Skip to content

chore(deps): bump the npm-rest group across 1 directory with 11 updates#1083

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/main/npm-rest-a9d78db795
Open

chore(deps): bump the npm-rest group across 1 directory with 11 updates#1083
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/main/npm-rest-a9d78db795

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the npm-rest group with 10 updates in the /frontend directory:

Package From To
@marsidev/react-turnstile 1.4.2 1.5.2
@serwist/next 9.5.6 9.5.11
@tanstack/react-query 5.90.21 5.100.9
@upstash/redis 1.37.0 1.38.0
@zxing/browser 0.1.5 0.2.0
@zxing/library 0.21.3 0.23.0
react-hook-form 7.71.2 7.75.0
web-vitals 5.1.0 5.2.0
zustand 5.0.11 5.0.13
@eslint/compat 2.0.3 2.0.5

Updates @marsidev/react-turnstile from 1.4.2 to 1.5.2

Release notes

Sourced from @​marsidev/react-turnstile's releases.

v1.5.2

No significant changes

    View changes on GitHub

v1.5.1

   🐞 Bug Fixes

    View changes on GitHub

v1.5.0

⚠️ No breaking changes - This is a maintenance release with no API changes for consumers.

🚀 Features

  • Tooling Migration: Replaced ESLint/Prettier with Oxlint/Oxfmt for 50-100x faster linting/formatting
  • TypeScript v7: Migrated to TypeScript Go implementation (tsgo) for type-checking
  • Build System: Replaced tsup with tsdown (Rolldown-based) for 2.3x faster builds
  • Security: Added pnpm supply chain security settings
  • TanStack Intent: Added AI agent skills for IDE assistance

🐞 Bug Fixes

  • Resolved all security vulnerabilities (jsdom, next, minimatch, rollup, ajv)

📦 Dependency Updates

  • @antfu/ni: 28.2.0 → 30.0.0
  • @playwright/test: 1.58.1 → 1.58.2
  • @types/react: 19.2.10 → 19.2.14
  • @types/node: 25.2.0 → 25.5.0
  • lucide-react: 0.563.0 → 1.6.0
  • next: 16.1.6 → 16.2.1
  • vitest: 4.0.18 → 4.1.1
  • And 10+ more...

📝 Documentation

  • Add recipe for form submission retry logic - by @​byalashhab
  • Simplified all code examples to TypeScript only
  • Added CONTRIBUTING.md with development guide

Full Changelog: v1.4.2...v1.5.0

Commits
  • 83760b6 chore: release v1.5.2
  • 7b4d636 Merge pull request #133 from imnasnainaec/package-license
  • fff4b9d Copy up LICENSE on release
  • b1370fd Add LICENSE to npm package
  • 14acbbd Merge pull request #131 from marsidev/chore/fix-release-readme-sync
  • 60cf507 chore: inline release prep steps to bypass npm ignore-scripts
  • 1865b84 Merge pull request #130 from marsidev/129-bug-execute-throws-parameters-not-a...
  • 5c3fae2 chore: release v1.5.1
  • 4c7789f fix: stop passing params to turnstile.execute()
  • 69871b9 Merge pull request #128 from marsidev/fix/audit-vulnerabilities
  • Additional commits viewable in compare view

Updates @serwist/next from 9.5.6 to 9.5.11

Release notes

Sourced from @​serwist/next's releases.

@​serwist/next@​9.5.11

Patch Changes

  • 47a2b2a Thanks @​DuCanhGH! - chore(next, turbo): added "use client" to index.react.tsx

    • Rolldown allows the usage of additional directives such as "use client" when the directive is not in the top-level scope or when the directive is in the top-level scope, and either the module is an entry module, or output.preserveModules is enabled. Given that index.react.tsx is an entry module, we can add the "use client" directive to it, and it will be preserved in the output. This allows users to import the file directly in React Server Components without needing to add the directive themselves.

