Skip to content

chore: Update Web dependencies#2568

Merged
Aureliolo merged 3 commits into
mainfrom
renovate/web
Jul 11, 2026
Merged

chore: Update Web dependencies#2568
Aureliolo merged 3 commits into
mainfrom
renovate/web

Conversation

@renovate

@renovate renovate Bot commented Jul 11, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
@​codemirror/state 6.7.06.7.1 age confidence dependencies patch
@​codemirror/view 6.43.46.43.6 age confidence dependencies patch
@eslint-react/eslint-plugin (source) 5.10.35.14.1 age confidence devDependencies minor
@storybook/addon-a11y (source) 10.4.610.5.0 age confidence devDependencies minor
@storybook/addon-docs (source) 10.4.610.5.0 age confidence devDependencies minor
@storybook/react (source) 10.4.610.5.0 age confidence devDependencies minor
@storybook/react-vite (source) 10.4.610.5.0 age confidence devDependencies minor
@types/node (source) 25.9.425.9.5 age confidence devDependencies patch
@vitest/coverage-v8 (source) 4.1.94.1.10 age confidence devDependencies patch
@xyflow/react (source) 12.11.112.11.2 age confidence dependencies patch
astro (source) 7.0.67.0.7 age confidence dependencies patch
eslint (source) 10.6.010.7.0 age confidence devDependencies minor
fast-check (source) 4.8.04.9.0 age confidence devDependencies minor
js-yaml 4.3.05.2.1 age confidence overrides patch
knip (source) 6.24.06.26.0 age confidence devDependencies minor
lucide-react (source) 1.23.01.24.0 age confidence dependencies minor
msw (source) 2.14.62.15.0 age confidence devDependencies minor
node (source) v26.4.026.5.0 age confidence engines minor
react-router (source) 8.1.08.2.0 age confidence dependencies minor
storybook (source) 10.4.610.5.0 age confidence devDependencies minor
typescript (source) 6.0.37.0.2 age confidence devDependencies major
typescript-eslint (source) 8.62.18.63.0 age confidence devDependencies minor
vite (source) 8.1.38.1.4 age confidence devDependencies patch
vitest (source) 4.1.94.1.10 age confidence devDependencies patch
wrangler (source) 4.107.04.110.0 age confidence dependencies minor

Release Notes

Rel1cx/eslint-react (@​eslint-react/eslint-plugin)

v5.14.1

Compare Source

🐞 Fixes
  • react-rsc/function-definition: fixed invalid async autofixes for object and class methods with local 'use server' directives, including generator and computed methods; accessors and constructors are now reported without an unsafe fix.
🏗️ Internal
  • Added behavior-boundary tests for react-rsc/function-definition, covering directive placement, export resolution, function forms, and autofix behavior.
  • Cleaned up redundant code and comments in react-rsc/function-definition and react-x/unsupported-syntax.

Full Changelog: Rel1cx/eslint-react@v5.14.0...v5.14.1

v5.14.0

Compare Source

✨ New
  • react-x/refs: added render-reachability support for function declarations, IIFEs, synchronous array callbacks, and render-time callbacks passed to useMemo and useReducer. (#​1895)
  • react-x/refs: added lazy-initialization support for explicit undefined guards and for null guards enclosing additional nested conditions. (#​1895)
🐞 Fixes
  • react-x/refs: reworked render-time call analysis as an unbounded fixed-point propagation, removing the previous 50-iteration cap. (#​1895)
  • react-x/refs: tightened inverted lazy-initialization handling so the non-null branch must unconditionally return or throw. (#​1895)
  • react-x/refs: stopped treating !ref.current as a null guard because initialized refs may contain falsy values. (#​1895)
🏗️ Internal
  • react-x/refs: refactored ref aliases, function bindings, JSX refs, and duplicate initialization tracking to use scoped ESLint variable identities and position-aware binding events instead of file-wide identifier names. (#​1895)
  • Added behavior-boundary tests for react-x/immutability and documented them in the spec diff report.
  • Updated build scripts.
  • Bumped @effect/language-service to ^0.86.5.
  • Bumped preact to ^10.29.7.
  • Bumped vite to ^8.1.4 in example apps.
  • Bumped dprint JSON plugin to ^0.23.0.

