chore(deps): bump the minor-and-patch group across 1 directory with 28 updates

[dependabot]

Bumps the minor-and-patch group with 28 updates in the / directory:

Package	From	To
@base-ui/react	1.6.0	1.8.0
@fontsource-variable/geist	5.2.9	5.3.0
@hookform/resolvers	5.4.0	5.9.1
@tailwindcss/vite	4.3.2	4.3.3
@tanstack/react-query	5.101.2	5.103.2
@tanstack/react-router	1.170.17	1.170.39
@tanstack/react-router-devtools	1.167.0	1.167.2
axios	1.18.1	1.20.0
lucide-react	1.24.0	1.48.0
react	19.2.7	19.3.0
@types/react	19.2.17	19.3.0
react-dom	19.2.7	19.3.0
@types/react-dom	19.2.3	19.3.0
react-hook-form	7.81.0	7.88.0
tailwind-merge	3.6.0	3.7.0
tailwindcss	4.3.2	4.3.3
zod	4.4.3	4.6.5
zustand	5.0.14	5.0.15
@biomejs/biome	2.5.3	2.5.14
@secretlint/secretlint-rule-preset-recommend	13.0.2	13.0.5
@tanstack/react-query-devtools	5.101.2	5.103.2
@tanstack/router-plugin	1.168.19	1.168.40
@testing-library/react	16.3.2	16.3.3
@types/react	19.2.17	19.3.0
@types/react-dom	19.2.3	19.3.0
@vitejs/plugin-react	6.0.3	6.1.1
lint-staged	17.0.8	17.5.1
secretlint	13.0.2	13.0.5
shadcn	4.13.0	4.21.0
vite	8.1.4	8.3.1

Updates @base-ui/react from 1.6.0 to 1.8.0

Release notes

Sourced from @​base-ui/react's releases.

v1.8.0

General changes

• Fix label association when a control unregisters (#5456) by @​atomiks
• Reduce animation completion work (#5535) by @​atomiks
• Fix prop and ref merging for lazy render elements (#5562) by @​atomiks
• Fix roving focus when items are added or removed (#5447) by @​atomiks
• Fix hover and focus interaction issues (#5037) by @​atomiks
• Improve trigger mount performance (#5426) by @​atomiks
• Fix disabled anchor tracking on scroll (#5478) by @​atomiks
• Fix transform origin for start/end alignment (#5015) by @​atomiks
• Remove duplicate options key from arrow middleware (#5606) by @​atomiks
• Register passive touch listeners (#5572) by @​wanxiankai

Alert Dialog

• Ignore outside clicks from presses that began before open (#5378) by @​michaldudak

Autocomplete

• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

Avatar

• Add keepMounted prop to <Avatar.Image> (#5536) by @​atomiks

Checkbox

• Fix stale and duplicated control IDs (#5457) by @​atomiks
• Fix controlled blur validation and stale filled state (#5563) by @​atomiks

Checkbox Group

• Fix stale and duplicated control IDs (#5457) by @​atomiks

Combobox

• Fix applying data-readonly to <Combobox.Trigger> (#5418) by @​sai6855
• Add createItems collection API (#5326) by @​atomiks
• Fix cancellation when preserving the filter after selection (#5362) by @​atomiks
• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Fix record item label lookup reading from Object.prototype (#5518) by @​XionWCFM
• Anchor multiple selection to the first selected item with a linear lookup (#5573, #5613) by @​atomiks and @​michaldudak
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

... (truncated)

Changelog

Sourced from @​base-ui/react's changelog.

v1.8.0

Sep 4, 2026

General changes

• Fix label association when a control unregisters (#5456) by @​atomiks
• Reduce animation completion work (#5535) by @​atomiks
• Fix prop and ref merging for lazy render elements (#5562) by @​atomiks
• Fix roving focus when items are added or removed (#5447) by @​atomiks
• Fix hover and focus interaction issues (#5037) by @​atomiks
• Improve trigger mount performance (#5426) by @​atomiks
• Fix disabled anchor tracking on scroll (#5478) by @​atomiks
• Fix transform origin for start/end alignment (#5015) by @​atomiks
• Remove duplicate options key from arrow middleware (#5606) by @​atomiks
• Register passive touch listeners (#5572) by @​wanxiankai

Alert Dialog

• Ignore outside clicks from presses that began before open (#5378) by @​michaldudak

Autocomplete

• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz
• Move aria-orientation to the role owners (#5551) by @​gonzoblasco
• Hide group labels and scrollbars from the accessibility tree (#5598) by @​azeng4499

Avatar

• Add keepMounted prop to <Avatar.Image> (#5536) by @​atomiks

Checkbox

• Fix stale and duplicated control IDs (#5457) by @​atomiks
• Fix controlled blur validation and stale filled state (#5563) by @​atomiks

Checkbox Group

• Fix stale and duplicated control IDs (#5457) by @​atomiks

Combobox

• Fix applying data-readonly to <Combobox.Trigger> (#5418) by @​sai6855
• Add createItems collection API (#5326) by @​atomiks
• Fix cancellation when preserving the filter after selection (#5362) by @​atomiks
• Render groups with the rowgroup role in grid mode (#5564) by @​atomiks
• Allow opening and browsing the popup while readOnly (#5541) by @​vikuscz

... (truncated)

Commits

• 47b4052 [release] v1.8.0 (#5609)
• dd13809 [toast] Accept an updater function in the update method instead of on data (#...
• 670e95c [docs] Update docs infra to restore generated types (#5616)
• e8526f7 [utils] Restore frozen EMPTY_ARRAY (#5620)
• b7f6683 [number field] Preserve consumer selection when focusing the input (#5619)
• b8c5d78 [context menu] Correct generated API metadata (#5523)
• 261d699 [combobox][autocomplete] Document that items must not contain nullish entries...
• 0a6ff44 [toast] Replace custom data wholesale and accept a function to derive it (#5611)
• 2e1bddd [combobox][select] Make the multiple selection anchor lookup linear (#5613)
• ad83c8a [code-infra] Run TypeScript 7 alongside the TS6 JS API (#5603)
• Additional commits viewable in compare view

Updates @fontsource-variable/geist from 5.2.9 to 5.3.0

Commits

• See full diff in compare view

Updates @hookform/resolvers from 5.4.0 to 5.9.1

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

• isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

• update joi to v18 (#873) (c8159ae)

v5.8.0

5.8.0 (2026-08-13)

Features

• support Vest 6 (a5100ab)

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

• ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

• support vine v4 (#867) (4cfba18)

v5.6.0

5.6.0 (2026-08-01)

Features

• improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

... (truncated)

Commits

• f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
• c8159ae feat: update joi to v18 (#873)
• a5100ab feat: support Vest 6
• 28ec539 fix(vest)!: support Vest 6 (#874)
• 827f20b fix: ata-validator peer dependency version (#871)
• 4cfba18 feat: support vine v4 (#867)
• 58d2e2d remove dead image
• b011a5f feat: improve all resovlers drops validation errors for special root field names
• 5483a03 improve all resolvers (#870)
• 2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
• Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.2 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

Commits

• c2b24dd 4.3.3 (#20334)
• bdcd708 Don't trigger a full page reload for scanned files that Vite processes as mod...
• See full diff in compare view

Updates @tanstack/react-query from 5.101.2 to 5.103.2

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.103.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.103.2
  • @​tanstack/react-query@​5.103.2

@​tanstack/react-query-next-experimental@​5.103.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.103.2

@​tanstack/react-query-persist-client@​5.103.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.103.2
  • @​tanstack/react-query@​5.103.2

@​tanstack/react-query@​5.103.2

Patch Changes

• Updated dependencies [8a28904]:
  • @​tanstack/query-core@​5.103.2

Changelog

Sourced from @​tanstack/react-query's changelog.

