build(deps): bump the patch-and-minor group across 1 directory with 24 updates

[dependabot]

Bumps the patch-and-minor group with 24 updates in the /web directory:

Package	From	To
@ant-design/icons	6.2.2	6.3.2
@ant-design/x	2.7.0	2.9.0
@ant-design/x-markdown	2.7.0	2.9.0
@ant-design/x-sdk	2.7.0	2.9.0
antd	6.3.7	6.6.2
axios	1.16.0	1.20.0
casdoor-js-sdk	0.19.0	0.20.0
i18next	26.0.8	26.4.0
react	19.2.5	19.2.8
@types/react	19.2.14	19.2.18
react-dom	19.2.5	19.2.8
@types/react-dom	19.2.3	19.2.5
react-i18next	17.0.6	17.0.12
react-router-dom	7.14.2	7.18.3
zustand	5.0.12	5.0.15
@testing-library/react	16.3.2	16.3.3
@testing-library/user-event	14.6.1	14.6.6
@vitejs/plugin-react	6.0.1	6.1.1
eslint	10.3.0	10.9.1
eslint-plugin-react-refresh	0.5.2	0.5.5
globals	17.6.0	17.11.0
typescript-eslint	8.59.1	8.68.0
vite	8.0.10	8.2.2
vitest	4.1.5	4.1.11

Updates @ant-design/icons from 6.2.2 to 6.3.2

Commits

• See full diff in compare view

Updates @ant-design/x from 2.7.0 to 2.9.0

Changelog

Sourced from @​ant-design/x's changelog.

2.9.0

2026-07-23

@​ant-design/x

• 🆕 Added useMobile hook, providing an SSR-safe way to detect mobile devices. #1945 by Mickey
• 🆕 Think and ThoughtChain add a destroyOnHidden prop to automatically destroy the DOM node when content is hidden. #1985 by wryyyds7
• 💄 Actions Feedback no longer renders Tooltip on mobile devices to avoid interaction interference. #1945 by Mickey
• 💄 Conversations now always shows the menu icon on mobile devices (no hover state on mobile). #1945 by Mickey
• 🐛 Improved click responsiveness for Actions, Conversations and other components on mobile by adding touch-action: manipulation to eliminate the 300ms click delay. #1945 by Mickey
• 🐛 Fix Sources CarouselCard not syncing its carousel index when the controlled activeKey changes; the left/right buttons now jump precisely via goTo and edge-button no-ops are fixed. #1945 by Mickey
• 🐛 Fix Sender speech input (useSpeech) not cleaning up SpeechRecognition on unmount, which caused state updates on an unmounted component. #1945 by Mickey
• 🐛 Fix CodeHighlighter not calling registerLanguage after async language loading, which prevented syntax highlighting from working; also fix the code block background not stretching fully during horizontal scroll. #1945 by Mickey
• 🐛 Fix Sender still showing the outer outline on focus in borderless mode. #1963 by QDyanbing
• 🐛 Fix Sender content type slots bypassing formatResult; all slot types (including content) now honor formatResult uniformly, with the DOM text used as the input value for content slots. #1986 by wenzeyu8888-rgb
• 🐛 Fix Suggestion popup not scrolling when there are many options; the popup now scrolls internally (overflow-y: auto) once content exceeds the max height (256px). #1983 by wenzeyu8888-rgb
• 🐛 Fix Sender agent tag label wrapping in agent mode; it now renders inline. #1990 by cc-hearts

@​ant-design/x-markdown

• 🐛 Fix XMarkdown performing an O(N²) code-block scan during streaming that froze the page on long content. #1972 by Div627

@​ant-design/x-sdk

• 🐛 Fix XStream not releasing the reader lock or canceling the underlying stream on early exit (loop break / incomplete read), avoiding resource leaks and dangling read requests. #1970 by Mickey

@​ant-design/x-skill

• 🐛 Fix the x-skill ora spinner (loader) failing to load in CJS environments; the loader instance is now cached and loaded via dynamic import, avoiding duplicate loads and initialization errors. #1980 by jay666mnj

Others

• 📖 Improve site page title composition: separate subtitle and title with a space to avoid concatenated wording. #1959 by Mickey
• 📖 Add a note in the FAQ recommending Antdv Next X for Vue users. #1966 by QDyanbing
• 📖 Unify the semantic DOM heading wording on the Chinese site. #1877 by Rain120
• 🛠 Hide the focus outline on the Component Overview search box. #1987 by QDyanbing

2.8.0

2026-06-08

@​ant-design/x

• 🆕 Folder component adds a right-click context menu. #1919 by Mickey
• 🐛 Fix FileCard.List scroll button state not refreshing when items update. #1914 by Ryker_Feng
• 🐛 Fix Sender runtime-inserted slots being cleared when the slotConfig ref changes. #1900 by pikanohup
• 🐛 Fix design token type coercion before arithmetic operations. #1910 by Div627

@​ant-design/x-markdown

... (truncated)

Commits

• 13afbf4 Merge pull request #1991 from ant-design/chore/changelog-2.9.0
• 5892920 test: update demo snapshots
• b22ee17 Merge branch 'main' into chore/changelog-2.9.0
• 002ec52 chore: bump version to 2.9.0
• d6c6808 chore: merge unreleased 2.8.1 changelog into 2.9.0
• 018276b chore: set 2.9.0 release date to 2026-07-23
• 93c44e1 chore: add newly merged PRs to 2.9.0 changelog
• f17d4ec Merge pull request #1980 from jay666mnj/fix-x-skill-ora-cjs
• 3f1aa9f Merge pull request #1877 from Rain120/feature/docs-unified_semantic
• b6cdd2b Merge branch 'main' into fix-x-skill-ora-cjs
• Additional commits viewable in compare view

Updates @ant-design/x-markdown from 2.7.0 to 2.9.0

Changelog

Sourced from @​ant-design/x-markdown's changelog.

2.9.0

2026-07-23

@​ant-design/x

• 🆕 Added useMobile hook, providing an SSR-safe way to detect mobile devices. #1945 by Mickey
• 🆕 Think and ThoughtChain add a destroyOnHidden prop to automatically destroy the DOM node when content is hidden. #1985 by wryyyds7
• 💄 Actions Feedback no longer renders Tooltip on mobile devices to avoid interaction interference. #1945 by Mickey
• 💄 Conversations now always shows the menu icon on mobile devices (no hover state on mobile). #1945 by Mickey
• 🐛 Improved click responsiveness for Actions, Conversations and other components on mobile by adding touch-action: manipulation to eliminate the 300ms click delay. #1945 by Mickey
• 🐛 Fix Sources CarouselCard not syncing its carousel index when the controlled activeKey changes; the left/right buttons now jump precisely via goTo and edge-button no-ops are fixed. #1945 by Mickey
• 🐛 Fix Sender speech input (useSpeech) not cleaning up SpeechRecognition on unmount, which caused state updates on an unmounted component. #1945 by Mickey
• 🐛 Fix CodeHighlighter not calling registerLanguage after async language loading, which prevented syntax highlighting from working; also fix the code block background not stretching fully during horizontal scroll. #1945 by Mickey
• 🐛 Fix Sender still showing the outer outline on focus in borderless mode. #1963 by QDyanbing
• 🐛 Fix Sender content type slots bypassing formatResult; all slot types (including content) now honor formatResult uniformly, with the DOM text used as the input value for content slots. #1986 by wenzeyu8888-rgb
• 🐛 Fix Suggestion popup not scrolling when there are many options; the popup now scrolls internally (overflow-y: auto) once content exceeds the max height (256px). #1983 by wenzeyu8888-rgb
• 🐛 Fix Sender agent tag label wrapping in agent mode; it now renders inline. #1990 by cc-hearts

@​ant-design/x-markdown

• 🐛 Fix XMarkdown performing an O(N²) code-block scan during streaming that froze the page on long content. #1972 by Div627

@​ant-design/x-sdk

• 🐛 Fix XStream not releasing the reader lock or canceling the underlying stream on early exit (loop break / incomplete read), avoiding resource leaks and dangling read requests. #1970 by Mickey

@​ant-design/x-skill

• 🐛 Fix the x-skill ora spinner (loader) failing to load in CJS environments; the loader instance is now cached and loaded via dynamic import, avoiding duplicate loads and initialization errors. #1980 by jay666mnj

Others

• 📖 Improve site page title composition: separate subtitle and title with a space to avoid concatenated wording. #1959 by Mickey
• 📖 Add a note in the FAQ recommending Antdv Next X for Vue users. #1966 by QDyanbing
• 📖 Unify the semantic DOM heading wording on the Chinese site. #1877 by Rain120
• 🛠 Hide the focus outline on the Component Overview search box. #1987 by QDyanbing

2.8.0

2026-06-08

@​ant-design/x

• 🆕 Folder component adds a right-click context menu. #1919 by Mickey
• 🐛 Fix FileCard.List scroll button state not refreshing when items update. #1914 by Ryker_Feng
• 🐛 Fix Sender runtime-inserted slots being cleared when the slotConfig ref changes. #1900 by pikanohup
• 🐛 Fix design token type coercion before arithmetic operations. #1910 by Div627

@​ant-design/x-markdown

... (truncated)

Commits

• 13afbf4 Merge pull request #1991 from ant-design/chore/changelog-2.9.0
• 5892920 test: update demo snapshots
• b22ee17 Merge branch 'main' into chore/changelog-2.9.0
• 002ec52 chore: bump version to 2.9.0
• d6c6808 chore: merge unreleased 2.8.1 changelog into 2.9.0
• 018276b chore: set 2.9.0 release date to 2026-07-23
• 93c44e1 chore: add newly merged PRs to 2.9.0 changelog
• f17d4ec Merge pull request #1980 from jay666mnj/fix-x-skill-ora-cjs
• 3f1aa9f Merge pull request #1877 from Rain120/feature/docs-unified_semantic
• b6cdd2b Merge branch 'main' into fix-x-skill-ora-cjs
• Additional commits viewable in compare view

Updates @ant-design/x-sdk from 2.7.0 to 2.9.0

Changelog

Sourced from @​ant-design/x-sdk's changelog.

2.9.0

2026-07-23

@​ant-design/x

• 🆕 Added useMobile hook, providing an SSR-safe way to detect mobile devices. #1945 by Mickey
• 🆕 Think and ThoughtChain add a destroyOnHidden prop to automatically destroy the DOM node when content is hidden. #1985 by wryyyds7
• 💄 Actions Feedback no longer renders Tooltip on mobile devices to avoid interaction interference. #1945 by Mickey
• 💄 Conversations now always shows the menu icon on mobile devices (no hover state on mobile). #1945 by Mickey
• 🐛 Improved click responsiveness for Actions, Conversations and other components on mobile by adding touch-action: manipulation to eliminate the 300ms click delay. #1945 by Mickey
• 🐛 Fix Sources CarouselCard not syncing its carousel index when the controlled activeKey changes; the left/right buttons now jump precisely via goTo and edge-button no-ops are fixed. #1945 by Mickey
• 🐛 Fix Sender speech input (useSpeech) not cleaning up SpeechRecognition on unmount, which caused state updates on an unmounted component. #1945 by Mickey
• 🐛 Fix CodeHighlighter not calling registerLanguage after async language loading, which prevented syntax highlighting from working; also fix the code block background not stretching fully during horizontal scroll. #1945 by Mickey
• 🐛 Fix Sender still showing the outer outline on focus in borderless mode. #1963 by QDyanbing
• 🐛 Fix Sender content type slots bypassing formatResult; all slot types (including content) now honor formatResult uniformly, with the DOM text used as the input value for content slots. #1986 by wenzeyu8888-rgb
• 🐛 Fix Suggestion popup not scrolling when there are many options; the popup now scrolls internally (overflow-y: auto) once content exceeds the max height (256px). #1983 by wenzeyu8888-rgb
• 🐛 Fix Sender agent tag label wrapping in agent mode; it now renders inline. #1990 by cc-hearts

@​ant-design/x-markdown

• 🐛 Fix XMarkdown performing an O(N²) code-block scan during streaming that froze the page on long content. #1972 by Div627

@​ant-design/x-sdk

• 🐛 Fix XStream not releasing the reader lock or canceling the underlying stream on early exit (loop break / incomplete read), avoiding resource leaks and dangling read requests. #1970 by Mickey

@​ant-design/x-skill

• 🐛 Fix the x-skill ora spinner (loader) failing to load in CJS environments; the loader instance is now cached and loaded via dynamic import, avoiding duplicate loads and initialization errors. #1980 by jay666mnj

