build(deps): bump the production-dependencies group across 1 directory with 13 updates by dependabot[bot] · Pull Request #99 · LilithGames/a2wave

dependabot · 2026-09-04T15:50:45Z

Bumps the production-dependencies group with 13 updates in the / directory:

Package	From	To
@a2a-js/sdk	`1.0.1`	`1.1.0`
@larksuiteoapi/node-sdk	`1.73.0`	`1.73.3`
@node-rs/argon2	`2.1.0`	`2.2.0`
@slack/socket-mode	`3.0.0`	`3.0.1`
@slack/web-api	`8.0.0`	`8.1.1`
hono	`4.13.4`	`4.13.5`
@ant-design/icons	`6.3.2`	`6.3.4`
@codemirror/state	`6.7.1`	`6.7.2`
@codemirror/view	`6.43.9`	`6.43.11`
@tanstack/react-query	`5.102.3`	`5.102.8`
antd	`6.6.1`	`6.6.2`
react-hook-form	`7.86.0`	`7.87.0`
react-router-dom	`7.18.2`	`7.18.3`

Updates @a2a-js/sdk from 1.0.1 to 1.1.0

Release notes

Sourced from @a2a-js/sdk's releases.

v1.1.0

1.1.0 (2026-08-26)

Features

make event bus keep-alive states configurable (#669) (f844dad), closes #620

Bug Fixes

Add serialization for listTasks input/output parameters. (#610) (c863497)

clone push notification configs before storing (#662) (4d175a0)

compat/v0_3/translate: add null and undefined checks to array and string fields (#618) (108736b)

deps: replace uuid package with crypto.randomUUID() (#665) (636b060)

Do not filter tasks in ListTasks if task state is unspecified (#622) (1c6eb32)

errors: global error branding via Symbol.hasInstance to fix instanceof checks across bundle entry points (#612) (cc33173)

scripts: update generate script to use buf and remove obsolete generateTypes (#653) (8bf3cd3)

server: send full Task on every v0.3 push trigger (#658) (b3afbe4)

Changelog

Sourced from @a2a-js/sdk's changelog.

1.1.0 (2026-08-26)

Features

make event bus keep-alive states configurable (#669) (f844dad), closes #620

Bug Fixes

Add serialization for listTasks input/output parameters. (#610) (c863497)

clone push notification configs before storing (#662) (4d175a0)

compat/v0_3/translate: add null and undefined checks to array and string fields (#618) (108736b)

deps: replace uuid package with crypto.randomUUID() (#665) (636b060)

Do not filter tasks in ListTasks if task state is unspecified (#622) (1c6eb32)

errors: global error branding via Symbol.hasInstance to fix instanceof checks across bundle entry points (#612) (cc33173)

scripts: update generate script to use buf and remove obsolete generateTypes (#653) (8bf3cd3)

server: send full Task on every v0.3 push trigger (#658) (b3afbe4)

Commits

eeffd69 chore(main): release 1.1.0 (#675)
6927b7f ci: Optional npm token override for npm_publish workflow (#674)
1455a94 chore: Revert "chore(main): release 1.1.0" (#673)
6920adb chore(main): release 1.1.0
b3afbe4 fix(server): send full Task on every v0.3 push trigger (#658)
f844dad feat: make event bus keep-alive states configurable (#669)
f22cc49 ci: Remove PR related parts from the stale-issues workflow (#668)
a94e6ce ci: Add workflow for closing stale issues (#667)
4d175a0 fix: clone push notification configs before storing (#662)
8bf3cd3 fix(scripts): update generate script to use buf and remove obsolete generateT...
Additional commits viewable in compare view

Updates @larksuiteoapi/node-sdk from 1.73.0 to 1.73.3

Commits

See full diff in compare view

Updates @node-rs/argon2 from 2.1.0 to 2.2.0

Commits

fa136ac chore(release): publish
227a5bf feat(argon2): add parseOptions to read parameters from hash string (#1195)
5451c02 chore(deps): update cross-platform-actions/action action to v1.5.0 (#1196)
fa77f28 chore(deps): update dependency oxfmt to ^0.65.0 (#1194)
15632e4 chore(deps): lock file maintenance (#1193)
7dba1f5 chore(deps): update rust to v1.98.0 (#1192)
635e750 chore(deps): update dependency oxfmt to ^0.64.0 (#1191)
af63ac2 chore(deps): lock file maintenance (#1190)
See full diff in compare view

Updates @slack/socket-mode from 3.0.0 to 3.0.1

Release notes

Sourced from @slack/socket-mode's releases.

