From c64452c1bdfd2619c2f35ca16445703f56e4c3d3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Oct 2026 14:26:02 +0000
Subject: [PATCH] chore(deps): Bump i18next from 26.5.3 to 26.5.6 (#2264)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [i18next](https://github.com/i18next/i18next) from 26.5.3 to
26.5.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/releases">i18next's
releases</a>.</em></p>
<blockquote>
<h2>v26.5.6</h2>
<ul>
<li>fix: <code>cloneInstance({ forkResourceStore: true })</code> now
copies the resources at every level. It copied them only down to the
namespace objects, so nested keys and arrays stayed shared with the
original instance: <code>addResource()</code> with a nested key
(<code>fork.addResource('en', 'translation', 'greeting.hello',
'Hi')</code>) or a deep <code>addResourceBundle()</code> on the fork
also changed the original instance and every other fork. Flat keys were
already isolated. Forking a large store takes a bit longer: with 300k
keys in nested groups, about 11 ms instead of 3 ms per fork. Clones
without <code>forkResourceStore</code> still share the store as before.
Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2456">#2456</a>,
follow-up to <a
href="https://redirect.github.com/i18next/i18next/issues/2270">#2270</a>).</li>
</ul>
<h2>v26.5.5</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside a value inserted with an unescaped
<code>{{- var}}</code> now stays literal, as it already did for
<code>{{var}}</code>. The escape pass ran after the unescaped values
were written and scanned them again, so <code>t('{{- a}}', { a: '{{b}}',
b: 'c' })</code> returned <code>'c'</code> instead of
<code>'{{b}}'</code>. With pre-built HTML that carries user text, like
<code>t('You may contact {{name}} at {{- emailHTML}}.', { name,
emailHTML })</code>, that text could pull another variable of the same
<code>t()</code> call into the output. Results with
<code>skipOnVariables: false</code>, and values without placeholders,
are unchanged. Compatibility note: a <code>{{- var}}</code> value whose
placeholders were meant to be filled from the same <code>t()</code> call
now keeps them literally; <code>skipOnVariables: false</code> restores
the old behavior. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2455">#2455</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747">#1595</a>).</li>
</ul>
<h2>v26.5.4</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside an interpolated value now stays
literal also when the same placeholder appears later in the translation.
Each value was written with <code>String.replace</code>, which replaces
the first copy of the placeholder text, and that could be the copy
inside an earlier value: <code>t('{{name}} has {{count}} items', { name:
'{{count}}', count: 5 })</code> returned <code>'5 has {{count}}
items'</code> instead of <code>'{{count}} has 5 items'</code>. The value
is now written at the position of the matched placeholder. Results with
<code>skipOnVariables: false</code> are unchanged. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2454">#2454</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503">#1595</a>).</li>
<li>fix: with <code>useRawValueToEscape: true</code>, a non-string value
in an unescaped <code>{{- var}}</code> placeholder or with
<code>escapeValue: false</code> no longer throws <code>val.replace is
not a function</code>; it is converted to a string like any other
value.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/i18next/i18next/blob/master/CHANGELOG.md">i18next's
changelog</a>.</em></p>
<blockquote>
<h2>26.5.6</h2>
<ul>
<li>fix: <code>cloneInstance({ forkResourceStore: true })</code> now
copies the resources at every level. It copied them only down to the
namespace objects, so nested keys and arrays stayed shared with the
original instance: <code>addResource()</code> with a nested key
(<code>fork.addResource('en', 'translation', 'greeting.hello',
'Hi')</code>) or a deep <code>addResourceBundle()</code> on the fork
also changed the original instance and every other fork. Flat keys were
already isolated. Forking a large store takes a bit longer: with 300k
keys in nested groups, about 11 ms instead of 3 ms per fork. Clones
without <code>forkResourceStore</code> still share the store as before.
Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2456">#2456</a>,
follow-up to <a
href="https://redirect.github.com/i18next/i18next/issues/2270">#2270</a>).</li>
</ul>
<h2>26.5.5</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside a value inserted with an unescaped
<code>{{- var}}</code> now stays literal, as it already did for
<code>{{var}}</code>. The escape pass ran after the unescaped values
were written and scanned them again, so <code>t('{{- a}}', { a: '{{b}}',
b: 'c' })</code> returned <code>'c'</code> instead of
<code>'{{b}}'</code>. With pre-built HTML that carries user text, like
<code>t('You may contact {{name}} at {{- emailHTML}}.', { name,
emailHTML })</code>, that text could pull another variable of the same
<code>t()</code> call into the output. Results with
<code>skipOnVariables: false</code>, and values without placeholders,
are unchanged. Compatibility note: a <code>{{- var}}</code> value whose
placeholders were meant to be filled from the same <code>t()</code> call
now keeps them literally; <code>skipOnVariables: false</code> restores
the old behavior. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2455">#2455</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814611747">#1595</a>).</li>
</ul>
<h2>26.5.4</h2>
<ul>
<li>fix: with the default <code>skipOnVariables: true</code>, a
<code>{{placeholder}}</code> inside an interpolated value now stays
literal also when the same placeholder appears later in the translation.
Each value was written with <code>String.replace</code>, which replaces
the first copy of the placeholder text, and that could be the copy
inside an earlier value: <code>t('{{name}} has {{count}} items', { name:
'{{count}}', count: 5 })</code> returned <code>'5 has {{count}}
items'</code> instead of <code>'{{count}} has 5 items'</code>. The value
is now written at the position of the matched placeholder. Results with
<code>skipOnVariables: false</code> are unchanged. Thanks <a
href="https://github.com/nk-batman21"><code>@​nk-batman21</code></a> (<a
href="https://redirect.github.com/i18next/i18next/pull/2454">#2454</a>,
reported in <a
href="https://redirect.github.com/i18next/i18next/issues/1595#issuecomment-814609503">#1595</a>).</li>
<li>fix: with <code>useRawValueToEscape: true</code>, a non-string value
in an unescaped <code>{{- var}}</code> placeholder or with
<code>escapeValue: false</code> no longer throws <code>val.replace is
not a function</code>; it is converted to a string like any other
value.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/i18next/i18next/commit/82894c159845c3675fb6540db52a4144abbd5d4a"><code>82894c1</code></a>
26.5.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/343080da6802c0badb2fe1032139d49af93d9774"><code>343080d</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/8e2eebb132aaccfb752990b6cc61cbfd7d835764"><code>8e2eebb</code></a>
changelog for 26.5.6</li>
<li><a
href="https://github.com/i18next/i18next/commit/822a37bc57f50b4a476aa630f864d3ed1f88a7e9"><code>822a37b</code></a>
fix: copy nested resources when cloning with forkResourceStore (<a
href="https://redirect.github.com/i18next/i18next/issues/2456">#2456</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/744c5cb41a19f52ae08d1a71c2d9ceca6525dc1d"><code>744c5cb</code></a>
26.5.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/de5960eee00d9db2a7c1b452d6ce9231c16b6474"><code>de5960e</code></a>
build</li>
<li><a
href="https://github.com/i18next/i18next/commit/fbe16f3429273f2f9c1fe9736f4590fa2e8253a5"><code>fbe16f3</code></a>
changelog for 26.5.5</li>
<li><a
href="https://github.com/i18next/i18next/commit/67b4ae194ed4a1af083119f77daba48f1c295f1d"><code>67b4ae1</code></a>
fix: keep placeholders inside unescaped values literal (<a
href="https://redirect.github.com/i18next/i18next/issues/2455">#2455</a>)</li>
<li><a
href="https://github.com/i18next/i18next/commit/aadd75ba9e88a20b34b7f44798d4e3bd8ec71baa"><code>aadd75b</code></a>
26.5.4</li>
<li><a
href="https://github.com/i18next/i18next/commit/a43c43286a381bbae144c04de9f8056f464c7cd9"><code>a43c432</code></a>
build</li>
<li>Additional commits viewable in <a
href="https://github.com/i18next/i18next/compare/v26.5.3...v26.5.6">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 8 ++++----
 package.json      | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index cc57558c..10d15cdc 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -30,7 +30,7 @@
         "downshift": "^9.4.0",
         "events": "^3.3.0",
         "file-saver": "^2.0.5",
-        "i18next": "^26.5.3",
+        "i18next": "^26.5.6",
         "i18next-browser-languagedetector": "^8.2.1",
         "i18next-resources-to-backend": "^1.2.3",
         "json-stringify-pretty-compact": "^4.0.0",
@@ -6645,9 +6645,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "26.5.3",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.3.tgz",
-      "integrity": "sha512-6pRwOwJ6lBCBB66fqNZaSoUmvsALHMord7FL6GsDhubT1CrPabTMEJIqddm0nn2YEbKofdI/3VAtGrQPuztY1Q==",
+      "version": "26.5.6",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.5.6.tgz",
+      "integrity": "sha512-GFWrDwGmYhOQS3bKvjA2Ir2ob9ScEdyY1UbeQJ10jyVACGQ6XxmDYqC/lxEj/IPEJlPQYNRnYffDET6TM8mnFg==",
       "funding": [
         {
           "type": "individual",
diff --git a/package.json b/package.json
index e64dc50b..6f9d5f38 100644
--- a/package.json
+++ b/package.json
@@ -48,7 +48,7 @@
     "downshift": "^9.4.0",
     "events": "^3.3.0",
     "file-saver": "^2.0.5",
-    "i18next": "^26.5.3",
+    "i18next": "^26.5.6",
     "i18next-browser-languagedetector": "^8.2.1",
     "i18next-resources-to-backend": "^1.2.3",
     "json-stringify-pretty-compact": "^4.0.0",