Skip to content

chore(deps)(deps): bump react-hook-form from 7.75.0 to 7.77.0 in /apps/ui#145

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/ui/react-hook-form-7.77.0
Closed

chore(deps)(deps): bump react-hook-form from 7.75.0 to 7.77.0 in /apps/ui#145
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/ui/react-hook-form-7.77.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps react-hook-form from 7.75.0 to 7.77.0.

Release notes

Sourced from react-hook-form's releases.

Version 7.77.0

🥡 feat: add resetDefaultValues API (#13427)

https://react-hook-form.com/docs/useform/resetdefaultvalues

const { resetDefaultValues } = useForm();
resetDefaultValues(currentValues);

🐚 harden get() against prototype-path traversal (proto / constructor / prototype) (#13479) 🐞 fix FieldArray errors overriding nested fields (#13476) 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#13473) 🐞 fix: preserve values with shouldUnregister (#13464) 🐞 fix stale isDirty in subscribe payload after reset(..., { keepValues: true }) (#13461) 👝 save bundle size (#13468)

thanks to @​puneetdixit200 & @​dfedoryshchev

Version 7.76.1

🐞 fix: pass options parameter through setValues to enable validation (#13457) 🐞 fix(setValues): emit whole-form change without stale name/type (#13450) 🚗 perf(setValues): thread skipClone through setFieldValue (#13448) 🚗 perf(setValues): skip redundant per-field deep clones (#13445) Revert "🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (#13388)"

thanks to @​philibea & @​maxkostow

Version v7.76.0

🪭 close #13141 improve isDirty sync with dirtyFields state (#13370) 🐞 fix isValidating reactivity when validatingFields is not subscribed (#13440) 🛺 test: fix duplicate-word typos in test descriptions (#13439) 🐞 fix #13436: errors state when using form level validation (#13437) 🐞 fix #13429 append({ obj: null }) is silently replaced by defaultValues after remove() (#13435) 🐞 fix native validation tooltip suppression caused by duplicate submit-error focus (#13432) 🐞 fix: propagate setValues updates to mounted Controller fields (#13431) 🐞 fix: rreserve reset values for conditionally mounted Controller fields with shouldUnregister 🐞 fix: useFieldArray remove leaves array with empty object when using values prop (#13422) 🐞 fix #13260: notify all matching field-array roots on nested setValue updates (#13420) 🐞 fix #13104: preserve nested resolver field-array errors in trigger() (#13419) 🐞 fix #13413: preserve formState.defaultValues when useFieldArray + watch are used together 📝 docs: fix JSDoc for IsNever, register, and getFieldState (#13410) (#13411) 🐞 fix(Watch): restore TypeScript 4 compatibility (#13409)

Big thanks to @​dfedoryshchev for multiple fixes, and to @​EduardF1, @​in-ch and @​johnstrand.

Changelog

Sourced from react-hook-form's changelog.

[7.77.0] - 2026-05-31

Added

  • resetDefaultValues API

Fixed

  • Stale isDirty in subscribe payload after reset(..., { keepValues: true })
  • Preserve values with shouldUnregister
  • Inconsistent reset({}) behavior requiring double-call to take effect
  • FieldArray errors overriding nested fields

Security

  • Harden get() against prototype-path traversal (__proto__ / constructor / prototype)

Performance

  • Bundle size reduction

[7.76.1] - 2026-05-23

Fixed

  • Revert notify all matching field-array roots on nested setValue updates
  • Revert treat NaN as empty when valueAsNumber is true in validateField
  • setValues pass options parameter through to enable validation
  • setValues emit whole-form change without stale name/type

Performance

  • setValues skip redundant per-field deep clones
  • setValues thread skipClone through setFieldValue

[7.76.0] - 2026-05-16

Added

  • Improve isDirty sync with dirtyFields state

Fixed

  • Preserve formState.defaultValues when useFieldArray and watch are used together
  • Preserve nested resolver field-array errors in trigger()
  • Notify all matching field-array roots on nested setValue updates
  • useFieldArray remove leaves array with empty object when using values prop
  • Preserve reset values for conditionally mounted Controller fields with shouldUnregister
  • Propagate setValues updates to mounted Controller fields
  • Native validation tooltip suppression caused by duplicate submit-error focus

... (truncated)

Commits
  • 5b20741 7.77.0
  • f1a02d3 🧪 add regression coverage for createFormControl + useController remount defau...
  • ba88c3d 📚 docs: fix JSDoc for UseFormWatch (#13486)
  • 54198d9 🥡 feat: add resetDefaultValues API (#13427)
  • fe8276e 📚 docs: fix duplicate "de" in es-ES README image alt text (#13481)
  • 6aa81f9 🐚 harden get() against prototype-path traversal (__proto__ / `constructor...
  • 645478b 🐞 fix FieldArray errors overriding nested fields (#13476)
  • 889c752 🧪 add regression coverage for dynamic nested names with useController and wat...
  • 581321c 🐞 fix inconsistent reset({}) behavior requiring double-call to take effect (#...
  • f8eb2d7 🌭 upgrade deps (#13470)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [react-hook-form](https://github.com/react-hook-form/react-hook-form) from 7.75.0 to 7.77.0.
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.75.0...v7.77.0)

---
updated-dependencies:
- dependency-name: react-hook-form
  dependency-version: 7.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 8, 2026
@dependabot dependabot Bot requested a review from agjs as a code owner June 8, 2026 07:14
agjs added a commit that referenced this pull request Jun 9, 2026
* chore(deps): bump GitHub Actions pins (checkout, codecov, changesets)

- actions/checkout 6.0.2 -> 6.0.3 (23 workflows)
- codecov/codecov-action 6.0.1 -> 7.0.0 (api-ci, ui-validate)
- changesets/action 1.8.0 -> 1.9.0 (release workflows)

Consolidates dependabot PRs #128, #129, #140.

* chore(deps): bump apps/api dependencies

- @anthropic-ai/sdk 0.98.0 -> 0.100.1, openai 6.39.0 -> 6.39.1 (#148)
- @sentry/bun 10.53.1 -> 10.55.0 (#144)
- bullmq 5.77.3 -> 5.77.6 (#134, ioredis held back below)
- nodemailer 8.0.8 -> 8.0.10 (#138)
- stripe 22.1.1 -> 22.2.0 (#136)
- eslint 10.4.0 -> 10.4.1, eslint-plugin-prettier 5.5.5 -> 5.5.6 (#141)
- @boring-stack-pkg/eslint-plugin-jwt-cookies 0.1.1 -> 0.1.2 (#150)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#149)

ioredis intentionally kept at 5.10.1 (not bumped to 5.11.0 from #134's
group): bullmq@5.77.6 pins ioredis to an exact 5.10.1, so a top-level
5.11.0 cannot dedupe and the two copies' connector types are structurally
incompatible (TS2769). Defer ioredis until bullmq updates its pin.

* chore(deps): bump apps/ui dependencies

- @sentry/react 10.53.1 -> 10.55.0 (#142)
- react-hook-form 7.75.0 -> 7.77.0 (#145)
- react-router-dom 7.15.1 -> 7.16.0 (#130)
- lucide-react 1.16.0 -> 1.17.0 (#133)
- lint-staged 17.0.5 -> 17.0.7 (#147)
- tsx 4.22.3 -> 4.22.4 (#146)
- @eslint/json 1.2.0 -> 2.0.0, eslint 10.4.0 -> 10.4.1, eslint-import-resolver-typescript 4.4.4 -> 4.4.5 (#139)
- @boring-stack-pkg/eslint-plugin-module-boundaries 0.1.1 -> 0.1.2 (#143)

Consolidates dependabot PRs #130, #133, #139, #142, #143, #145, #146, #147.

* chore(deps): bump apps/docs dependencies + pin @astrojs/markdown-remark

- astro 6.3.7 -> 6.4.2 (#132)
- @astrojs/react 5.0.5 -> 5.0.6 (#135)
- @astrojs/sitemap 3.7.2 -> 3.7.3 (#131)
- wrangler 4.94.0 -> 4.95.0 (#137)

Adds an @astrojs/markdown-remark@7.2.0 override: astro 6.4.2 pins that
exact version (only it exposes the `unified` subpath export the prerender
runtime imports), but Starlight pulls 7.1.x transitively; without the pin
the hoisted 7.1.x copy shadows astro's nested 7.2.0 and `astro build`
fails. Rationale documented in the //overrides block.

Consolidates dependabot PRs #131, #132, #135, #137.
@agjs

agjs commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

Superseded by #151, which consolidated all open Dependabot bumps and landed in main. Closing.

@dependabot close

@agjs agjs closed this Jun 9, 2026
@agjs agjs deleted the dependabot/bun/apps/ui/react-hook-form-7.77.0 branch June 9, 2026 12:46
@dependabot @github

dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant