build(deps): bump the js-minor-patch group in /config-ui with 21 updates

[dependabot]

Bumps the js-minor-patch group in /config-ui with 21 updates:

Package	From	To
@ant-design/icons	6.3.2	6.3.4
antd	6.6.0	6.6.2
axios	1.18.1	1.20.0
cron-parser	5.8.1	5.10.0
dayjs	1.11.21	1.11.23
react	19.2.7	19.2.8
@types/react	19.2.17	19.2.18
react-dom	19.2.7	19.2.8
@types/react-dom	19.2.3	19.2.7
react-is	19.2.7	19.2.8
react-medium-image-zoom	5.4.8	5.4.9
react-router-dom	7.18.2	7.18.3
styled-components	6.5.1	6.5.3
@testing-library/react	16.3.2	16.3.3
@types/lodash	4.17.24	4.17.25
@vitejs/plugin-react	6.0.3	6.1.1
eslint	10.8.1	10.9.1
globals	17.7.0	17.12.0
lint-staged	17.0.8	17.4.1
typescript-eslint	8.62.0	8.69.0
vite	8.2.1	8.2.2

Updates @ant-design/icons from 6.3.2 to 6.3.4

Commits

• See full diff in compare view

Updates antd from 6.6.0 to 6.6.2

Release notes

Sourced from antd's releases.

6.6.2

• ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
• 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
• Menu
  • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
  • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
  • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
  • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
• Table
  • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
  • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
• Tree
  • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
  • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
• List
  • 🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @​nrps9909
  • 🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @​QDyanbing
• 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
• 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
• 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
• 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
• 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
• 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
• ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
• ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
• 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
• 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
• 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
• 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

---

• ♿ 优化 Progress、Steps 和 Tooltip 的无障碍体验，避免进度条 SVG 被重复朗读，确保键盘激活 Steps 项目时触发 onClick，并保留 Tooltip 已有的 aria-describedby 关联。#59139 @​github-actions
• 🐞 修复 Alert、Empty、Card、Tag、Breadcrumb、Segmented、FloatButton、Form.Item 和 Statistic 无法正确渲染数值 0 内容的问题。#59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 修复 Alert 全局 closable、Select 和 AutoComplete 的 onPopupVisibleChange 类型定义错误暴露不支持回调或属性的问题。#59100 #59142 @​QDyanbing
• Menu
  • ⌨️ 修复多个 Menu 实例之间弹层 ID 重复的问题。#59048 @​zombieJ
  • 🐞 修复 Menu 横向模式下鼠标从菜单项移向子菜单弹层时子菜单意外关闭的问题。#59088 @​EmilyyyLiu
  • 🐞 修复 Menu 内联菜单收缩完成后图标仍继续位移的问题。#59085 @​QDyanbing
• Transfer
  • 🐞 修复 Transfer 搜索结果全部为禁用项时“全选”复选框仍可用的问题。#59121 @​QDyanbing
  • 🐞 修复 Transfer 从空过滤结果恢复数据后不显示列表项的问题。#59074 @​biubiukam
• Table
  • 🐞 修复 Table 可排序列不触发非 Enter 键自定义 onKeyDown 回调的问题。#59078 @​QDyanbing
  • 🐞 修复 Table 关闭内置筛选面板时重复触发 filterDropdownProps.onOpenChange(false) 的问题。#59023 @​thlovey
• Tree
  • 🐞 修复 Tree.DirectoryTree 的 expandedKeys 或 selectedKeys 显式传入 undefined 时无法展开或选择的问题。#59076 @​giaBaoJS
  • 🐞 修复 Tree.DirectoryTree 从 key 为数值 0 的节点开始时 Shift 范围选择失效的问题。#59029 @​QDyanbing
• List

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.2

2026-08-28

• ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
• 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
• Menu
  • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
  • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
  • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
  • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
• Table
  • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
  • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
• Tree
  • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
  • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
• List
  • 🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @​nrps9909
  • 🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @​QDyanbing
• 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
• 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
• 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
• 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
• 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
• 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
• ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
• ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
• 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
• 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
• 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
• 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

6.6.1

2026-08-17

• ♿ Improve localized accessible names for Upload actions and Modal and Notification close buttons. #58953 #58957 @​nrps9909
• 🌐 Improve Traditional Chinese terminology across localized components and use Taiwan-preferred week wording in DatePicker. #58947 #58951 @​nrps9909
• 🐞 Fix Upload dropping newly added files when async onRemove resolves. #58814 @​afc163
• 🐞 Fix Anchor triggering duplicate onChange callbacks on scroll when using getCurrentAnchor. #58834 @​nikzanda
• Form
  • 🐞 Fix Form height fluctuation during rapid validation state changes. #59008 @​waterWang
  • 🐞 Fix Form vertical layout labelCol.offset being overridden by label margins. #58981 @​nikzanda
  • ♿ Improve Form complex-control guidance so labels can be explicitly associated with nested controls. #59001 @​nrps9909
  • 📝 Correct Form.Item required documentation to clarify that validation rules infer the required state when unset. #58989 @​QDyanbing
• Listy

... (truncated)

Commits

• 1cb3762 docs: add changelog for 6.6.2 (#59143)
• fa0c357 fix(Transfer): disable select all for disabled search results (#59121)
• a06ff88 fix(Select): exclude internal popup visibility callback (#59142)
• bebea8a chore: upgrade deps (#59139)
• e315024 fix(Upload): avoid leaving canvas after GIF preview (#59137)
• d58fe29 docs(react): capitalize JavaScript in introduce.en-US.md (#59122)
• 5845bc8 fix(Notification): upgrade non-submitting close controls (#59126)
• dc4490a fix(Grid): clear stale row alignment classes (#59066)
• 807f237 fix(Card, Tag, Breadcrumb, Segmented, FloatButton): render numeric zero for c...
• e8fbc23 fix(Table): preserve custom header keydown events (#59078)
• Additional commits viewable in compare view

Updates axios from 1.18.1 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

• HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

• Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

• Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
• Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
• XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
• Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
• Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

• Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
• Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
• Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
• CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​yens1 (#11109)
• @​Sasireddy001 (#11113)
• @​ari-token-security (#11094)
• @​timothyokooboh (#11097)
• @​gi9439041-png (#11119)
• @​Hashim1999164 (#11082)
• @​v-dev-cl (#11091)
• @​r0h1tb (#11118)
• @​ostapondo (#11121)

Full Changelog (axios/axios@v1.19.0...v1.20.0)

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

• Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

• Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

• Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
• Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
• HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

• Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

• Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

• Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

• Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

• URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

• Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

• Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

• Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

• Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

• Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Zizmor. (#11031, #11055, #11056, #11058, #11079, #11080, #11088, #11089, #11090)
• Build Outputs: Limited sourcemap generation to published minified bundles, removing broken map references from non-minified builds. (#11054)
• Form Data Internals: Centralized FormData header handling and made the Node.js adapter tolerate getHeaders() returning undefined under the content-only policy. (#11062)
• Developer Experience: Ignored common local AI-tooling directories and fixed a constant-reassignment crash when the development sandbox serves its root path. (#11032, #11073)
• Documentation: Updated sponsor information, clarified that baseURL is not a path-security boundary, scoped provenance claims to attested releases, and corrected the configuration-defaults documentation. (#11041, #11068, #11076, #11078)
• Publishing: Simplified v1 publishing to use the npm version bundled with Node.js 26 and updated package metadata for the 1.19.0 release. (#11083, #11095)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve Axios:

• @​afonsojramos (#11028)
• @​MahinAnowar (#11006)
• @​yassertawfik4 (#11024)
• @​AnandSundar (#11029)
• @​lin-hongkuan (#11035)
• @​Wali007-lab (#11054)
• @​magicdawn (#11043)

... (truncated)

Commits

• 84a9f3b chore(release): prepare release 1.20.0 (#11152)
• e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
• d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
• 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
• d19040b fix: harden runtime option handling (#11141)
• e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
• d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
• 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
• 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
• ba98559 docs: add ScrapingBee sponsor (#11137)
• Additional commits viewable in compare view

Updates cron-parser from 5.8.1 to 5.10.0

Release notes

Sourced from cron-parser's releases.

v5.10.0

What's Changed

• fix: pad short expressions from the leading field slot by @​harrisiirak in harrisiirak/cron-parser#443

Full Changelog: harrisiirak/cron-parser@v5.9.0...v5.10.0

v5.9.0

What's Changed

• fix: keep explicit range bounds when stringifying stepped fields (#279) by @​harrisiirak in harrisiirak/cron-parser#440
• fix: compensate DST transitions wider than one hour by @​aniket-3001 in harrisiirak/cron-parser#435
• fix: keep a hashed step wider than its range from emptying the field by @​Jaybhade in harrisiirak/cron-parser#437

New Contributors

• @​aniket-3001 made their first contribution in harrisiirak/cron-parser#435
• @​Jaybhade made their first contribution in harrisiirak/cron-parser#437

Full Changelog: harrisiirak/cron-parser@v5.8.1...v5.9.0

Changelog

Sourced from cron-parser's changelog.

v5.10.0 - 2026-08-14

What's Changed

• fix: pad short expressions from the leading field slot by @​harrisiirak in harrisiirak/cron-parser#443

Full Changelog: harrisiirak/cron-parser@v5.9.0...v5.10.0

v5.9.0 - 2026-08-13

What's Changed

• fix: keep explicit range bounds when stringifying stepped fields (#279) by @​harrisiirak in harrisiirak/cron-parser#440
• fix: compensate DST transitions wider than one hour by @​aniket-3001 in harrisiirak/cron-parser#435
• fix: keep a hashed step wider than its range from emptying the field by @​Jaybhade in harrisiirak/cron-parser#437

New Contributors

• @​aniket-3001 made their first contribution in harrisiirak/cron-parser#435
• @​Jaybhade made their first contribution in harrisiirak/cron-parser#437

Full Changelog: harrisiirak/cron-parser@v5.8.1...v5.9.0

Commits

• 609feef chore: bump version
• 0bf36c8 fix: pad short expressions from the leading field slot (#443)
• 85f3644 fix: anchor the worktree ignore patterns to the project root
• c138f2d ci: comment on fixed issues after release
• f1d5c14 chore: keep git worktrees inside the repo and out of tooling
• 1efe56e chore: bump version
• 9ea56e1 fix: keep a hashed step wider than its range from emptying the field (#437)
• da1d21b fix: compensate DST transitions wider than one hour (#435)
• b587efa fix: keep explicit range bounds when stringifying stepped fields (#279) (#440)
• See full diff in compare view

Updates dayjs from 1.11.21 to 1.11.23

Release notes

Sourced from dayjs's releases.

v1.11.23

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

v1.11.22

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

Changelog

Sourced from dayjs's changelog.

1.11.23 (2026-08-17)

Bug Fixes

• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (dad46e6)
• plugin: timezone plugin prevent RangeError for invalid Day.js values (#3180) (#3181) (2a3785f)

1.11.22 (2026-08-16)

Bug Fixes

• plugin: timezone compute instance .tz() offset without host DST (#3174) (e27ee80), closes #3169

Commits

• 4549b8d chore(release): 1.11.23 [skip ci]
• 2a3785f fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• dad46e6 fix(plugin): timezone plugin prevent RangeError for invalid Day.js values (#3...
• ae3a550 chore(release): 1.11.22 [skip ci]
• accfc67 D2M (#3177)
• e27ee80 fix(plugin): timezone compute instance .tz() offset without host DST (#3174)
• 98364bc chore: update doc
• f6a1556 chore: update doc
• 6609c5e chore: update doc
• See full diff in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react from 19.2.17 to 19.2.18

Commits

• See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates @types/react-dom from 19.2.3 to 19.2.7

Commits

• See full diff in compare view

Updates react-is from 19.2.7 to 19.2.8

Release notes

Sourced from react-is's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• See full diff in compare view

Updates react-medium-image-zoom from 5.4.8 to 5.4.9

Release notes

Sourced from react-medium-image-zoom's releases.

v5.4.9

Patch Changes

• a05d79d: build with TypeScript 7
• a05d79d: replace Dependabot with Renovate for dependency updates
• a05d79d: upgrade dev dependencies, including storybook 10.5.5 and react 19.2.8
• a05d79d: stop publishing test files in dist/ — the build's exclude pattern only matched .ts, so controlled.test.tsx was compiled into the published package
• a05d79d: replace eslint and prettier with oxlint and oxfmt

Changelog

Sourced from react-medium-image-zoom's changelog.

5.4.9

Patch Changes

• a05d79d: build with TypeScript 7
• a05d79d: replace Dependabot with Renovate for dependency updates
• a05d79d: upgrade dev dependencies, including storybook 10.5.5 and react 19.2.8
• a05d79d: stop publishing test files in dist/ — the build's exclude pattern only matched .ts, so controlled.test.tsx was compiled into the published package
• a05d79d: replace eslint and prettier with oxlint and oxfmt

Commits

• fa1fb10 Merge pull request #1129 from rpearce/changeset-release/main
• 04c5eff fix badge & lint
• e5a034d Version Packages
• 1118d88 Merge pull request #1127 from rpearce/chore/upgrades
• 855fc4d chore(deps): update dev dependencies
• 62e1544 chore: restore jsx-a11y linting via oxlint
• 54b8bc2 chore: fix config issues found reviewing the toolchain migration
• c8b61f5 chore: keep double quotes in CSS
• 8f97180 chore: let oxfmt format CSS
• 7bbf3dc chore: tighten oxlint rules and close Renovate security gaps
• Additional commits viewable in compare view

Updates react-router-dom from 7.18.2 to 7.18.3

Changelog

Sourced from react-router-dom's changelog.

v7.18.3

Patch Changes

• Updated dependencies:
  • react-router@7.18.3

Commits