deps: bump the desktop-minor-and-patch group across 1 directory with 22 updates

[dependabot]

Bumps the desktop-minor-and-patch group with 22 updates in the / directory:

Package	From	To
@tanstack/react-query	5.101.4	5.104.0
input-otp	1.4.2	1.5.0
jose	6.2.5	6.2.12
react-hook-form	7.83.0	7.89.0
react-router-dom	7.18.2	7.18.4
sonner	2.0.7	2.0.8
tailwind-merge	3.6.0	3.7.0
uuid	14.0.1	14.0.2
@playwright/test	1.62.1	1.63.0
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.7
@types/node	26.1.2	26.6.4
@vitejs/plugin-react	6.0.5	6.1.1
@vitest/coverage-v8	4.1.10	4.1.11
autoprefixer	10.5.4	10.6.1
baseline-browser-mapping	2.11.8	2.11.27
eslint-plugin-react-refresh	0.5.3	0.5.7
globals	17.8.0	17.13.0
postcss	8.5.25	8.5.28
vite	8.2.0	8.3.2
vitest	4.1.10	4.1.11
wait-on	9.1.0	9.5.1

Updates @tanstack/react-query from 5.101.4 to 5.104.0

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-devtools@​5.104.0
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-next-experimental@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0

@​tanstack/react-query-persist-client@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/react-query@​5.104.0
  • @​tanstack/query-persist-client-core@​5.104.0

@​tanstack/react-query@​5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-core@​5.104.0

@​tanstack/react-query-devtools@​5.103.3

Patch Changes

• Updated dependencies [1c9693e, d86ac36]:
  • @​tanstack/react-query@​5.103.3
  • @​tanstack/query-devtools@​5.103.3

@​tanstack/react-query-next-experimental@​5.103.3

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.104.0

Minor Changes

• #11650 5279b05 - Build projects with Vite 8

Patch Changes

• Updated dependencies [5279b05]:
  • @​tanstack/query-core@​5.104.0

5.103.3

Patch Changes

• #11647 1c9693e - fix(codemods): avoid copying unnecessary files from codemods project
• Updated dependencies []:
  • @​tanstack/query-core@​5.103.3

5.103.2

Patch Changes

• Updated dependencies [8a28904]:
  • @​tanstack/query-core@​5.103.2

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

... (truncated)

Commits

• d4033eb ci: Version Packages (#11651)
• 5279b05 chore(deps): update Vite from v6 to v8 (#11650)
• fe053bf ci: Version Packages (#11612)
• 1c9693e fix(codemods): update codemods build script (#11647)
• f00aad6 chore(deps): update dev dependencies (#11640)
• 2443290 test(*): rename 'console.error' spies to 'consoleErrorMock' (#11646)
• fcab29f test({query-core,react-query,preact-query}): restore the previous 'isServer' ...
• e8dacbe docs({react-query,preact-query,solid-query,svelte-query}/README): point the C...
• 57f40eb chore(deps): update non-major dependencies (#11625)
• 397ad07 test({query-core,react-query,preact-query,solid-query}): pass 'unhandledRejec...
• Additional commits viewable in compare view

Updates input-otp from 1.4.2 to 1.5.0

Release notes

Sourced from input-otp's releases.

v1.5.0

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

• fix(input): reserve the password manager badge gutter only where it fits
• fix(input): disable spellcheck by default
• fix(input): feature-detect ResizeObserver before observing
• fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
• fix(input): clear pending synchronization timeouts on unmount
• feat(input): add a nonce prop for Content-Security-Policy support
• fix(input): guard the input reference used by the selectionchange listener
• fix(input): opt the container out of browser translation
• fix(input): report cosmetic CSS rule failures as warnings instead of errors
• docs: document the stable iOS selection behavior and its cosmetic limitation

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

• revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
• revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
• docs: align the mobile and edge-case documentation with the stable candidate
• test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

• fix(input): reserve the password manager badge gutter only where it fits
  • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
• fix(input): disable spellcheck by default
  • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
• fix(input): feature-detect ResizeObserver before observing
  • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
• fix(input): fall back to 16px font-size until --root-height resolves
  • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
• fix(input): clear pending sync timeouts on unmount
  • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
• feat(input): add nonce prop
  • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
• fix(input): use the guarded input reference inside the selectionchange listener
  • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
• fix(input): opt the container out of browser translation
  • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries translate="no"; a one-time code is never meaningful to translate.
• fix(input): log CSS rule insertion failures as warnings, not errors
  • Some environments reject individual cosmetic selectors (:autofill in older Android WebViews, for instance). Nothing breaks when that happens, but the console.error was captured by Sentry and similar tools as if the application had failed. Same message, warning level.
• chore(types): narrow onComplete to (value: string) => unknown

... (truncated)

Changelog

Sourced from input-otp's changelog.

[1.5.0]

Promotes the safe 1.5.0-beta.2 code without functional changes. Everything in this release is backwards-compatible: no public type changes and no behavior changes beyond the bug fixes below. Two beta.1 experiments are deliberately excluded — the iOS native-selection workaround (the thin native selection artifact remains a known cosmetic limitation) and the onComplete type narrowing, which returns in 2.0.0 as a documented breaking change.

• fix(input): reserve the password manager badge gutter only where it fits
• fix(input): disable spellcheck by default
• fix(input): feature-detect ResizeObserver before observing
• fix(input): use a 16px fallback until --root-height resolves, preventing iOS focus zoom
• fix(input): clear pending synchronization timeouts on unmount
• feat(input): add a nonce prop for Content-Security-Policy support
• fix(input): guard the input reference used by the selectionchange listener
• fix(input): opt the container out of browser translation
• fix(input): report cosmetic CSS rule failures as warnings instead of errors
• docs: document the stable iOS selection behavior and its cosmetic limitation

[1.5.0-beta.2]

Safe release candidate for 1.5.0. This release withdraws the experimental iOS native-selection workaround from 1.5.0-beta.1 after compatibility review. The edit menu, paste, typing, selection and focus behavior return to the proven 1.4.x implementation; the thin native selection artifact remains a known iOS limitation.

It also withdraws the onComplete type narrowing from 1.5.0-beta.1. Although type-level only, it can fail compilation of existing handlers typed with extra or non-string parameters (a common example is passing react-hook-form's handleSubmit(onSubmit) directly), which makes it a breaking change under semver. It will return in 2.0.0 with a documented migration path.

• revert(input): withdraw the experimental iOS native-selection workaround from 1.5.0-beta.1
• revert(types): withdraw the onComplete narrowing from 1.5.0-beta.1, deferring it to 2.0.0
• docs: align the mobile and edge-case documentation with the stable candidate
• test: verify focus, typing, editing, deletion, paste, Select All → Paste and the native edit menu on iOS 18.0 and 26.5 simulators

[1.5.0-beta.1]

Deprecated experimental release. It introduced an iOS native-selection workaround that moved and scaled the underlying input, and narrowed the onComplete type in a way that can break compilation of existing apps. Both were withdrawn in 1.5.0-beta.2 and are not planned for 1.5.0 stable. Existing installs remain reproducible, but new beta users should use 1.5.0-beta.2 or later.

[1.5.0-beta.0]

Prepared but not published. Its safe changes are included in 1.5.0-beta.2.

