fix(deps): update dependency @hookform/resolvers to v5

[squiggler-app]

This PR contains the following updates:

Package	Change	Age	Confidence
@hookform/resolvers (source)	^4.1.3 → ^5.4.0

---

Release Notes

react-hook-form/resolvers (@​hookform/resolvers)

v5.4.0

Compare Source

Features

• feat: add ata-validator resolver (#​845)

Fixes

• fix issue with toNestErrors.ts (#​848)

• add guidance on passing context to yupResolver (useForm context) (#​835) (3d29924)

v5.2.2

Compare Source

Bug Fixes

• zod: fix output type for Zod 4 resolver (#​803) (e95721d)

v5.2.1

Compare Source

Bug Fixes

• discriminated union for zod v4 mini (#​784) (49a0d7b)
• zod v4 peer deps (#​798) (2d28e6a)
• zod: fix output type for Zod 4 resolver (#​801) (bc09647)

v5.2.0

Compare Source

Features

• ajv: add ajv-formats for ajvResolver (#​797) (f040039)

v5.1.1

Compare Source

Bug Fixes

• zod peer dep issue (#​780) (79cd8b2)

v5.1.0

Compare Source

Features

• support Zod 4, Zod v4 mini, and retains compatibility with Zod v3. (#​777) (8d083bd)

v5.0.1

Compare Source

Bug Fixes

• relax version constraint for react-hook-form 7.55.0 → ^7.55.0 (#​758) (6e88393)

v5.0.0

Compare Source

Features

• infer input/output types from schema (#​753) (6124c59)

BREAKING CHANGES

• Requires react-hook-form@​7.55.0 or higher

Before
Prior to V5, some projects used manual types like

useForm<FormValues>();

After
With V5, the correct approach is:

useForm<Input, Context, Output>();
useForm<FormInputValues, Context, FormOutputValues>();

This update enables distinct outputs when utilizing features like transform from validation libraries.

ℹ️ The best approach is to let the types be inferred from your schema, rather than manually defining them.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a curated preset maintained by . View repository job log here

---

Note

Medium Risk
Major-version bump affects form validation in dashboard-widget-vercel (yup) and media (zod) plugins; existing manual useForm<T> typing may need follow-up if builds or runtime validation regress.

Overview
Bumps the workspace catalog dependency @hookform/resolvers from ^4.1.3 to ^5.4.0, with lockfile updates for consumers that pull it from the catalog (notably sanity-plugin-dashboard-widget-vercel and sanity-plugin-media).

This is a major resolver release: it tightens react-hook-form to ^7.55.0 (already satisfied by the catalog’s react-hook-form ^7.81.0) and changes how useForm generics are meant to align with schema input/output types. No application source files are modified in this PR—only dependency resolution.

^{Reviewed by Cursor Bugbot for commit b0636d7. Bugbot is set up for automated code reviews on this repo. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: b0636d7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
plugins-studio	Ready	Preview, Comment	Jul 14, 2026 6:33pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​hookform/​resolvers@​5.4.0

View full report

[squiggler-app]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 5.x releases. But if you manually upgrade to 5.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.