Fix alpha by crutchcorn · Pull Request #2264 · TanStack/form

crutchcorn · 2026-08-02T19:01:09Z

Makes pnpm test all green

coderabbitai · 2026-08-02T19:01:20Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b6157287-df3e-4a28-98ee-448640f4c8d5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-08-02T19:01:33Z

View your CI Pipeline Execution ↗ for commit 29239bb

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	2m 28s	View ↗
`nx run-many --target=build --exclude=examples/**`	✅ Succeeded	1s	View ↗

☁️ Nx Cloud last updated this comment at 2026-08-02 20:07:51 UTC

github-actions · 2026-08-02T19:02:08Z

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

socket-security · 2026-08-02T19:02:19Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Quality	Maintenance
	@angular/platform-browser-dynamic@22.1.0
	next@16.2.12
	eslint-config-next@16.2.12
	@tanstack/angular-store@0.9.3 ⏵ 0.11.0	⁺⁴	⁺⁴	^-7
	@angular/build@22.1.2
	@angular/platform-browser@22.1.0
	@types/react-dom@19.2.4
	@tanstack/react-router@1.170.18
	resize-observer-polyfill@1.5.1
	@angular/compiler-cli@22.1.0
	@sveltejs/package@2.5.8
	@angular/compiler@22.1.0
	@angular/core@22.1.0
	@types/react@19.2.18
	@angular/common@22.1.0
	lucide-solid@1.28.0
	publint@0.3.22
	effect@3.22.1
	@tanstack/react-start@1.168.34
	zone.js@0.15.1 ⏵ 0.16.2
	vite-tsconfig-paths@6.1.1
	markdown-link-extractor@4.0.4
	svelte@5.56.8
	@tanstack/react-query@5.101.4
	unplugin-vue@7.2.0
	react-native-reanimated@4.5.3
	vue@3.5.40
	vue-tsc@3.3.9
	sherif@1.13.0
	@preact/preset-vite@2.10.6
	devalue@5.9.0
	@changesets/cli@2.31.1
	@vitejs/plugin-react@6.0.5
See 13 more rows in the dashboard

View full report

socket-security · 2026-08-02T19:02:20Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: npm `@angular/build` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: packages/angular-form/package.json → `npm/@angular/build@22.1.2` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/build@22.1.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `effect` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: examples/react/expo/package.json → `npm/effect@3.22.1` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/effect@3.22.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `env-runner` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/nitro@3.0.260311-beta` → `npm/env-runner@0.1.16` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/env-runner@0.1.16`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `lmdb` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@angular/build@22.1.2` → `npm/lmdb@3.5.6` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/lmdb@3.5.6`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `yargs` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/react-native-worklets@0.10.1` → `npm/react-native@0.86.2` → `npm/expo@57.0.9` → `npm/yargs@17.7.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/yargs@17.7.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Deprecated by its maintainer: npm `@angular/platform-browser-dynamic` Reason: @angular/platform-browser-dynamic is deprecated. Use `@angular/platform-browser` instead. From: packages/angular-form/package.json → `npm/@angular/platform-browser-dynamic@22.1.0` ℹ Read more on: This package \| This alert \| What is a deprecated package? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@angular/platform-browser-dynamic@22.1.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `eslint-plugin-react-jsx` Location: Package overview From: pnpm-lock.yaml → `npm/@eslint-react/eslint-plugin@5.18.1` → `npm/eslint-plugin-react-jsx@5.18.1` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/eslint-plugin-react-jsx@5.18.1`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `fast-wrap-ansi` Location: Package overview From: pnpm-lock.yaml → `npm/@angular/build@22.1.2` → `npm/fast-wrap-ansi@0.2.2` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/fast-wrap-ansi@0.2.2`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

pkg-pr-new · 2026-08-02T19:05:26Z

More templates

@tanstack/angular-form

npm i https://pkg.pr.new/@tanstack/angular-form@2264

@tanstack/form-core

npm i https://pkg.pr.new/@tanstack/form-core@2264

@tanstack/form-devtools

npm i https://pkg.pr.new/@tanstack/form-devtools@2264

@tanstack/lit-form

npm i https://pkg.pr.new/@tanstack/lit-form@2264

@tanstack/preact-form

npm i https://pkg.pr.new/@tanstack/preact-form@2264

@tanstack/react-form

npm i https://pkg.pr.new/@tanstack/react-form@2264

@tanstack/react-form-devtools

npm i https://pkg.pr.new/@tanstack/react-form-devtools@2264

@tanstack/react-form-nextjs

npm i https://pkg.pr.new/@tanstack/react-form-nextjs@2264

@tanstack/react-form-start

npm i https://pkg.pr.new/@tanstack/react-form-start@2264

@tanstack/solid-form

npm i https://pkg.pr.new/@tanstack/solid-form@2264

@tanstack/solid-form-devtools

npm i https://pkg.pr.new/@tanstack/solid-form-devtools@2264

@tanstack/svelte-form

npm i https://pkg.pr.new/@tanstack/svelte-form@2264

@tanstack/vue-form

npm i https://pkg.pr.new/@tanstack/vue-form@2264

commit: 29239bb

codecov-commenter · 2026-08-02T19:34:42Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (alpha@63c2fed). Learn more about missing BASE report.
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@           Coverage Diff            @@
##             alpha    #2264   +/-   ##
========================================
  Coverage         ?   96.04%           
========================================
  Files            ?       28           
  Lines            ?     2653           
  Branches         ?      734           
========================================
  Hits             ?     2548           
  Misses           ?       99           
  Partials         ?        6

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

crutchcorn added 9 commits August 2, 2026 10:52

chore: fix various package issues

86d32c1

chore: fix sherif

3881b09

chore: fix knip

f8e96ff

chore: update to newest v2 code

13efa0b

chore: various fixes

a80ba2c

chore: fix lint on React Form

cfefa28

chore: fix most eslint

4e3e505

chore: more eslint fixes

f8a7967

chore: more fixes

d4d83ec

ci: apply automated fixes and generate docs

4dab69e

autofix-ci Bot and others added 2 commits August 2, 2026 19:03

ci: apply automated fixes and generate docs (attempt 2/3)

3964236

chore: remove happy-dom with jsdom

6d163a9

crutchcorn and others added 9 commits August 2, 2026 12:07

chore: remove all unused docs, et al

94a0f62

ci: apply automated fixes and generate docs

a324948

chore: migrate Preact form to TSDown

338e315

chore: migrate Vue to TSDown

78e34d0

chore: more CI fixes

1f77ec4

chore: fix build

44b0335

chore: migrate solid devtools to tsdown

7bc5706

ci: apply automated fixes and generate docs

de43d81

chore: revert github

983afde

crutchcorn requested a review from a team as a code owner August 2, 2026 19:28

crutchcorn added 2 commits August 2, 2026 12:30

chore: remove docs assets

b3e68a7

docs: make notes of "not yet ready"

782db6b

crutchcorn added 2 commits August 2, 2026 12:39

chore: remove remix mention

74ffc01

docs: fix docs config file

29239bb

tannerlinsley approved these changes Aug 2, 2026

View reviewed changes

crutchcorn merged commit e466cac into alpha Aug 2, 2026
9 checks passed

crutchcorn deleted the fix-alpha branch August 2, 2026 20:25

Navigation Menu

Uh oh!

Uh oh!

Fix alpha - #2264

Fix alpha#2264
crutchcorn merged 25 commits into
alphafrom
fix-alpha

crutchcorn commented Aug 2, 2026

Uh oh!

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

Review skipped

Uh oh!

nx-cloud Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 2, 2026

Uh oh!

socket-security Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Aug 2, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Aug 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Uh oh!

Conversation

crutchcorn commented Aug 2, 2026

Uh oh!

coderabbitai Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

nx-cloud Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Aug 2, 2026

🚀 Changeset Version Preview

Uh oh!

socket-security Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Aug 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov-commenter commented Aug 2, 2026

Codecov Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

coderabbitai Bot commented Aug 2, 2026 •

edited

Loading

nx-cloud Bot commented Aug 2, 2026 •

edited

Loading

socket-security Bot commented Aug 2, 2026 •

edited

Loading

socket-security Bot commented Aug 2, 2026 •

edited

Loading

pkg-pr-new Bot commented Aug 2, 2026 •

edited

Loading