unstale

npm / input-otp

input-otp

What changed in input-otp 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.

1 new APIs and options2 behavior and defaults6 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli on npm

input-otp 19 changes

New APIs and options 1

  • Adds a nonce prop applied to the injected style tag so it can satisfy a style-src Content-Security-Policy that requires nonces.

    1.5.0release notes

Behavior and default changes 2

  • Failures to insert cosmetic CSS rules are logged as warnings instead of errors, since they do not break functionality.

    1.5.0release notes

  • Defaults to false to prevent browsers from marking a filled code as a spelling error; passing a spellCheck prop still overrides it.

    1.5.0release notes

Fixes and other changes 6

  • Pending synchronization timeouts are cleared on unmount, avoiding state updates on an unmounted component.

    1.5.0release notes

  • The password-manager badge gutter is reserved only when it fits within the nearest horizontal overflow constraint; otherwise the badge stays over the last slot without creating overflow.

    1.5.0release notes

  • The component checks for ResizeObserver before observing; when unavailable, root height is measured once on mount instead of crashing.

    1.5.0release notes

  • A 16px font-size fallback is used until --root-height resolves, preventing iOS Safari from zooming the page on focus or back-navigation.

    1.5.0release notes

  • The listener uses a guarded input reference, preventing a crash when the ref is null.

    1.5.0release notes

  • The container receives translate="no" to prevent browser translation from rewriting slot text nodes and crashing React on re-render.

    1.5.0release notes