5.103.2

Patch Changes

• Updated dependencies [8a28904]:
  • @​tanstack/query-core@​5.103.2

5.103.1

Patch Changes

• Updated dependencies [8330b2f, 3212966]:
  • @​tanstack/query-core@​5.103.1

5.103.0

Patch Changes

• Updated dependencies [e57f816, fdae2ce, a1119e5, cbf77bf]:
  • @​tanstack/query-core@​5.103.0

5.102.8

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.8

5.102.7

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.102.7

5.102.6

Patch Changes

• #11305 ac2b612 - fix(react-query): throw falsy errors from useQueries and useSuspenseQueries to the error boundary

• Updated dependencies []:

  • @​tanstack/query-core@​5.102.6

5.102.5

Patch Changes

• Updated dependencies [578e5c2]:
  • @​tanstack/query-core@​5.102.5

... (truncated)

Commits

• e0f6c55 ci: Version Packages (#11525)
• c08f576 ci: Version Packages (#11511)
• 19ccf27 ci: Version Packages (#11339)
• 2da46cd chore(*): use eslint description syntax for grandfathered 'no-restricted-synt...
• 58ad3e2 fix: isolate TypeScript test output (#11503)
• d63afc7 Simplifed query methods/internal tests new lint (#11347)
• 23fbdc3 test({react,preact,solid,angular}-query): remove 'fromGenericOptionsQueryFn' ...
• 50680b9 test({react,preact,solid,svelte}-query,angular-query-experimental): rename 'm...
• 0b326b6 test({react,preact}-query/useMutation): add tests for 'MutationFunctionContex...
• a1119e5 ref(hydration): remove outdated dehydratedAt fallback (#11436)
• Additional commits viewable in compare view

Updates @tanstack/react-router from 1.170.17 to 1.170.39

Release notes

Sourced from @​tanstack/react-router's releases.

@​tanstack/react-router@​1.170.39

Patch Changes

• #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.

@​tanstack/react-router@​1.170.38

Patch Changes

• Updated dependencies [cecae54, 0103578, ce10dcd, 84936cc, bbd2336]:
  • @​tanstack/router-core@​1.171.32

@​tanstack/react-router@​1.170.37

Patch Changes

• #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

• #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

• #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

  Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

  Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

  The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

  The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

  Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

  Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

  Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

  Static server functions decode cached RawStream values with the client deserializer plugins.

  SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

• #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

• Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

  • @​tanstack/router-core@​1.171.31

Changelog

Sourced from @​tanstack/react-router's changelog.

1.170.39

Patch Changes

• #8435 73bfc15 - Avoid hydration-triggered rerenders for links that do not compare URL hashes while preserving hash-sensitive active state and ClientOnly behavior.

1.170.38

Patch Changes

• Updated dependencies [cecae54, 0103578, ce10dcd, 84936cc, bbd2336]:
  • @​tanstack/router-core@​1.171.32

1.170.37

Patch Changes

• #8418 e561fa1 - deepEqual now takes its flags as positional arguments — deepEqual(a, b, partial?, explicitUndefined?) — instead of an options object. The router's hot callers (Link option stabilization and active-state checks, matchRoute) no longer allocate an options object per comparison, and the comparator reads two booleans instead of a polymorphic object. explicitUndefined replaces ignoreUndefined: false. deepEqual is an internal helper; it stays exported for compatibility of two-argument calls.

• #8419 a1c8d1a - resolvePath (internal helper) now takes positional arguments — resolvePath(base, to, trailingSlash?, cache?) — so buildLocation and matchRoute no longer allocate an options object per path resolution.

• #8204 cbbfbe3 - Stream large deferred SSR hydration payloads through a backpressure-aware router transport, fail known setup errors before response creation, and close cancelled or expired transforms safely.

  Start now cancels discarded middleware and HEAD response bodies, including plain streams and derived branches.

  Server-function raw streams share one ordered response. Arbitrary or sequential consumption can require potentially unbounded buffering of unread data on the client. Cancelling one raw stream discards it locally, while aborting the whole call cancels the response and server work. Consume streams concurrently, cancel unused streams promptly, or use separate calls when independent backpressure is required. A raw stream that exceeds its unread-byte limit now fails alone; sibling streams and the JSON result keep flowing.

