fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@hookform/resolvers (source)	5.2.2 → 5.4.0
@storybook/addon-a11y (source)	10.4.0 → 10.4.2
@storybook/addon-docs (source)	10.4.0 → 10.4.2
@storybook/addon-links (source)	10.4.0 → 10.4.2
@storybook/react-vite (source)	10.4.0 → 10.4.2
@types/node (source)	24.12.4 → 24.13.1
@types/react (source)	19.2.15 → 19.2.17
@vitest/coverage-v8 (source)	4.1.7 → 4.1.8
commitlint (source)	21.0.1 → 21.0.2
i18next (source)	26.2.0 → 26.3.1
lint-staged	17.0.5 → 17.0.7
react (source)	19.2.6 → 19.2.7
react-dom (source)	19.2.6 → 19.2.7
react-hook-form (source)	7.76.0 → 7.78.0
react-router (source)	7.15.1 → 7.17.0
sass-embedded	1.99.0 → 1.100.0
storybook (source)	10.4.0 → 10.4.2
stylelint (source)	17.12.0 → 17.13.0
vite (source)	7.3.3 → 7.3.5
vitest (source)	4.1.7 → 4.1.8

---

Release Notes

react-hook-form/resolvers (@​hookform/resolvers)

v5.4.0

Compare Source

Features

• feat: add ata-validator resolver (#​845)

Fixes

• fix issue with toNestErrors.ts (#​848)

• add guidance on passing context to yupResolver (useForm context) (#​835) (3d29924)

storybookjs/storybook (@​storybook/addon-a11y)

v10.4.2

Compare Source

• Bug: Fix Windows command resolution for non-Node package managers - #​33534, thanks @​copilot-swe-agent!
• Build: Upgrade type-fest to latest version 5.6.0 - #​34791, thanks @​tobiasdiez!
• CSF: Fix parsing of string literal export names - #​34901, thanks @​shilman!
• Publish: Add npm provenance attestations - #​34936, thanks @​copilot-swe-agent!

v10.4.1

Compare Source

• Angular: Detect model() signal outputs (type inference + compodoc autodocs + runtime binding) - #​34833, thanks @​valentinpalkovic!
• Build: Upgrade type-fest to latest version 5.6.0 - #​34791, thanks @​tobiasdiez!
• CLI: Run npx expo install --fix after init for Expo projects - #​34803, thanks @​ndelangen!
• CLI: Support peerDependencies in framework detection for component libraries - #​34516, thanks @​zhyd1997!
• Next.js: Add useLinkStatus mock to next/link export mock - #​34593, thanks @​philwolstenholme!
• Vue3: Specify a specific version for non-dev dependency - #​34794, thanks @​ScopeyNZ!

vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.8

Compare Source

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in #​10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in #​10474 (675b4)

    View changes on GitHub

conventional-changelog/commitlint (commitlint)

v21.0.2

Compare Source

Note: Version bump only for package commitlint

i18next/i18next (i18next)

v26.3.1

Compare Source

• fix(types): t() with a keyPrefix no longer pollutes its return type with sibling keys' values. A regression in 26.3.0 — the [Res] extends [never] guards added to KeysBuilderWithReturnObjects / KeysBuilderWithoutReturnObjects turned the builders into deferred conditional types, so KeyPrefix<Ns> stopped resolving to a literal union and keyPrefix inference widened to the whole namespace. Symptom: useTranslation(ns, { keyPrefix: 'a.b' }) then t('title') would resolve to '<a.b>.title' | '<other.path>.title' | ... instead of just the scoped value. Affected every react-i18next user using keyPrefix. Restored to the eager 26.2.0 form. The same-namespace conflict handling from #​2434 still works via _DropConflictKeys at the merge layer (in options.d.ts). Thanks @​aaronrosenthal (#​2436).

