​JSap0914

Version 7.79.0

🚷 feat: use field array disabled (#13520)

useFieldArray({ disabled, name: 'test' })

🐞 fix controller onChange promise (#13518) 🐞 fix: track visited pairs in deepEqual to avoid false positives with shared object references (#13515) 🐞 fix #12651 issue: field validation with shouldUseNativeValidation does not behave native like for radio groups (#13512) 🐞 fix #12754 createFormControl breaks with fast refresh in dev mode (#13511) 🐞 close #12709 #12750 StrictMode would remove field value & get mounted again (#13508) 🐞 fix #13505 issue: In v8 with React compiler, a change in formState errors does not cause child components to re-render (#13510)

thanks to @​DucMinhNe & @​louzhedong

Version 7.78.0

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.81.0] - 2026-07-05

Added

  • FieldArray component built on useFieldArray for controlled field-array rendering

Fixed

  • clearErrors changing the name value from form.subscribe
  • reset triggering subscribe with the latest name instead of undefined
  • setValues leaving stale elements behind when shrinking a field array
  • flatten preserving Date values as leaf nodes
  • useFieldArray min length validation error changing location in the errors object
  • useController not reflecting a cleared parent object in controlled fields

Security

  • Harden unset() against prototype-path traversal (__proto__ / constructor / prototype), matching the existing set() guard

Performance

  • Improve re-render with useFieldArray reset

[7.80.0] - 2026-06-20

Added

  • disabled prop support for individual fields within useFieldArray

Fixed

  • deepEqual incorrectly treating empty array [] and empty plain object {} as equal

Performance

  • Improve onChange, setValid, dirty checking, setValue, and setValues performance

[7.79.0] - 2026-06-13

Added

  • disabled option to useFieldArray

Fixed

  • Controller onChange promise return type
  • deepEqual false positives with shared object references
  • shouldUseNativeValidation behavior for radio groups
  • createFormControl stability with fast refresh in dev mode
  • StrictMode value preservation during remount

... (truncated)

Commits

Updates web-vitals from 5.1.0 to 5.3.0

Changelog

Sourced from web-vitals's changelog.

v5.3.0 (2026-05-28)

  • Remove getFirstHiddenTimePolyfill (#729)
  • Fixed issue where the same configuration object to multiple metric functions can result in errors (#731)
  • Add more robust interactionTarget setting for INP (#744)

v5.2.0 (2026-03-25)

  • Replace filter()[0] with find() for better performance (#658)
  • Use queueMicrotask for microtask scheduling (#660)
  • Simplify the event and LoAF entry clean up logic (#662)
  • Remove obsolete FID polyfill types (#675)
  • Use LargestContentfulPaint.id as fallback when element is removed from DOM (#676)
  • Fix bug for onLCP when attached late (#697)
  • FHandle initially hidden pages and onLCP registered on visibility change (#698)
  • Ensure we clear idle callbacks in whenIdleOrHidde...

    Description has been truncated

@dependabot dependabot Bot requested a review from ericsocrat as a code owner June 20, 2026 08:31
@dependabot dependabot Bot added dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React labels Jun 20, 2026
@vercel

vercel Bot commented Jun 20, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tryvit Error Error Jul 6, 2026 4:43am

@github-actions github-actions Bot enabled auto-merge (squash) June 20, 2026 08:32
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 50be08d to 2a2b097 Compare June 22, 2026 04:24
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 2a2b097 to 9663278 Compare June 29, 2026 04:21
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 9663278 to 863491b Compare June 29, 2026 04:28
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 863491b to 72f1a02 Compare June 29, 2026 04:35
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch 2 times, most recently from c75a0ea to f012937 Compare July 6, 2026 04:22
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from f012937 to 27ae3c0 Compare July 6, 2026 04:29
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 27ae3c0 to 9481a7b Compare July 6, 2026 04:36
@dependabot
chore(deps): bump the npm-rest group across 1 directory with 14 updates
6504ac8 
Bumps the npm-rest group with 13 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `5.2.2` | `5.4.0` |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.4.2` | `1.5.3` |
| [@radix-ui/react-tooltip](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/tooltip) | `1.2.8` | `1.2.11` |
| [@serwist/next](https://github.com/serwist/serwist) | `9.5.6` | `9.5.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.101.2` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.37.0` | `1.38.0` |
| [@zxing/browser](https://github.com/zxing-js/browser) | `0.1.5` | `0.2.0` |
| [@zxing/library](https://github.com/zxing-js/library) | `0.21.3` | `0.23.0` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.14.0` | `1.23.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.71.2` | `7.81.0` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `5.1.0` | `5.3.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.14` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.3` | `2.1.0` |



Updates `@hookform/resolvers` from 5.2.2 to 5.4.0
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v5.2.2...v5.4.0)

Updates `@marsidev/react-turnstile` from 1.4.2 to 1.5.3
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](https://github.com/marsidev/react-turnstile/compare/v1.4.2...@marsidev/react-turnstile@1.5.3)

Updates `@radix-ui/react-tooltip` from 1.2.8 to 1.2.11
- [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/tooltip/CHANGELOG.md)
- [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/tooltip)

Updates `@serwist/next` from 9.5.6 to 9.5.11
- [Release notes](https://github.com/serwist/serwist/releases)
- [Commits](https://github.com/serwist/serwist/compare/@serwist/next@9.5.6...@serwist/next@9.5.11)

Updates `@tanstack/react-query` from 5.90.21 to 5.101.2
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.2/packages/react-query)

Updates `@upstash/redis` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.37.0...@upstash/redis@1.38.0)

Updates `@zxing/browser` from 0.1.5 to 0.2.0
- [Release notes](https://github.com/zxing-js/browser/releases)
- [Commits](zxing-js/browser@v0.1.5...v0.2.0)

Updates `@zxing/library` from 0.21.3 to 0.23.0
- [Release notes](https://github.com/zxing-js/library/releases)
- [Commits](zxing-js/library@v0.21.3...v0.23.0)

Updates `lucide-react` from 1.14.0 to 1.23.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.23.0/packages/lucide-react)

Updates `react-hook-form` from 7.71.2 to 7.81.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.71.2...v7.81.0)

Updates `web-vitals` from 5.1.0 to 5.3.0
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v5.1.0...v5.3.0)

Updates `zod` from 4.3.6 to 4.4.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.1)

Updates `zustand` from 5.0.11 to 5.0.14
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.11...v5.0.14)

Updates `@eslint/compat` from 2.0.3 to 2.1.0
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.0/packages/compat)

---
updated-dependencies:
- dependency-name: "@eslint/compat"
  dependency-version: 2.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@radix-ui/react-tooltip"
  dependency-version: 1.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-rest
- dependency-name: "@serwist/next"
  dependency-version: 9.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-rest
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.101.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@zxing/browser"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@zxing/library"
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: lucide-react
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: react-hook-form
  dependency-version: 7.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: web-vitals
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: zod
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: zustand
  dependency-version: 5.0.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-rest
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch from 9481a7b to 6504ac8 Compare July 6, 2026 04:43
@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 13, 2026
auto-merge was automatically disabled July 13, 2026 04:16

Pull request was closed

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/frontend/main/npm-rest-4cba2e0984 branch July 13, 2026 04:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ericsocrat ericsocrat Awaiting requested review from ericsocrat ericsocrat is a code owner

Assignees

@ericsocrat ericsocrat

Labels

dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ericsocrat