  • Updated dependencies []:

    • @​serwist/build@​9.5.11
    • @​serwist/utils@​9.5.11
    • @​serwist/webpack-plugin@​9.5.11
    • @​serwist/window@​9.5.11
    • serwist@9.5.11

@​serwist/next@​9.5.10

Patch Changes

  • Updated dependencies []:
    • @​serwist/build@​9.5.10
    • @​serwist/utils@​9.5.10
    • @​serwist/webpack-plugin@​9.5.10
    • @​serwist/window@​9.5.10
    • serwist@9.5.10

@​serwist/next@​9.5.9

Patch Changes

  • d287534 Thanks @​DuCanhGH! - fix(turbo, next): set "jsx" to "react-jsx"

    • This tells tsdown to transpile JSX when building packages.

  • Updated dependencies []:

    • @​serwist/build@​9.5.9
    • @​serwist/utils@​9.5.9
    • @​serwist/webpack-plugin@​9.5.9
    • @​serwist/window@​9.5.9
    • serwist@9.5.9

@​serwist/next@​9.5.8

Patch Changes

  • #351 be7d645 Thanks @​DuCanhGH! - feat: migrate to tsdown

    • Migrated to tsdown for easier configuration and better build performance.

    • Updated dependencies and removed unused ones.

  • Updated dependencies [be7d645]:

    • @​serwist/webpack-plugin@​9.5.8
    • @​serwist/window@​9.5.8

... (truncated)

Commits
  • 49a3c55 chore(packages): publish packages (#358)
  • 47a2b2a chore(next, turbo): added "use client" to index.react.tsx
  • 8baed58 chore(cli): document serwist build
  • 5c44958 fix(tests): fixed deprecated spawn usage with shell: true and args
  • 8db92b7 chore(packages): publish packages (#356)
  • b29bb67 fix(cli): fix dist import
  • e4f6bcf chore(packages): publish packages (#354)
  • d287534 fix(turbo, next): set "jsx" to "react-jsx"
  • 994956c chore(packages): publish packages (#352)
  • ddf9e17 fix: fixed TypeScript issues
  • Additional commits viewable in compare view

Updates @tanstack/react-query from 5.90.21 to 5.100.9

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.100.9

Patch Changes

  • Updated dependencies [3d21cac]:
    • @​tanstack/query-devtools@​5.100.9
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query-next-experimental@​5.100.9

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query-persist-client@​5.100.9

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.100.9
    • @​tanstack/react-query@​5.100.9

@​tanstack/react-query@​5.100.9

Patch Changes

  • Updated dependencies [fcee7bd]:
    • @​tanstack/query-core@​5.100.9

@​tanstack/react-query-devtools@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-devtools@​5.100.8
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query-next-experimental@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query-persist-client@​5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-persist-client-core@​5.100.8
    • @​tanstack/react-query@​5.100.8

@​tanstack/react-query@​5.100.8

Patch Changes

  • Updated dependencies []:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.100.9

Patch Changes

  • Updated dependencies [fcee7bd]:
    • @​tanstack/query-core@​5.100.9

5.100.8

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.8

5.100.7

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.7

5.100.6

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.6

5.100.5

Patch Changes

  • Updated dependencies [a53ef97]:
    • @​tanstack/query-core@​5.100.5

5.100.4

Patch Changes

  • Updated dependencies []:
    • @​tanstack/query-core@​5.100.4

5.100.3

Patch Changes

  • fix(suspense): skip calling combine when queries would suspend (#10576)

  • Updated dependencies [f85d825]:

    • @​tanstack/query-core@​5.100.3

... (truncated)

Commits

Updates @upstash/redis from 1.37.0 to 1.38.0

Release notes

Sourced from @​upstash/redis's releases.

@​upstash/redis@​1.38.0

Minor Changes

  • c71f581: Separate read/write commands into separate pipelines in auto pipeline. As a result, mixed read/write Promise.all batches may now be split across multiple pipeline HTTP requests instead of a single request, and read-after-write ordering may no longer be preserved within those mixed batches.

@upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

What's Changed

Full Changelog: https://github.com/upstash/redis-js/compare/@​upstash/redis@1.37.0...@​upstash/redis@1.38.0-canary-20260505130836-8b3b33ccd367ba9ddb5b7f5ca33eb32ccf7e940d

Commits

Updates @zxing/browser from 0.1.5 to 0.2.0

Release notes

Sourced from @​zxing/browser's releases.

v0.2.0

0.2.0

Breaking Changes

  • Peer dependency bumped to @zxing/library@^0.22.0 — projects still on 0.21.x must upgrade.
  • BrowserCodeReader.options type narrowed — the protected readonly options property is now typed as Required<IBrowserCodeReaderOptions> instead of IBrowserCodeReaderOptions. TypeScript subclasses that read option properties will now receive number instead of number | undefined; runtime behaviour is unchanged.

Bug Fixes

  • Removed invalid --screw-ie8 flag from the Terser minification script, which caused the build:umd:min step to fail with modern Terser.
  • Fixed syntax error in the async dynamic-import example in the README.
  • Corrected BrowserPDF417CodeReader → BrowserPDF417Reader in the README reader list.
  • Corrected the description of BrowserCodeReader in the README (it is a concrete base class, not abstract).

Tooling & Infrastructure

  • Migrated from Yarn to npm. yarn.lock removed; package-lock.json is now the lock file. Install with npm ci.
  • Replaced Cypress with Jest for testing. Tests now run in Node.js via ts-jest and node-canvas, removing the need for a browser or a local HTTP server. Run with npm test.
  • Migrated from TSLint to ESLint (with typescript-eslint). TSLint has been unmaintained since 2019. The new config lives in eslint.config.mjs using the ESLint 10 flat config format.
  • Rollup config renamed rollup.config.js → rollup.config.mjs for explicit ESM; upgraded to Rollup 4. UMD build warnings (circular deps in @zxing/library, this-rewrite) are now suppressed via onwarn and context: 'window'.
  • GitHub Actions modernised:
    • All actions bumped to latest versions (checkout@v4, setup-node@v4, cache@v4, upload-artifact@v4, download-artifact@v4).
    • Node.js upgraded from 18 → 24.
    • Deprecated ::set-output replaced with $GITHUB_OUTPUT.
    • Yarn cache steps replaced with setup-node's built-in cache: npm.

Dependency Updates

Package Before After
typescript 4.5.5 6.0.3
rollup 2.67.0 4.60.2
@rollup/plugin-node-resolve 13.1.3 16.0.3
eslint 8.8.0 10.2.1
terser 5.14.2 5.46.2
shx 0.3.4 0.4.0
tslint (removed) 5.20.1 —
tslint-no-circular-imports (removed) 0.7.0 —
cypress (removed) 9.4.1 —
pm2 (removed) 5.1.2 —
chai / @types/chai (removed) 4.x —
jest (added) — 29.7.0
ts-jest (added) — 29.3.2
canvas (added) — 3.1.0
typescript-eslint (added) — 8.0.0
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​zxing/browser since your current version.


Updates @zxing/library from 0.21.3 to 0.23.0

Release notes

Sourced from @​zxing/library's releases.

v0.23.0

Changelog

Error Robustness

  • MultiFormatReader: Non-ReaderException errors (TypeError, RangeError, etc.) are now logged instead of silently swallowed during decode attempts. Previously, programming errors were invisible and produced misleading "no barcode found" results. (src/core/MultiFormatReader.ts)
  • MultiFormatReader: Skip redundant setHints() calls when the same hints object is passed to decode() repeatedly, avoiding unnecessary reader reconstruction. (src/core/MultiFormatReader.ts)
  • BrowserCodeReader: Unexpected errors in the continuous scan loop are now logged via console.error. Previously the loop would stop silently with no indication of what went wrong. (src/browser/BrowserCodeReader.ts)

Scanning Quality

  • OneDReader: Increased default row sampling from 15 to 25 lines, covering ~78% of image height (up from ~47%). This improves detection of 1D barcodes positioned away from the image center without requiring TRY_HARDER mode. (src/core/oned/OneDReader.ts)
  • BrowserCodeReader: Added GlobalHistogramBinarizer fallback when HybridBinarizer fails with NotFoundException. Local thresholding can fail on very small barcodes or uniform-background images where a single global threshold works better. The fallback only triggers on failure, so the normal fast path is unaffected. (src/browser/BrowserCodeReader.ts)

