# What changed in input-otp

> 9 changes in input-otp 1 from its official release notes, upgrade guides and advisories: 1 new APIs and options. Each one cited. Sources checked 2026-10-18. HTML: https://unstale.sh/npm/input-otp/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## input-otp 1

### New APIs and options

- Adds a `nonce` prop applied to the injected style tag so it can satisfy a `style-src` Content-Security-Policy that requires nonces. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)

### Behavior and default changes

- Failures to insert cosmetic CSS rules are logged as warnings instead of errors, since they do not break functionality. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- Defaults to false to prevent browsers from marking a filled code as a spelling error; passing a `spellCheck` prop still overrides it. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)

### Fixes and other changes

- Pending synchronization timeouts are cleared on unmount, avoiding state updates on an unmounted component. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- The password-manager badge gutter is reserved only when it fits within the nearest horizontal overflow constraint; otherwise the badge stays over the last slot without creating overflow. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- The component checks for `ResizeObserver` before observing; when unavailable, root height is measured once on mount instead of crashing. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- A 16px font-size fallback is used until `--root-height` resolves, preventing iOS Safari from zooming the page on focus or back-navigation. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- The listener uses a guarded input reference, preventing a crash when the ref is null. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)
- The container receives `translate="no"` to prevent browser translation from rewriting slot text nodes and crashing React on re-render. (1.5.0) — [release notes](https://github.com/guilhermerodz/input-otp/releases/tag/v1.5.0)