Skip to content

chore(deps): bump the npm-updates group across 1 directory with 14 updates#257

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/weather-forecast/npm-updates-758e7e3c1d
Open

chore(deps): bump the npm-updates group across 1 directory with 14 updates#257
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/weather-forecast/npm-updates-758e7e3c1d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm-updates group with 14 updates in the /samples/weather-forecast directory:

Package From To
axios 1.16.0 1.16.1
dayjs 1.11.20 1.11.21
@babel/core 7.29.0 7.29.7
@babel/preset-env 7.29.5 7.29.7
@babel/preset-react 7.28.5 7.29.7
@babel/preset-typescript 7.28.5 7.29.7
@rjsf/core 6.5.2 6.6.1
@rjsf/mui 6.5.2 6.6.1
@rjsf/utils 6.5.2 6.6.1
@rjsf/validator-ajv8 6.5.2 6.6.1
@types/node 25.7.0 25.9.1
ts-loader 9.5.7 9.6.0
webpack 5.106.2 5.107.2
webpack-cli 7.0.2 7.0.3

Updates axios from 1.16.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Changelog

Sourced from axios's changelog.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototype by walking own properties only, so attacker-controlled keys inherited from a poisoned prototype cannot propagate through deserialization. (#7413)
  • Proxy Cleartext Leak: Fixed an issue where HTTPS request data could be transmitted in cleartext to an HTTP proxy under certain configurations. (#10858)
  • CI Cache Removal: Removed all GitHub Actions caches as a defence-in-depth measure against cache poisoning vectors in the build pipeline. (#10882)

🐛 Bug Fixes

  • Data URI Parsing: Updated the fromDataURI regex to match RFC 2397 more strictly, fixing edge cases in data: URL handling. (#10829)
  • Unicode Headers: Preserved Unicode header values when running through request interceptors, so non-ASCII header content is no longer corrupted before dispatch. (#10850)
  • XHR Upload Progress: Guarded against malformed ProgressEvent payloads emitted by some environments during XHR upload, preventing crashes when loaded / total are missing or invalid. (#10868)
  • Webpack 4 Fetch Adapter: Fixed an "unexpected token" error caused by syntax in the fetch adapter that Webpack 4 could not parse, restoring compatibility for legacy bundler users. (#10864)
  • Type Definitions: Made parseReviver context.source optional in the type definitions to align with the ES2023 specification. (#10837)
  • URL Object Support Reverted: Reverted the change that allowed passing a URL object as config.url (originally #10866) due to regressions; this support will be reintroduced in a later release once the underlying issues are addressed. (#10874)

🔧 Maintenance & Chores

  • Cycle Detection Refactor: Replaced the array-based cycle tracker in toJSONObject with a WeakSet, improving performance and memory behaviour on large nested structures. (#10832)
  • composeSignals Cleanup: Refactored composeSignals to use a clearer early-return structure, simplifying the cancellation/abort composition path. (#10844)
  • AI Readiness & Repo Docs: Added AGENTS.md and related contributor-guide updates for both human and AI agents, plus post-release documentation improvements. (#10835, #10841)
  • Docs Improvements: Clarified the GET request example, fixed the interceptor eject example to reference the correct instance, and corrected the Buzzoid sponsor description in the README. (#10836, #10853, #10856)
  • Sponsorship Tooling: Fixed empty sponsor arrays in the sponsor processing script, added the ability to inject additional sponsors, updated the sponsorship link, and added a Twicsy advertisement entry. (#10843, #10859, #10869)
  • Dependencies: Bumped @commitlint/cli from 20.5.0 to 20.5.2. (#10846)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

Full Changelog

Commits
  • 1337d6b chore(release): prepare release 1.16.1 (#10877)
  • 858a790 fix: remove all caches (#10882)
  • 34adfd9 revert: "fix: support URL object as config.url input (#10866)" (#10874)
  • 847d89b fix: support URL object as config.url input (#10866)
  • 4094886 fix(progress): guard malformed XHR upload events (#10868)
  • 44f0c5b chore: change sponsorship link and add Twicsy advertisement (#10869)
  • 64e1095 chore: update PR and issue template to use h2 (#10865)
  • 3e6b4e1 fix: error unexpected token in fetch JS compatibility issue with Webpack 4 (#...
  • c4453ba fix: add the ability to add additional sponsors to the process sponsors scrip...
  • caa00a9 fix: https data in cleartext to proxy (#10858)
  • Additional commits viewable in compare view

Updates dayjs from 1.11.20 to 1.11.21

Release notes

Sourced from dayjs's releases.

v1.11.21

1.11.21 (2026-05-26)

Bug Fixes

Changelog

Sourced from dayjs's changelog.

1.11.21 (2026-05-26)

Bug Fixes

Commits

Updates @babel/core from 7.29.0 to 7.29.7

Release notes

Sourced from @​babel/core's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/preset-env from 7.29.5 to 7.29.7

Release notes

Sourced from @​babel/preset-env's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

Commits

Updates @babel/preset-react from 7.28.5 to 7.29.7

Release notes

Sourced from @​babel/preset-react's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @babel/preset-typescript from 7.28.5 to 7.29.7

Release notes

Sourced from @​babel/preset-typescript's releases.

v7.29.7 (2026-05-25)

Re-release all packages with npm provenance attestations

v7.29.6 (2026-05-25)

🐛 Bug Fix

Committers: 3

v7.29.5 (2026-05-05)

🏠 Internal

  • babel-preset-env
    • Update @babel/* dependencies

v7.29.4 (2026-05-05)

🐛 Bug Fix

  • babel-plugin-transform-modules-systemjs
    • #17974 [7.x backport]fix(systemjs): improve module string name support (@​JLHwung)

Committers: 1

v7.29.3 (2026-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
    • #17931 fix(decorators): replace super within all removed static elements (@​JLHwung)
  • babel-register
  • babel-compat-data, babel-plugin-bugfix-safari-rest-destructuring-rhs-array, babel-preset-env

💅 Polish

  • babel-parser

... (truncated)

Commits

Updates @rjsf/core from 6.5.2 to 6.6.1

Release notes

Sourced from @​rjsf/core's releases.

6.6.1

Dev / docs / playground

  • Updated peer dependencies to 6.6.x

6.6.0

New feature

Added the validator-ata package to give users an alternative validation system

@​rjsf/core

  • Updated Form to stop using removeOptionalEmptyObjects() and deprecating removeEmptyOptionalObjects prop

@​rjsf/utils

  • Adopted the svelte-jsonschema-form algorithm for omitExtraData(), adding in support for the code from removeOptionalEmptyObjects(), exporting the isValueEmpty() function from the library
  • Deprecated the removeOptionalEmptyObject() and toPathSchema() functions, toPathSchema() on SchemaUtilsType and the PathSchema type
  • Added relaxOptionsForScoring() utility that normalizes a oneOf/anyOf option list for scoring with optional $refs resolution Converts boolean schemas to object equivalents and widens additionalProperties: false → true so that getClosestMatchingOption does not produce false negatives when form data contains keys not declared in properties
  • Fixed resolveAnyOrOneOfSchemas (called by schemaParser with expandAllBranches=true) to use getFirstMatchingOption on the options returned from relaxOptionsForScoring() so that they are captured for precompiled validators
  • Extracted the shallowAllOfMerge() function from retrieveSchema.ts into its own file for additional use in omitExtraData.ts

@​rjsf/validator-ajv8

  • Added integration tests verifying that getFirstMatchingOption, getClosestMatchingOption, and omitExtraData work correctly when given an AJV8PrecompiledValidator compiled from a oneOf schema whose branches carry additionalProperties: false (both direct options and options defined via $ref)