Full Changelog: Rel1cx/eslint-react@v5.13.2...v5.14.0

v5.13.2

Compare Source

🐞 Fixes
  • react-x/immutability: fixed false positive on ref.current write inside useEffect. (#​1894)
🏗️ Internal
  • Bumped @types/node to ^26.1.1.
  • Bumped preact to ^10.29.6.
  • Bumped tsdown to ^0.22.4.

Full Changelog: Rel1cx/eslint-react@v5.13.1...v5.13.2

v5.13.1

Compare Source

🐞 Fixes
  • react-x/refs: aligned error message wording for readDuringRender, writeDuringRender, and refPassedToFunction with the React Compiler specification.

Full Changelog: Rel1cx/eslint-react@v5.13.0...v5.13.1

v5.13.0

Compare Source

✨ New
  • react-x/refs now detects nested property writes on a ref's value (e.g. ref.current.inner = value), which are now reported as writeDuringRender instead of being misclassified as a read.
  • react-x/refs now tracks functions bound to (and called through) simple object-member-expression targets (e.g. object.foo = () => ref.current; object.foo();), closing a gap in the render-reachability analysis that previously only covered plain variable bindings.
  • react-x/refs now detects ref.current accesses inside the lazy initializer function passed directly as useState's first argument, since it runs synchronously during the initial render unlike other hook-callback arguments.
  • react-x/refs now exempts calls to a function named render (e.g. props.render(ref), a common render-prop pattern) from the refPassedToFunction diagnostic, alongside the existing mergeRefs/hook exemptions.
🐞 Fixes
  • Improved react-x/refs lazy-init guard-block detection so it is direction-aware: inside the branch of an if (ref.current == null)-style guard that is guaranteed to see ref.current as null, only a direct write is treated as the (single) valid initialization; reads or values passed to a function there are still reported.
🏗️ Internal
  • Refactored react-x/refs internals, replacing isRefCurrentNullCheck with getRefCurrentNullCheckBranch in lib.ts.
  • Upgraded fumadocs packages and preact.
  • Cleaned up redundant code in the react-debug/jsx rule.

Full Changelog: Rel1cx/eslint-react@v5.12.2...v5.13.0

v5.12.1

Compare Source

📝 Documentation
  • Fixed react-x/immutability rule description in docs.
🏗️ Internal
  • Cleaned up redundant code in some rules.

Full Changelog: Rel1cx/eslint-react@v5.12.0...v5.12.1

v5.12.0

Compare Source

✨ New
  • Reworked react-x/immutability to align with the React Compiler's ValidateNoFreezingKnownMutableFunctions validation pass: it now detects functions that (transitively) mutate a captured local variable and reports them when passed as a JSX prop, passed as a hook argument, or returned from a hook. (#​1891)
📝 Documentation
  • Cleaned up the rule relations table.
🏗️ Internal
  • Bumped typescript-eslint packages to ^8.63.0.
  • Bumped eslint-plugin-perfectionist to ^5.10.0.

Full Changelog: Rel1cx/eslint-react@v5.11.3...v5.12.0

v5.11.3

Compare Source

🐞 Fixes
  • Fixed FunctionComponentDetectionHint.DoNotIncludeFunctionDefinedAsClassProperty checking for object Property nodes instead of class PropertyDefinition nodes, so functions defined as class fields are now correctly excluded when the hint is set. (#​1890)
🏗️ Internal
  • Renamed fix helpers and formatted MessageID types.
  • Inlined local string constants in rule implementations.
  • Bumped eslint-plugin-jsdoc, typedoc, undici and pnpm.

Full Changelog: Rel1cx/eslint-react@v5.11.2...v5.11.3

v5.11.2

Compare Source

📝 Documentation
  • Updated rule documentation for React introspection APIs (react-x/no-children-count, react-x/no-children-for-each, react-x/no-children-map, react-x/no-children-only, react-x/no-children-to-array, and react-x/no-clone-element) with clearer guidance on why child introspection creates fragile component coupling and links to Astryx's no-react-introspection rule. (#​1889)
  • Updated the function-component collector sequence diagram on the website.
  • Updated THIRD-PARTY-LICENSE file.