@slack/socket-mode@3.0.1

Patch Changes

5c2362c: Fix leaked TCP sockets on disconnect (#2709). Moving from ws to undici's WebSocket in 3.0.0 dropped every force-close mechanism, so ESTABLISHED sockets were never torn down and accumulated toward Slack's per-app connection cap.

disconnect() now arms a 30s close-handshake timeout, so a peer that never replies to the close frame no longer leaves the socket stuck in CLOSING indefinitely.

On the default dispatcher path, the underlying TCP socket is now captured and force-destroyed during cleanup. A user-supplied dispatcher owns its own socket and instead relies on the close-handshake timeout — this limitation is documented on the dispatcher option.

The close handler no longer schedules a reconnect on stale or overlapping close events, so at most one reconnect is scheduled per disconnect.

Commits

e0fa745 chore: release (#2720)
5c2362c fix(socket-mode): tear down leaked sockets on disconnect (#2709) (#2710)
e026671 chore: release (#2719)
0ee1d99 ci: adjust outputs of changeset releases to reattempt most recent releases (#...
05502d9 chore: release (#2713)
11b81e1 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 (#2714)
7a3d149 chore(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1 (#2716)
67f8a74 chore(deps-dev): bump @biomejs/biome from 2.5.8 to 2.5.10 (#2717)
aef66ac fix: revert internal packages requiring esm loading for backward compatible s...
c663dc0 chore: release (#2681)
Additional commits viewable in compare view

Updates @slack/web-api from 8.0.0 to 8.1.1

Release notes

Sourced from @slack/web-api's releases.

@slack/web-api@8.1.1

Patch Changes

0ee1d99: fix: revert internal packages requiring esm loading for backward compatible support (#2711)

@slack/web-api@8.1.0

Minor Changes

955e6b9: feat(web-api): add support for admin.users.getExpiration

4322e14: feat(web-api): add agents.sessions.rename and agents.sessions.setStatus

4ba30a1: feat(web-api): add session_status to chat.stopStream arguments

bff3398: feat(web-api): add webapi response changes as of 2026-08-21

Regenerate response types with new stable response properties (e.g. agent_session on message-bearing responses, ListView grouping/sort/filter fields, bots.info connector/workflow flags).

Two fields are removed from UsersListResponse, neither of which is a real success-response property:

Member.is_connector_bot — not returned by users.list; this flag is surfaced on bots.info (added here to BotsInfoResponse).

arg — an error-response echo field, not part of a successful users.list body.

f5fd35a: feat(web-api): add blocks.validate method

Patch Changes

Updated dependencies [916d8e9]

Updated dependencies [f5e9a01]

@slack/types@3.1.0

Commits

e026671 chore: release (#2719)
0ee1d99 ci: adjust outputs of changeset releases to reattempt most recent releases (#...
05502d9 chore: release (#2713)
11b81e1 chore(deps): bump changesets/action from 1.9.0 to 2.1.1 (#2714)
7a3d149 chore(deps-dev): bump @changesets/cli from 2.31.1 to 3.0.1 (#2716)
67f8a74 chore(deps-dev): bump @biomejs/biome from 2.5.8 to 2.5.10 (#2717)
aef66ac fix: revert internal packages requiring esm loading for backward compatible s...
c663dc0 chore: release (#2681)
4ba30a1 feat(web-api): add session_status to chat.stopStream arguments (#2708)
916d8e9 feat(types): add agent_session_stopped and agent_session_title_changed events...
Additional commits viewable in compare view

Updates hono from 4.13.4 to 4.13.5

Release notes

Sourced from hono's releases.

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

Commits

06880c4 4.13.5
531e9c5 Merge commit from fork
3a67f7f Merge commit from fork
9c28d72 Merge commit from fork
See full diff in compare view

Updates @ant-design/icons from 6.3.2 to 6.3.4

Commits

See full diff in compare view

Updates @codemirror/state from 6.7.1 to 6.7.2

Commits

See full diff in compare view

Updates @codemirror/view from 6.43.9 to 6.43.11

Commits

See full diff in compare view

Updates @tanstack/react-query from 5.102.3 to 5.102.8

Release notes

Sourced from @tanstack/react-query's releases.

@tanstack/react-query-devtools@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.8

@tanstack/react-query@5.102.8

@tanstack/react-query-next-experimental@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.102.8

@tanstack/react-query-persist-client@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.8

@tanstack/react-query@5.102.8

@tanstack/react-query@5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

@tanstack/react-query-devtools@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-devtools@5.102.7

@tanstack/react-query@5.102.7

@tanstack/react-query-next-experimental@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/react-query@5.102.7

@tanstack/react-query-persist-client@5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-persist-client-core@5.102.7

@tanstack/react-query@5.102.7

@tanstack/react-query@5.102.7

Patch Changes

Updated dependencies []:

... (truncated)

Changelog

Sourced from @tanstack/react-query's changelog.

5.102.8

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.8

5.102.7

Patch Changes

Updated dependencies []:

@tanstack/query-core@5.102.7

5.102.6

Patch Changes

#11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

Updated dependencies []:

@tanstack/query-core@5.102.6

5.102.5

Patch Changes

Updated dependencies [578e5c2]:

@tanstack/query-core@5.102.5

5.102.4

Patch Changes

Updated dependencies [a05df6a]:

@tanstack/query-core@5.102.4

Commits

2969edf ci: Version Packages (#11316)
2eb3c7c ci: Version Packages (#11313)
714df67 ci: Version Packages (#11306)
ac2b612 fix(react-query): propagate falsy errors to the error boundary (#11305)
1836e61 ci: Version Packages (#11303)
51f12db ci: Version Packages (#11294)
See full diff in compare view

Updates antd from 6.6.1 to 6.6.2

Release notes

Sourced from antd's releases.

6.6.2

♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @github-actions

🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @bhumin18 @QDyanbing @dogledogle

🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @QDyanbing

Menu

⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @zombieJ

🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @EmilyyyLiu

🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @QDyanbing

Transfer

🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @QDyanbing

🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @biubiukam

Table

🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @QDyanbing

🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @thlovey

Tree

🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @giaBaoJS

🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @QDyanbing

List

🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @nrps9909

🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @QDyanbing

🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @QDyanbing

🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @dogledogle

🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @nrps9909

🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @dogledogle

🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @QDyanbing

🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @QDyanbing

♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @nrps9909

♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @nrps9909

🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @QDyanbing

🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @QDyanbing

🐞 Fix Watermark throwing an error when content is undefined. #59077 @VamoBao

📖 Fix component LLMs links on website mirrors and local deployments. #59062 @QDyanbing

♿ 优化 Progress、Steps 和 Tooltip 的无障碍体验，避免进度条 SVG 被重复朗读，确保键盘激活 Steps 项目时触发 onClick，并保留 Tooltip 已有的 aria-describedby 关联。#59139 @github-actions

🐞 修复 Alert、Empty、Card、Tag、Breadcrumb、Segmented、FloatButton、Form.Item 和 Statistic 无法正确渲染数值 0 内容的问题。#59117 #59094 #59079 #59101 @bhumin18 @QDyanbing @dogledogle

🤖 修复 Alert 全局 closable、Select 和 AutoComplete 的 onPopupVisibleChange 类型定义错误暴露不支持回调或属性的问题。#59100 #59142 @QDyanbing

Menu

⌨️ 修复多个 Menu 实例之间弹层 ID 重复的问题。#59048 @zombieJ

🐞 修复 Menu 横向模式下鼠标从菜单项移向子菜单弹层时子菜单意外关闭的问题。#59088 @EmilyyyLiu

🐞 修复 Menu 内联菜单收缩完成后图标仍继续位移的问题。#59085 @QDyanbing

Transfer

🐞 修复 Transfer 搜索结果全部为禁用项时“全选”复选框仍可用的问题。#59121 @QDyanbing

🐞 修复 Transfer 从空过滤结果恢复数据后不显示列表项的问题。#59074 @biubiukam

Table

🐞 修复 Table 可排序列不触发非 Enter 键自定义 onKeyDown 回调的问题。#59078 @QDyanbing

🐞 修复 Table 关闭内置筛选面板时重复触发 filterDropdownProps.onOpenChange(false) 的问题。#59023 @thlovey

Tree

🐞 修复 Tree.DirectoryTree 的 expandedKeys 或 selectedKeys 显式传入 undefined 时无法展开或选择的问题。#59076 @giaBaoJS

🐞 修复 Tree.DirectoryTree 从 key 为数值 0 的节点开始时 Shift 范围选择失效的问题。#59029 @QDyanbing

List

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.2

2026-08-28

♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @github-actions

🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @bhumin18 @QDyanbing @dogledogle

🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @QDyanbing

Menu

⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @zombieJ

🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @EmilyyyLiu

🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @QDyanbing

Transfer

🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @QDyanbing

🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @biubiukam

Table

🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @QDyanbing

🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @thlovey

Tree

🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @giaBaoJS

🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @QDyanbing

List

🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @nrps9909

🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @QDyanbing

🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @QDyanbing

🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @dogledogle

🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @nrps9909

🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @dogledogle

🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @QDyanbing

🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @QDyanbing

♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @nrps9909

♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @nrps9909

🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @QDyanbing

🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @QDyanbing

🐞 Fix Watermark throwing an error when content is undefined. #59077 @VamoBao

📖 Fix component LLMs links on website mirrors and local deployments. #59062 @QDyanbing

Commits

1cb3762 docs: add changelog for 6.6.2 (#59143)
fa0c357 fix(Transfer): disable select all for disabled search results (#59121)
a06ff88 fix(Select): exclude internal popup visibility callback (#59142)
bebea8a chore: upgrade deps (#59139)
e315024 fix(Upload): avoid leaving canvas after GIF preview (#59137)
d58fe29 docs(react): capitalize JavaScript in introduce.en-US.md (#59122)
5845bc8 fix(Notification): upgrade non-submitting close controls (#59126)
dc4490a fix(Grid): clear stale row alignment classes (#59066)
807f237 fix(Card, Tag, Breadcrumb, Segmented, FloatButton): render numeric zero for c...
e8fbc23 fix(Table): preserve custom header keydown events (#59078)
Additional commits viewable in compare view

Updates react-hook-form from 7.86.0 to 7.87.0

Release notes

Sourced from react-hook-form's releases.

Version 7.87.0

✨ Features
Add shouldTouch option to trigger() ([#13671](react-hook-form/react-hook-form#13671))

setValue already supported shouldTouch; trigger() now does too. This allows you to mark field(s) as touched after manual or programmatic validation, such as validate-on-mount or multi-step form navigation, without needing a setValue workaround:
// Mark a single field as touched after validating it
await trigger('firstName', { shouldTouch: true });
// Mark every mounted field as touched after validating the whole form
await trigger(undefined, { shouldTouch: true });
Add OpaqueTypes registry for opaque leaf types ([#13676](react-hook-form/react-hook-form#13676))

Recursive type helpers (Path, DeepPartial, DeepRequired, FieldErrorsImpl, etc.) previously stopped only at Primitive | BrowserNativeObject. As a result, rich third-party value types such as Dayjs and Decimal could be recursively traversed member-by-member, potentially causing TypeScript to report "Excessive complexity" diagnostics on large form types.

You can now register a type as an opaque leaf via declaration merging:
import type { Dayjs } from 'dayjs';
declare module 'react-hook-form' {
interface OpaqueTypes {
dayjs: Dayjs;
}
}
While the registry is empty, types remain identical to the existing behavior. This is purely opt-in.
🐞 Fixes

Fix inconsistent behavior among useController().field.onChange()-like APIs. ([#13673](react-hook-form/react-hook-form#13673))

Fix Controller under a null parent submitting undefined instead of a value. ([#13675](react-hook-form/react-hook-form#13675))

Fix ERR_MODULE_NOT_FOUND when resolving react-hook-form due to a react-server declaration in Next.js builds. ([#13682](react-hook-form/react-hook-form#13682))

Fix useWatch never reconciling when an Activity subtree is hidden on its first render. ([#13683](react-hook-form/react-hook-form#13683))

Fix resetField not recomputing isValid for subscribe-only consumers. ([#13684](react-hook-form/react-hook-form#13684))

Fix generateWatchOutput ignoring defaultValue for an array of names. ([#13686](react-hook-form/react-hook-form#13686))

Fix useFormState never reconciling when an Activity subtree is hidden on its first render. ([#13687](react-hook-form/react-hook-form#13687))

❤️ Thank You

Thanks to @giaBaoJS, @dfedoryshchev, @Alioth-91, @Masatoshi0227, @modosc, and @bluebill1049 for their contributions! 🎉

Changelog

Sourced from react-hook-form's changelog.