• fix(input): reserve the password manager badge gutter only where it fits
  • Once a badge was detected, the input grew 40px past the container to push the badge off the last slot — and the only guard was the distance to the viewport's right edge. Inside a constrained scroll container (a card, a modal) that overhang registered as scrollable overflow: a horizontal scrollbar appeared and shifted the whole layout. The space check now measures the nearest ancestor that constrains horizontal overflow (scroll containers, overflow: hidden/clip ancestors, the container itself, and the real viewport width) and skips the push when the gutter doesn't fit; the badge then stays over the last slot, exactly as with pushPasswordManagerStrategy="none". Nothing is ever clipped, so extensions keep rendering their badges.
• fix(input): disable spellcheck by default
  • Browsers would mark a filled code as a spelling error and underline it. spellCheck now defaults to false; passing your own spellCheck prop still overrides it.
• fix(input): feature-detect ResizeObserver before observing
  • Browsers without ResizeObserver (e.g. iOS Safari <13.4) crashed on mount. When the observer is unavailable, the root height is now simply measured once on mount.
• fix(input): fall back to 16px font-size until --root-height resolves
  • Before the variable is set, the invisible input inherited its font-size — and when that inherited size was under 16px, iOS Safari zoomed the whole page on focus or back-navigation.
• fix(input): clear pending sync timeouts on unmount
  • The autofill/selection sync timeouts could fire after unmount, causing state updates on an unmounted component — noisy act() warnings and flaky CI test runs.
• feat(input): add nonce prop
  • Applied to the <style> tag the library injects, so a style-src Content-Security-Policy that requires nonces no longer blocks it.
• fix(input): use the guarded input reference inside the selectionchange listener
  • Fixes a null is not an object (evaluating 'setSelectionRange') crash when the listener fired while the ref was already null.
• fix(input): opt the container out of browser translation
  • Chrome's translator rewrote the slots' text nodes (wrapping them in <font> elements), crashing React on the next re-render — easiest to hit with alphanumeric codes under an active page translation. The container now carries translate="no"; a one-time code is never meaningful to translate.

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for input-otp since your current version.

Updates jose from 6.2.5 to 6.2.12

Release notes

Sourced from jose's releases.

v6.2.12

Documentation

• clarify and shorten public API guidance (be62530)

Refactor

• simplify JWS and JWE operation cores (92e9640)

Performance

• avoid copying AES-GCM output (6925d43)
• deduplicate pending jwks key imports (bf5138b)
• encode single-signature JWS input once (7bc9a33)
• normalize General JWE shared headers once (78637bd)
• normalize jwks selection metadata once (fd3ae3f)
• use native encoding for larger ASCII strings (b23a6f3)

v6.2.11

Documentation

• render subpath indexes as tables (94589ee)
• shorten API index descriptions (681482f)

Refactor

• model JWE key management modes (e01dda6)
• types: reduce declaration repetition (55b970f)

v6.2.10

Fixes

• jose: consume serialization members once (9bee285)
• jose: reject empty protected and JWE AAD members (8da4145)
• jose: validate serialized header values (b711d8f)
• jwe: conceal invalid decrypted CEK lengths (41fafe0)
• jwe: enforce AES-GCM tag boundaries (9a5b744)
• jwe: validate explicit encryption parameters (7a02697)
• jwk: accept empty octet-sequence keys (3f871e7)
• jwk: normalize key resolution inputs (f54ee7b)
• jwks: enforce verification key metadata (f9ba510)
• jwks: order overlapping remote reloads (9a1a913)
• jwks: reject invalid remote duration values (7bdb9e5)
• jwk: validate ext and key_ops parameters (4d91c37)
• jws: reject mixed payload encoding modes (dc69713)
• jws: validate unencoded payload strings (541f282)
• jwt: enforce explicit verification policies (b347182)
• jwt: prevent replacing protected headers (ae07d09)
• jwt: reject invalid duration inputs (282f9aa)
• jwt: validate builder claim values (ea03f83)

... (truncated)

Changelog

Sourced from jose's changelog.

6.2.12 (2026-09-05)

Documentation

• clarify and shorten public API guidance (be62530)

Refactor

• simplify JWS and JWE operation cores (92e9640)

Performance

• avoid copying AES-GCM output (6925d43)
• deduplicate pending jwks key imports (bf5138b)
• encode single-signature JWS input once (7bc9a33)
• normalize General JWE shared headers once (78637bd)
• normalize jwks selection metadata once (fd3ae3f)
• use native encoding for larger ASCII strings (b23a6f3)

6.2.11 (2026-09-04)

Documentation

• render subpath indexes as tables (94589ee)
• shorten API index descriptions (681482f)