Full Changelog: Rel1cx/eslint-react@v5.11.0...v5.11.2

v5.11.0

Compare Source

✨ New
  • react-x/refs now detects ref mutations/reads inside helper functions that are called (directly, or through a simple variable alias) during render, closing a gap where any nested function was previously treated as a safe boundary regardless of whether it was actually invoked during render.
  • react-x/refs now reports a second guarded ref initialization: only a single if (ref.current == null) { ref.current = ... } guarded initialization is allowed per ref per component/hook, and a second guarded write (in the same or a different if block) is reported as duplicateRefInit.
  • react-x/refs now supports .current accesses whose base is a member expression that looks like a ref (e.g. props.ref.current), not just a plain identifier.
🏗️ Internal
  • Added unit tests for packages/ast/src/check.ts.
  • Bumped @effect/language-service to ^0.86.4 and preact to ^10.29.4.
  • Refactored react-x/static-components internals without changing behavior: findVariableForIdentifier now delegates to @typescript-eslint/utils/ast-utils's findVariable instead of a hand-rolled scope-chain walk, resolveDynamicValue was split into findDynamicCreationSite and findReassignmentCreationSite, and render-boundary/JSX-candidate handling was extracted into dedicated helpers.
  • Unified the signatures of Check.isDirective and Check.isIdentifier in @eslint-react/ast: both now take the node as the first argument and an optional name as the second, replacing the previous curried (name) => (node) => boolean shape. Removed Check.isStringLiteral; use ts-pattern's isMatching or an inline type guard instead.

Full Changelog: Rel1cx/eslint-react@v5.10.4...v5.11.0

v5.10.4

Compare Source

🐞 Fixes
  • Fixed react-x/no-misused-capture-owner-stack not recognizing process.env.NODE_ENV checks wrapped in TypeScript type expressions such as (process.env as any).NODE_ENV. (#​1813)
  • Fixed Extract.getFullyQualifiedName to unwrap TSAsExpression, TSTypeAssertion, TSNonNullExpression, and ChainExpression before resolving names. This improves name resolution for rules that identify React APIs or collect component/hook names through type-wrapped expressions.

Full Changelog: Rel1cx/eslint-react@v5.10.3...v5.10.4

storybookjs/storybook (@​storybook/addon-a11y)

