Skip to content

fix(deps): update dependencies (non-major) - #457

Merged
dmnktoe merged 1 commit into
mainfrom
renovate/deps-non-major
Nov 7, 2026
Merged

fix(deps): update dependencies (non-major)#457
dmnktoe merged 1 commit into
mainfrom
renovate/deps-non-major

Conversation

@renovate

@renovate renovate Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@c15t/nextjs (source) 2.3.0 → 2.4.1 age confidence
altcha-lib (source) 2.7.0 → 2.8.0 age confidence
lucide-react (source) 1.61.0 → 1.68.0 age confidence
next (source) 16.4.2 → 16.4.5 age confidence
qs 6.16.1 → 6.17.1 age confidence
react-hook-form (source) 7.90.0 → 7.91.0 age confidence

Release Notes

c15t/c15t (@​c15t/nextjs)

v2.4.1

Compare Source

v2.4.0

Compare Source

altcha-org/altcha-lib (altcha-lib)

v2.8.0

Compare Source

Fixed
  • Nuxt 4 support: altcha-lib/frameworks/h3 works with h3 v1 (Nuxt 4, Nitro 2) as well as h3 v2 (Nitro 3), and the h3 peer dependency accepts ^1.15.0 || ^2.0.0 (#​22). The plugin no longer imports h3 at runtime, so it no longer fails with event.req.headers.get is not a function when the package manager installs h3 v2 for altcha-lib next to Nuxt's h3 v1.
  • altcha-lib/frameworks/h3 middleware leaves the request body readable for later handlers on both h3 majors.
  • altcha-lib/frameworks/h3 errors (403 on failed verification, 400 on an invalid JSON or form data body) are recognized as HTTP errors by both h3 v1 and v2. h3 v1 previously treated them as unhandled errors.
  • docs/nuxt.md: route files live under server/routes/, imports use ~~/server/... (Nuxt 4's ~ points to app/), and the example uses createError, which exists in h3 v1 and v2.
Changed
  • The build uses TypeScript 6. tsconfig.cjs.json sets ignoreDeprecations: "6.0" to keep moduleResolution: "node" for the CommonJS build, which TypeScript 6 deprecates and TypeScript 7 removes.
lucide-icons/lucide (lucide-react)

v1.68.0: Version 1.68.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.67.0...1.68.0

v1.67.0: Version 1.67.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.66.0...1.67.0

v1.66.0: Version 1.66.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@1.65.0...1.66.0

v1.65.0: Version 1.65.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.64.0...1.65.0

v1.64.0: Version 1.64.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.63.0...1.64.0

v1.63.0: Version 1.63.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.62.0...1.63.0

v1.62.0: Version 1.62.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.61.0...1.62.0

vercel/next.js (next)

v16.4.5

Compare Source

This release contains security fixes for the following advisories:

Moderate

v16.4.4

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary. The announced security released for November will be published tomorrow.

Core Changes
  • [lts-active] test: disable the reads fallback params after a client navigation deployment test (#​100668)
  • [lts-active] Reload on missed Turbopack startup CSS updates (#​100619)
  • [lts-active] Revert "Optimize strict module factory chunks (#​98421)" (#​100866)
  • [lts-active] Emit the Turbopack shared-runtime bootstrap in the PPR resume so it gets the CSP nonce (#​100907)
  • [lts-active] [ci] Pin deploy test deployments to Node.js 22.x (#​100886)
  • [lts-active] fix(analyze): use route summaries as the analyzer route index (#​100974)
  • [lts-active] Use fast-jwt instead of jsonwebtoken (#​100885)
Credits

Huge thanks to @​icyJoseph, @​mischnic, @​wbinnssmith, @​lukesandberg, and @​eps1lon for helping!

v16.4.3

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes
Credits

Huge thanks to @​mischnic, @​lukesandberg, @​acdlite, @​eps1lon, and @​sokra for helping!

ljharb/qs (qs)

v6.17.1

Compare Source

  • [Fix] parse: interpretNumericEntities: decode code points above U+FFFF as surrogate pairs (#​640)
  • [Fix] parse: respect plainObjects for [] with parseArrays: false (#​639)
  • [Fix] utils: merge: count the elements of a sparse array against arrayLimit, not its holes
  • [Fix] parse: guard bracket-wrapped prototype keys at depth 0 (#​638)
  • [Refactor] parse: extract wrapping-bracket stripping helper
  • [readme] document that depth: 0 and depth: false keep keys flat
  • [Tests] parse: pin depth-0 bracket stripping and prototype keys kept by allowPrototypes/plainObjects