Refactor

• model JWE key management modes (e01dda6)
• types: reduce declaration repetition (55b970f)

6.2.10 (2026-08-21)

Fixes

• jose: consume serialization members once (9bee285)
• jose: reject empty protected and JWE AAD members (8da4145)
• jose: validate serialized header values (b711d8f)
• jwe: conceal invalid decrypted CEK lengths (41fafe0)
• jwe: enforce AES-GCM tag boundaries (9a5b744)
• jwe: validate explicit encryption parameters (7a02697)
• jwk: accept empty octet-sequence keys (3f871e7)
• jwk: normalize key resolution inputs (f54ee7b)
• jwks: enforce verification key metadata (f9ba510)
• jwks: order overlapping remote reloads (9a1a913)
• jwks: reject invalid remote duration values (7bdb9e5)
• jwk: validate ext and key_ops parameters (4d91c37)
• jws: reject mixed payload encoding modes (dc69713)
• jws: validate unencoded payload strings (541f282)
• jwt: enforce explicit verification policies (b347182)

... (truncated)

Commits

• 505a55b chore(release): 6.2.12
• 7bc9a33 perf: encode single-signature JWS input once
• 78637bd perf: normalize General JWE shared headers once
• bf5138b perf: deduplicate pending jwks key imports
• b23a6f3 perf: use native encoding for larger ASCII strings
• fd3ae3f perf: normalize jwks selection metadata once
• 6925d43 perf: avoid copying AES-GCM output
• be62530 docs: clarify and shorten public API guidance
• 1b41312 build: preserve README when generation fails
• 0b51829 build: check tree-shaking for every public binding
• Additional commits viewable in compare view

Updates react-hook-form from 7.83.0 to 7.89.0

Release notes

Sourced from react-hook-form's releases.

Version 7.89.0

🐞 Fixes

• Fix form state select option (#13784)
• Remove duplicate default value field (#13783)
• Fix validateField skipping refs without setCustomValidity under native validation (#13782)
• Fix form-level validation using a stale validate function (#13777)
• Fix useFieldArray touched fields handling (#13776)
• Fix pending delayError timers for nested paths (#13775)
• Fix getValues extracting unmarked field array entries (#13773)
• Fix field array touched state not being re-indexed when unsubscribed (#13772)
• Fix nested delayError timers remaining when a parent validates clean (#13771)
• Fix nested delayError timers remaining after resetField() resets a parent (#13769)
• Fix stale field array root errors after an operation satisfies the validation rule (#13767)
• Fix setValue() not revalidating dependencies when shouldValidate is enabled (#13765)
• Fix stale built-in validation results after reset() during handleSubmit() (#13761)
• Fix stale form-level validation results after reset() (#13762)
• Fix validation rules removed from register options at runtime remaining active (#13758)
• Fix useController required validation not using the controlled value (#13756)
• Fix stale form-level errors remaining after successful re-validation (#13755)
• Fix useFieldArray marking the form dirty when the array default value is null (#13750)
• Fix isValid not being recomputed when the errors prop is emptied (#13748)
• Fix form-level validation running more than once per traversal (#13747)
• Fix stale built-in validation results after reset() during onChange (#13745)
• Fix stale resolver results after reset() during onChange (#13744)
• Fix setValue() not triggering field array root validation when shouldValidate is enabled (#13743)
• Fix getFieldState(name, formState) updates after reset() (#13741)
• Fix dirty state remaining for rows removed from a field array (#13739)

🧹 Refactors

• Replace rimraf cleanup with fs.rmSync (#13770)
• Reduce bundle size (#13759)

📦 Dependencies

• Add optional @types/react peer dependency (#13781)

❤️ Thank You

• Thanks to @​niketchandivade, @​unrevised6419, @​Lucasfarg, @​dfedoryshchev, @​locphamnice, @​Abdalluh28, @​giaBaoJS, @​Mohamedshawky4, @​roli-lpci, @​soroush5, @​zigzagdev and @​bluebill1049 for their contributions! 🎉

Version 7.88.0

✨ Features

• Add Error Message component (#13472)
• Add the Error Message component for displaying validation errors from React Hook Form.

🐞 Fixes

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.89.0] - 2026-09-26

Changed

• Add optional @types/react peer dependency

Fixed

• validateField calling setCustomValidity on refs that don't implement it under native validation
• Form-level validate running a stale function instead of the latest one
• Form-level validation leaving stale errors after a successful re-validation
• Form-level validation running more than once per traversal
• Stale validation results (resolver, built-in, form-level validate) being applied after reset in onChange and handleSubmit
• Pending delayError timers for nested paths not being cancelled when a parent validates clean or is reset via resetField
• getValues(names, { dirtyFields }) returning every row of a field array instead of only the marked entries
• Field array touched state not being re-indexed when touchedFields is not subscribed
• useFieldArray emitting touchedFields in form state updates when unnecessary
• Stale field array root error not clearing once an array operation satisfies the rule
• useFieldArray marking the form dirty when the array default is null
• Dirty state lingering for rows removed from a field array
• setValue with shouldValidate not revalidating deps
• setValue with shouldValidate not triggering validation for a field array root
• Validation rules removed from register options at runtime still being applied
• useController validating required against the input value instead of the controlled value
• isValid not recomputing when the errors prop is emptied
• getFieldState(name, formState) with a resolver after reset()

[7.88.0] - 2026-09-12

Added

• <ErrorMessage /> component for rendering a field's validation error

Fixed

• setValue dirty state comparison ignoring valueAs* / setValueAs transforms
• Nested delayError timers not being cancelled when a parent is cleared or unregistered
• Cleared delayError errors coming back once the pending timer fires
• criteriaMode not refreshing when form options are updated at runtime
• resetField leaving stale validating state for the field
• reset not clearing isValidating and validatingFields, and ignoring keepIsValidating
• replace() leaving errors and touched state for removed rows
• remove() leaking deleted values onto surviving items
• handleSubmit applying a stale resolver result after reset
• handleSubmit dropping resolver-reported root errors on submit
• Stale resolver state updates being applied after reset
• trigger dropping registered nested errors when targeting their parent
• trigger setting a parent error when the target has only nested resolver errors
• useWatch compute cache not being initialized with the initial output
• flatten / jsonToFormData not preserving FileList and not skipping undefined

... (truncated)

Commits

• 4722d22 7.89.0
• 72a4c98 👟 chore: correct form state select option (#13784)
• 14c7bec 🕵🏻‍♂️ chore: remove duplicate default value field (#13783)
• d9cab62 🤖 chore: add optional @​types/react peer dependency (#13781)
• c12546c 🐞 fix(validateField): skip refs without setCustomValidity under native valida...
• 5fd9ef6 🐞 fix(validate): run the latest form level validate function (#13777)
• 7893230 🐞 fix(useFieldArray): improve touched fields handling and add tests (#13776)
• ad8abf6 🐴 cancel pending delayError timers for nested paths (#13775)
• eb159da 🐞 fix(getValues): extract only the marked entries of a field array (#13773)
• 4647014 🐞 fix: re-index field array touched state when it is not subscribed (#13772)
• Additional commits viewable in compare view

Updates react-router-dom from 7.18.2 to 7.18.4

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

• Updated dependencies:
  • react-router@7.18.4

v7.18.3

Patch Changes

• Updated dependencies:
  • react-router@7.18.3

Commits

• 1b1e0b0 Release v7.18.4 (#15498)
• 23166df Release v7.18.3 (#15424)
• See full diff in compare view

Updates sonner from 2.0.7 to 2.0.8

Release notes

Sourced from sonner's releases.

