fix(deps): update dependencies minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@tanstack/react-query (source)	5.99.0 → 5.100.1
@tanstack/react-router (source)	1.168.22 → 1.168.24
axios (source)	1.15.0 → 1.15.2
monaco-editor	^0.51.0 → ^0.55.0
oidc-spa (source)	10.2.1 → 10.2.2
react-hook-form (source)	7.72.1 → 7.73.1

---

Release Notes

TanStack/query (@​tanstack/react-query)

v5.100.1

Patch Changes

• Updated dependencies [1bb0d23]:
  • @​tanstack/query-core@​5.100.1

v5.100.0

Compare Source

Patch Changes

• Updated dependencies [6540a41]:
  • @​tanstack/query-core@​5.100.0

v5.99.2

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.99.2

v5.99.1

Compare Source

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.99.1

TanStack/router (@​tanstack/react-router)

v1.168.24

Compare Source

Patch Changes

• Add TanStack Start inline CSS manifest support for SSR so route styles can be embedded in the HTML response and hydrated without duplicate stylesheet links. (#​7253)

• Updated dependencies [4d864ee]:

  • @​tanstack/router-core@​1.168.16

v1.168.23

Compare Source

Patch Changes

• fix(react-router): prevent webpack static analysis of React.use with let binding (#​7182)

axios/axios (axios)

v1.15.2

Compare Source

This release delivers prototype-pollution hardening for the Node HTTP adapter, adds an opt-in allowedSocketPaths allowlist to mitigate SSRF via Unix domain sockets, fixes a keep-alive socket memory leak, and ships supply-chain hardening across CI and security docs.

🔒 Security Fixes

• Prototype Pollution Hardening (HTTP Adapter): Hardened the Node HTTP adapter and resolveConfig/mergeConfig/validator paths to read only own properties and use null-prototype config objects, preventing polluted auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser from influencing requests. (#​10779)
• SSRF via socketPath: Rejects non-string socketPath values and adds an opt-in allowedSocketPaths config option to restrict permitted Unix domain socket paths, returning AxiosError ERR_BAD_OPTION_VALUE on mismatch. (#​10777)
• Supply-chain Hardening: Added .npmrc with ignore-scripts=true, lockfile lint CI, non-blocking reproducible build diff, scoped CODEOWNERS, expanded SECURITY.md/THREATMODEL.md with provenance verification (npm audit signatures), 60-day resolution policy, and maintainer incident-response runbook. (#​10776)

🚀 New Features

• allowedSocketPaths Config Option: New request config option (and TypeScript types) to allowlist Unix domain socket paths used by the Node http adapter; backwards compatible when unset. (#​10777)

🐛 Bug Fixes

• Keep-alive Socket Memory Leak: Installs a single per-socket error listener tracking the active request via kAxiosSocketListener/kAxiosCurrentReq, eliminating per-request listener accumulation, MaxListenersExceededWarning, and linear heap growth under concurrent or long-running keep-alive workloads (fixes #​10780). (#​10788)

🔧 Maintenance & Chores

• Changelog: Updated CHANGELOG.md with v1.15.1 release notes. (#​10781)

Full Changelog

v1.15.1

Compare Source

microsoft/monaco-editor (monaco-editor)

v0.55.1

Compare Source

• Fixes missing language exports (monaco.json/typescript/...) due to wrong "types" path - #​5123

v0.55.0

Compare Source

Breaking Changes

• Moves nested namespaces (languages.css, languages.html, languages.json, languages.typescript) to top level namespaces (css, html, json, typescript) to simplify the build process and align with typescript recommendations.

New Features

• Adds native LSP support (see new lsp namespace).

Bug Fixes

• Updates dompurify to 3.2.7

v0.54.0

Compare Source

• Adds option editor.mouseMiddleClickAction
• Various bug fixes

v0.53.0

Compare Source

• ⚠️ This release deprecates the AMD build and ships with significant changes of the AMD build. The AMD build will still be shipped for a while, but we don't offer support for it anymore. Please migrate to the ESM build.

New Features

• Next Edit Suggestion support.
• Scroll On Middle Click
• Edit Context Support

Breaking Changes

• Internal AMD modules are no longer accessible. Accessing internal AMD modules was never supported. While this is still possible in the ESM build, we don't encourage this usage pattern.
• The browser-script-editor scenario for unbundled synchronous script import and editor creation no longer works. Instead, a the ESM build should be used with a bundler, such as vite or webpack.
• Custom AMD workers don't work anymore out of the box.

v0.52.2

Compare Source

Changes:

• #​4777: 0.52.2
• #​4774: Updates changelog

This list of changes was auto generated.

v0.52.0

Compare Source

• Comment added inside of IModelContentChangedEvent

keycloakify/oidc-spa (oidc-spa)

v10.2.2

Compare Source

Full Changelog: keycloakify/oidc-spa@v10.2.1...v10.2.2

react-hook-form/react-hook-form (react-hook-form)

v7.73.1

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[laurentC35]

Test en local: monaco editor ou VTL editor fait planter l'appli legacy. a essayé en gardant la version précédente de monaco

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud