v15.5.19: 15.5.19

Compare Source

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

• [15.5.x] Don't drop FormData entries (#​94244)

Other

• [15.5.x] Fix CI (#​94281)

Credits

Huge thanks to @​eps1lon for helping!

v15.5.18

Compare Source

This release contains security fixes for the following advisories:

High:

• GHSA-8h8q-6873-q5fj: Denial of Service with Server Components
• GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
• GHSA-26hh-7cqf-hhc6: Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up
• GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components
• GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection
• GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades
• GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

• GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces
• GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input
• GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API
• GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

• GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting
• GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

v15.5.16

Compare Source

This release contains security fixes for the following advisories:

High:

• GHSA-8h8q-6873-q5fj: Denial of Service with Server Components
• GHSA-267c-6grr-h53f: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
• GHSA-mg66-mrh9-m8jx: Denial of Service via connection exhaustion in applications using Cache Components
• GHSA-492v-c6pp-mqqv: Middleware / Proxy bypass through dynamic route parameter injection
• GHSA-c4j6-fc7j-m34r: Server-side request forgery in applications using WebSocket upgrades
• GHSA-36qx-fr4f-26g5: Middleware / Proxy bypass in Pages Router applications using i18n

Moderate:

• GHSA-ffhc-5mcf-pf4q: Cross-site scripting in App Router applications using CSP nonces
• GHSA-gx5p-jg67-6x7h: Cross-site scripting in beforeInteractive scripts with untrusted input
• GHSA-h64f-5h5j-jqjh: Denial of Service in the Image Optimization API
• GHSA-wfc6-r584-vfw7: Cache poisoning in React Server Component responses

Low:

• GHSA-vfv6-92ff-j949: Cache poisoning via collisions in React Server Component cache-busting
• GHSA-3g8h-86w9-wvmq: Middleware / Proxy redirects can be cache-poisoned

v5.101.1

Compare Source

Patch Changes

• Updated dependencies [9eff92e]:
  • @​tanstack/query-core@​5.101.1

v5.101.0

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.0

v5.100.14

Compare Source

Patch Changes

• fix(react-query): do not go into optimistic fetching state when not subscribed (#​10759)

• Updated dependencies []:

  • @​tanstack/query-core@​5.100.14

v5.100.13

Compare Source

Patch Changes

• Updated dependencies [d423168]:
  • @​tanstack/query-core@​5.100.13

v5.100.12

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.12

v5.100.11

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.11

v5.100.10

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.10

v5.100.9

Compare Source

Patch Changes

• Updated dependencies [fcee7bd]:
  • @​tanstack/query-core@​5.100.9

v5.100.8

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.8

v5.100.7

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.7

v5.100.6

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.100.6

v5.101.1

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.101.1
  • @​tanstack/react-query@​5.101.1

v5.101.0

Compare Source

Patch Changes

• Updated dependencies [3042860, e631dc3]:
  • @​tanstack/query-devtools@​5.101.0
  • @​tanstack/react-query@​5.101.0

v5.100.14

Compare Source

Patch Changes

• Updated dependencies [ed20b6d]:
  • @​tanstack/react-query@​5.100.14
  • @​tanstack/query-devtools@​5.100.14

v5.100.13

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.100.13
  • @​tanstack/react-query@​5.100.13

v5.100.12

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.100.12
  • @​tanstack/react-query@​5.100.12

v5.100.11

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.100.11
  • @​tanstack/react-query@​5.100.11

v5.100.10

Patch Changes

• Updated dependencies [4d130b9]:
  • @​tanstack/query-devtools@​5.100.10
  • @​tanstack/react-query@​5.100.10

v5.100.9

Compare Source

Patch Changes

• Updated dependencies [3d21cac]:
  • @​tanstack/query-devtools@​5.100.9
  • @​tanstack/react-query@​5.100.9

v5.100.8

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.100.8
  • @​tanstack/react-query@​5.100.8

v5.100.7

Compare Source

Patch Changes

• docs(devtools): align logo, panel, and 'buttonPosition' union descriptions across docs and JSDoc (#​10617)

• Updated dependencies []:

  • @​tanstack/query-devtools@​5.100.7
  • @​tanstack/react-query@​5.100.7

v5.100.6

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.100.6
  • @​tanstack/react-query@​5.100.6

v1.21.0

Minor Changes

• #​1749 caacf56 Thanks @​bschlenk! - Allow createGlobalVar to accept a name with a leading --

  Similar to createGlobalThemeContract, createGlobalVar now trims a leading -- from the variable name. This can be useful if you want to keep the full variable name searchable in your codebase.

  EXAMPLE USAGE:

  import { createGlobalVar } from '@​vanilla-extract/css';
  
  // Both produce `var(--my-global-var)`
  const a = createGlobalVar('my-global-var');
  const b = createGlobalVar('--my-global-var');

• #​1720 7bbe189 Thanks @​cahnory! - style, globalStyle: Add support for @scope rules

  EXAMPLE USAGE:

  import { style, globalStyle } from '@​vanilla-extact/css';
  
  export const styleWithScopeRule = style({
    '@​scope': {
      '(body)': {
        ':after': { content: '"Scoped to body"' }
      }
    }
  });
  
  globalStyle('div', {
    '@​scope': {
      '(body)': {
        ':after': { content: '"Scoped to body"' }
      }
    }
  });

Patch Changes

• #​1731 aec0ab7 Thanks @​sashank-gogula-glean! - Fix incorrect class name substitution when composed class lists contain regex metacharacters

  Class names containing characters such as (, ), +, or . were being interpreted as regex syntax when building the substitution pattern for composed class lists, causing malformed matches. The class list is now escaped before constructing the RegExp.

• #​1740 a4b120f Thanks @​askoufis! - Fix a bug causing fallbackVar to discard an empty string passed as the fallback value

  An empty string fallback was silently dropped, producing var(--myVar) instead of the CSS empty-fallback form var(--myVar, ). fallbackVar now treats '' like any other fallback value.

v1.7.0

Minor Changes

• #​1720 7bbe189 Thanks @​cahnory! - Add support for @scope to conditions

  EXAMPLE USAGE:

  import { style } from '@​vanilla-extract/css';
  import { defineProperties } from '@​vanilla-extract/sprinkles';
  
  const scopeRoot = style();
  
  const scopedProperties = defineProperties({
    defaultCondition: 'unscoped',
    conditions: {
      unscoped: {},
      document: {
        '@​scope': `(${scopeRoot})`
      }
    },
    responsiveArray: ['unscoped', 'scoped'],
    properties: {
      flexDirection: ['row', 'column'],
      order: {
        first: '1',
        second: '2'
      }
    }
  });

v12.40.0

Compare Source

Added

• path option to transition.
• arc() for motion along an arc.

v12.39.0

Compare Source

Added

• Support for repeatType and repeatDelay in animation sequences.

Fixed

• Variants: Re-run keyframe animations when switching between variant labels even when they share identical keyframe arrays.
• Drag: Preserve in-flight motion value animations across React 19 reorder unmount/remount so dragSnapToOrigin no longer leaves the drag transform stranded after a layout swap.
• LazyMotion: Share React contexts between the framer-motion and framer-motion/m (and therefore motion/react and motion/react-m) CJS bundles so that <m.div> from the /m subpath picks up features loaded by <LazyMotion> from the main entry point.
• useScroll: Support hydrating target and container refs from anywhere in the tree.
• Drag: Gesture no longer starts from incorrect start point when rendered inside <AnimatePresence initial={false} />.
• Drag: dragConstraints, when set as viewport-relative ref, no longer break on scroll.§
• Updated visualElement hydration order.
• useAnimate: Now respects skipAnimations.
• AnimatePresence: Fix object-form initial values not applied on re-entry after exit completes.
• scroll: Fixed callback progress when tracking an element.
• useScroll: Fix hardware acceleration when tracking an element.

