[dependabot]

Bumps the management-production group with 11 updates in the /management directory:

Package	From	To
@dnd-kit/abstract	0.1.21	0.4.0
@internationalized/date	3.12.0	3.12.1
@tabler/icons-vue	3.41.1	3.44.0
@tailwindcss/vite	4.2.2	4.3.0
@unovis/ts	1.6.4	1.6.5
@unovis/vue	1.6.4	1.6.5
@vueuse/core	14.2.1	14.3.0
axios	1.14.0	1.16.0
dompurify	3.3.3	3.4.2
reka-ui	2.9.5	2.9.7
vue-router	5.0.4	5.0.6

Updates @dnd-kit/abstract from 0.1.21 to 0.4.0

Release notes

Sourced from @​dnd-kit/abstract's releases.

@​dnd-kit/abstract@​0.4.0

Minor Changes

• #1923 cde61e4 Thanks @​clauderic! - Batch entity identity changes to prevent collision oscillation during virtualized sorting.

  When entities swap ids (e.g. as react-window recycles DOM nodes during a drag), multiple registry updates could fire in an interleaved order, causing the collision detector to momentarily see stale or duplicate entries and oscillate between targets.

  Entity id changes are now deferred to a microtask and flushed atomically in a single batch(), ensuring:

  • The collision notifier skips detection while id changes are pending
  • The registry cleans up ghost registrations (stale keys left behind after an id swap)

• #1915 9b24dff Thanks @​clauderic! - Redesign event type system to follow the DOM EventMap pattern. Introduces DragDropEventMap for event object types and DragDropEventHandlers for event handler signatures, replacing the ambiguously named DragDropEvents. Event type aliases (CollisionEvent, DragStartEvent, etc.) now derive directly from DragDropEventMap rather than using Parameters<> extraction.

  Migration guide

  • DragDropEvents has been split into two types:
    • DragDropEventMap — maps event names to event object types (like WindowEventMap)
    • DragDropEventHandlers — maps event names to (event, manager) => void handler signatures
  • If you were importing DragDropEvents to type event objects, use DragDropEventMap instead:

    // Before
    type MyEvent = Parameters<DragDropEvents<D, P, M>['dragend']>[0];
    // After
    type MyEvent = DragDropEventMap<D, P, M>['dragend'];

  • If you were importing DragDropEvents to type event handlers, use DragDropEventHandlers instead:

    // Before
    const handler: DragDropEvents<D, P, M>['dragend'] = (event, manager) => {};
    // After
    const handler: DragDropEventHandlers<D, P, M>['dragend'] = (
      event,
      manager
    ) => {};

  • The DragDropEvents re-export from @dnd-kit/react and @dnd-kit/solid has been removed. Import DragDropEventMap or DragDropEventHandlers from @dnd-kit/abstract directly if needed.
  • Convenience aliases (CollisionEvent, DragStartEvent, DragEndEvent, etc.) are unchanged and continue to work as before.

• #1938 e69387d Thanks @​clauderic! - Added per-entity plugin configuration and moved feedback from the Draggable entity to the Feedback plugin.

  Draggable entities now accept a plugins property for per-entity plugin configuration, using the existing Plugin.configure() pattern. Plugins can read per-entity options via source.pluginConfig(PluginClass).

  The feedback property ('default' | 'move' | 'clone' | 'none') has been moved from the Draggable entity to FeedbackOptions. Drop animation can also now be configured per-draggable.

  Plugins listed in an entity's plugins array are auto-registered on the manager if not already present. The Sortable class now uses this generic mechanism instead of its own custom registration logic.

  Migration guide

  The feedback property has been moved from the draggable/sortable hook input to per-entity Feedback plugin configuration.

... (truncated)

Commits

• ebc564e Merge pull request #1907 from clauderic/changeset-release/main
• 4f071cb Version Packages
• 5e7735f Merge pull request #2001 from lixiaoyan/feat/feedback-callback
• 412047b Merge pull request #2007 from clauderic/chore/upgrade-turborepo
• cf33af0 chore: remove turborepo agent skill from repo
• 7a02b46 chore: upgrade turborepo from 2.5.2 to 2.9.0
• fab49db Merge pull request #2006 from clauderic/claude/docs-mobile-fixes
• 2d2bb7a Add GitHub icon to mobile header
• 671a95a Pure CSS CodeGroup tabs — zero JavaScript for tab switching
• f1423c0 Fix CodeGroup: SSR-only Shiki with DOM-based tab switching
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​dnd-kit/abstract since your current version.