@​rjsf/validator-ata

  • Added @rjsf/validator-ata, an ata-validator backed alternative to @rjsf/validator-ajv8. The public surface mirrors the AJV package (customizeValidator(), ValidatorType<T, S, F>, custom formats, transformErrors, customValidate, suppressDuplicateFiltering), so swapping the import is enough for existing forms to keep working. AJV-only options (AjvClass, ajvFormatOptions, ajvOptionsOverrides) are replaced by ataOptionsOverrides, and the ata-validator format set is always installed. Depends on ata-validator ^0.17.4, which carries stable ATA#### error codes and rich error metadata (expected, received, schemaSource, dataFrame, suggestion, docUrl) that transformErrors can consume. See the validator-ata API reference for the full list of differences (#5063)
  • Wired through precompiled validators. compileSchemaValidators compiles a schema to a standalone module via ata-validator's bundleStandalone, and createPrecompiledValidator loads it as a ValidatorType, mirroring @rjsf/validator-ajv8. Error output matches the non-precompiled validator, including per-field errors for schema-valued additionalProperties (ata-validator >= 0.17.4); an invalid anyOf reports a single error on the field, the same as the runtime path. Custom formats in a precompiled bundle must be a RegExp or string pattern, since a function checker cannot be serialized into the standalone bundle (#5078)

Dev / docs / playground

  • Added a validator-ata API reference page under api-reference describing the package and its differences from validator-ajv8 (#5063)
  • Documented the compileSchemaValidators and createPrecompiledValidator APIs on the validator-ata API reference page (#5078)
  • Added ATA and ATA (coerceTypes) choices to the playground validator picker (#5063)
  • Removed the ataValidatorBrowserCompat workaround from the playground Vite config. The bump to ata-validator ^0.18.2 makes the patch unnecessary, since the validator no longer touches the filesystem at module init. See ata-core/ata-validator#25
  • Updated the form-props.md and utility-functions.md to document the deprecations and uiSchema.md to cleanup the enumNames docs slightly
  • Switched out eslint/prettier for OxLint/Oxfmt and jest/babel for vitest

6.5.3

@​rjsf/core

  • Fixed processPendingChange leaving optional object keys as undefined after clearing text inputs (invalid for AJV type: "string"), by unsetting keys for resolved non-oneOf/anyOf leaves while preserving explicit undefined for oneOf/anyOf branches, fixing #4518
  • Added support for the JSON Schema deprecated keyword in SchemaField, providing options to hide, disable, or label deprecated fields via a new deprecatedHandling global UI option, fixing #5024
  • Pass FieldPathList through to findFieldInSchema without per-segment string mapping now that SchemaFieldPath is supported in @rjsf/utils (follow-up to #4518 fix)

@​rjsf/utils

... (truncated)

Changelog

Sourced from @​rjsf/core's changelog.

6.6.1

Dev / docs / playground

  • Updated peer dependencies to 6.6.x

6.6.0

@​rjsf/core

  • Updated Form to stop using removeOptionalEmptyObjects() and deprecating removeEmptyOptionalObjects prop

@​rjsf/utils

  • Adopted the svelte-jsonschema-form algorithm for omitExtraData(), adding in support for the code from removeOptionalEmptyObjects(), exporting the isValueEmpty() function from the library
  • Deprecated the removeOptionalEmptyObject() and toPathSchema() functions, toPathSchema() on SchemaUtilsType and the PathSchema type
  • Added relaxOptionsForScoring() utility that normalizes a oneOf/anyOf option list for scoring with optional $refs resolution Converts boolean schemas to object equivalents and widens additionalProperties: false → true so that getClosestMatchingOption does not produce false negatives when form data contains keys not declared in properties
  • Fixed resolveAnyOrOneOfSchemas (called by schemaParser with expandAllBranches=true) to use getFirstMatchingOption on the options returned from relaxOptionsForScoring() so that they are captured for precompiled validators
  • Extracted the shallowAllOfMerge() function from retrieveSchema.ts into its own file for additional use in omitExtraData.ts

@​rjsf/validator-ajv8

  • Added integration tests verifying that getFirstMatchingOption, getClosestMatchingOption, and omitExtraData work correctly when given an AJV8PrecompiledValidator compiled from a oneOf schema whose branches carry additionalProperties: false (both direct options and options defined via $ref)

@​rjsf/validator-ata

  • Added @rjsf/validator-ata, an ata-validator backed alternative to @rjsf/validator-ajv8. The public surface mirrors the AJV package (customizeValidator(), ValidatorType<T, S, F>, custom formats, transformErrors, customValidate, suppressDuplicateFiltering), so swapping the import is enough for existing forms to keep working. AJV-only options (AjvClass, ajvFormatOptions, ajvOptionsOverrides) are replaced by ataOptionsOverrides, and the ata-validator format set is always installed. Depends on ata-validator ^0.17.4, which carries stable ATA#### error codes and rich error metadata (expected, received, schemaSource, dataFrame, suggestion, docUrl) that transformErrors can consume. See the validator-ata API reference for the full list of differences (#5063)
  • Wired through precompiled validators. compileSchemaValidators compiles a schema to a standalone module via ata-validator's bundleStandalone, and createPrecompiledValidator loads it as a ValidatorType, mirroring @rjsf/validator-ajv8. Error output matches the non-precompiled validator, including per-field errors for schema-valued additionalProperties (ata-validator >= 0.17.4); an invalid anyOf reports a single error on the field, the same as the runtime path. Custom formats in a precompiled bundle must be a RegExp or string pattern, since a function checker cannot be serialized into the standalone bundle (#5078)

Dev / docs / playground

  • Added a validator-ata API reference page under api-reference describing the package and its differences from validator-ajv8 (#5063)
  • Documented the compileSchemaValidators and createPrecompiledValidator APIs on the validator-ata API reference page (#5078)
  • Added ATA and ATA (coerceTypes) choices to the playground validator picker (#5063)
  • Removed the ataValidatorBrowserCompat workaround from the playground Vite config. The bump to ata-validator ^0.18.2 makes the patch unnecessary, since the validator no longer touches the filesystem at module init. See ata-core/ata-validator#25
  • Updated the form-props.md and utility-functions.md to document the deprecations and uiSchema.md to cleanup the enumNames docs slightly
  • Switched out eslint/prettier for OxLint/Oxfmt and jest/babel for vitest

6.5.3

@​rjsf/core

  • Fixed processPendingChange leaving optional object keys as undefined after clearing text inputs (invalid for AJV type: "string"), by unsetting keys for resolved non-oneOf/anyOf leaves while preserving explicit undefined for oneOf/anyOf branches, fixing #4518
  • Added support for the JSON Schema deprecated keyword in SchemaField, providing options to hide, disable, or label deprecated fields via a new deprecatedHandling global UI option, fixing #5024
  • Pass FieldPathList through to findFieldInSchema without per-segment string mapping now that SchemaFieldPath is supported in @rjsf/utils (follow-up to #4518 fix)

@​rjsf/utils

  • Added deprecatedHandling to GlobalUISchemaOptions and updated StrictRJSFSchema to be recursive, ensuring the deprecated keyword (and future extensions) are supported in all nested schema structures without requiring type casts, fixing #5024

... (truncated)

Commits
  • 3f9d883 Releasing 6.6.1
  • dfced83 Releasing 6.6.0 (#5083)
  • b8ad9be Chore: enable oxfmt import sorting with react-first ordering (#5082)
  • 3c08ce1 chore(deps): bump tmp, @​nx/js and nx (#5081)
  • 67d3ec0 Removed jest/babel in favor of vitest (#5080)
  • 71d49dc Chore: Replace ESLint + Prettier with OxLint + Oxfmt (#5077)
  • a0eef0e Fix: bump ata-validator to ^0.18.2, drop playground browser workaround (#5079)
  • 6ee3d0e Chore: Bump packages to latest where possible (#5075)
  • 1acd6c1 Chore: Replace fireEvent with RTL async calls (part 2) (#5076)
  • 5f39799 Chore: Improve submitForm() to click button if available (#5074)
  • Additional commits viewable in compare view

Updates @rjsf/mui from 6.5.2 to 6.6.1

Release notes

Sourced from @​rjsf/mui's releases.