v19.2.7: 19.2.7 (June 1st, 2026)

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6
  (#​36566 by @​unstubbable)

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

• Type hardening and performance improvements
  (by @​eps1lon and @​unstubbable)

v7.80.0: Version 7.80.0

Compare Source

🧄 feat: disable useFieldArray fields (#​13535)

const { fields } = useFieldArray({ disabled: true });
fields[0].disabled; // contains disabled props

🛺 perf: make rhf more performant (#​13524)
🐞 fix(deepEqual): empty array and empty plain object should not be equal (#​13533)

thanks to @​JSap0914

v7.79.0

Compare Source

Added

• disabled option to useFieldArray

Fixed

• Controller onChange promise return type
• deepEqual false positives with shared object references
• shouldUseNativeValidation behavior for radio groups
• createFormControl stability with fast refresh in dev mode
• StrictMode value preservation during remount
• formState.errors reactivity with React compiler

v7.78.0

Compare Source

Fixed

• Recover Controller fields after reset without rerender (RN issue #​13455)
• useFormState().isDirty race with async resolver in onChange mode
• Use reactive values prop over defaultValues when shouldUnregister is true
• deepEqual for empty non-plain objects

Types

• Update dirtyFields typing for field arrays with undefined entries

v7.77.0

Compare Source

Added

• resetDefaultValues API

Fixed

• Stale isDirty in subscribe payload after reset(..., { keepValues: true })
• Preserve values with shouldUnregister
• Inconsistent reset({}) behavior requiring double-call to take effect
• FieldArray errors overriding nested fields

Security

• Harden get() against prototype-path traversal (__proto__ / constructor / prototype)

Performance

• Bundle size reduction

v7.76.1

Compare Source

Fixed

• Revert notify all matching field-array roots on nested setValue updates
• Revert treat NaN as empty when valueAsNumber is true in validateField
• setValues pass options parameter through to enable validation
• setValues emit whole-form change without stale name/type

Performance

• setValues skip redundant per-field deep clones
• setValues thread skipClone through setFieldValue

v7.76.0

Compare Source

Added

• Improve isDirty sync with dirtyFields state

Fixed

• Preserve formState.defaultValues when useFieldArray and watch are used together
• Preserve nested resolver field-array errors in trigger()
• Notify all matching field-array roots on nested setValue updates
• useFieldArray remove leaves array with empty object when using values prop
• Preserve reset values for conditionally mounted Controller fields with shouldUnregister
• Propagate setValues updates to mounted Controller fields
• Native validation tooltip suppression caused by duplicate submit-error focus
• append({ obj: null }) silently replaced by defaultValues after remove()
• Errors state when using form-level validation
• isValidating reactivity when validatingFields is not subscribed

v7.75.0

Compare Source

Added

• Improve getDirtyFields to prune empty fields
• TypeScript 6.0 support

Fixed

• Include setValues in FormProvider context value
• Preserve watch updates on field array unmount
• Prevent useWatch re-render when unrelated field validation occurs
• Recompute isDirty after re-registering a previously unregistered field

v0.0.51

Compare Source

Patch Changes

• #​351 da1f51c Thanks @​eunwoo-levi! - fix(core/hooks): call cleanup when unmount occurs before async effect resolves

• #​352 fa3daa5 Thanks @​eunwoo-levi! - fix(core/hooks): prevent immediate callback from re-firing when enabled is toggled

v0.0.50

Compare Source

Patch Changes

• #​362 fc9b1dc Thanks @​guesung! - refactor(core): narrow types in debounce utility to reduce any usage

• #​259 1d9ec79 Thanks @​wo-o29! - refactor(useCounter): extract validateValue as pure function and remove unnecessary useCallback

• #​272 75ab148 Thanks @​wo-o29! - refactor(usePrevious): remove unnecessary undefined from compare argument and return type