Performance

  • HTMLCanvasElementLuminanceSource: Merged two duplicate 25-line grayscale conversion loops (normal vs. inverted) into a single loop using an XOR mask. Reduces code and eliminates a branch. (src/browser/HTMLCanvasElementLuminanceSource.ts)
  • HTMLCanvasElementLuminanceSource: Use subarray() instead of slice() in getRow() to avoid an intermediate buffer copy on every row read. (src/browser/HTMLCanvasElementLuminanceSource.ts)
  • HTMLCanvasElementLuminanceSource + BrowserCodeReader: Added optional grayscale buffer reuse across frames during continuous scanning, avoiding a ~900KB Uint8ClampedArray allocation per frame on 1280x720 video. (src/browser/HTMLCanvasElementLuminanceSource.ts, src/browser/BrowserCodeReader.ts)
  • BitMatrix: Replaced Math.floor(x / 32) with bitwise (x >> 5) in all hot-path methods (get, set, unset, flip, setRegion, constructor). These are the innermost operations in binarization and grid sampling. (src/core/common/BitMatrix.ts)
  • BitMatrix: Replaced manual zeroing loop in clear() with native Int32Array.fill(0). (src/core/common/BitMatrix.ts)
  • DefaultGridSampler: Replaced Math.floor() with bitwise | 0 in the inner grid sampling loop, called per-pixel for every 2D barcode module. (src/core/common/DefaultGridSampler.ts)
  • GlobalHistogramBinarizer: Replaced manual bucket zeroing loop with Int32Array.fill(0). (src/core/common/GlobalHistogramBinarizer.ts)
  • FinderPatternFinder: Replaced manual 5-element array zeroing with Int32Array.fill(0) in 3 locations. (src/core/qrcode/detector/FinderPatternFinder.ts)

New Format: MaxiCode

  • MaxiCodeReader: Full MaxiCode 2D barcode decoding support (modes 2–5), ported from the Java ZXing reference implementation. MaxiCode is a fixed-size hexagonal barcode used primarily by UPS for package sorting. (src/core/maxicode/MaxiCodeReader.ts)
  • MaxiCode Decoder: Reed-Solomon error correction with interleaved EVEN/ODD codeword processing, supporting structured carrier messages (modes 2–3 with postal code, country, and service class) and standard/enhanced error correction messages (modes 4–5). (src/core/maxicode/decoder/Decoder.ts, src/core/maxicode/decoder/BitMatrixParser.ts, src/core/maxicode/decoder/DecodedBitStreamParser.ts)
  • MultiFormatReader: MaxiCode is now included in both format-specific and default reader lists. (src/core/MultiFormatReader.ts)
  • ReedSolomonDecoder: Added decodeWithECCount() method that returns the number of corrected errors, used by the MaxiCode decoder to report error correction statistics. (src/core/common/reedsolomon/ReedSolomonDecoder.ts)
  • ResultMetadataType: Added ERRORS_CORRECTED enum value for reporting error correction counts in decode results. (src/core/ResultMetadataType.ts)

v0.22.0

Changelog: feature/modernize26 vs master

New Feature: MicroQR Code Support

  • Added full MicroQR Code reader implementation (src/core/microqr/)
    • Detector, decoder, bit matrix parser, data masking, format information, version handling
  • Registered MicroQRCodeReader in MultiFormatReader and BarcodeFormat
  • Exported all MicroQR types from src/index.ts
  • Added test suite with black-box tests and 3 sample images (src/test/resources/blackbox/microqr-1/)

Bug Fixes

  • RSS14Reader (src/core/oned/rss/RSS14Reader.ts): Fixed finder pattern center calculation — off-by-one corrected (startEnd[0] + startEnd[1] - 1); non-throwing errors (other than NotFoundException) no longer silently swallowed; new String() replaced with String(); strict equality (===) fixes
  • StringEncoding (src/core/util/StringEncoding.ts): Removed shouldDecodeOnFallback workaround for ISO-8859-1 — Node ≥ 18 native TextDecoder handles all Latin-1 bytes correctly, fixing URIError: URI malformed on characters like ó
  • RSS14Reader finder pattern: findFinderPattern()[1] now correctly points to the outside pixel of the finder pattern

... (truncated)

Commits
  • 1722d07 Merge pull request #647 from zxing-js/feature/modernize26-2
  • 88f78ec Updated readme
  • fc13009 Bumped version
  • 3bc86d8 MaxiCode Support
  • f9a638b Improve error robustness, scanning quality, and performance
  • 139603a using new npm publish workflow
  • 1a10282 Fixed publish workflow
  • ca304af Merge pull request #645 from zxing-js/feature/modernize26
  • c28ae9c Merge pull request #646 from zxing-js/feature/microqr
  • 06b340d Fixed errors and keep compatibility
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​zxing/library since your current version.


Updates react-hook-form from 7.71.2 to 7.75.0

Release notes

Sourced from react-hook-form's releases.

Version 7.75.0

🦧 feat: improve get dirty fields prune empty fields (#13363)

+ dirtyFields: { test: [{ data: false }] }
- dirtyFields: {} // removed the empty node with false value

🎹 typescript 6.0 (#13330) 🌡️ chore: minor improvement on setValue & reset (#13366) 🐞 fix #13403: include setValues in FormProvider context value (#13404) 🐞 fix: recompute isDirty after re-registering a previously unregistered field (#13399) 🐞 fix: preserve watch updates on field array unmount fixes #13375 (#13385) 🐞 fix: prevent useWatch re-render when unrelated field validation is … (#13398)

thanks to @​dfedoryshchev, @​cyky & @​gkarabelos

Version 7.74.0

🪇 feat: setValues (#13201)

setValues((data) => {
  return {
    ...data,
    name: 'test'
  }
})
setValues(formValues);

🐞 fix: preserve previous field value when useController name changes (#13395) 🐞 fix: handle null parent when unregistering nested field (#13396) 🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (#13388) 🪢 fix build to exclude test files (#13387)

thanks to @​Yihao-G & @​mixelburg

Version 7.73.1

⚡perf: memoize submit (#13378) 🚉 perf: improve deepEqual performance (#13362) 👀 perf: skip re-render in setValue when value is unchanged (#13352) ✂️ remove unneeded flag check for shouldDirty 🚨 fix: safely access field._f during register (#13365) 🧹 close #13298: improve fieldState errors when resolver uses dot-notation string keys (#13350) 🐞 fix #13178: update state correctly in watch callback with Controller, trigger, and reset (#13180) 🐞 fix #13331: skip field array validation when mode is onBlur (#13333) 🐞 fix #13334 sDirty remains false after deletion an item with shouldDirty: true (#13357) 🐞 fix: handle nested field when parent defaultValue is null (#13348)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.75.0] - 2026-05-02

Added

  • Improve getDirtyFields to prune empty fields
  • TypeScript 6.0 support

Fixed

  • Include setValues in FormProvider context value
  • Preserve watch updates on field array unmount
  • Prevent useWatch re-render when unrelated field validation occurs
  • Recompute isDirty after re-registering a previously unregistered field

[7.74.0] - 2026-04-26

Added

  • setValues API

Fixed

  • Preserve previous field value when useController name changes
  • Handle null parent when unregistering nested field
  • Treat NaN as empty when valueAsNumber is true in validateField

[7.73.1] - 2026-04-21

Fixed

  • Reverted setValues that was accidentally included in patch; fix build to exclude test files

[7.73.0] - 2026-04-18

Added

  • Improve subscribe API performance

Performance

  • Memoize submit handler
  • Improve deepEqual performance

Fixed

  • Safely access field._f during register
  • Improve fieldState errors when resolver uses dot-notation string keys
  • Update state correctly in watch callback with Controller, trigger, and reset
  • Skip field array validation when mode is onBlur
  • isDirty remains false after deleting an item with shouldDirty: true

... (truncated)

Commits

Updates web-vitals from 5.1.0 to 5.2.0

Changelog

Sourced from web-vitals's changelog.

v5.2.0 (2026-03-25)

  • Replace filter()[0] with find() for better performance (#658)
  • Use queueMicrotask for microtask scheduling (#660)
  • Simplify the event and LoAF entry clean up logic (#662)
  • Remove obsolete FID polyfill types (#675)
  • Use LargestContentfulPaint.id as fallback when element is removed from DOM (#676)
  • Fix bug for onLCP when attached late (#697)
  • FHandle initially hidden pages and onLCP registered on visibility change (#698)
  • Ensure we clear idle callbacks in whenIdleOrHidden (#707)
  • Limit pending events to conserve memory (#710)
  • Add includeProcessedEventEntries option (#714)
  • Reduce bundle size by refactoring (#713)
Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates zod from 4.3.6 to 4.4.1

Release notes

Sourced from zod's releases.

v4.4.1

Commits:

  • 481f7be4238c83ed58183f921b2646f340a91c6a ci: gate release publishing on full test workflow
  • 95ccab423aec720b2523c3a64cdc7e3204537cc7 test(v3): restore optional undefined expectations
  • cede2c63739a5823d6aa5093d291e9a111da943d fix(v4): reject tuple holes before required defaults (#5900)
  • edd0bf0f5ada4a8dc581c259407d7bbad0a71ea7 release: 4.4.1
  • 180d83d1dbe6a59260710cc8637a3dea2281ee56 docs: remove Jazz featured sponsor

v4.4.0

4.4.0

This is a minor release with a wide set of correctness and soundness fixes. Some fixes intentionally make Zod stricter, so code that depended on previously accepted invalid or ambiguous inputs may need small updates.

Potentially breaking bug fixes

Tuple defaults now materialize output values correctly

Fixed in #5661. Tuple parsing now more accurately reflects defaults, optional tails, explicit undefined, and under-filled inputs. The headline behavior is that defaults in tuple positions now properly appear in parsed output.

const schema = z.tuple([
  z.string(),
  z.string().default("fallback"),
]);
schema.parse(["a"]);
// ["a", "fallback"]

Trailing optional elements that are absent still stay absent; they are not filled with undefined.

const schema = z.tuple([
  z.string(),
  z.string().optional(),
]);
schema.parse(["a"]);
// ["a"]

But explicit undefined values supplied by the caller are preserved.

schema.parse(["a", undefined]);
// ["a", undefined]

When optional elements appear before later defaults, the parsed tuple is now dense so array operations behave predictably.

... (truncated)

Commits
  • 180d83d docs: remove Jazz featured sponsor
  • edd0bf0 release: 4.4.1
  • cede2c6 fix(v4): reject tuple holes before required defaults (#5900)
  • 95ccab4 test(v3): restore optional undefined expectations
  • 481f7be ci: gate release publishing on full test workflow
  • d05f026 release: 4.4.0
  • f778e02 build: bump zshy for JSR wildcard exports
  • 6db607b fix(release): keep JSR manifest publishable
  • ad0b827 ci: update release workflow for trusted publishing
  • b6066b3 fix(v4): align object and tuple optionality handling (#5661)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for zod since your current version.


Updates zustand from 5.0.11 to 5.0.13

Release notes

Sourced from zustand's releases.

v5.0.13

This release includes an improvement in the devtools middleware.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.12...v5.0.13

v5.0.12

Two small fixes.

What's Changed

New Contributors

Full Changelog: pmndrs/zustand@v5.0.11...v5.0.12

Commits
  • 6bc451e 5.0.13
  • 8ec2169 chore(deps): update dev dependencies (#3486)
  • 4e9bcf0 fix(devtools): support Firefox/Safari stack format in findCallerName (#3469)
  • 4b96f4e fix(docs): correct react-dom test utils import path (#3474)
  • c7516c1 fix(tests): change parameters for 'expect' in test (#3483)
  • 1b04af1 docs(persist): fix signature to require persistOptions (#3477)
  • 95d3f33 test(middleware/immer): add runtime tests for immer middleware (#3471)
  • 3201328 Update TypeScript guide links in README.md (#3466)
  • 00f96a3 chore(deps): bump actions/deploy-pages from 4.0.5 to 5.0.0 (#3447)
  • 6330044 test: expand React subscribe test coverage (#3442)
  • Additional commits viewable in compare view

Updates @eslint/compat from 2.0.3 to 2.0.5

Release notes

Sourced from @​eslint/compat's releases.

migrate-config: v2.0.5

2.0.5 (2026-04-03)

Dependencies

  • The following workspace d...