  The JSON wire shape of a RawStream server-function argument changed. Clients and servers must run matching versions for requests that pass a RawStream.

  The frame-protocol constants (FRAME_TYPE_*, MAX_FRAME_PAYLOAD_SIZE, MAX_FRAMED_STREAMS) moved from the @tanstack/start-client-core root to the @tanstack/start-client-core/client-rpc subpath.

  Router requests whose Accept header allows neither text/html nor */* now receive 406 Not Acceptable instead of 500.

  Framework adapters share the body <Scripts> composition (getSsrBodyScriptParts, composeSsrBodyScripts) and the eager HTML response wrapper (renderSsrHtmlResponse) from @tanstack/router-core.

  Solid SSR now emits one document type and renders late lazy errors through route boundaries. A Solid <Await> without a fallback no longer holds the streamed shell; it renders inside the nearest <Suspense> boundary like React and Vue, and now renders falsy resolved values.

  Static server functions decode cached RawStream values with the client deserializer plugins.

  SSR Query integrations now keep request cleanup and stream ownership aligned with the router lifecycle.

• #8420 8e164d2 - useLinkProps no longer calls through an internal wrapper. The host element Link renders on is an @internal overload parameter that is stripped from the published declarations, so the public useLinkProps(options, forwardedRef?) signature is unchanged.

• Updated dependencies [bc80866, e561fa1, cbbfbe3, a1c8d1a, cbbfbe3, a0b2ad9, 1ca361b]:

  • @​tanstack/router-core@​1.171.31

1.170.36

Patch Changes

... (truncated)

Commits

• ddad69a ci: Version Packages (#8486)
• 73bfc15 perf(react-router): avoid redundant link hydration updates (#8435)
• 84bde66 ci: Version Packages (#8457)
• de023a7 ci: Version Packages (#8429)
• cbbfbe3 optimize streaming (#8204)
• 8e164d2 refactor(react-router): drop the useLinkProps pass-through wrapper (#8420)
• e561fa1 perf(router-core): pass deepEqual flags positionally (#8418)
• 6954a37 ci: Version Packages (#8355)
• 92719bd perf(react-router): memoize Link and forward refs without an effect (#8405)
• d740d8b perf(react-router): fewer hooks per Link (#8404)
• Additional commits viewable in compare view

Updates @tanstack/react-router-devtools from 1.167.0 to 1.167.2

Changelog

Sourced from @​tanstack/react-router-devtools's changelog.

1.167.2

Patch Changes

• Updated dependencies [d76a332, b747fb8, 6cfb1e8, 700a714, 700a714, 6387d58, 7e349c3, 9b2adaf, 873c830, 7e349c3, 634da91, e9396c9, 634da91, f151ab0, bc57fa3, 6387d58, 9872d2a, d76a332, 634da91, 634da91, 7e349c3, 9448caa, e9396c9, 700a714, 634da91, 634da91]:
  • @​tanstack/router-core@​1.171.30
  • @​tanstack/react-router@​1.170.36
  • @​tanstack/router-devtools-core@​1.168.2

1.167.1

Patch Changes

• Updated dependencies [45c4ad8]:
  • @​tanstack/router-core@​1.171.16
  • @​tanstack/react-router@​1.170.19
  • @​tanstack/router-devtools-core@​1.168.1

Commits

• 6954a37 ci: Version Packages (#8355)
• 49bcd4d chore: refresh Router and Start dependencies (#8300)
• f97188f chore: localize package dependencies (#8078)
• 704145c ci: Version Packages (#7946)
• b5e540d docs: use the dynamic README header endpoint (#7940)
• 88f366a chore: migrate to typescript 7 (#7887)
• See full diff in compare view

Updates axios from 1.18.1 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

• HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

• Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

• Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
• Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
• XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
• Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
• Core Methods and HTTP Errors: Prevented structural method-...

  Description has been truncated