v6.17.0

Compare Source

  • [New] stringify: add WHATWG format (#​623)
  • [Fix] stringify: do not sort the caller's filter array in place (#​637)
  • [Fix] parse: copy an own __proto__ key as data (#​636)
  • [Fix] parse: decode percent-encoded dots case-insensitively (#​635)
  • [Fix] stringify: encode keys when allowEmptyArrays is set (#​561)
  • [Fix] parse: preserve comma arrays when interpreting numeric entities (#​630)
  • [Fix] parse: allow scalar fields with a zero array limit (#​627)
  • [Fix] parse: do not count an existing comma array toward arrayLimit when duplicates discards or replaces it
  • [Fix] utils: encode: encode lone surrogates as U+FFFD instead of consuming the next code unit (#​624)
  • [eslint] fix indentation
  • [readme] document the encoder's format argument
  • [meta] add changelog acknowledgement
  • [meta] fix changelog indents
  • [Dev Deps] update eslint, evalmd, npmignore
  • [Tests] stringify: pin allowEmptyArrays output for keys that need no encoding
  • [Tests] stringify: pin sort order for nested keys selected by an array filter
  • [Tests] parse: cover interpretNumericEntities across value shapes, keys, and the charset sentinel
  • [Tests] parse: cover more input that builds no array at a zero or negative arrayLimit
  • [Tests] parse: cover comma with a zero or negative arrayLimit, and combining a full comma array
  • [Tests] parse: pin the behavior of a zero or negative arrayLimit
  • [Tests] utils/stringify: pin ~, *, and parens encoding in RFC3986 and RFC1738

v6.16.2

Compare Source

  • [Fix] stringify: encode keys when allowEmptyArrays is set (#​561)
  • [meta] use double quotes for better OS support
  • [Dev Deps] update evalmd, npmignore
  • [Tests] stringify: pin allowEmptyArrays output for keys that need no encoding
react-hook-form/react-hook-form (react-hook-form)

v7.91.0

Compare Source

Changed
  • Improve performance of Form by reading control from context to avoid unnecessary re-renders
  • Improve performance of getValues by avoiding unnecessary shallow copies
  • Simplify multipart content-type header filtering
  • Align form-level validation error types
Fixed
  • useFieldArray not registering array rules again after reset
  • setValue not updating field array rows when a parent object is set
  • createFormControl keeping a newer change's error when an older isValid pass settles
  • validate treating an empty message array as valid
  • reset releasing keepIsValid on the next field change or field array operation
  • register only emitting the progressive required attribute when the rule is on
  • createFormControl dropping the async result of a field unregistered while it validates
  • createFormControl supporting null-prototype objects in setValue
  • Form handling case-insensitive and parameterized multipart encType
  • createFormControl ignoring a stale NaN or Invalid Date validation result
  • Settle submit state when validation throws
  • Form letting fetch set the multipart boundary for a multipart content-type header
  • createFormControl ignoring a stale built-in validity result after reset
  • useForm running the initial validity check when a child subscribed first
  • Form sending a text/plain body for a text/plain content type
  • createFormControl copying the errors prop instead of writing into it
  • useForm resetting resetOptions when removed from props
  • createFormControl handling falsy values correctly in _getDirty and resetField
  • unregister dropping the field's rules when keepValue keeps only its value
  • useForm clearing errors when the errors option is removed or set to undefined
  • useFieldArray dropping a validation result once the array has changed
  • reset keeping retained fields disabled
  • useForm re-enabling the form when the disabled option is removed
  • formState producing a new validatingFields reference when it changes
  • validateField validating the stored value of Controller fields with a DOM ref
  • useForm resetting progressive option when removed from props
  • cloneObject copying plain objects that have a constructor key
  • useFieldArray reindexing row fields when the array has rules
  • Form matching JSON content types case-insensitively
  • deepEqual comparing keys as own properties instead of via in
  • register keeping select options picked before the form is ready
  • Report isReady to useFormState mounted with the form
  • useFieldArray revalidating array operations after submit in onBlur mode
  • getDirtyFields handling null or undefined form values when clearing a field
  • setValue updating isDirty when shouldDirty fills a field array
  • delayError flushing the delayed error on blur when blur also validates
  • useWatch using the new defaultValue when the watched name changes
  • deepEqual comparing sparse array lengths
  • Form sending a url-encoded body for a url-encoded content type
  • deepEqual comparing empty null-prototype objects by content
  • Enforce numeric zero maxLength
  • register not adding an array row when registered without a value
  • Form matching Content-Type header names case-insensitively
  • trigger recomputing preserved isValid after reset
  • useFieldArray unregistering on unmount unless a parent array is reindexing
  • setValue notifying field arrays so their rows follow the new values

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • Between 12:00 AM and 06:59 AM, only on Monday (* 0-6 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai

coderabbitai Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b0d6f44f-088b-40fb-a0b1-9c820bd1ca7b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@codecov

codecov Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.04%. Comparing base (f8c0ab6) to head (92472fb).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #457   +/-   ##
=======================================
  Coverage   67.04%   67.04%           
=======================================
  Files          67       67           
  Lines         789      789           
  Branches      175      169    -6     
=======================================
  Hits          529      529           
  Misses        260      260

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate
renovate Bot force-pushed the renovate/deps-non-major branch 6 times, most recently from 2bdc591 to 2b21809 Compare November 6, 2026 19:09
@renovate
renovate Bot force-pushed the renovate/deps-non-major branch from 2b21809 to 92472fb Compare November 7, 2026 10:06
@dmnktoe
dmnktoe merged commit ecf1f93 into main Nov 7, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@dmnktoe dmnktoe

Labels

dependencies npm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@dmnktoe