Updates @internationalized/date from 3.12.0 to 3.12.1

Release notes

Sourced from @​internationalized/date's releases.

React Spectrum S2 v1.3.0

In this release we are excited to announce support for expandable rows in TableView, highlight selection in TreeView, and window scrolling in collection components! Window scrolling enables virtualized collections to automatically scroll with the rest of the page – no height needed. In addition, we've updated the set of available workflow icons, and reduced the number of dependencies installed when using S2 by over 90% – see the full release notes for details.

To help assist with migrations from S1 to S2, we've added a new end to end migration Agent skill that you can use with your agent of choice. Our existing S2 Agent skill has also been updated to greatly improve its ability to select the proper S2 component to use from context, so be sure to update.

Full release notes

React Spectrum S2 v1.2.0

In this release, we are excited to announce that ListView and unavailable menu items are now available! In addition, we have added ActionBar support for TreeView and custom renderer support for the Picker's display value. We also shipped multiple TableView fixes and a set of documentation improvements including a Typography search view now available in the main search menu.

Thanks to all of our contributors for the updates in this release.

Full release notes

React Spectrum S2 v1.1.0

It’s our first release of the new year and we’ve got plenty of exciting treats we’re bringing to the table. We’ve added a variety of new features to our documentation site including a new dark/light mode switch in the site header. Our search menu also now features a Colors section where you can browse the Spectrum-defined colors and search by name or hex value to find close or exact matches. We also now offer our docs in the form of Agent Skills that can be installed locally and used by your favorite AI coding tools.

This release also includes several bugs fixes, such as properly rendering menus when rendered from within a popover and updates to TreeView disabledBehavior styling to match the latest designs.

Full Release Notes

Commits

• ca74817 Publish
• 2d2cc15 fix: prevent items from getting continually loaded in S2 TreeView (#9921)
• beda778 fix: broken compound selector exposed by browserslist bump (Table virtualizer...
• c7c4c67 fix: v3 docs build (#9919)
• efc581c fix: nightly packing too many files (#9917)
• 5c5bda5 docs: improve S2 agent skill (#9908)
• 988c120 docs: Update RangeCalendar for api consitency, add docs for nonce, and TagGro...
• 21c4dfb chore: Revert 9875 and move disabledBehavior example in TableView docs (#9914)
• 9e18b4a chore: fix S2 datepicker errorMessage type (#9909)
• b65a4aa Revert "fix: make aria test utils helpers work with vitest-browser-react (#97...
• Additional commits viewable in compare view

Updates @tabler/icons-vue from 3.41.1 to 3.44.0

Release notes

Sourced from @​tabler/icons-vue's releases.

Release 3.44.0

18 new icons:

• outline/code-ai
• outline/email-stamp
• outline/foodsteps
• outline/git-pull-request-conflict
• outline/noise-reduction
• outline/photo-alt
• outline/pointer-2
• outline/pointer-collaboration-2
• outline/pointer-collaboration
• outline/roulette
• outline/scan-cube
• outline/sketching
• outline/sparkle-2
• outline/sparkle-highlight
• outline/sparkle
• outline/sphere-2
• outline/text-scan-ai
• outline/vignette

Fixed icons: outline/air-balloon, outline/body-scan, outline/chart-sankey, outline/ear-scan, outline/grid-scan, outline/line-scan, outline/object-scan, outline/photo-scan, outline/route-scan, outline/scan-eye, outline/scan-letter-a, outline/scan-letter-t, outline/scan-position, outline/scan-traces, outline/scan, outline/text-scan-2, outline/user-scan, outline/zoom-scan

Release 3.43.0

18 new icons:

• outline/acorn
• outline/acrobatic
• outline/banana
• outline/brand-audible
• outline/building-eiffel-tower
• outline/car-door
• outline/car-lifter
• outline/chocolate
• outline/dumbbell
• outline/exercise-ball
• outline/flood
• outline/hula-hoop
• outline/leaf-maple
• outline/notdef
• outline/rugby
• outline/taiwan-dollar
• outline/target-2
• outline/unicycle

... (truncated)

Commits

• 6d128ed Release 3.44.0
• e40738b Release 3.43.0
• 076f4a9 Release 3.42.0
• See full diff in compare view

Updates @tailwindcss/vite from 4.2.2 to 4.3.0

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.0

Added

• Add @container-size utility (#18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
• Add scrollbar-gutter-* utilities (#20018)
• Add zoom-* utilities (#20020)
• Add tab-* utilities (#20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
• Allow multiple @utility definitions with the same name but different value types (#19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
• Ensure start and end legacy utilities without values do not generate CSS (#20003)
• Ensure --value(…) is required in functional @utility definitions (#20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

v4.2.4

Fixed

• Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

v4.2.3

Fixed

• Canonicalization: improve canonicalizations for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)
• Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
• Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
• Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)
• Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
• Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
• Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
• Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
• Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
• Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)
• Upgrade: ensure files are not emptied out when killing the upgrade process while it's running (#19846)
• Upgrade: use config.content when migrating from Tailwind CSS v3 to Tailwind CSS v4 (#19846)
• Upgrade: never migrate files that are ignored by git (#19846)

... (truncated)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.0] - 2026-05-08

Added

• Add @container-size utility (#18901)
• Add scrollbar-{auto,thin,none} utilities for scrollbar-width, and scrollbar-thumb-* / scrollbar-track-* color utilities for scrollbar-color (#19981, #20019)
• Add scrollbar-gutter-* utilities (#20018)
• Add zoom-* utilities (#20020)
• Add tab-* utilities (#20022)
• Allow using @variant with stacked variants (e.g. @variant hover:focus { … }) (#19996)
• Allow using @variant with compound variants (e.g. @variant hover, focus { … }) (#19996)
• Support --default(…) in --value(…) and --modifier(…) for functional @utility definitions (#19989)

Fixed

• Ensure @plugin resolves package JavaScript entries instead of browser CSS entries when using @tailwindcss/vite (#19949)
• Fix relative @import and @plugin paths resolving from the wrong directory when using @tailwindcss/vite (#19965)
• Ensure CSS files containing @variant are processed by @tailwindcss/vite (#19966)
• Resolve imports relative to base when result.opts.from is not provided when using @tailwindcss/postcss (#19980)
• Canonicalization: preserve significant _ whitespace in arbitrary values (#19986)
• Canonicalization: add parentheses when removing whitespace from arbitrary values would hurt readability (e.g. w-[calc(100%---spacing(60))] → w-[calc(100%-(--spacing(60)))]) (#19986)
• Canonicalization: preserve the original unit in arbitrary values instead of normalizing to base units (e.g. -mt-[20in] → mt-[-20in], not mt-[-1920px]) (#19988)
• Canonicalization: migrate arbitrary :has() variants from [&:has(…)] to has-[…] (#19991)
• Upgrade: don’t migrate inline style attributes (e.g. style="flex-grow: 1" → style="flex-grow: 1", not style="grow: 1") (#19918)
• Allow multiple @utility definitions with the same name but different value types (#19777)
• Export missing PluginWithConfig type from tailwindcss/plugin to fix errors when inferring plugin config types (#19707)
• Ensure start and end legacy utilities without values do not generate CSS (#20003)
• Ensure --value(…) is required in functional @utility definitions (#20005)
• Canonicalization: preserve required whitespace around operators in negated arbitrary values (e.g. -left-[(var(--a)+var(--b))]) (#20011)

[4.2.4] - 2026-04-21

Fixed

• Ensure imports in @import and @plugin still resolve correctly when using Vite aliases in @tailwindcss/vite (#19947)

[4.2.3] - 2026-04-20

Fixed

• Canonicalization: improve canonicalization for tracking-* utilities by preferring non-negative utilities (e.g. -tracking-tighter → tracking-wider) (#19827)
• Fix crash due to invalid characters in candidate (exceeding valid unicode code point range) (#19829)
• Ensure query params in imports are considered unique resources when using @tailwindcss/webpack (#19723)
• Canonicalization: collapse arbitrary values into shorthand utilities (e.g. px-[1.2rem] py-[1.2rem] → p-[1.2rem]) (#19837)
• Canonicalization: collapse border-{t,b}-* into border-y-*, border-{l,r}-* into border-x-*, and border-{t,r,b,l}-* into border-* (#19842)
• Canonicalization: collapse scroll-m{t,b}-* into scroll-my-*, scroll-m{l,r}-* into scroll-mx-*, and scroll-m{t,r,b,l}-* into scroll-m-* (#19842)
• Canonicalization: collapse scroll-p{t,b}-* into scroll-py-*, scroll-p{l,r}-* into scroll-px-*, and scroll-p{t,r,b,l}-* into scroll-p-* (#19842)
• Canonicalization: collapse overflow-{x,y}-* into overflow-* (#19842)
• Canonicalization: collapse overscroll-{x,y}-* into overscroll-* (#19842)
• Read from --placeholder-color instead of --background-color for placeholder-* utilities (#19843)

