[Snyk] Upgrade react-hook-form from 7.52.2 to 7.71.1

[alhabib5565]

Snyk has created this PR to upgrade react-hook-form from 7.52.2 to 7.71.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 44 versions ahead of your current version.

• The recommended version was released 23 days ago.

Release notes

Package name: react-hook-form

• 7.71.1 - 2026-01-13
  

  🐞 fix #13250 issue with booleans_as_integers (#13252)

• 7.71.0 - 2026-01-11
  

  ⚡ perf: memoize FormProvider context value to prevent unnecessary rerenders (#13235)
  🚄 perf: separate control context to prevent unnecessary rerenders (#13234)
  🐞 fix: update isValid when field disabled state changes (#13231)
  👌 chore: optimize bundle size via safe terser options (#13243) (#13244)

  thanks to @ kamja44, @ a28689604 & @ newsiberian

• 7.70.0 - 2026-01-04
  

  ✅ watch type improvement (#13228)
  🐞 fix: prevent field array ghost elements with keepDirtyValues (#13188)
  🐞 fix: improve invalid date handling in deepEqual and validation (#13230)
  🐞 fix(types): handle branded types correctly in DeepPartial (#13222)
  🐞 fix native validation focus issue (#13220)
  🐞 change spread operator to set name with depricated names prop, then override with new name prop is supplied (#13214)
  🐞 fix: prevent duplicate subscription trigger in setValue (#13206) (#13209)
  👌 chore: fix lib type check include tests (#13229)

  thanks to @ EdwardEB, @ constantly-dev & @ a28689604

• 7.69.0 - 2025-12-20
  

  📏 feat: align API with useWatch (#13192)
  🤦🏻‍♂️ chore: update @ deprecated names prop on (#13198)
  🏥 chore: safely call function methods on elements (#13190)
  🪖 chore: cve-2025-67779 (#13196)
  🪖 chore: cve-2025-55184 & cve-2025-55183 (#13194)
  🪖 chore: CVE-2025-55182 Critical RCE vulnerabilty (#13175)
  🔬 test: add regression tests for #12837 and #13136 (#13187)
  🐞 fix(reset): preserve isValid state when keepIsValid option is used (#13173)
  🐞 fix: ensure each createFormControl.subscribe subscription listens only to the changes it subscribes to (#12968)
  🐞 fix(validation): batch isValidating state updates with validation result (#13181)
  🐞 fix(createFormControl): resolve race condition between setError and setFocus (#13138) (#13169)
  🧿 fix control prop type (#13189)
  🔔 chore: clean cloneObject logic (#13179)

  thanks to @ PierreCrb, @ a28689604, @ AnuragM7666, @ ap0nia, @ dusan233 & @ hlongc

• 7.68.0 - 2025-12-03
  

  🎧 feat: <FormStateSubscribe /> component (#13142)

  import { useForm, FormStateSubscribe } from 'react-hook-form';

  const App = () => {
  const { register, control } = useForm();

  return (
  <div>
  <form>
  <input {...register('foo')} />
  <input {...register('bar')} />
  </form>
  {/* re-render only when formState of foo changes */}
  <FormStateSubscribe
  control={control}
  name={"foo"}
  render={({errors}) => <span>{errors.foo?.message}</span>}
  />
  </div>
  );
  };

  🐞 fix: clear validation errors synchronously in reset() to fix Next.js 16 Server Actions issue (#13139)
  Revert "✨ fix(types): allow undefined value with async defaultValues in Contr…" (#13171)

  thanks to @ xiangnuans, @ abnud11, @ ntatoud & @ ap0nia

• 7.67.0 - 2025-11-28
  

  🎯 feat: add exact to useController props (#13154)

  useForm({
  defaultValues: {
  user: {
  name: ''
  }
  }
  })

  <Controller control={control} name="user" exact={false} /> // subscribe to all user object

  ✨ fix(types): allow undefined value with async defaultValues in Controller (#13160)
  🐞 fix(types): correct PathValueImpl type inference (#13150)

  thanks to @ ap0nia, @ Fasping & @ joseph0926

• 7.66.1 - 2025-11-17
  

  ⚡ perf: reduce redundant property access in getDirtyFields (#13146)
  🐞 fix(createFormControl): skip setValid() during batch array updates (#13140)
  🐞 fix(useForm): recompute isValid after reset when values update asynchronously (#13126)
  🐞 fix(deepEqual): handle NaN comparison correctly using Object.is (#13120)

  thanks to @ kimtaejin3, @ a28689604 & @ WuMingDao

• 7.66.0 - 2025-10-31
  

  🎥 feat: make useWatch and useController to react to name change (#13070)
  🐛 fix: watch() returning undefined immediately after reset() - Issue #13088 (#13091)
  🐞 fix <Watch />: correct render function parameter typing (#13108)

  thanks to @ aspirisen, @ scato3, @ dusan233 & @ zoldyzdk

• 7.65.0 - 2025-10-10
• 7.64.0 - 2025-10-04
• 7.63.0 - 2025-09-19
• 7.62.0 - 2025-08-01
• 7.61.1 - 2025-07-24
• 7.61.0 - 2025-07-23
• 7.60.0 - 2025-07-04
• 7.60.0-next.0 - 2025-07-01
• 7.59.0 - 2025-06-28
• 7.58.1 - 2025-06-17
• 7.58.0 - 2025-06-15
• 7.57.0 - 2025-06-01
• 7.57.0-next.0 - 2025-04-27
• 7.56.4 - 2025-05-17
• 7.56.3 - 2025-05-07
• 7.56.2 - 2025-05-03
• 7.56.1 - 2025-04-22
• 7.56.0 - 2025-04-20
• 7.56.0-next.0 - 2025-04-13
• 7.55.0 - 2025-03-28
• 7.55.0-next.9 - 2025-03-17
• 7.55.0-next.8 - 2025-03-13
• 7.55.0-next.7 - 2025-03-07
• 7.55.0-next.6 - 2025-03-05
• 7.55.0-next.5 - 2025-02-22
• 7.55.0-next.4 - 2025-02-08
• 7.55.0-next.3 - 2025-01-25
• 7.55.0-next.2 - 2025-01-18
• 7.55.0-next.1 - 2024-12-27
• 7.55.0-next.0 - 2024-12-24
• 7.54.2 - 2024-12-20
• 7.54.1 - 2024-12-12
• 7.54.0 - 2024-12-06
• 7.53.2 - 2024-11-08
• 7.53.1 - 2024-10-19
• 7.53.0 - 2024-08-24
• 7.52.2 - 2024-08-03

from react-hook-form GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs