chore(deps): bump @rjsf/utils from 5.24.13 to 6.2.5 by dependabot[bot] · Pull Request #2669 · MetaMask/metamask-docs

dependabot · 2026-02-01T04:14:49Z

Bumps @rjsf/utils from 5.24.13 to 6.2.5.

Release notes

Sourced from @rjsf/utils's releases.

6.2.5

@rjsf/mui

Updated BaseInputTemplate to properly handle slotProps and InputProps (deprecated by MUI) with existing endAdornments when the allowClearTextInputs flag is true, fixing #4938

Dev / docs / playground

Updated uiSchema.md to add documentation for allowClearTextInputs

Updated the formTests.tsx in snapshot-tests to render string fields with the allowClearTextInputs flag enabled, with data and readonly to test the new feature

6.2.4

Dev / docs / playground

Updated the package.json for chakra-ui to add the repository information so that publishing works for it

Updated the release.yml to remove the push tag stuff as it isn't needed

6.2.3

@rjsf/mantine

Updated cleanupOptions() to add enableMarkdownInHelp and globalOptions to avoid DOM errors

@rjsf/primereact

Updated ArrayFieldTemplate to destructure additional fields to avoid DOM errors

Dev / docs / playground

Updated the release.yml to move the permissions within the job, switch to node 24 and add push checking

6.2.2

Dev / docs / playground

Updated the release.yml to switch to NPM Trusted Publishing so that we can actually publish the changes

Updated the SECURITY.md to add v6

6.2.1

Dev / docs / playground

Updated peer dependencies to ^6.2.x due to type changes in @rjsf/utils that are required in the other libraries

6.2.0

New features added

allowClearTextInputs added GlobalUISchemaOptions to support displaying a clear text input UI

omitExtraData() refactored to @rjsf/utils

@rjsf/antd

Updated BaseInputTemplate to support the allowClearTextInputs feature for input fields

Removed deprecated defaultProps from AltDateTimeWidget and AltDateWidget components, preserving all existing behavior

... (truncated)

Changelog

Sourced from @rjsf/utils's changelog.

6.2.5

@rjsf/mui

Updated BaseInputTemplate to properly handle slotProps and InputProps (deprecated by MUI) with existing endAdornments when the allowClearTextInputs flag is true, fixing #4938

Dev / docs / playground

Updated uiSchema.md to add documentation for allowClearTextInputs

Updated the formTests.tsx in snapshot-tests to render string fields with the allowClearTextInputs flag enabled, with data and readonly to test the new feature

6.2.4

Dev / docs / playground

Updated the package.json for chakra-ui to add the repository information so that publishing works for it

Updated the release.yml to remove the push tag stuff as it isn't needed

6.2.3

@rjsf/mantine

Updated cleanupOptions() to add enableMarkdownInHelp and globalOptions to avoid DOM errors

@rjsf/primereact

Updated ArrayFieldTemplate to destructure additional fields to avoid DOM errors

Dev / docs / playground

Updated the release.yml to move the permissions within the job, switch to node 24 and add push checking

6.2.2

Dev / docs / playground

Updated the release.yml to switch to NPM Trusted Publishing so that we can actually publish the changes

Updated the SECURITY.md to add v6

6.2.1

Dev / docs / playground

Updated peer dependencies to ^6.2.x due to type changes in @rjsf/utils that are required in the other libraries

6.2.0

@rjsf/antd

Updated BaseInputTemplate to support the allowClearTextInputs feature for input fields

... (truncated)

Commits

9d7138b Releasing 6.2.5
23d202a Fix 4938 to support slotProps and InputProps with endAdornment already specif...
8b7a58c Release 6.2.4 (#4935)
5cee831 Releasing 6.2.3 (part 3) (#4934)
5de10b6 Release 6.2.3 (part 2) (#4933)
2a40547 Release 6.2.3 (#4932)
9b4892d Releasing 6.2.2
fdeb34d Update SECURITY.md (#4929)
2dbc3e8 Switch to trusted publishing (#4930)
03ed2fa Release 6.2.1 (#4928)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @rjsf/utils since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Major-version dependency bump that changes transitive deps and tightens Node/React requirements, which could cause build or runtime incompatibilities if the app or CI environment is misaligned.

Overview
Bumps @rjsf/utils from 5.24.13 to 6.2.5 in package.json and updates package-lock.json accordingly.

The lockfile reflects new/transitively updated dependencies (e.g., introducing @x0k/json-schema-merge, updating fast-uri, removing older schema-merge/validation utilities) and @rjsf/utils now declares stricter runtime requirements (Node >=20 and React >=18).

^{Written by Cursor Bugbot for commit 4522f3e. This will update automatically on new commits. Configure here.}

dependabot · 2026-02-01T04:14:50Z

Assignees

The following users could not be added as assignees: protocol-galileo. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-02-01T04:14:52Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
metamask-docs	Error		Feb 6, 2026 7:24am

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

cursor · 2026-02-01T04:16:51Z

package.json

    "@metamask/sdk": "^0.33.1",
    "@rjsf/core": "^5.24.12",
-    "@rjsf/utils": "^5.24.13",
+    "@rjsf/utils": "^6.2.5",


Incompatible major version mismatch in rjsf packages

High Severity

@rjsf/utils is upgraded to v6.2.5, but @rjsf/core (v5.24.12) and @rjsf/validator-ajv8 (v5.24.12) have peer dependencies requiring @rjsf/utils ^5.24.x. These packages are designed to work together at matching major versions. The version mismatch will cause peer dependency warnings and potentially runtime errors or type mismatches, as the types and APIs from @rjsf/utils v6 may not be compatible with the v5 packages that consume them.

Additional Locations (1)

package.json#L48-L51

socket-security · 2026-02-01T04:18:39Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@rjsf/utils@5.24.13 ⏵ 6.2.5			⁺¹	⁺¹

View full report

Bumps [@rjsf/utils](https://github.com/rjsf-team/react-jsonschema-form) from 5.24.13 to 6.2.5. - [Release notes](https://github.com/rjsf-team/react-jsonschema-form/releases) - [Changelog](https://github.com/rjsf-team/react-jsonschema-form/blob/main/CHANGELOG.md) - [Commits](rjsf-team/react-jsonschema-form@5.24.13...6.2.5) --- updated-dependencies: - dependency-name: "@rjsf/utils" dependency-version: 6.2.5 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 1, 2026

dependabot bot requested a review from a team as a code owner February 1, 2026 04:14

dependabot bot added the javascript Pull requests that update javascript code label Feb 1, 2026

dependabot bot requested review from a team as code owners February 1, 2026 04:14

vercel bot had a problem deploying to Preview February 1, 2026 04:15 Failure

cursor bot reviewed Feb 1, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/npm_and_yarn/rjsf/utils-6.2.5 branch from 82dbe2d to 4522f3e Compare February 6, 2026 07:24

vercel bot had a problem deploying to Preview February 6, 2026 07:24 Failure

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump @rjsf/utils from 5.24.13 to 6.2.5#2669

chore(deps): bump @rjsf/utils from 5.24.13 to 6.2.5#2669
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/rjsf/utils-6.2.5

dependabot bot commented on behalf of github Feb 1, 2026 •

edited by cursor bot

Loading

Uh oh!

dependabot bot commented on behalf of github Feb 1, 2026

Uh oh!

vercel bot commented Feb 1, 2026 •

edited

Loading

Uh oh!

cursor bot left a comment

Uh oh!

cursor bot Feb 1, 2026

Uh oh!

socket-security bot commented Feb 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 1, 2026 • edited by cursor bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

6.2.5

@​rjsf/mui

Dev / docs / playground

6.2.4

Dev / docs / playground

6.2.3

@​rjsf/mantine

@​rjsf/primereact

Dev / docs / playground

6.2.2

Dev / docs / playground

6.2.1

Dev / docs / playground

6.2.0

New features added

@​rjsf/antd

6.2.5

@​rjsf/mui

Dev / docs / playground

6.2.4

Dev / docs / playground

6.2.3

@​rjsf/mantine

@​rjsf/primereact

Dev / docs / playground

6.2.2

Dev / docs / playground

6.2.1

Dev / docs / playground

6.2.0

@​rjsf/antd

Uh oh!

dependabot bot commented on behalf of github Feb 1, 2026

Assignees

Uh oh!

vercel bot commented Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cursor bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor bot Feb 1, 2026

Choose a reason for hiding this comment

Incompatible major version mismatch in rjsf packages

Uh oh!

socket-security bot commented Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 1, 2026 •

edited by cursor bot

Loading

`@rjsf/mui`

`@rjsf/mantine`

`@rjsf/primereact`

`@rjsf/antd`

`@rjsf/mui`

`@rjsf/mantine`

`@rjsf/primereact`

`@rjsf/antd`

vercel bot commented Feb 1, 2026 •

edited

Loading

socket-security bot commented Feb 1, 2026 •

edited

Loading