v2.0.8

What's Changed

• Added support for custom aria labels by @​hirotomoyamada in emilkowalski/sonner#704
• Fixed handling when hotkey is an empty array by @​hirotomoyamada in emilkowalski/sonner#703
• fix: keep the toaster as top layer when react-aria modal is open by @​sadeghbarati in emilkowalski/sonner#699
• fix: format by @​WuMingDao in emilkowalski/sonner#707
• fix: add missing safari prefix by @​emilkowalski in emilkowalski/sonner#710
• Fix event listener removal in hooks.tsx by @​VishwaGauravIn in emilkowalski/sonner#711
• Fix dismiss for custom toast by @​reegodev in emilkowalski/sonner#717
• Use variables in close button colors instead of hardcoded values by @​faroukfaiz10 in emilkowalski/sonner#726
• Fix a batch of reported issues by @​emilkowalski in emilkowalski/sonner#777

New Contributors

• @​hirotomoyamada made their first contribution in emilkowalski/sonner#704
• @​sadeghbarati made their first contribution in emilkowalski/sonner#699
• @​WuMingDao made their first contribution in emilkowalski/sonner#707
• @​VishwaGauravIn made their first contribution in emilkowalski/sonner#711
• @​reegodev made their first contribution in emilkowalski/sonner#717
• @​faroukfaiz10 made their first contribution in emilkowalski/sonner#726

Full Changelog: emilkowalski/sonner@v2.0.7...v2.0.8

Commits

• 6739aca v2.0.8
• ecce184 Fix a batch of reported issues (#777)
• 45d8940 Use variables in close button colors instead of hardcoded values (#726)
• fe51da1 Fix dismiss for custom toast (#717)
• c2d6990 fix: event listener removal in hooks.tsx (#711)
• 5caadb1 Add safari prefix (#710)
• ea3410f fix: format (#707)
• a685ffc fix: keep the toaster as top layer when react-aria modal is open (#699)
• 7760223 fix(index.tsx): ensure hotkey array is not empty before checking (#703)
• 8c0ce1e feat(toaster): add support for custom aria labels (#704)
• See full diff in compare view

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

• Prepare some upcoming changes by @​dcastil in dcastil/tailwind-merge#713
  • Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.
  • Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

• Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @​ddussi in dcastil/tailwind-merge#712
• Fix bare bg-conic not merging with other background image classes by @​dcastil in dcastil/tailwind-merge#708
• Fix columns-auto not conflicting with other columns classes by @​dcastil in dcastil/tailwind-merge#707
• Fix container sizes like inline-2xl not merging by @​dcastil in dcastil/tailwind-merge#706
• Fix max-h-none missing in max-h class group by @​mutewinter in dcastil/tailwind-merge#704
• Fix axis shorthands like px not overriding logical sides like ps by @​dcastil in dcastil/tailwind-merge#705
• Fix leading-none being removed when the leading theme scale is overridden by @​chatman-media in dcastil/tailwind-merge#689
• Fix deprecated shadow-inner being classified as shadow color instead of shadow by @​dcastil in dcastil/tailwind-merge#703

Documentation

• Add Deno to install instructions by @​bartlomieju in dcastil/tailwind-merge#687
• Add missing text-shadow theme key to configuration docs by @​dcastil in dcastil/tailwind-merge@3e6d208

Other

• Switch package manager from yarn to pnpm by @​dcastil in dcastil/tailwind-merge#680
• Harden CI security by @​dcastil in dcastil/tailwind-merge#679

Full Changelog: v3.6.0...v3.7.0

Thanks to @​brandonmcconnell, @​manavm1990, @​langy, @​roboflow, @​syntaxfm, @​getsentry, @​codecov, a private sponsor, @​openclaw, @​sourcegraph, @​cesarvcanal, @​CasperKristiansson, @​jbisasky, @​frontendmasters and more via @​thnxdev for sponsoring tailwind-merge! ❤️

Commits

• 511d68a tailwind-merge@3.7.0
• 2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
• 9d41508 add changelog for tailwind-merge@3.7.0
• c78a80f Configurator: Reuse runtime lookups during pruning
• 49c317d Monorepo: Fix contributing link and include package coverage
• 7b565ca Configurator: prune a generated config to a project's used classes (core step)

[strix-security]

Strix is installed on this repository, but we couldn't run this PR security review because this workspace's trial has ended. Add a card to resume code reviews here.