[code-infra-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
es-toolkit (source)	^1.52.0 → ^1.53.1

⚠️ Renovate does not enforce Minimum Release Age for bump, lockfileUpdate, or rollback updates, so these are raised without a Minimum Release Age check. You will need to manually validate the Minimum Release Age for these package(s).

---

Release Notes

toss/es-toolkit (es-toolkit)

v1.53.1

Compare Source

Released on October 31st, 2026.

This release includes security fixes for es-toolkit/compat, and we recommend upgrading.
The fixes match Lodash, so results may differ if you relied on the previous behavior.

• Fixed compat/template to reject variable values and imports keys that are not
  plain parameter names, and to replace all whitespace in sourceURL, preventing code injection.
• Fixed compat/defaultsDeep to ignore __proto__ keys, preventing prototype pollution.
• Fixed compat/unset, compat/omit, and compat/pullAt to stop when __proto__,
  constructor, or prototype appears before the last path key, preventing the deletion
  of built-in prototype properties.

The following are other fixes in this release.

• Fixed clone to preserve the offset and length of a DataView. ([#​2166])
• Fixed split to keep surrogate pairs and combining marks together for an empty separator. ([#​2171])
• Fixed withTimeout to clear its timer after the operation completes. ([#​2170])
• Fixed compat/pickBy to not treat objects with a numeric length as array-like. ([#​2165])
• Fixed compat/findLast and compat/some to not treat length as an element of
  array-likes. ([#​2168])

We sincerely thank @​arba-octo, @​dayongkr, @​frogscooper, and @​KooYS for their contributions.
We appreciate your great efforts!

v1.53.0

Compare Source

Released on October 24th, 2026.

• Added serialize to es-toolkit/util, and hash in the new es-toolkit/util/hash
  entrypoint. ([#​2067], [#​2154])

• Added Queue to es-toolkit/util. ([#​2150], [#​2153])

• Added stringify to es-toolkit/query-string. ([#​2121])

• Added sentenceCase. ([#​2079])

• Added lerp and inverseLerp. ([#​2078])

• Added the DistributiveOmit type. ([#​2142])

• es-toolkit/compat now runs on Node.js 6 and ES2015 environments without
  transpilation or polyfills. ([#​2097], [#​2161])

• Fixed deepFreeze to freeze symbol and non-enumerable properties. ([#​2143])

• Fixed Semaphore to keep release fast when many tasks are waiting. ([#​2149])

• Fixed DeepPartial and DeepReadonly to preserve branded primitive types. ([#​2074])

• Fixed the Merge type to keep the input type when merging a type with itself or a
  narrower type, and to use the source type when a defined source replaces a nullable
  or primitive value. ([#​2148], [#​2155])

• Fixed the fp intersectionBy to match each mapped value at most once in lazy
  pipes. ([#​2146])

The following change results or types that v1.52.0 produced, so review them if you
relied on the previous behavior.

• dedent now leaves interpolated values out of the indentation calculation ([#​2099]),
  and throws a TypeError for a malformed template literal, like String.dedent ([#​2100]).
• deburr now keeps letters of non-Latin scripts as they are. ([#​2124])
• orderBy and sortBy now sort NaN in a consistent position. ([#​2133])
• once now calls the function with the caller's this. ([#​2069])
• findKey and mapKeys now type keys like Object.keys, so numeric keys are
  strings. ([#​2077], [#​2156])
• The fp head, last, maxBy, and minBy now always return T | undefined.
  ([#​2113])

The following bring es-toolkit/compat closer to Lodash. Behavior for the affected
edge cases now matches Lodash, so results may differ if you relied on the previous output.

• Fixed compat/add, compat/subtract, compat/multiply, and compat/divide to
  match Lodash on null operands. ([#​2056])

• Fixed compat/ceil, compat/floor, and compat/round to coerce arguments like
  Lodash. ([#​2064])

• Fixed compat/toString to read sparse array holes as undefined. ([#​2091])

• Fixed compat/dropWhile, compat/dropRightWhile, and compat/some to normalize
  the predicate. ([#​2072])

• Fixed compat/countBy to return a plain object. ([#​2090])

• Fixed compat/pull, compat/pullAll, compat/pullAllBy, and compat/remove to
  handle nullish inputs. ([#​2095])

• Fixed compat/xorBy and compat/xorWith to ignore the iteratee and comparator for
  a single array. ([#​2098])

• Fixed compat/reduce and compat/reduceRight to resolve the iteratee like Lodash,
  and compat/forEach, compat/forEachRight, compat/forIn, compat/forInRight,
  compat/forOwn, and compat/forOwnRight to treat a non-function iteratee as
  identity. ([#​2101], [#​2158])

• Fixed compat/words to match titlecase letters, emoji sequences, and non-ASCII
  numerals and symbols, and to keep combining marks attached to their letter.
  ([#​2102], [#​2103], [#​2110])

• Fixed compat/unionWith to pass comparator arguments in Lodash's order. ([#​2114])

• Fixed compat/groupBy, compat/maxBy, and compat/minBy to call the iteratee
  with only the element. ([#​2122])

• Fixed compat/deburr to only deburr Latin letters. ([#​2123])

• Fixed compat/truncate to escape a string separator. ([#​2130])

• Fixed compat/cloneDeep and compat/cloneDeepWith to keep errors uncloned, and
  compat/isMatch and compat/matches to compare errors like Lodash. ([#​2159])

• Fixed compat/startCase to only uppercase the first letter of each word. ([#​2160])

• Exported the PropertyPath type from es-toolkit/compat. ([#​2145])

• Reduced the CommonJS bundle size of compat/every and compat/findLastIndex. ([#​2162])

• Fixed documentation examples whose results did not match the code. ([#​2071],
  [#​2109], [#​2132], [#​2136], [#​2138])

• Listed the iterator docs under the es-toolkit and fp tabs. ([#​2137])

• Clarified which compat behavior fixes the contributing guide accepts. ([#​2107],
  [#​2108], [#​2125])

We sincerely thank @​arba-octo, @​Archibald1948, @​cyclomati, @​D-Sketon, @​dayongkr,
@​HyoYoonNam, @​jaideeppyne, @​jeonghoon11, @​jeynes-log, @​JonghwanWon, @​mariazuheros,
@​MFA-G, @​minseonkkim, @​minsoo-web, @​Patrick-SCH03, @​poketopa, @​raon0211, @​ssi02014,
@​TalhaHunter101, and @​Tnalxmsk for their contributions. We appreciate your great
efforts!

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • Between 12:00 AM and 04:59 AM, only on Monday (* 0-4 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by self-hosted Renovate.

[code-infra-dashboard]

Deploy preview

https://deploy-preview-24075--material-ui-x.netlify.app/

Bundle size

Bundle	Parsed size	Gzip size
@mui/x-data-grid	0B(0.00%)	0B(0.00%)
@mui/x-data-grid-pro	0B(0.00%)	0B(0.00%)
@mui/x-data-grid-premium	0B(0.00%)	0B(0.00%)
@mui/x-charts	0B(0.00%)	0B(0.00%)
@mui/x-charts-pro	0B(0.00%)	0B(0.00%)
@mui/x-charts-premium	0B(0.00%)	0B(0.00%)
@mui/x-date-pickers	0B(0.00%)	0B(0.00%)
@mui/x-date-pickers-pro	0B(0.00%)	0B(0.00%)
@mui/x-tree-view	0B(0.00%)	0B(0.00%)
@mui/x-tree-view-pro	0B(0.00%)	0B(0.00%)
@mui/x-scheduler	0B(0.00%)	0B(0.00%)
@mui/x-scheduler-premium	0B(0.00%)	0B(0.00%)
@mui/x-chat	0B(0.00%)	0B(0.00%)
@mui/x-license	0B(0.00%)	0B(0.00%)

Details of bundle changes

---

Check out the code infra dashboard for more information about this PR.