Others

• 📖 Improve site page title composition: separate subtitle and title with a space to avoid concatenated wording. #1959 by Mickey
• 📖 Add a note in the FAQ recommending Antdv Next X for Vue users. #1966 by QDyanbing
• 📖 Unify the semantic DOM heading wording on the Chinese site. #1877 by Rain120
• 🛠 Hide the focus outline on the Component Overview search box. #1987 by QDyanbing

2.8.0

2026-06-08

@​ant-design/x

• 🆕 Folder component adds a right-click context menu. #1919 by Mickey
• 🐛 Fix FileCard.List scroll button state not refreshing when items update. #1914 by Ryker_Feng
• 🐛 Fix Sender runtime-inserted slots being cleared when the slotConfig ref changes. #1900 by pikanohup
• 🐛 Fix design token type coercion before arithmetic operations. #1910 by Div627

@​ant-design/x-markdown

... (truncated)

Commits

• 13afbf4 Merge pull request #1991 from ant-design/chore/changelog-2.9.0
• 5892920 test: update demo snapshots
• b22ee17 Merge branch 'main' into chore/changelog-2.9.0
• 002ec52 chore: bump version to 2.9.0
• d6c6808 chore: merge unreleased 2.8.1 changelog into 2.9.0
• 018276b chore: set 2.9.0 release date to 2026-07-23
• 93c44e1 chore: add newly merged PRs to 2.9.0 changelog
• f17d4ec Merge pull request #1980 from jay666mnj/fix-x-skill-ora-cjs
• 3f1aa9f Merge pull request #1877 from Rain120/feature/docs-unified_semantic
• b6cdd2b Merge branch 'main' into fix-x-skill-ora-cjs
• Additional commits viewable in compare view

Updates antd from 6.3.7 to 6.6.2

Release notes

Sourced from antd's releases.

6.6.2

• ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
• 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
• Menu
  • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
  • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
  • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
  • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
• Table
  • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
  • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
• Tree
  • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
  • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
• List
  • 🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @​nrps9909
  • 🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @​QDyanbing
• 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
• 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
• 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
• 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
• 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
• 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
• ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
• ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
• 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
• 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
• 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
• 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

---

• ♿ 优化 Progress、Steps 和 Tooltip 的无障碍体验，避免进度条 SVG 被重复朗读，确保键盘激活 Steps 项目时触发 onClick，并保留 Tooltip 已有的 aria-describedby 关联。#59139 @​github-actions
• 🐞 修复 Alert、Empty、Card、Tag、Breadcrumb、Segmented、FloatButton、Form.Item 和 Statistic 无法正确渲染数值 0 内容的问题。#59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 修复 Alert 全局 closable、Select 和 AutoComplete 的 onPopupVisibleChange 类型定义错误暴露不支持回调或属性的问题。#59100 #59142 @​QDyanbing
• Menu
  • ⌨️ 修复多个 Menu 实例之间弹层 ID 重复的问题。#59048 @​zombieJ
  • 🐞 修复 Menu 横向模式下鼠标从菜单项移向子菜单弹层时子菜单意外关闭的问题。#59088 @​EmilyyyLiu
  • 🐞 修复 Menu 内联菜单收缩完成后图标仍继续位移的问题。#59085 @​QDyanbing
• Transfer
  • 🐞 修复 Transfer 搜索结果全部为禁用项时“全选”复选框仍可用的问题。#59121 @​QDyanbing
  • 🐞 修复 Transfer 从空过滤结果恢复数据后不显示列表项的问题。#59074 @​biubiukam
• Table
  • 🐞 修复 Table 可排序列不触发非 Enter 键自定义 onKeyDown 回调的问题。#59078 @​QDyanbing
  • 🐞 修复 Table 关闭内置筛选面板时重复触发 filterDropdownProps.onOpenChange(false) 的问题。#59023 @​thlovey
• Tree
  • 🐞 修复 Tree.DirectoryTree 的 expandedKeys 或 selectedKeys 显式传入 undefined 时无法展开或选择的问题。#59076 @​giaBaoJS
  • 🐞 修复 Tree.DirectoryTree 从 key 为数值 0 的节点开始时 Shift 范围选择失效的问题。#59029 @​QDyanbing
• List

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.2

2026-08-28

• ♿ Improve Progress, Steps, and Tooltip accessibility by avoiding redundant SVG announcements, triggering Steps item onClick on keyboard activation, and preserving existing Tooltip aria-describedby relationships. #59139 @​github-actions
• 🐞 Fix numeric 0 content rendering across Alert, Empty, Card, Tag, Breadcrumb, Segmented, FloatButton, Form.Item, and Statistic. #59117 #59094 #59079 #59101 @​bhumin18 @​QDyanbing @​dogledogle
• 🤖 Fix Alert global closable and Select and AutoComplete onPopupVisibleChange type definitions incorrectly exposing unsupported callbacks or props. #59100 #59142 @​QDyanbing
• Menu
  • ⌨️ Fix duplicate Menu popup IDs across multiple instances. #59048 @​zombieJ
  • 🐞 Fix Menu horizontal submenus unexpectedly closing when the pointer moves from an item to its popup. #59088 @​EmilyyyLiu
  • 🐞 Fix Menu icons continuing to move after an inline menu finishes collapsing. #59085 @​QDyanbing
• Transfer
  • 🐞 Fix Transfer select-all checkbox remaining enabled when all search results are disabled. #59121 @​QDyanbing
  • 🐞 Fix Transfer rendering no items after filtered data is restored from an empty result. #59074 @​biubiukam
• Table
  • 🐞 Fix Table sortable columns not invoking custom onKeyDown handlers for keys other than Enter. #59078 @​QDyanbing
  • 🐞 Fix Table triggering filterDropdownProps.onOpenChange(false) twice when closing the built-in filter dropdown. #59023 @​thlovey
• Tree
  • 🐞 Fix Tree.DirectoryTree failing to expand or select nodes when expandedKeys or selectedKeys is explicitly undefined. #59076 @​giaBaoJS
  • 🐞 Fix Tree.DirectoryTree Shift range selection when starting from a node whose key is numeric 0. #59029 @​QDyanbing
• List
  • 🐞 Fix List remounting items when rowKey returns numeric 0. #59113 @​nrps9909
  • 🛎 Update List deprecation warning to recommend migrating to Listy. #59060 @​QDyanbing
• 🐞 Fix Checkbox.Group disabled={false} failing to override the global disabled state for JSX children. #59109 @​QDyanbing
• 🐞 Fix Upload leaving hidden canvas elements in the DOM after generating GIF previews. #59137 @​dogledogle
• 🐞 Fix Notification close buttons unintentionally submitting enclosing forms. #59126 @​nrps9909
• 🐞 Fix Drawer header action area not rendering when only the extra prop is provided. #59089 @​dogledogle
• 🐞 Fix Grid Row retaining stale align and justify classes after the props are removed or responsive breakpoints stop matching. #59066 @​QDyanbing
• 🐞 Fix Tag.CheckableTag local style being overridden by ConfigProvider tag.style. #59087 @​QDyanbing
• ♿ Improve Steps accessibility by hiding decorative panel arrows from assistive technology. #59105 @​nrps9909
• ♿ Improve Skeleton.Image accessibility by hiding its decorative placeholder graphic from assistive technology. #59107 @​nrps9909
• 🐞 Fix Descriptions resetting item state after reordering an item with key: 0. #59064 @​QDyanbing
• 🐞 Fix Cascader and Cascader.Panel showing the default empty state when notFoundContent is null. #59028 @​QDyanbing
• 🐞 Fix Watermark throwing an error when content is undefined. #59077 @​VamoBao
• 📖 Fix component LLMs links on website mirrors and local deployments. #59062 @​QDyanbing

6.6.1

2026-08-17

• ♿ Improve localized accessible names for Upload actions and Modal and Notification close buttons. #58953 #58957 @​nrps9909
• 🌐 Improve Traditional Chinese terminology across localized components and use Taiwan-preferred week wording in DatePicker. #58947 #58951 @​nrps9909
• 🐞 Fix Upload dropping newly added files when async onRemove resolves. #58814 @​afc163
• 🐞 Fix Anchor triggering duplicate onChange callbacks on scroll when using getCurrentAnchor. #58834 @​nikzanda
• Form
  • 🐞 Fix Form height fluctuation during rapid validation state changes. #59008 @​waterWang
  • 🐞 Fix Form vertical layout labelCol.offset being overridden by label margins. #58981 @​nikzanda
  • ♿ Improve Form complex-control guidance so labels can be explicitly associated with nested controls. #59001 @​nrps9909
  • 📝 Correct Form.Item required documentation to clarify that validation rules infer the required state when unset. #58989 @​QDyanbing
• Listy

... (truncated)

Commits

• 1cb3762 docs: add changelog for 6.6.2 (#59143)
• fa0c357 fix(Transfer): disable select all for disabled search results (#59121)
• a06ff88 fix(Select): exclude internal popup visibility callback (#59142)
• bebea8a chore: upgrade deps (#59139)
• e315024 fix(Upload): avoid leaving canvas after GIF preview (#59137)
• d58fe29 docs(react): capitalize JavaScript in introduce.en-US.md (#59122)
• 5845bc8 fix(Notification): upgrade non-submitting close controls (#59126)
• dc4490a fix(Grid): clear stale row alignment classes (#59066)
• 807f237 fix(Card, Tag, Breadcrumb, Segmented, FloatButton): render numeric zero for c...
• e8fbc23 fix(Table): preserve custom header keydown events (#59078)
• Additional commits viewable in compare view

Updates axios from 1.16.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

• HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

• Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

• Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
• Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
• XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
• Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
• Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

• Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
• Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
• Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
• CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​yens1 (#11109)
• @​Sasireddy001 (#11113)
• @​ari-token-security (#11094)
• @​timothyokooboh (#11097)
• @​gi9439041-png (#11119)
• @​Hashim1999164 (#11082)
• @​v-dev-cl (#11091)
• @​r0h1tb (#11118)
• @​ostapondo (#11121)

Full Changelog (axios/axios@v1.19.0...v1.20.0)

v1.19.0 - July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

• Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

... (truncated)

Changelog

Sourced from axios's changelog.

Changelog

v1.19.0 — July 22, 2026

This release raises the form-data security floor, adds configuration and type-system capabilities, and fixes NO_PROXY matching, interceptor errors, progress reporting, and serialization edge cases.

🔒 Security Fixes

• Multipart Form Data: Raised the form-data dependency floor to ^4.0.6, preventing fresh installations from resolving versions affected by the CRLF injection vulnerability GHSA-hmw2-7cc7-3qxx (GHSA-hmw2-7cc7-3qxx). (#11028)

🚀 New Features

• Configuration Extensibility: Preserved own-enumerable symbol-keyed fields through mergeConfig and added a generic params type across public TypeScript declarations, responses, errors, adapters, and serializers. (#11043, #11081)
• Header Parameter Parsing: Added the opt-in AxiosHeaders.parseParameters() parser for quote-aware, RFC-style HTTP parameter parsing while preserving legacy parsing behavior. (#11051)
• HTTP Status Codes: Added the missing Cloudflare 520 WebServerReturnsAnUnknownError status and matching ESM/CJS declarations. (#11067)

🐛 Bug Fixes

• Form Data Conversion: Limited formDataToJSON path splitting to dot and bracket notation, preserving literal punctuation in keys, and removed browser-facing Buffer.from usage from toFormData to avoid unnecessary polyfills. (#11006, #11018)

• Proxy Bypass: Canonicalized IPv4 shorthand, octal, and hexadecimal forms during NO_PROXY matching and honored * entries within comma- or space-separated bypass lists. (#11029, #11053)

• Cancellation: Propagated already-aborted input signals immediately when composing abort signals. (#11035)

• Header Handling: Preserved empty first values for duplicate singleton headers and made AxiosHeaders#getSetCookie() consistently return arrays for present values. (#11036, #11037)

• URL Handling: Included normalized, safely redacted offending URLs in malformed-protocol errors and removed repeated trailing slashes when combining base URLs. (#11008, #11038)

• Progress Events: Clamped malformed negative progress values to zero and ensured final Node.js download progress events are delivered before streamed responses close. (#11039, #11040)

• Error and JSON Serialization: Serialized Set values as arrays in JSON-compatible snapshots and synthesized useful AxiosError messages from otherwise-empty AggregateError instances. (#11044, #11059)

• Content-Length Enforcement: Corrected base64 data: URL size estimation so maxContentLength is enforced consistently by the HTTP and Fetch adapters. (#11061)

• Synchronous Interceptors: Prevented requests from being dispatched after synchronous request interceptors fail unless their paired rejection handler resolves successfully. (#11071)

🔧 Maintenance & Chores

• Dependencies: Updated development and test tooling, the docs fixture's Axios version, and GitHub Actions integrations including Checkout, Setup Node, Setup Deno, and Z...

  Description has been truncated