6.6.1

Dev / docs / playground

  • Updated peer dependencies to 6.6.x

6.6.0

New feature

Added the validator-ata package to give users an alternative validation system

@​rjsf/core

  • Updated Form to stop using removeOptionalEmptyObjects() and deprecating removeEmptyOptionalObjects prop

@​rjsf/utils

  • Adopted the svelte-jsonschema-form algorithm for omitExtraData(), adding in support for the code from removeOptionalEmptyObjects(), exporting the isValueEmpty() function from the library
  • Deprecated the removeOptionalEmptyObject() and toPathSchema() functions, toPathSchema() on SchemaUtilsType and the PathSchema type
  • Added relaxOptionsForScoring() utility that normalizes a oneOf/anyOf option list for scoring with optional $refs resolution Converts boolean schemas to object equivalents and widens additionalProperties: false → true so that getClosestMatchingOption does not produce false negatives when form data contains keys not declared in properties
  • Fixed resolveAnyOrOneOfSchemas (called by schemaParser with expandAllBranches=true) to use getFirstMatchingOption on the options returned from relaxOptionsForScoring() so that they are captured for precompiled validators
  • Extracted the shallowAllOfMerge() function from retrieveSchema.ts into its own file for additional use in omitExtraData.ts

@​rjsf/validator-ajv8

  • Added integration tests verifying that getFirstMatchingOption, getClosestMatchingOption, and omitExtraData work correctly when given an AJV8PrecompiledValidator compiled from a oneOf schema whose branches carry additionalProperties: false (both direct options and options defined via $ref)

@​rjsf/validator-ata

  • Added @rjsf/validator-ata, an ata-validator backed alternative to @rjsf/validator-ajv8. The public surface mirrors the AJV package (customizeValidator(), ValidatorType<T, S, F>, custom formats, transformErrors, customValidate, suppressDuplicateFiltering), so swapping the import is enough for existing forms to keep working. AJV-only options (AjvClass, ajvFormatOptions, ajvOptionsOverrides) are replaced by ataOptionsOverrides, and the ata-validator format set is always installed. Depends on ata-validator ^0.17.4, which carries stable ATA#### error codes and rich error metadata (expected, received, schemaSource, dataFrame, suggestion, docUrl) that transformErrors can consume. See the validator-ata API reference for the full list of differences (#5063)
  • Wired through precompiled validators. compileSchemaValidators compiles a schema to a standalone module via ata-validator's bundleStandalone, and createPrecompiledValidator loads it as a ValidatorType, mirroring @rjsf/validator-ajv8. Error output matches the non-precompiled validator, including per-field errors for schema-valued additionalProperties (ata-validator >= 0.17.4); an invalid anyOf reports a single error on the field, the same as the runtime path. Custom formats in a precompiled bundle must be a RegExp or string pattern, since a function checker cannot be serialized into the standalone bundle (#5078)

Dev / docs / playground

  • Added a validator-ata API reference page under api-reference describing the package and its differences from validator-ajv8 (#5063)
  • Documented the compileSchemaValidators and createPrecompiledValidator APIs on the validator-ata API reference page (#5078)
  • Added ATA and ATA (coerceTypes) choices to the playground validator picker (#5063)
  • Removed the ataValidatorBrowserCompat workaround from the playground Vite config. The bump to ata-validator ^0.18.2 makes the patch unnecessary, since the validator no longer touches the filesystem at module init. See ata-core/ata-validator#25
  • Updated the form-props.md and utility-functions.md to document the deprecations and uiSchema.md to cleanup the enumNames docs slightly
  • Switched out eslint/prettier for OxLint/Oxfmt and jest/babel for vitest

6.5.3

@​rjsf/core

  • Fixed processPendingChange leaving optional object keys as undefined after clearing text inputs (invalid for AJV type: "string"), by unsetting keys for resolved non-oneOf/anyOf leaves while preserving explicit undefined for oneOf/anyOf branches, fixing #4518
  • Added support for the JSON Schema deprecated keyword in SchemaField, providing options to hide, disable, or label deprecated fields via a new deprecatedHandling global UI option, fixing #5024
  • Pass FieldPathList through to findFieldInSchema without per-segment string mapping now that SchemaFieldPath is supported in @rjsf/utils (follow-up to #4518 fix)

@​rjsf/utils

... (truncated)

Changelog

Sourced from @​rjsf/mui's changelog.

6.6.1

Dev / docs / playground

  • Updated peer dependencies to 6.6.x

6.6.0

@​rjsf/core

  • Updated Form to stop using removeOptionalEmptyObjects() and deprecating removeEmptyOptionalObjects prop

@​rjsf/utils

  • Adopted the svelte-jsonschema-form algorithm for omitExtraData(), adding in support for the code from removeOptionalEmptyObjects(), exporting the isValueEmpty() function from the library
  • Deprecated the removeOptionalEmptyObject() and toPathSchema() functions, toPathSchema() on SchemaUtilsType and the PathSchema type
  • Added relaxOptionsForScoring() utility that normalizes a oneOf/anyOf option list for scoring with optional $refs resolution Converts boolean schemas to object equivalents and widens additionalProperties: false → true so that getClosestMatchingOption does not produce false negatives when form data contains keys not declared in properties
  • Fixed resolveAnyOrOneOfSchemas (called by schemaParser with expandAllBranches=true) to use getFirstMatchingOption on the options returned from relaxOptionsForScoring() so that they are captured for precompiled validators
  • Extracted the shallowAllOfMerge() function from retrieveSchema.ts into its own file for additional use in omitExtraData.ts

@​rjsf/validator-ajv8

  • Added integration tests verifying that getFirstMatchingOption, getClosestMatchingOption, and omitExtraData work correctly when given an AJV8PrecompiledValidator compiled from a oneOf schema whose branches carry additionalProperties: false (both direct options and options defined via $ref)

@​rjsf/validator-ata

  • Added @rjsf/validator-ata, an ata-validator backed alternative to @rjsf/validator-ajv8. The public surface mirrors the AJV package (customizeValidator(), ValidatorType<T, S, F>, custom formats, transformErrors, customValidate, suppressDuplicateFiltering), so swapping the import is enough for existing forms to keep working. AJV-only options (AjvClass, ajvFormatOptions, ajvOptionsOverrides) are replaced by ataOptionsOverrides, and the ata-validator format set is always installed. Depends on ata-validator ^0.17.4, which carries stable Description has been truncated

@dependabot
chore(deps): bump the npm-updates group across 1 directory with 14 up…
6ba065f 
…dates

Bumps the npm-updates group with 14 updates in the /samples/weather-forecast directory:

| Package | From | To |
| --- | --- | --- |
| [axios](https://github.com/axios/axios) | `1.16.0` | `1.16.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.20` | `1.11.21` |
| [@babel/core](https://github.com/babel/babel/tree/HEAD/packages/babel-core) | `7.29.0` | `7.29.7` |
| [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) | `7.29.5` | `7.29.7` |
| [@babel/preset-react](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-react) | `7.28.5` | `7.29.7` |
| [@babel/preset-typescript](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-typescript) | `7.28.5` | `7.29.7` |
| [@rjsf/core](https://github.com/rjsf-team/react-jsonschema-form) | `6.5.2` | `6.6.1` |
| [@rjsf/mui](https://github.com/rjsf-team/react-jsonschema-form) | `6.5.2` | `6.6.1` |
| [@rjsf/utils](https://github.com/rjsf-team/react-jsonschema-form) | `6.5.2` | `6.6.1` |
| [@rjsf/validator-ajv8](https://github.com/rjsf-team/react-jsonschema-form) | `6.5.2` | `6.6.1` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `25.9.1` |
| [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.5.7` | `9.6.0` |
| [webpack](https://github.com/webpack/webpack) | `5.106.2` | `5.107.2` |
| [webpack-cli](https://github.com/webpack/webpack-cli) | `7.0.2` | `7.0.3` |



Updates `axios` from 1.16.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.16.0...v1.16.1)

Updates `dayjs` from 1.11.20 to 1.11.21
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.20...v1.11.21)

Updates `@babel/core` from 7.29.0 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-core)