v26.3.0

Compare Source

• feat(types): introduce ResourceNamespaceMap — a separate mergeable augmentation surface for namespace resource types, designed for monorepos where multiple packages each want to contribute their own namespaces. Previously, every package had to coordinate on a single CustomTypeOptions.resources declaration (or fall back to typing dependency namespaces as any) because resources is a single property of an interface and TypeScript reports TS2717 when two declarations of the same property disagree. The new interface merges naturally across declare module 'i18next' blocks, so each package can ship its own i18next.d.ts independently. Per-property merge handles same-namespace contributions from multiple packages, and same-key/different-literal conflicts are silently dropped to avoid poisoning t() overload resolution. Fully backwards-compatible — existing CustomTypeOptions.resources augmentations continue to work, and both surfaces can coexist. Scalar options (defaultNS, returnNull, enableSelector, etc.) still belong on CustomTypeOptions. Thanks @​sh3xu (#​2434). Fixes #​2409.

lint-staged/lint-staged (lint-staged)

v17.0.7

Compare Source

Patch Changes

• #​1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Compare Source

Patch Changes

• #​1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

• #​1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

• #​1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

• #​1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

facebook/react (react)

v19.2.7

Compare Source

facebook/react (react-dom)

v19.2.7

Compare Source

react-hook-form/react-hook-form (react-hook-form)

v7.78.0

Compare Source

v7.77.0

Compare Source

Added

• resetDefaultValues API

Fixed

• Stale isDirty in subscribe payload after reset(..., { keepValues: true })
• Preserve values with shouldUnregister
• Inconsistent reset({}) behavior requiring double-call to take effect
• FieldArray errors overriding nested fields

Security

• Harden get() against prototype-path traversal (__proto__ / constructor / prototype)

Performance

• Bundle size reduction

v7.76.1: Version 7.76.1

Compare Source

🐞 fix: pass options parameter through setValues to enable validation (#​13457)
🐞 fix(setValues): emit whole-form change without stale name/type (#​13450)
🚗 perf(setValues): thread skipClone through setFieldValue (#​13448)
🚗 perf(setValues): skip redundant per-field deep clones (#​13445)
Revert "🐞 fix: treat NaN as empty when valueAsNumber is true in validateField (#​13388)"

thanks to @​philibea & @​maxkostow

remix-run/react-router (react-router)

v7.17.0

Compare Source

Minor Changes

• Ship a subset of the official documentation inside the react-router package (#​15121)

  • Markdown docs are now available in node_modules/react-router/docs, letting AI coding agents and the React Router agent skills read official docs locally
  • Excludes auto-generated API docs (api/), community/ content, and tutorials (tutorials/)

v7.16.0

Compare Source

Minor Changes

• Stabilize future.unstable_trailingSlashAwareDataRequests as future.v8_trailingSlashAwareDataRequests (#​15098)

Patch Changes

• Disable manifest path when lazy route dicovery is disabled (#​15068)

• Fix browser URL creation to use the configured history window instead of the global window. (#​15066)

  • Pass the history/router window through to createBrowserURLImpl so custom window contexts keep the correct URL origin.

• Fix useNavigation() return type to preserve discriminated union across navigation states (#​15095)

• Widen MetaDescriptor script:ld+json type from LdJsonObject to LdJsonObject | LdJsonObject[] to permit multiple JSON-LD schemas in a single <script type="application/ld+json"> tag emitted by <Meta /> (#​15082)

sass/embedded-host-node (sass-embedded)

v1.100.0

Compare Source

• Writing two compound selectors adjacent to one another without any whitespace
  between them, such as [class]a, is now deprecated. This was always an error
  in CSS and Sass only supported it by mistake.

  See the Sass website for
  details.

stylelint/stylelint (stylelint)

v17.13.0

Compare Source

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#​9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#​9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#​9308) (@​Mouvedia).

vitejs/vite (vite)

v7.3.5

Compare Source

Please refer to CHANGELOG.md for details.

---

Configuration

📅 Schedule: (in timezone Europe/Istanbul)

• Branch creation
  • Between 07:00 AM and 09:59 AM, only on Monday (* 7-9 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 50cf49d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR