[Snyk] Upgrade react-hook-form from 7.32.2 to 7.49.3

[Eiromplays]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-hook-form from 7.32.2 to 7.49.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 77 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2024-01-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-hook-form

• 7.49.3 - 2024-01-08
  

  🐛 fix(formState, disabled): infer controlled disabled form state (#11361)
  🐛 fix(reset): remove global reset option flag (#11355)
  🐛 fix(useController): check if disabled state was set by user (#11353)
  🖨️ fix: Change DeepPartial type definition to be compatible with unknown (#11333)
  🐞 fix #11328 resetField with object as defaultValue (#11329)

  thanks to @ Moshyfawn, @ geeee and @ RulerOfCakes

• 7.49.2 - 2023-12-13
  

  🐞 fix #11292 issue with controller validation prop (#11294)

• 7.49.1 - 2023-12-12
  

  🐞 fix #11276 issue with disabled omit on Controller (#11277)
  🐞 fix #11287 disabled prop cause const dirtyFields update (#11291)

• 7.49.0 - 2023-12-09
  

  📮 feat: add reactive errors prop at useForm (#11188)

  useForm({
    errors, // server errors
  })

  🖥️ feat: add react-server bundle (#11162)
  🔩 chore: upgrade Node.js and pnpm (#11163)
  🪖 feat: add ValidationModeFlags Type (#11144)
  🐞 fix #11267 disabled prop does not affect controller validation (#11273)
  🔧 refactor(util function): Enhance Consistency in Utility Functions: Standardizing Export, Function Types, and Naming (#11268)
  ⌨️ change type structure of UseFormHandleSubmit (#11245)
  📮 fix(#11239): Set fields disabled state based on form and field disabled (#11241)
  🍢 improved getDirtyFieldsFromDefaultValues type (#11238)
  🐞 fix #11229 issue with values not re-render the root form (#11231)
  🐞 fix #11218 useFieldArray focus issue with rules prop (#11221)
  🔧 chore: improved isObjectType and swap (#11183)

  thanks to @ kotarella1110, @ ssi02014, @ thomasdbock, @ mildfuzz and @ Lennon57

• 7.48.2 - 2023-11-05
  

  🐞 #11106 fix disabled prop not update dirty formState (#11143)
  🐞 fix controller update with disabled prop from useForm (#11142)

• 7.48.1 - 2023-11-04
  

  🐞 fix controller update with disabled prop from useForm

• 7.48.0 - 2023-11-04
  

  🧱 feature: disable prop for useForm (#10496)

  const App = () => {
  const [disabled, setDisabled] = useState(false);
  const { handleSubmit } = useForm({ disabled });

  return (
  <form
  onSubmit={handleSubmit(async () => {
  setDisabled(true);
  await sleep(100);
  setDisabled(false);
  })}
  / >
  );
  }

  😵‍💫 fixed typo in useFormContext (#11126)
  🫡 strictly manage constants and improve types (#11101)
  🐞 fix #11076 disable toggle issue (#11090)
  🚀 fix: Solve the issue of race condition with resolver. (#10991)
  📖 docs: fix useWatch example syntax error (#11005)
  📝 readme arabic version (#10992)

  thanks to @ Iyadchafroud @ domuk-k @ mehunk @ ssi02014 and @ tykhan

• 7.47.0 - 2023-10-02
  Read more
• 7.46.2 - 2023-09-21
  Read more
• 7.46.1 - 2023-09-04
  

  🐞 fix #10878 return disabled field state (#10879)

  thanks to @ Moshyfawn

• 7.46.0 - 2023-09-03
• 7.46.0-next.0 - 2023-08-13
• 7.45.4 - 2023-08-05
• 7.45.3 - 2023-08-04
• 7.45.2 - 2023-07-17
• 7.45.1 - 2023-06-28
• 7.45.0 - 2023-06-19
• 7.45.0-next.1 - 2023-06-18
• 7.45.0-next.0 - 2023-06-11
• 7.44.3 - 2023-06-01
• 7.44.3-beta.1 - 2023-05-31
• 7.44.3-beta.0 - 2023-05-31
• 7.44.2 - 2023-05-28
• 7.44.1 - 2023-05-27
• 7.44.0 - 2023-05-27
• 7.44.0-rc.5 - 2023-05-20
• 7.44.0-rc.4 - 2023-05-20
• 7.44.0-rc.3 - 2023-05-07
• 7.44.0-rc.1 - 2023-04-15
• 7.44.0-rc.0 - 2023-03-10
• 7.44.0-next.1 - 2023-02-16
• 7.44.0-next.0 - 2023-02-09
• 7.43.9 - 2023-03-30
• 7.43.8 - 2023-03-24
• 7.43.7 - 2023-03-18
• 7.43.6 - 2023-03-17
• 7.43.5 - 2023-03-06
• 7.43.4 - 2023-03-03
• 7.43.3 - 2023-03-01
• 7.43.2 - 2023-02-22
• 7.43.1 - 2023-02-07
• 7.43.0 - 2023-01-30
• 7.43.0-next.0 - 2023-01-18
• 7.42.1 - 2023-01-15
• 7.42.0 - 2023-01-13
• 7.42.0-next.0 - 2023-01-01
• 7.41.8-beta.0 - 2023-01-04
• 7.41.5 - 2023-01-04
• 7.41.4 - 2023-01-03
• 7.41.3 - 2022-12-30
• 7.41.2 - 2022-12-28
• 7.41.1 - 2022-12-23
• 7.41.0 - 2022-12-16
• 7.40.0 - 2022-11-29
• 7.40.0-next.1 - 2022-11-23
• 7.40.0-next.0 - 2022-11-17
• 7.39.7 - 2022-11-28
• 7.39.6 - 2022-11-27
• 7.39.5 - 2022-11-21
• 7.39.4 - 2022-11-14
• 7.39.3 - 2022-11-10
• 7.39.2 - 2022-11-09
• 7.39.1 - 2022-11-02
• 7.39.0 - 2022-11-01
• 7.38.0 - 2022-10-18
• 7.37.0 - 2022-10-06
• 7.37.0-next.0 - 2022-09-29
• 7.36.1 - 2022-09-23
• 7.36.0 - 2022-09-20
• 7.35.0 - 2022-09-09
• 7.35.0-next.0 - 2022-08-25
• 7.34.2 - 2022-08-15
• 7.34.1 - 2022-08-12
• 7.34.0 - 2022-07-28
• 7.34.0-next.0 - 2022-07-10
• 7.33.1 - 2022-07-01
• 7.33.0 - 2022-06-24
• 7.32.2 - 2022-06-17

from react-hook-form GitHub release notes

Commit messages

Package name: react-hook-form

• e4c1fb1 7.49.3
• e6a5b1a 🐛 fix(formState, disabled): infer controlled disabled form state (#11361)
• dab35e1 🐛 fix(reset): remove global reset option flag (#11355)
• 4f4eae5 🐛 fix(useController): check if disabled state was set by user (#11353)
• 012bb19 🖨️ fix: Change `DeepPartial` type definition to be compatible with `unknown` (#11333)
• 94114e4 🐞 fix #11328 resetField with object as defaultValue (#11329)
• 7e5af8d 7.49.2
• c91e816 🩺 add broken test for useController (#11293)
• 28d0d93 🐞 fix #11292 issue with controller validation prop (#11294)
• 7f56c6e 7.49.1
• 642c43a 🩺 add broken test for useController (#11290)
• 5d2d471 🩺 add test for disabled form field submit (#11288)
• 26f0695 🐞 fix #11287 disabled prop cause const dirtyFields update (#11291)
• 91949a0 🐞 fix #11276 issue with disabled omit on Controller (#11277)
• fb0c38e 🥼 update changelog v7.49.0
• 00aa3b8 7.49.0
• a26cc94 fix #11267 disabled prop not affect controller validation (#11273)
• 4585eb3 🔧 refactor(util function): Enhance Consistency in Utility Functions: Standardizing Export, Function Types, and Naming (#11268)
• e18d7be ⌨️ change type structure of `UseFormHandleSubmit` (#11245)
• d949850 📮 fix(#11239): Set fields disabled state based on form and field disabled (#11241)
• ed23a09 🍢 improved `getDirtyFieldsFromDefaultValues` type (#11238)
• 9b48ddf 🐞 fix #11229 issue with values not re-render the root form (#11231)
• 1eae062 🐞 fix #11218 `useFieldArray` focus issue with rules prop (#11221)
• c7b7eac 📮 feat: add `errors` prop at `useForm` (#11188)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs