chore(deps): bump the prod-deps group across 1 directory with 7 updates

[dependabot]

Bumps the prod-deps group with 7 updates in the / directory:

Package	From	To
stylis	4.3.6	4.4.0
react-aria	3.37.0	3.50.0
react-keyed-flatten-children	5.1.2	5.1.3
react-stately	3.35.0	3.48.0
stylelint	17.12.0	17.14.0
react-hook-form	7.54.2	7.80.0
@playwright/test	1.58.2	1.61.1

Updates stylis from 4.3.6 to 4.4.0

Commits

• 6ff0e46 4.4.0
• 37fc380 Fix & substitutions in functional pseudo classes (#353)
• 92f46fb Preserve all empty variables (#352)
• See full diff in compare view

Updates react-aria from 3.37.0 to 3.50.0

Commits

• 1c84a49 Publish
• 208099b chore: omit isNonModal from ContextualHelpPopover (#10224)
• a064c19 docs: add S2 audit skill (#10160)
• 0594914 chore: update chat story prompts to be more realistic (#10223)
• b8b0688 chore: Audit style props in AI package (#10218)
• cb43c8c docs: add CenterBaseline to style macro docs (#10216)
• 003d04d chore: remove horizontal card from ai export (#10217)
• 358d6d8 chore: make sure Tree keyboard navigation docs example renders fully on small...
• edceb07 chore: Expose keyboardNavigationBehavior="tab" in S2 (#10206)
• 6e132fb Revert "fix: preserve selection anchor for multi-Select range selection (#101...
• Additional commits viewable in compare view

Updates react-keyed-flatten-children from 5.1.2 to 5.1.3

Release notes

Sourced from react-keyed-flatten-children's releases.

v5.1.3

Dependency security updates — all transitive devDependencies, no consumer-facing changes:

• form-data — GHSA-hmw2-7cc7-3qxx (high)
• glob — GHSA-5j98-mcp5-4vw2 (high)
• picomatch — GHSA-3v7f-55p6-f55p (high/moderate)
• ws — GHSA-58qx-3vcg-4xpx (high)
• @​babel/runtime — GHSA-968p-4wvh-cqc8 (moderate)
• brace-expansion — GHSA-v6h2-p8h4-qcjw (moderate)

npm audit now reports 0 vulnerabilities. See #35.

Changelog

Sourced from react-keyed-flatten-children's changelog.

5.1.3

Bump dependencies to resolve security advisories (form-data, glob, picomatch, ws, @​babel/runtime, brace-expansion). All are transitive devDependencies — no consumer-facing changes.

Commits

• 3322509 5.1.3
• 16de3ee 5.1.3
• efd2482 Merge pull request #35 from grrowl/fix/dependency-audit
• 5209122 Bump dependencies to resolve security advisories
• See full diff in compare view

Updates react-stately from 3.35.0 to 3.48.0

Release notes

Sourced from react-stately's releases.

October 2, 2025 Release

Happy fall! This release brings some long-awaited features, including multi-selection in React Aria Select and enhanced animation support across our components. For example, Disclosure now provides CSS variables to easily animate expanding and collapsing. We’ve also added a new component that can be used within components that support single selection such as Tabs and ToggleButtonGroup to animate selection changes. In addition, we have significantly improved the behavior of scrolling modals on iOS 26. Lastly, onAction can now be used on a ComboBoxItem, enabling you to add a “create” option.

As always, thank you to our community for their support and contributions!

As always, thank you to our community for their support and contributions!

Full Release Notes

August 25, 2025 Release

Summer might be winding down but we’re definitely not! Back with another release, we have added support for origin-aware overlay animations in Popover and Tooltip, which enable scale transitions to appear as if they are emerging from the trigger. We have also advanced Autocomplete to RC, and added support for filtering GridList, Table, and TagGroup (virtual focus support is still to come). Section support in GridList has also been added as an alpha, laying the groundwork for similar support in Tree and Table.

As always, a big thank you to everyone in the community for your feedback and contributions! ❤️

July 22, 2025 Release

Happy summer! This release adds support for async loading and infinite scrolling, improves form integration and drag and drop interactions, and adds support for additional DOM events and attributes.

The new LoadMoreItem components supported in ListBox, GridList, Table, and Tree enables infinite scrolling. These trigger the loading of additional pages of items and display a loading spinner. Multiple LoadMoreItems can be rendered within a collection too, enabling loading multiple levels of a tree or sections of data from different APIs.

We've also opened up the React Aria Components API to pass through more DOM events and attributes. This improves integration with other libraries, for example making it possible to use another library's menu with a React Aria button.

As always, thanks so much to everyone who contributed to this release!

Full release notes

June 5, 2025 Release

Drop everything! Drag and drop support in React Aria Tree has been released! 🫳🎤 This supports moving items within a tree or between collection components, with full keyboard and screen reader accessibility. It's interoperable with our existing drag and drop support in components like Table and GridList, and with third party apps via native HTML APIs. Check out our previous blog post on drag and drop to learn about the interactions, and our new Tree drag and drop documentation.

This release also includes some highly requested bug fixes, including scrollbar layout shifts when opening popovers and modals, date picker interaction improvements, and enhancements to our form components.

As always, thank you to our community for their support and contributions!

Full Release Notes

May 19, 2025 Release

This release includes a range of enhancements and fixes such as improved keyboard accessibility in TagGroup and increased stability for dynamic table updates. It also brings support for React 19’s ref cleanup behavior, performance improvements for collection updates in React transitions and pressable elements, and TypeScript updates including backwards compatibility with older TypeScript and @​types/react versions.

As always, thank you to our community for their support and contributions!

Full Release Notes

April 11, 2025 Release

In today’s release, we are excited to announce custom calendar support across all React Spectrum libraries! This feature allows you to create your own calendar that implements custom business logic, such as a 4-5-4 fiscal calendar, either by extending an existing Calendar implementation or building from scratch. Please see the React Spectrum docs for an example implementation. A special shout out to @​ToyWalrus for all the hard work that went into this contribution!

This release also includes several updates for collections in React Aria Components. These include enhanced support for React Suspense and optimizations for large collections. These changes should result in much more performant collections when fetching and rendering large amounts of data.

We have also reduced the bundle sizes of our libraries by moving some console warnings to development only, and removing old browser fallbacks for pointer events. For example, @​react-aria/interactions, which powers most of our components, is now 22% smaller!

Lastly, we have decided to handle onClick as an alias for onPress. This improves interoperability with other dependencies that use onClick events. Please note that onPress is still preferred over onClick as it standardizes behavior across a variety of platforms.

... (truncated)

Commits

• 1c84a49 Publish
• 208099b chore: omit isNonModal from ContextualHelpPopover (#10224)
• a064c19 docs: add S2 audit skill (#10160)
• 0594914 chore: update chat story prompts to be more realistic (#10223)
• b8b0688 chore: Audit style props in AI package (#10218)
• cb43c8c docs: add CenterBaseline to style macro docs (#10216)
• 003d04d chore: remove horizontal card from ai export (#10217)
• 358d6d8 chore: make sure Tree keyboard navigation docs example renders fully on small...
• edceb07 chore: Expose keyboardNavigationBehavior="tab" in S2 (#10206)
• 6e132fb Revert "fix: preserve selection anchor for multi-Select range selection (#101...
• Additional commits viewable in compare view

Updates stylelint from 17.12.0 to 17.14.0

Release notes

Sourced from stylelint's releases.

17.14.0

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

Changelog

Sourced from stylelint's changelog.

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

Commits

• f36e170 Release 17.14.0 (#9371)
• 9334bff Bump actions/checkout from 6.0.3 to 7.0.0 (#9367)
• f736374 Bump npm-run-all2 from 9.0.1 to 9.0.2 (#9370)
• 78e1b44 Bump postcss-selector-parser from 7.1.2 to 7.1.4 in the postcss group (#9369)
• cab5acd Bump eslint from 10.4.1 to 10.5.0 in the eslint group (#9368)
• 89b95e1 Bump prettier from 3.8.3 to 3.8.4 (#9363)
• 7ecce94 Bump cosmiconfig from 9.0.1 to 9.0.2 (#9362)
• fa54191 Bump postcss-selector-parser from 7.1.1 to 7.1.2 in the postcss group (#9361)
• 8c3cf69 Bump @​csstools/css-syntax-patches-for-csstree from 1.1.4 to 1.1.5 in the csst...
• c61d3db Fix performance of getting module paths (#9354)
• Additional commits viewable in compare view

Updates react-hook-form from 7.54.2 to 7.80.0

Release notes

Sourced from react-hook-form's releases.

Version 7.80.0

🧄 feat: disable useFieldArray fields (#13535)

const { fields } = useFieldArray({ disabled: true });
fields[0].disabled; // contains disabled props

🛺 perf: make rhf more performant (#13524) 🐞 fix(deepEqual): empty array and empty plain object should not be equal (#13533)

thanks to @​JSap0914

Version 7.79.0

🚷 feat: use field array disabled (#13520)

useFieldArray({ disabled, name: 'test' })

🐞 fix controller onChange promise (#13518) 🐞 fix: track visited pairs in deepEqual to avoid false positives with shared object references (#13515) 🐞 fix #12651 issue: field validation with shouldUseNativeValidation does not behave native like for radio groups (#13512) 🐞 fix #12754 createFormControl breaks with fast refresh in dev mode (#13511) 🐞 close #12709 #12750 StrictMode would remove field value & get mounted again (#13508) 🐞 fix #13505 issue: In v8 with React compiler, a change in formState errors does not cause child components to re-render (#13510)

thanks to @​DucMinhNe & @​louzhedong

Version 7.78.0

🦷 update type dirtyFields typing for field arrays with undefined entries (#13492) 🐞 fix: recover Controller fields after reset without rerender (RN issue #13455) (#13497) 🐞 fix useFormState().isDirty race with async resolver in onChange mode (#13495) 🐞 fix: use reactive values prop over defaultValues when shouldUnregister is true (#13485) 🐞 fix deepEqual for empty non-plain objects (#13493)

thanks to @​cyphercodes

Version 7.77.0

🥡 feat: add resetDefaultValues API (#13427)

https://react-hook-form.com/docs/useform/resetdefaultvalues

const { resetDefaultValues } = useForm();
resetDefaultValues(currentValues);

🐚 harden get() against prototype-path traversal (proto / constructor / prototype) (#13479) 🐞 fix FieldArray errors overriding nested fields (#13476)

... (truncated)

Changelog

Sourced from react-hook-form's changelog.

[7.80.0] - 2026-06-20

Added

• disabled prop support for individual fields within useFieldArray

Fixed

• deepEqual incorrectly treating empty array [] and empty plain object {} as equal

Performance

• Improve onChange, setValid, dirty checking, setValue, and setValues performance

[7.79.0] - 2026-06-13

Added

• disabled option to useFieldArray

Fixed

• Controller onChange promise return type
• deepEqual false positives with shared object references
• shouldUseNativeValidation behavior for radio groups
• createFormControl stability with fast refresh in dev mode
• StrictMode value preservation during remount
• formState.errors reactivity with React compiler

[7.78.0] - 2026-06-08

Fixed

• Recover Controller fields after reset without rerender (RN issue #13455)
• useFormState().isDirty race with async resolver in onChange mode
• Use reactive values prop over defaultValues when shouldUnregister is true
• deepEqual for empty non-plain objects

Types

• Update dirtyFields typing for field arrays with undefined entries

[7.77.0] - 2026-05-31

Added

• resetDefaultValues API

Fixed

... (truncated)

Commits

• ebcf9c2 7.80.0
• 4755fd0 🦌 upgrade dev deps (#13537)
• 3f38974 🧄 feat: disable useFieldArray fields (#13535)
• 62be736 🐞 fix(deepEqual): empty array and empty plain object should not be equal (#13...
• cee92e2 🛺 perf: make rhf more performant (#13524)
• 782313f 🧪 tests: add tests for setValue within form.subscribe (#13531)
• 01930f0 🍖 chore: bench mark on perf (#13530)
• 7bb1825 📖 update changelog v7.79.0
• 3f1d2bd 7.79.0
• c344c4f 📖 update changelog v7.78.0
• Additional commits viewable in compare view

Updates @playwright/test from 1.58.2 to 1.61.1

Release notes

Sourced from @​playwright/test's releases.

v1.61.1

Bug Fixes

• #41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher
• #41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)
• #41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000
• #41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15
• #41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:

const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.

You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:

await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();

New APIs

Network

• apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

• 39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
• 4328122 chore: mark v1.61.1 (#41404)
• 2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
• 4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
• 041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
• b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
• b5a3175 cherry-pick(#41319): fix(loader): support other node versions
• d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
• 1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
• a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: 79f90fd

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.