Updates `@babel/preset-env` from 7.29.5 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-env)

Updates `@babel/preset-react` from 7.28.5 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-react)

Updates `@babel/preset-typescript` from 7.28.5 to 7.29.7
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.29.7/packages/babel-preset-typescript)

Updates `@rjsf/core` from 6.5.2 to 6.6.1
- [Release notes](https://github.com/rjsf-team/react-jsonschema-form/releases)
- [Changelog](https://github.com/rjsf-team/react-jsonschema-form/blob/main/CHANGELOG.md)
- [Commits](rjsf-team/react-jsonschema-form@6.5.2...6.6.1)

Updates `@rjsf/mui` from 6.5.2 to 6.6.1
- [Release notes](https://github.com/rjsf-team/react-jsonschema-form/releases)
- [Changelog](https://github.com/rjsf-team/react-jsonschema-form/blob/main/CHANGELOG.md)
- [Commits](rjsf-team/react-jsonschema-form@6.5.2...6.6.1)

Updates `@rjsf/utils` from 6.5.2 to 6.6.1
- [Release notes](https://github.com/rjsf-team/react-jsonschema-form/releases)
- [Changelog](https://github.com/rjsf-team/react-jsonschema-form/blob/main/CHANGELOG.md)
- [Commits](rjsf-team/react-jsonschema-form@6.5.2...6.6.1)

Updates `@rjsf/validator-ajv8` from 6.5.2 to 6.6.1
- [Release notes](https://github.com/rjsf-team/react-jsonschema-form/releases)
- [Changelog](https://github.com/rjsf-team/react-jsonschema-form/blob/main/CHANGELOG.md)
- [Commits](rjsf-team/react-jsonschema-form@6.5.2...6.6.1)

Updates `@types/node` from 25.7.0 to 25.9.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `ts-loader` from 9.5.7 to 9.6.0
- [Release notes](https://github.com/TypeStrong/ts-loader/releases)
- [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md)
- [Commits](TypeStrong/ts-loader@v9.5.7...v9.6.0)

Updates `webpack` from 5.106.2 to 5.107.2
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.106.2...v5.107.2)

Updates `webpack-cli` from 7.0.2 to 7.0.3
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.2...webpack-cli@7.0.3)

---
updated-dependencies:
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-updates
- dependency-name: dayjs
  dependency-version: 1.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-updates
- dependency-name: "@babel/core"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-updates
- dependency-name: "@babel/preset-env"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-updates
- dependency-name: "@babel/preset-react"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@babel/preset-typescript"
  dependency-version: 7.29.7
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@rjsf/core"
  dependency-version: 6.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@rjsf/mui"
  dependency-version: 6.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@rjsf/utils"
  dependency-version: 6.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@rjsf/validator-ajv8"
  dependency-version: 6.6.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: "@types/node"
  dependency-version: 25.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: ts-loader
  dependency-version: 9.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: webpack
  dependency-version: 5.107.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-updates
- dependency-name: webpack-cli
  dependency-version: 7.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update an action file javascript Pull requests that update Javascript code labels Jun 9, 2026
@dependabot dependabot Bot requested a review from maximizeIT as a code owner June 9, 2026 06:07
@dependabot dependabot Bot added the minor Pull requests with new features label Jun 9, 2026
@dependabot dependabot Bot requested review from a team as code owners June 9, 2026 06:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@maximizeIT maximizeIT Awaiting requested review from maximizeIT maximizeIT is a code owner

@Ninerian Ninerian Awaiting requested review from Ninerian Ninerian is a code owner automatically assigned from Staffbase/need-for-speed-devs

@PujaSingh7655 PujaSingh7655 Awaiting requested review from PujaSingh7655 PujaSingh7655 is a code owner automatically assigned from Staffbase/need-for-speed-devs

@andrew-pabon andrew-pabon Awaiting requested review from andrew-pabon andrew-pabon is a code owner automatically assigned from Staffbase/cs-tech

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update an action file javascript Pull requests that update Javascript code minor Pull requests with new features

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants