build(deps): bump @marsidev/react-turnstile from 1.4.0 to 1.6.1

[dependabot]

Bumps @marsidev/react-turnstile from 1.4.0 to 1.6.1.

Release notes

Sourced from @​marsidev/react-turnstile's releases.

@​marsidev/react-turnstile@​1.6.1

Patch Changes

• #269 1d53766 Thanks @​joaompneves! - Report invalid render parameters through onError. Turnstile rejects invalid parameters (an empty siteKey, an unknown theme, a malformed action, ...) by throwing before the widget is created, which previously surfaced as an unhandled promise rejection and never reached onError. Those failures are now passed to onError (as the validation message) when it is provided, or logged with console.error otherwise, both when the widget renders on mount and when render() is called through the ref.

    View changes on GitHub

@​marsidev/react-turnstile@​1.6.0

   🚀 Features

• Update server-side validation (siteverify) types  -  by @​marsidev in marsidev/react-turnstile#254 (68964)
• Support offlabel-show-privacy and offlabel-show-help render parameters  -  by @​marsidev in marsidev/react-turnstile#257 (673a9)

   🐞 Bug Fixes

• deps: Bump undici, js-yaml and sharp to patched versions  -  by @​marsidev in marsidev/react-turnstile#253 (9c1f5)

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.5

   🐞 Bug Fixes

• Show widget after calling execute() in execute mode  -  by @​CatLover01 in marsidev/react-turnstile#245 (6d259)

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.4

   🐞 Bug Fixes

• Respect widget size when appearance is interaction-only  -  by @​CatLover01 in marsidev/react-turnstile#229 (3d10c)

    View changes on GitHub

@​marsidev/react-turnstile@​1.5.3

Patch Changes

• #167 32ab55e Thanks @​marsidev! - Fix nonce from scriptOptions not being set on the injected <script> tag. The script was assigned via the nonce IDL property, which only writes the element's internal slot and never reflects to the nonce content attribute in real browsers. It is now set with setAttribute, so the attribute appears on the tag and CSP nonce-... allowlists work as expected.

Commits

• 735f927 chore: version packages (#271)
• 6706f1a Pin changesets/action to v1.9.0 (#270)
• 1d53766 Surface invalid render parameters through onError (#269)
• b7088e6 chore: bump oxfmt from 0.62.0 to 0.63.0 (#268)
• 78d0af6 chore: bump oxlint from 1.77.0 to 1.78.0 (#267)
• 30c4fee chore: bump the dependencies group across 2 directories with 3 updates (#266)
• a99952b ci: bump changesets/action in the github-actions group (#265)
• b808418 chore: bump oxfmt from 0.61.0 to 0.62.0 (#261)
• 558f852 chore: bump jsdom from 29.1.1 to 30.0.1 (#262)
• 6983611 chore: bump oxlint from 1.72.0 to 1.77.0 (#263)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​marsidev/react-turnstile since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
rybbit	Error		Sep 22, 2026 1:35am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 1339ed3c-148e-4dc4-9a73-0d5713fa293d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}