    Description has been truncated

@dependabot
chore(deps): bump the npm-rest group across 1 directory with 11 updates
4f1bd4f 
Bumps the npm-rest group with 10 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@marsidev/react-turnstile](https://github.com/marsidev/react-turnstile) | `1.4.2` | `1.5.2` |
| [@serwist/next](https://github.com/serwist/serwist) | `9.5.6` | `9.5.11` |
| [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.90.21` | `5.100.9` |
| [@upstash/redis](https://github.com/upstash/redis-js) | `1.37.0` | `1.38.0` |
| [@zxing/browser](https://github.com/zxing-js/browser) | `0.1.5` | `0.2.0` |
| [@zxing/library](https://github.com/zxing-js/library) | `0.21.3` | `0.23.0` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.71.2` | `7.75.0` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `5.1.0` | `5.2.0` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.11` | `5.0.13` |
| [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) | `2.0.3` | `2.0.5` |



Updates `@marsidev/react-turnstile` from 1.4.2 to 1.5.2
- [Release notes](https://github.com/marsidev/react-turnstile/releases)
- [Commits](marsidev/react-turnstile@v1.4.2...v1.5.2)

Updates `@serwist/next` from 9.5.6 to 9.5.11
- [Release notes](https://github.com/serwist/serwist/releases)
- [Commits](https://github.com/serwist/serwist/compare/@serwist/next@9.5.6...@serwist/next@9.5.11)

Updates `@tanstack/react-query` from 5.90.21 to 5.100.9
- [Release notes](https://github.com/TanStack/query/releases)
- [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md)
- [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.100.9/packages/react-query)

Updates `@upstash/redis` from 1.37.0 to 1.38.0
- [Release notes](https://github.com/upstash/redis-js/releases)
- [Commits](https://github.com/upstash/redis-js/compare/@upstash/redis@1.37.0...@upstash/redis@1.38.0)

Updates `@zxing/browser` from 0.1.5 to 0.2.0
- [Release notes](https://github.com/zxing-js/browser/releases)
- [Commits](zxing-js/browser@v0.1.5...v0.2.0)

Updates `@zxing/library` from 0.21.3 to 0.23.0
- [Release notes](https://github.com/zxing-js/library/releases)
- [Commits](zxing-js/library@v0.21.3...v0.23.0)

Updates `react-hook-form` from 7.71.2 to 7.75.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.71.2...v7.75.0)

Updates `web-vitals` from 5.1.0 to 5.2.0
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v5.1.0...v5.2.0)

Updates `zod` from 4.3.6 to 4.4.1
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v4.3.6...v4.4.1)

Updates `zustand` from 5.0.11 to 5.0.13
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.11...v5.0.13)

Updates `@eslint/compat` from 2.0.3 to 2.0.5
- [Release notes](https://github.com/eslint/rewrite/releases)
- [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md)
- [Commits](https://github.com/eslint/rewrite/commits/compat-v2.0.5/packages/compat)

---
updated-dependencies:
- dependency-name: "@marsidev/react-turnstile"
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@serwist/next"
  dependency-version: 9.5.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-rest
- dependency-name: "@tanstack/react-query"
  dependency-version: 5.100.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@upstash/redis"
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@zxing/browser"
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: "@zxing/library"
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: react-hook-form
  dependency-version: 7.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: web-vitals
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: zod
  dependency-version: 4.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-rest
- dependency-name: zustand
  dependency-version: 5.0.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-rest
- dependency-name: "@eslint/compat"
  dependency-version: 2.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-rest
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot requested a review from ericsocrat as a code owner May 7, 2026 02:36
@dependabot dependabot Bot added dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React labels May 7, 2026
@vercel
Copy link
Copy Markdown

vercel Bot commented May 7, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
tryvit Error Error May 7, 2026 2:36am

@dependabot dependabot Bot added the dependencies Dependency updates (Dependabot) label May 7, 2026
@github-actions github-actions Bot enabled auto-merge (squash) May 7, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ericsocrat ericsocrat Awaiting requested review from ericsocrat ericsocrat is a code owner

Assignees

@ericsocrat ericsocrat

Labels

dependencies Dependency updates (Dependabot) frontend Frontend / Next.js / React

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ericsocrat