... (truncated)

Commits

• 588bd73 4.3.0 (#20023)
• d194d4c docs: fix various typos in comments and documentation (#19878)
• db27049 fix(@​tailwindcss/vite): include @​variant in feature detection (#19966)
• 5a79990 Always resolve relative files, relative to the current .css file (#19965)
• f3fdda2 fix(vite): avoid resolving JS plugins to browser CSS entries (#19949)
• 69ad7cc 4.2.4 (#19948)
• 685c19e Fix issue around resolving paths in @tailwindcss/vite (#19947)
• 2e3fa49 4.2.3 (#19944)
• 5cb1efd fix(vite): resolve tsconfig paths in CSS and JS resolvers (#19803)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​tailwindcss/vite since your current version.

Updates @unovis/ts from 1.6.4 to 1.6.5

Release notes

Sourced from @​unovis/ts's releases.

1.6.5

What's Changed

• Misc | Test: Fix cypress cache, update dev and website version by @​lee00678 in f5/unovis#727
• Misc | Release: Fix update version script by @​lee00678 in f5/unovis#728
• CI | Workflows: Fix Cypress binary caching issue in GitHub Actions by @​suryahanumandla in f5/unovis#731
• Component | Stacked Bar: Fix breaking change in event datum; Consistent rounded corners by @​rokotyan in f5/unovis#743
• Misc: Vulnerability fix by @​lee00678 in f5/unovis#732
• Component | Treemap: Configurable Sorting and Tiling functions by @​rokotyan in f5/unovis#749
• Misc: Vulnerability fixes by @​suryahanumandla in f5/unovis#754
• Component | TopoJSON: Major TopoJSON Map updates by @​lee00678 in f5/unovis#750
• Website | Docs | TopoJsonMap: Intro Topojson Map docs by @​suryahanumandla in f5/unovis#757
• React: Fix build issue by @​lee00678 in f5/unovis#761
• Component | TopoJSONMap: Resize enhancements by @​suryahanumandla in f5/unovis#766
• Misc | Vue: Fix autogen script and build issue by @​suryahanumandla in f5/unovis#737
• Component | Topojson: Fix pan and zoom then click node to resize position bug by @​lee00678 in f5/unovis#769
• Core: Fix vulnerabilities by @​suryahanumandla in f5/unovis#770

Full Changelog: f5/unovis@1.6.4...1.6.5

Commits

• 14e5609 Release: 1.6.5
• 14a326f Misc: Update all dependency licenses
• 7e65aa5 Component | Topojson: Fix pan and zoom then click node to resize position bug
• 19b685c Component | TopoJSONMap: Resize enhancements
• dac178e React: Fix build issue
• 80b50a2 Component | TopoJSON: Make sure attirbutes get applied on point updates
• 11b8965 Component | TopoJSON: Add smartTransition to area label
• e543481 Component | TopoJSON: Remove type any
• 083744b Component | TopoJSON: Move certain functions to modules
• f975954 Component | TopoJSON: Update style.ts to the new css variabel definitations
• Additional commits viewable in compare view

Updates @unovis/vue from 1.6.4 to 1.6.5

Release notes

Sourced from @​unovis/vue's releases.

1.6.5

What's Changed

• Misc | Test: Fix cypress cache, update dev and website version by @​lee00678 in f5/unovis#727
• Misc | Release: Fix update version script by @​lee00678 in f5/unovis#728
• CI | Workflows: Fix Cypress binary caching issue in GitHub Actions by @​suryahanumandla in f5/unovis#731
• Component | Stacked Bar: Fix breaking change in event datum; Consistent rounded corners by @​rokotyan in f5/unovis#743
• Misc: Vulnerability fix by @​lee00678 in f5/unovis#732
• Component | Treemap: Configurable Sorting and Tiling functions by @​rokotyan in f5/unovis#749
• Misc: Vulnerability fixes by @​suryahanumandla in f5/unovis#754
• Component | TopoJSON: Major TopoJSON Map updates by @​lee00678 in f5/unovis#750
• Website | Docs | TopoJsonMap: Intro Topojson Map docs by @​suryahanumandla in f5/unovis#757
• React: Fix build issue by @​lee00678 in f5/unovis#761
• Component | TopoJSONMap: Resize enhancements by @​suryahanumandla in f5/unovis#766
• Misc | Vue: Fix autogen script and build issue by @​suryahanumandla in f5/unovis#737
• Component | Topojson: Fix pan and zoom then click node to resize position bug by @​lee00678 in f5/unovis#769
• Core: Fix vulnerabilities by @​suryahanumandla in f5/unovis#770

Full Changelog: f5/unovis@1.6.4...1.6.5

Commits

• 14e5609 Release: 1.6.5
• 14a326f Misc: Update all dependency licenses
• d4a22d2 Misc | Vue: Fix autogen script and build issue
• 45e9014 Component | TopoJSON: Remove PointDatum GenericDataRecord type
• 44c3b83 Misc | Release: Fix update version script
• See full diff in compare view

Updates @vueuse/core from 14.2.1 to 14.3.0

Release notes

Sourced from @​vueuse/core's releases.

v14.3.0

   🚀 Features

• Expose pointer event onLongPress  -  by @​mrcwbr in vueuse/vueuse#5295 (b1688)
• createInjectionState: Non-undefined return when default specified  -  by @​Laupetin in vueuse/vueuse#5306 (b0c51)
• createReusableTemplate: Add support for specifying component names  -  by @​wbolster in vueuse/vueuse#5300 (ea29d)
• nuxt: Add composable variants to auto imports  -  by @​OrbisK in vueuse/vueuse#5285 (ac2ef)
• useElementVisibility: Add controls option  -  by @​kricsleo in vueuse/vueuse#5191 (0cb03)
• useTextareaAutosize: Add optional maxHeight to limit autosize growth  -  by @​palamarchukser, @​antfu and @​9romise in vueuse/vueuse#5324 (1a3e5)

   🐞 Bug Fixes

• Add explicit ./package.json export to all packages  -  by @​babu-ch and @​OrbisK in vueuse/vueuse#5343 (0d989)
• core: Always return ssrValue in useCssSupports before mounted  -  by @​danielroe in vueuse/vueuse#5290 (76b0b)
• directive: Create disposable directive func cleanup of side effects unmounted  -  by @​kalu5, @​43081j, Raman Paulau and @​OrbisK in vueuse/vueuse#5244 (52d68)
• docs: Typos in useManualRefHistory, useFocusWithin, useStorageAsync, useIntersectionObserver  -  by @​blowsie, Sam Blowes and @​OrbisK in vueuse/vueuse#5329 (1d9c4)
• docs: Add ignoreDeprecations for twoslash TS 6.0 compat  -  by @​antfu and Claude Opus 4.6 (1M context) in vueuse/vueuse#5367 (9d1eb)
• metadata: Cleanup removed function resolveRef  -  by @​ntnyq in vueuse/vueuse#5307 (49da8)
• onClickOutside: Detect iframe inside shadow DOM with detectIframe option  -  by @​babu-ch and @​OrbisK in vueuse/vueuse#5336 (1a77b)
• shared: Align overloads order of watch functions with original version  -  by @​KazariEX in vueuse/vueuse#5288 (f1d32)
• useAxios: Handle optional response data safely  -  by @​jahnli in vueuse/vueuse#5318 (51198)
• useCached: Update comparator type and improve documentation  -  by @​IceMooncake in vueuse/vueuse#5376 (d886c)
• useClipboard: Prevents fail in Safari for async operation  -  by @​MatteoGabriele in vueuse/vueuse#5369 (5ec56)
• useSortable: Re-query DOM on every start() for string selectors  -  by @​Mini-ghost in vueuse/vueuse#5374 (3341f)
• useVirtualList: React to changes made in mutable arrays properly  -  by @​dcherman in vueuse/vueuse#5267 (7069e)
• useWakeLock: Auto-release wake lock on component unmount  -  by @​ProgrammingWithSid and @​OrbisK in vueuse/vueuse#5271 (43937)
• useWebSocket: Race condition caused by onopen/onclose events.  -  by @​DanCardin, @​antfu and @​9romise in vueuse/vueuse#5175 (6661c)
• whenever: Improve old value types  -  by @​VChet in vueuse/vueuse#5096 (979c6)

   🏎 Performance

• Replace deepRef with shallowRef where appropriate  -  by @​9romise in vueuse/vueuse#5293 (80004)

    View changes on GitHub

Commits

• 99c5df9 chore: release v14.3.0
• 1a3e572 feat(useTextareaAutosize): add optional maxHeight to limit autosize growth ...
• d886c2f fix(useCached): update comparator type and improve documentation (#5376)
• acf182e docs(useCloned): add tip about watch flush timing (#5375)
• 5ec568d fix(useClipboard): prevents fail in Safari for async operation (#5369)
• 52d688f fix(directive): create disposable directive func cleanup of side effects unmo...
• df72450 chore: update deps
• 1aa211e Make demo of useElementSize readonly (#5365)
• 0d98998 fix: add explicit ./package.json export to all packages (#5343)
• 8c252c3 refactor: change primitive to shallowReadonly, rename readonly usage to `...
• Additional commits viewable in compare view

Updates axios from 1.14.0 to 1.16.0

Release notes

Sourced from axios's releases.

v1.16.0 — May 2, 2026

This release adds support for the QUERY HTTP method and a new ECONNREFUSED error constant, lands a substantial wave of HTTP, fetch, and XHR adapter bug fixes around redirects, aborts, headers, and timeouts, and welcomes 23 new contributors.

⚠️ Notable Changes

A handful of fixes in this release are either security-adjacent or change observable behaviour. Please review before upgrading:

• Fetch adapter now enforces maxBodyLength and maxContentLength. These limits were silently ignored on the fetch adapter prior to 1.16.0 — anyone relying on them as a safety net (DoS protection, accidental large uploads) had no protection. (#10795)
• Proxy requests now preserve user-supplied Host headers. Previously, the proxy path could overwrite a custom Host. Virtual-host-style routing through a proxy will now behave correctly. (#10822)
• Basic auth credentials embedded in URLs are now URL-decoded. If you have percent-encoded credentials in a URL (e.g. https://user:p%40ss@host), the decoded value is what now goes on the wire. (#10825)
• parseProtocol now strictly requires a colon in the protocol separator. Strings that loosely parsed as protocols before may no longer match. (#10729)
• Deprecated unescape() replaced with modern UTF-8 encoding. Non-ASCII URL handling is now spec-correct; consumers depending on legacy unescape() quirks may see different output bytes. (#7378)
• transformRequest input typing change was reverted. The typing change introduced in #10745 was reverted in #10810 after follow-up review — net behavior is unchanged from 1.15.2. (#10745, #10810)

🚀 New Features

• QUERY HTTP Method: Added support for the QUERY HTTP method across adapters and type definitions. (#10802)
• ECONNREFUSED Error Constant: Exposed ECONNREFUSED as a constant on AxiosError so callers can match connection-refused failures without comparing string literals (closes #6485). (#10680)
• Encode Helper Export: Exported the internal encode helper from buildURL so userland param serializers can reuse the same encoding logic that axios uses internally. (#6897)

🐛 Bug Fixes

• HTTP Adapter — Redirects & Headers: Cleared stale headers when a redirect targets a no-proxy host, fixed the redirect listener chain so listeners no longer stack across hops, restored the missing requestDetails argument on beforeRedirect, preserved user-supplied Host headers when forwarding through a proxy, and properly URL-decoded basic auth credentials. (#10794, #10800, #6241, #10822, #10825)
• HTTP Adapter — Streams & Timeouts: Preserved the partial response object on AxiosError when a stream is aborted after headers arrive, honoured the timeout option during the connect phase when redirects are disabled, and resolved an unsettled-promise hang when an aborted request was combined with compression and maxRedirects: 0. (#10708, #10819, #7149)
• Fetch Adapter: Enforced maxBodyLength / maxContentLength in the fetch adapter, set the User-Agent header to match the HTTP adapter, preserved the original abort reason instead of replacing it with a generic error, and deferred global access so importing the module no longer throws a TypeError in restricted environments. (#10795, #10772, #10806, #7260)
• XHR Adapter: Unsubscribed the cancelToken and AbortSignal...

  Description has been truncated

[dependabot]

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.