chore(deps): update all non-major dependencies

4.17.23 -> 4.18.1

4.18.1

Compare Source

Bugs

Fixes a ReferenceError issue in lodash lodash-es lodash-amd and lodash.template when using the template and fromPairs functions from the modular builds. See lodash/lodash#6167#issuecomment-4165269769

These defects were related to how lodash distributions are built from the main branch using https://github.com/lodash-archive/lodash-cli. When internal dependencies change inside lodash functions, equivalent updates need to be made to a mapping in the lodash-cli. (hey, it was ahead of its time once upon a time!). We know this, but we missed it in the last release. It's the kind of thing that passes in CI, but fails bc the build is not the same thing you tested.

There is no diff on main for this, but you can see the diffs for each of the npm packages on their respective branches:

• lodash: https://github.com/lodash/lodash/compare/4.18.0-npm...4.18.1-npm
• lodash-es: https://github.com/lodash/lodash/compare/4.18.0-es...4.18.1-es
• lodash-amd: https://github....

[View full release notes]

Released by jonchurch on 4/1/2026

4.18.0

Compare Source

v4.18.0

Full Changelog: https://github.com/lodash/lodash/compare/4.17.23...4.18.0

Security

_.unset / _.omit: Fixed prototype pollution via constructor/prototype path traversal (GHSA-f23m-r3pf-42rh, fe8d32e). Previously, array-wrapped path segments and primitive roots could bypass the existing guards, allowing deletion of properties from built-in prototypes. Now constructor and prototype are blocked unconditionally as non-terminal path keys, matching baseSet. Calls that previously returned true and deleted the property now return false and leave the target untouched.

_.template: Fixed code injection via imports keys (GHSA-r5fr-rjxr-66jc, CVE-2026-4800, [879aaa9](https://github.com/lodash/lodash/commit/879aaa931...

[View full release notes]

Released by jonchurch on 3/31/2026

1.0.19 -> 1.1.1

Compare Source

Multidimensional Arrays

📖 View Release Notes

🔗 View Changelog

Release Notes

Changelog

19.2.7 -> 19.3.1

v19.3.1

Compare Source

React Server Components

• Improve transport protocol (#37845 by unstubbable and eps1lon)

Released by eps1lon on 10/14/2026

v19.2.9

Compare Source

React Server Components

• Improve transport protocol (#37844 by unstubbable and eps1lon)

Released by eps1lon on 10/14/2026

v19.3.0

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (sebmarkbage, jackpope, gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, [#32254](`facebook/r...

[View full release notes]

Released by eps1lon on 9/9/2026

19.2.7 -> 19.3.1

v19.3.1

Compare Source

React Server Components

• Improve transport protocol (#37845 by unstubbable and eps1lon)

Released by eps1lon on 10/14/2026

v19.2.9

Compare Source

React Server Components

• Improve transport protocol (#37844 by unstubbable and eps1lon)

Released by eps1lon on 10/14/2026

v19.3.0

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (sebmarkbage, jackpope, gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, [#32254](`facebook/r...

[View full release notes]

Released by eps1lon on 9/9/2026

0.2.11 -> 0.2.31

v0.2.31

Compare Source

Released by github-actions[bot] on 10/30/2026

v0.2.30

Compare Source

Released by github-actions[bot] on 10/29/2026

v0.2.29

Compare Source

Released by github-actions[bot] on 10/26/2026

0.2.10 -> 0.2.16

v0.2.16

Compare Source

Released by github-actions[bot] on 9/8/2026

v0.2.15

Compare Source

Released by github-actions[bot] on 8/28/2026

v0.2.14

Compare Source

Released by github-actions[bot] on 8/28/2026

0.2.15 -> 0.2.38

v0.2.38

Compare Source

Released by github-actions[bot] on 10/11/2026

v0.2.37

Compare Source

Released by github-actions[bot] on 10/4/2026

v0.2.36

Compare Source

Released by github-actions[bot] on 10/3/2026

0.15.18 -> 0.15.21

v0.15.21

Compare Source

Released by github-actions[bot] on 10/18/2026

v0.15.20

Compare Source

Released by github-actions[bot] on 10/18/2026

v0.15.19

Compare Source

Released by github-actions[bot] on 8/19/2026

3.5.39 -> 3.5.44

v3.6.0-rc.14

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 10/30/2026

v3.6.0-rc.13

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 10/23/2026

v3.6.0-rc.12

Compare Source

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Released by github-actions[bot] on 10/16/2026