[7.87.0] - 2026-08-30

Added

shouldTouch option for trigger()

OpaqueTypes registry for opaque leaf types

Fixed

Inconsistent behavior among useController().field.onChange()-like APIs

Controller under a null parent submitting undefined instead of a value

ERR_MODULE_NOT_FOUND resolving react-hook-form due to a react-server declaration (Next.js builds)

useWatch never reconciling when an Activity subtree is hidden on its first render

resetField not recomputing isValid for subscribe-only consumers

generateWatchOutput ignoring defaultValue for an array of names

useFormState never reconciling when an Activity subtree is hidden on its first render

Commits

29af888 7.87.0
1eeab63 🐞 fix(useFormState): never reconciles when an Activity subtree is hidden on i...
145441c 🐞 fix(generateWatchOutput): defaultValue is ignored for an array of names (#1...
1fb065c 🐞 fix(resetField): isValid not recomputed for subscribe-only consumers (#13684)
2f7380e 🧹refactor: use continue instead of return in setFieldValues' hasOwnProper...
1b0a314 📖 remove comment
a457ca7 🐞 fix #13680: useWatch never reconciles when an Activity subtree is hidden on...
bb3360f 🐞 fix #13681 issue: ERR_MODULE_NOT_FOUND, Can't resolve react-hook-form due t...
f646948 🪅 feat: add OpaqueTypes registry for opaque leaf types (#13676)
e17a95c 🧇 chore: scope the lock workflow to issues so its scheduled run can finish (#...
Additional commits viewable in compare view

Updates react-router-dom from 7.18.2 to 7.18.3

Changelog

Sourced from react-router-dom's changelog.

v7.18.3

Patch Changes

Updated dependencies:

react-router@7.18.3

Commits

23166df Release v7.18.3 (#15424)
See full diff in compare view

dependabot · 2026-09-04T15:50:46Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…y with 13 updates Bumps the production-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@a2a-js/sdk](https://github.com/a2aproject/a2a-js) | `1.0.1` | `1.1.0` | | [@larksuiteoapi/node-sdk](https://github.com/larksuite/node-sdk) | `1.73.0` | `1.73.3` | | [@node-rs/argon2](https://github.com/napi-rs/node-rs) | `2.1.0` | `2.2.0` | | [@slack/socket-mode](https://github.com/slackapi/node-slack-sdk) | `3.0.0` | `3.0.1` | | [@slack/web-api](https://github.com/slackapi/node-slack-sdk) | `8.0.0` | `8.1.1` | | [hono](https://github.com/honojs/hono) | `4.13.4` | `4.13.5` | | [@ant-design/icons](https://github.com/ant-design/ant-design-icons) | `6.3.2` | `6.3.4` | | [@codemirror/state](https://github.com/codemirror/state) | `6.7.1` | `6.7.2` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.9` | `6.43.11` | | [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query) | `5.102.3` | `5.102.8` | | [antd](https://github.com/ant-design/ant-design) | `6.6.1` | `6.6.2` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.86.0` | `7.87.0` | | [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) | `7.18.2` | `7.18.3` | Updates `@a2a-js/sdk` from 1.0.1 to 1.1.0 - [Release notes](https://github.com/a2aproject/a2a-js/releases) - [Changelog](https://github.com/a2aproject/a2a-js/blob/main/CHANGELOG.md) - [Commits](a2aproject/a2a-js@v1.0.1...v1.1.0) Updates `@larksuiteoapi/node-sdk` from 1.73.0 to 1.73.3 - [Commits](https://github.com/larksuite/node-sdk/commits) Updates `@node-rs/argon2` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/napi-rs/node-rs/releases) - [Commits](https://github.com/napi-rs/node-rs/compare/@node-rs/argon2@2.1.0...@node-rs/argon2@2.2.0) Updates `@slack/socket-mode` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/socket-mode@3.0.0...@slack/socket-mode@3.0.1) Updates `@slack/web-api` from 8.0.0 to 8.1.1 - [Release notes](https://github.com/slackapi/node-slack-sdk/releases) - [Commits](https://github.com/slackapi/node-slack-sdk/compare/@slack/web-api@8.0.0...@slack/web-api@8.1.1) Updates `hono` from 4.13.4 to 4.13.5 - [Release notes](https://github.com/honojs/hono/releases) - [Commits](honojs/hono@v4.13.4...v4.13.5) Updates `@ant-design/icons` from 6.3.2 to 6.3.4 - [Commits](https://github.com/ant-design/ant-design-icons/commits) Updates `@codemirror/state` from 6.7.1 to 6.7.2 - [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/state/commits) Updates `@codemirror/view` from 6.43.9 to 6.43.11 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@tanstack/react-query` from 5.102.3 to 5.102.8 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.102.8/packages/react-query) Updates `antd` from 6.6.1 to 6.6.2 - [Release notes](https://github.com/ant-design/ant-design/releases) - [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md) - [Commits](ant-design/ant-design@6.6.1...6.6.2) Updates `react-hook-form` from 7.86.0 to 7.87.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.86.0...v7.87.0) Updates `react-router-dom` from 7.18.2 to 7.18.3 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.3/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.3/packages/react-router-dom) --- updated-dependencies: - dependency-name: "@a2a-js/sdk" dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@ant-design/icons" dependency-version: 6.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/state" dependency-version: 6.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/view" dependency-version: 6.43.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@larksuiteoapi/node-sdk" dependency-version: 1.73.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@node-rs/argon2" dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@slack/socket-mode" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@slack/web-api" dependency-version: 8.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@tanstack/react-query" dependency-version: 5.102.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: antd dependency-version: 6.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: hono dependency-version: 4.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: react-hook-form dependency-version: 7.87.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: react-router-dom dependency-version: 7.18.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

Regenerate the inventory against the updated production dependency tree so the license gate validates the versions shipped by PR #99. Validation: licenses:check failed before regeneration and passes afterward. Manual update not needed; no user-facing behavior is added.

Preserve the development dependency upgrades already merged in #101 alongside the production upgrades in #99. Regenerate the license inventory from the combined frozen lockfile to resolve the documentation conflict. Validation: frozen install and licenses:check pass. Manual update not needed.

dependabot Bot changed the title ~~build(deps): bump the production-dependencies group with 13 updates~~ build(deps): bump the production-dependencies group across 1 directory with 13 updates Sep 7, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/production-dependencies-d9f50e5534 branch from 53ccd9c to cdc17e8 Compare September 7, 2026 04:05

tatelilith added 2 commits September 7, 2026 12:45

tatelilith merged commit aca1b14 into main Sep 7, 2026
17 checks passed

tatelilith deleted the dependabot/npm_and_yarn/production-dependencies-d9f50e5534 branch September 7, 2026 04:52

Navigation Menu

Uh oh!

build(deps): bump the production-dependencies group across 1 directory with 13 updates - #99

build(deps): bump the production-dependencies group across 1 directory with 13 updates#99
tatelilith merged 3 commits into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d9f50e5534

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.1.0

1.1.0 (2026-08-26)

Features

Bug Fixes

1.1.0 (2026-08-26)

Features

Bug Fixes

@​slack/socket-mode@​3.0.1

Patch Changes

@​slack/web-api@​8.1.1

Patch Changes

@​slack/web-api@​8.1.0

Minor Changes

Patch Changes

v4.13.5

Security fixes

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

@​tanstack/react-query-devtools@​5.102.8

Patch Changes

@​tanstack/react-query-next-experimental@​5.102.8

Patch Changes

@​tanstack/react-query-persist-client@​5.102.8

Patch Changes

@​tanstack/react-query@​5.102.8

Patch Changes

@​tanstack/react-query-devtools@​5.102.7

Patch Changes

@​tanstack/react-query-next-experimental@​5.102.7

Patch Changes

@​tanstack/react-query-persist-client@​5.102.7

Patch Changes

@​tanstack/react-query@​5.102.7

Patch Changes

5.102.8

Patch Changes

5.102.7

Patch Changes

5.102.6

Patch Changes

5.102.5

Patch Changes

5.102.4

Patch Changes

6.6.2

6.6.2

Version 7.87.0

✨ Features

🐞 Fixes

❤️ Thank You

[7.87.0] - 2026-08-30

Added

Fixed

v7.18.3

Patch Changes

Uh oh!

dependabot Bot commented on behalf of github Sep 4, 2026

Labels

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

`@slack/socket-mode@3`.0.1

`@slack/web-api@8`.1.1

`@slack/web-api@8`.1.0

Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory

Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion

`@tanstack/react-query-devtools@5`.102.8

`@tanstack/react-query-next-experimental@5`.102.8

`@tanstack/react-query-persist-client@5`.102.8

`@tanstack/react-query@5`.102.8

`@tanstack/react-query-devtools@5`.102.7

`@tanstack/react-query-next-experimental@5`.102.7

`@tanstack/react-query-persist-client@5`.102.7

`@tanstack/react-query@5`.102.7