[WIP] Add Octane adapter for TanStack Form v1 by crutchcorn · Pull Request #2396 · TanStack/form

crutchcorn · 2026-09-22T01:46:11Z

This PR adds in an Octane adapter with TSRX usage.

TODOs:

coderabbitai · 2026-09-22T01:46:25Z

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

nx-cloud · 2026-09-22T01:46:34Z

View your CI Pipeline Execution ↗ for commit fdca4c4

Command	Status	Duration	Result
`nx affected --targets=test:sherif,test:knip,tes...`	✅ Succeeded	3m 12s	View ↗
`nx run-many --target=build --exclude=examples/**`	✅ Succeeded	31s	View ↗

☁️ Nx Cloud last updated this comment at 2026-09-22 05:44:46 UTC

socket-security · 2026-09-22T01:46:55Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance
	@tanstack/svelte-store@0.12.0 ⏵ 0.12.1	⁺¹			⁺²
	@tanstack/octane-store@0.12.2
	@tanstack/vue-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺⁸
	@vitest/coverage-istanbul@3.2.4 ⏵ 3.2.7
	@tanstack/react-store@0.9.3 ⏵ 0.11.1	⁺¹		⁺³	⁺¹
	@angular/platform-browser-dynamic@21.2.14 ⏵ 21.2.23				⁺⁴⁸
	@tanstack/solid-store@0.11.0 ⏵ 0.11.1	⁺¹			⁺⁶
	@tanstack/preact-store@0.13.1 ⏵ 0.13.2				⁺⁵
	@remix-run/serve@2.17.4 ⏵ 2.17.5				⁺⁴
	@tanstack/store@0.11.1
	@remix-run/node@2.17.4 ⏵ 2.17.5
	@angular/platform-browser@21.2.14 ⏵ 21.2.23	⁺²³
	@types/react-dom@19.2.3 ⏵ 19.3.0	⁺¹		⁺¹
	@react-navigation/elements@2.9.18 ⏵ 2.9.43	⁺¹			⁺¹
	@react-navigation/native@7.2.4 ⏵ 7.4.1				⁺¹
	@react-navigation/bottom-tabs@7.16.1 ⏵ 7.19.2	⁺¹			⁺¹
	@tanstack/devtools-ui@0.5.2 ⏵ 0.5.3
	@angular/animations@21.2.14 ⏵ 21.2.23				⁺⁴⁸
	@angular/compiler-cli@21.2.14 ⏵ 21.2.23	⁺²⁰			⁺¹
	@tsrx/eslint-plugin@0.4.7
	@sveltejs/package@2.5.7 ⏵ 2.5.8
	@tsrx/prettier-plugin@0.4.7
	@angular/router@21.2.14 ⏵ 21.2.23	⁺²¹
	@angular/forms@21.2.14 ⏵ 21.2.23	⁺²¹
	expo-router@6.0.23 ⏵ 6.0.24	⁺¹⁸		⁺¹	⁺¹
	@angular/cli@21.2.12 ⏵ 21.2.24	⁺¹³			⁺¹
	expo@54.0.34 ⏵ 54.0.37	⁺²²		⁺¹	⁺¹
	@tsrx/typescript-plugin@0.4.6
	@remix-run/react@2.17.4 ⏵ 2.17.5				^-1
	@angular/compiler@21.2.14 ⏵ 21.2.23	⁺²⁰	⁺²⁰		⁺¹
	@octanejs/testing-library@0.1.52
	vitest@3.2.4 ⏵ 3.2.7	⁺¹	⁺⁷⁴	⁺¹
See 41 more rows in the dashboard

View full report

socket-security · 2026-09-22T01:46:57Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Publisher changed: npm `@expo/xcpretty` is now published by expo-bot Author: expo-bot From: pnpm-lock.yaml → `npm/expo@54.0.37` → `npm/@expo/xcpretty@4.4.5` ℹ Read more on: This package \| This alert \| What is unstable ownership? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@expo/xcpretty@4.4.5`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@noble/hashes` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@analogjs/vite-plugin-angular@2.7.2` → `npm/@angular-devkit/build-angular@21.2.24` → `npm/@noble/hashes@1.8.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@noble/hashes@1.8.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `@noble/hashes` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/@analogjs/vite-plugin-angular@2.7.2` → `npm/@angular-devkit/build-angular@21.2.24` → `npm/@noble/hashes@1.8.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@noble/hashes@1.8.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Publisher changed: npm `@solid-primitives/keyboard` is now published by davedbase Author: davedbase From: pnpm-lock.yaml → `npm/@tanstack/react-devtools@0.9.13` → `npm/@tanstack/solid-devtools@0.7.33` → `npm/@solid-primitives/keyboard@1.3.7` ℹ Read more on: This package \| This alert \| What is unstable ownership? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Try to reduce the number of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@solid-primitives/keyboard@1.3.7`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Obfuscated code: npm `yargs` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → `npm/expo@54.0.37` → `npm/react-native@0.81.5` → `npm/yargs@17.7.3` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/yargs@17.7.3`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-darwin-arm64` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-darwin-arm64@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-darwin-arm64@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-darwin-x64` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-darwin-x64@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-darwin-x64@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-linux-arm64-gnu` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-linux-arm64-gnu@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-linux-arm64-gnu@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-linux-arm64-musl` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-linux-arm64-musl@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-linux-arm64-musl@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-linux-x64-gnu` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-linux-x64-gnu@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-linux-x64-gnu@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-linux-x64-musl` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-linux-x64-musl@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-linux-x64-musl@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-win32-arm64-msvc` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-win32-arm64-msvc@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-win32-arm64-msvc@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc-win32-x64-msvc` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc-win32-x64-msvc@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc-win32-x64-msvc@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.
Warn		Low adoption: npm `@tsrx/oxc` Location: Package overview From: pnpm-lock.yaml → `npm/octane@0.2.16` → `npm/@tsrx/oxc@0.13.0` ℹ Read more on: This package \| This alert \| What are unpopular packages? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Unpopular packages may have less maintenance and contain other problems. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore npm/@tsrx/oxc@0.13.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

github-actions · 2026-09-22T01:47:15Z

🚀 Changeset Version Preview

No changeset entries found. Merging this PR will not cause a version bump for any packages.

pkg-pr-new · 2026-09-22T01:48:56Z

More templates

@tanstack/angular-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/angular-form@2396

@tanstack/form-core

npm i https://pkg.pr.new/TanStack/form/@tanstack/form-core@2396

@tanstack/form-devtools

npm i https://pkg.pr.new/TanStack/form/@tanstack/form-devtools@2396

@tanstack/lit-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/lit-form@2396

@tanstack/octane-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/octane-form@2396

@tanstack/preact-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/preact-form@2396

@tanstack/react-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/react-form@2396

@tanstack/react-form-devtools

npm i https://pkg.pr.new/TanStack/form/@tanstack/react-form-devtools@2396

@tanstack/react-form-nextjs

npm i https://pkg.pr.new/TanStack/form/@tanstack/react-form-nextjs@2396

@tanstack/react-form-remix

npm i https://pkg.pr.new/TanStack/form/@tanstack/react-form-remix@2396

@tanstack/react-form-start

npm i https://pkg.pr.new/TanStack/form/@tanstack/react-form-start@2396

@tanstack/solid-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/solid-form@2396

@tanstack/solid-form-devtools

npm i https://pkg.pr.new/TanStack/form/@tanstack/solid-form-devtools@2396

@tanstack/svelte-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/svelte-form@2396

@tanstack/vue-form

npm i https://pkg.pr.new/TanStack/form/@tanstack/vue-form@2396

commit: 9c132f4

codecov-commenter · 2026-09-22T01:52:43Z

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 98.55769% with 3 lines in your changes missing coverage. Please review.
✅ Project coverage is 90.31%. Comparing base (6892ed0) to head (9c132f4).
⚠️ Report is 280 commits behind head on main.

Files with missing lines	Patch %	Lines
packages/octane-form/src/useForm.tsrx	94.73%	2 Missing ⚠️
packages/octane-form/src/createFormHook.tsrx	97.72%	1 Missing ⚠️
❗ Your organization needs to install the Codecov GitHub app to enable full functionality.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2396      +/-   ##
==========================================
- Coverage   90.35%   90.31%   -0.04%     
==========================================
  Files          38       73      +35     
  Lines        1752     3439    +1687     
  Branches      444      836     +392     
==========================================
+ Hits         1583     3106    +1523     
- Misses        149      299     +150     
- Partials       20       34      +14

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Can add back once tsrx-org/tsrx#139 is merged

This reverts commit 4fb7e8a.

crutchcorn changed the title ~~Add Octane adapter for TanStack Form v1~~ [WIP] Add Octane adapter for TanStack Form v1 Sep 22, 2026

crutchcorn added 18 commits September 21, 2026 22:39

chore: initial commit

116c154

chore: fix test usage

08f2ee4

chore: more tests

9eb082f

chore: flatten our tests

a9fe1fe

chore: add some TSC tooling

ebf4f09

chore: prettier format

6b74d74

chore: tsrx eslint

14708df

chore: revert Prettier plugin addin

98a7e2a

Can add back once tsrx-org/tsrx#139 is merged

Revert "chore: prettier format"

6a62efa

This reverts commit 4fb7e8a.

chore: fix types in TSRX files

e772dae

chore: v1 of patching

583cd91

chore: replace prepare ts with cross-env fix

12accbd

chore: add back Prettier

9f22c4e

chore: format with prettier

e59d6fe

chore: fix CI test

670c6a3

chore: fix types of Vitest/Vite

1c001cd

chore: fix test:lib

289b78b

chore: fix test

fdca4c4

crutchcorn force-pushed the v1-octane branch from fce30ec to fdca4c4 Compare September 22, 2026 05:39

ci: apply automated fixes and generate docs

9c132f4

Navigation Menu

Uh oh!

[WIP] Add Octane adapter for TanStack Form v1 - #2396

[WIP] Add Octane adapter for TanStack Form v1#2396
crutchcorn wants to merge 19 commits into
mainfrom
v1-octane

crutchcorn commented Sep 22, 2026

Uh oh!

coderabbitai Bot commented Sep 22, 2026

Draft PR not reviewed

Uh oh!

nx-cloud Bot commented Sep 22, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 22, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Sep 22, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Sep 22, 2026

Uh oh!

pkg-pr-new Bot commented Sep 22, 2026 •

edited

Loading

Uh oh!

codecov-commenter commented Sep 22, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

crutchcorn commented Sep 22, 2026

Uh oh!

coderabbitai Bot commented Sep 22, 2026

Draft PR not reviewed

Uh oh!

nx-cloud Bot commented Sep 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Sep 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Sep 22, 2026

🚀 Changeset Version Preview

Uh oh!

pkg-pr-new Bot commented Sep 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

codecov-commenter commented Sep 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

nx-cloud Bot commented Sep 22, 2026 •

edited

Loading

socket-security Bot commented Sep 22, 2026 •

edited

Loading

socket-security Bot commented Sep 22, 2026 •

edited

Loading

pkg-pr-new Bot commented Sep 22, 2026 •

edited

Loading

codecov-commenter commented Sep 22, 2026 •

edited

Loading