v10.5.0

Compare Source

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)
List of all updates - A11y: Fix MDX heading anchors not keyboard accessible - [#​34368](https://redirect.github.com/storybookjs/storybook/pull/34368), thanks @​TheSeydiCharyyev! - A11y: Handle lang attribute throughout preview - [#​35321](https://redirect.github.com/storybookjs/storybook/pull/35321), thanks @​Sidnioulz! - A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable - [#​35306](https://redirect.github.com/storybookjs/storybook/pull/35306), thanks @​Sidnioulz! - Addon A11y: Preserve disabled a11y rules with runOnly - [#​34649](https://redirect.github.com/storybookjs/storybook/pull/34649), thanks @​cyphercodes! - Addon Docs: DocsContent not filling available width when TOC is enabled - [#​35043](https://redirect.github.com/storybookjs/storybook/pull/35043), thanks @​k-utsumi! - Addon Docs: Resolve CSF4 module exports without a default export - [#​34834](https://redirect.github.com/storybookjs/storybook/pull/34834), thanks @​TheSeydiCharyyev! - Addon Docs: Resolve providerImportSource to a path instead of a file:// URL - [#​34841](https://redirect.github.com/storybookjs/storybook/pull/34841), thanks @​TheSeydiCharyyev! - Addon Vitest: Add an initialGlobals option to pin a project's globals - [#​35226](https://redirect.github.com/storybookjs/storybook/pull/35226), thanks @​lifeiscontent! - Addon Vitest: Avoid erroring out on benign Win process exits - [#​35287](https://redirect.github.com/storybookjs/storybook/pull/35287), thanks @​Sidnioulz! - Addon Vitest: Fix dynamic import failure with Vitest 3 - [#​34927](https://redirect.github.com/storybookjs/storybook/pull/34927), thanks @​Sidnioulz! - Addon Vitest: Subscribe for run completion before triggering it - [#​35291](https://redirect.github.com/storybookjs/storybook/pull/35291), thanks @​tsushanth! - Angular: Add versioned `@types/node` to packages installed during `storybook init` - [#​34192](https://redirect.github.com/storybookjs/storybook/pull/34192), thanks @​copilot-swe-agent! - Angular: Fix custom paths for stats.json on angular - [#​34551](https://redirect.github.com/storybookjs/storybook/pull/34551), thanks @​mrginglymus! - Angular: Fix zone.js drop in angular-to-angular-vite migration + schema sync + transform widening - [#​35386](https://redirect.github.com/storybookjs/storybook/pull/35386), thanks @​valentinpalkovic! - Angular: Install @​analogjs/vite-plugin-angular in angular-to-angular-vite automigration - [#​35432](https://redirect.github.com/storybookjs/storybook/pull/35432), thanks @​valentinpalkovic! - Angular: Introduce @​storybook/angular-vite package - [#​34202](https://redirect.github.com/storybookjs/storybook/pull/34202), thanks @​brandonroberts! - Angular: Support Angular 22 in Webpack framework - [#​35318](https://redirect.github.com/storybookjs/storybook/pull/35318), thanks @​EtiennePasteur! - Angular: Use future-proof API for component reflection - [#​35228](https://redirect.github.com/storybookjs/storybook/pull/35228), thanks @​Sidnioulz! - Babel: Remove bugfixes from preset-env in v8 - [#​35266](https://redirect.github.com/storybookjs/storybook/pull/35266), thanks @​Sidnioulz! - Builder Vite: Fix empty external globals imports - [#​34348](https://redirect.github.com/storybookjs/storybook/pull/34348), thanks @​raashish1601! - Builder Vite: Support configLoader via builder options - [#​34080](https://redirect.github.com/storybookjs/storybook/pull/34080), thanks @​holvi-sebastian! - CLI: Add `storybook ai ` MCP passthrough behind `STORYBOOK_FEATURE_AI_CLI` - [#​35125](https://redirect.github.com/storybookjs/storybook/pull/35125), thanks @​kasperpeulen! - CLI: Add telemetry for the `storybook ai ` passthrough - [#​35138](https://redirect.github.com/storybookjs/storybook/pull/35138), thanks @​kasperpeulen! - CLI: Allow -p shorthand to --port for ai command - [#​35390](https://redirect.github.com/storybookjs/storybook/pull/35390), thanks @​huang-julien! - CLI: Bundle the `ai` command in core so it never downloads `@storybook/cli` - [#​35147](https://redirect.github.com/storybookjs/storybook/pull/35147), thanks @​kasperpeulen! - CLI: Do not auto-open the browser in storybook dev under AI agents - [#​35412](https://redirect.github.com/storybookjs/storybook/pull/35412), thanks @​kasperpeulen! - CLI: Exit process after successful build - [#​34735](https://redirect.github.com/storybookjs/storybook/pull/34735), thanks @​torleifhalseth! - CLI: Fix angular-to-angular-vite migration failing to configure addon-vitest - [#​35404](https://redirect.github.com/storybookjs/storybook/pull/35404), thanks @​valentinpalkovic! - CLI: Fix silent hang in deferred addon configuration during upgrade - [#​35423](https://redirect.github.com/storybookjs/storybook/pull/35423), thanks @​valentinpalkovic! - CLI: Fix upgrade crash on Storybook latest version check - [#​35156](https://redirect.github.com/storybookjs/storybook/pull/35156), thanks @​yatishgoel! - CLI: Handle nested array schema for AI help - [#​35424](https://redirect.github.com/storybookjs/storybook/pull/35424), thanks @​huang-julien! - CLI: Install MCP when upgrade is ran by agent - [#​35215](https://redirect.github.com/storybookjs/storybook/pull/35215), thanks @​huang-julien! - CLI: Load Storybook AI help from preset metadata - [#​35212](https://redirect.github.com/storybookjs/storybook/pull/35212), thanks @​kasperpeulen! - CLI: Match `storybook ai` instances by config dir as well as cwd - [#​35392](https://redirect.github.com/storybookjs/storybook/pull/35392), thanks @​kasperpeulen! - CLI: Prefer agent-matched Storybook instances - [#​35235](https://redirect.github.com/storybookjs/storybook/pull/35235), thanks @​kasperpeulen! - CLI: Respect BROWSER and BROWSER_ARGS - [#​34513](https://redirect.github.com/storybookjs/storybook/pull/34513), thanks @​ianzone! - CLI: Show MCP workflow instructions in AI help - [#​35164](https://redirect.github.com/storybookjs/storybook/pull/35164), thanks @​kasperpeulen! - CLI: Skip a11y addon automigration prompting when not applicable - [#​35376](https://redirect.github.com/storybookjs/storybook/pull/35376), thanks @​yannbf! - CLI: Support Claude preview autoPort - [#​35259](https://redirect.github.com/storybookjs/storybook/pull/35259), thanks @​kasperpeulen! - CLI: Use detected package manager instead of npx for remote commands - [#​35409](https://redirect.github.com/storybookjs/storybook/pull/35409), thanks @​ghengeveld! - Controls: Add label to Object JSON control - [#​34766](https://redirect.github.com/storybookjs/storybook/pull/34766), thanks @​Jaksenc! - Controls: Guard normalizeOptions against array labels and prototype chain lookups - [#​34664](https://redirect.github.com/storybookjs/storybook/pull/34664), thanks @​creazyfrog! - Controls: Improve ArgsTable empty state guidance - [#​34857](https://redirect.github.com/storybookjs/storybook/pull/34857), thanks @​Aniketiitk21! - Controls: Load controls for composed-ref stories on direct deep-link - [#​35402](https://redirect.github.com/storybookjs/storybook/pull/35402), thanks @​ndelangen! - Controls: Load controls for stories from a composed ref - [#​35050](https://redirect.github.com/storybookjs/storybook/pull/35050), thanks @​TheSeydiCharyyev! - Controls: Prevent AbortError when rapidly resetting - [#​34412](https://redirect.github.com/storybookjs/storybook/pull/34412), thanks @​whdjh! - Controls: Prevent the save bar from covering the last control - [#​35136](https://redirect.github.com/storybookjs/storybook/pull/35136), thanks @​TheSeydiCharyyev! - Core: Add ai-review observability - [#​35300](https://redirect.github.com/storybookjs/storybook/pull/35300), thanks @​yannbf! - Core: Add experimentalReview feature flag and make the features type augmentable - [#​35379](https://redirect.github.com/storybookjs/storybook/pull/35379), thanks @​yannbf! - Core: Add missing export to globals - [#​34929](https://redirect.github.com/storybookjs/storybook/pull/34929), thanks @​Sidnioulz! - Core: Add ref-based components manifest index backed by docgen open service - [#​35063](https://redirect.github.com/storybookjs/storybook/pull/35063), thanks @​JReinhold! - Core: Add runtime instance registry - [#​34863](https://redirect.github.com/storybookjs/storybook/pull/34863), thanks @​kasperpeulen! - Core: Allow vite-plus 0.2.x in the optional peer range - [#​35221](https://redirect.github.com/storybookjs/storybook/pull/35221), thanks @​lifeiscontent! - Core: Categorize UniversalStore follower timeout error - [#​34592](https://redirect.github.com/storybookjs/storybook/pull/34592), thanks @​justismailmemon! - Core: Clean stale runtime instance records - [#​35023](https://redirect.github.com/storybookjs/storybook/pull/35023), thanks @​kasperpeulen! - Core: Compose core annotations before preview beforeAll - [#​35323](https://redirect.github.com/storybookjs/storybook/pull/35323), thanks @​JReinhold! - Core: Ensure every runtime installs the real channel and stop the mock fallback from poisoning it - [#​35410](https://redirect.github.com/storybookjs/storybook/pull/35410), thanks @​ndelangen! - Core: Expose backgrounds types from public subpath - [#​35044](https://redirect.github.com/storybookjs/storybook/pull/35044), thanks @​ShaharAviram1! - Core: Extract StoryDependencyGraphService from ChangeDetectionService - [#​35009](https://redirect.github.com/storybookjs/storybook/pull/35009), thanks @​valentinpalkovic! - Core: Fix cryptic invariant crash when dev server port detection fails - [#​35388](https://redirect.github.com/storybookjs/storybook/pull/35388), thanks @​kasperpeulen! - Core: Fix EEXIST race condition in static file copying during build - [#​34499](https://redirect.github.com/storybookjs/storybook/pull/34499), thanks @​flt3150sk! - Core: Fix npm dependency detection - [#​35083](https://redirect.github.com/storybookjs/storybook/pull/35083), thanks @​fallintoplace! - Core: Fix potential race condition in SET_CONFIG hook - [#​35401](https://redirect.github.com/storybookjs/storybook/pull/35401), thanks @​mrginglymus! - Core: Fix resolveImport TSX fallback - [#​34815](https://redirect.github.com/storybookjs/storybook/pull/34815), thanks @​cyphercodes! - Core: Flush preview-api hook effects in portable stories - [#​35224](https://redirect.github.com/storybookjs/storybook/pull/35224), thanks @​lifeiscontent! - Core: Ignore story-like directories in indexer - [#​34806](https://redirect.github.com/storybookjs/storybook/pull/34806), thanks @​MukundaKatta! - Core: Improve ActionBar focus indicator in high contrast mode - [#​34779](https://redirect.github.com/storybookjs/storybook/pull/34779), thanks @​TheSeydiCharyyev! - Core: Include chromatic packages in ecosystem identifier - [#​35170](https://redirect.github.com/storybookjs/storybook/pull/35170), thanks @​yannbf! - Core: Incorrect package json handling - [#​34515](https://redirect.github.com/storybookjs/storybook/pull/34515), thanks @​lino-levan! - Core: Introduce Agentic Review feature - [#​34837](https://redirect.github.com/storybookjs/storybook/pull/34837), thanks @​yannbf! - Core: Leave experimentalReview unset by default so the AI CLI plugins can enable review - [#​35396](https://redirect.github.com/storybookjs/storybook/pull/35396), thanks @​kasperpeulen! - Core: Recognize addon-mcp registered via getAbsolutePath() in runtime instance registry - [#​35286](https://redirect.github.com/storybookjs/storybook/pull/35286), thanks @​yannbf! - Core: Reset WebsocketTransport heartbeat on every message, not just ping - [#​35422](https://redirect.github.com/storybookjs/storybook/pull/35422), thanks @​valentinpalkovic! - Core: Skip story-docs Code panel emission in portable stories - [#​35387](https://redirect.github.com/storybookjs/storybook/pull/35387), thanks @​ndelangen! - Core: Use UndoIcon for Review-changes clear button - [#​34767](https://redirect.github.com/storybookjs/storybook/pull/34767), thanks @​valentinpalkovic! - CSF Next: Propagate skip tags to .test children - [#​34964](https://redirect.github.com/storybookjs/storybook/pull/34964), thanks @​kwonoj! - CSF Next: Add tags type support for - [#​34819](https://redirect.github.com/storybookjs/storybook/pull/34819), thanks @​unional! - CSF: Fix Canvas and userEvent types under Yarn PnP - [#​34986](https://redirect.github.com/storybookjs/storybook/pull/34986), thanks @​yatishgoel! - Docgen: Add mock open service - [#​34954](https://redirect.github.com/storybookjs/storybook/pull/34954), thanks @​JReinhold! - Docgen: Fix inferred argTypes from initial args overriding docgen and custom argTypes in experimentalDocgenServer mode - [#​35196](https://redirect.github.com/storybookjs/storybook/pull/35196), thanks @​JReinhold! - Docgen: Register service runtime, payload argTypes - [#​35108](https://redirect.github.com/storybookjs/storybook/pull/35108), thanks @​JReinhold! - Docgen: Run experimentalDocgenServer extraction in a worker thread - [#​35324](https://redirect.github.com/storybookjs/storybook/pull/35324), thanks @​JReinhold! - Docgen: Wire up react-component-meta with DocgenService - [#​34963](https://redirect.github.com/storybookjs/storybook/pull/34963), thanks @​JReinhold! - DocgenServer: Fix OOM by recycling the shared TS program - [#​35305](https://redirect.github.com/storybookjs/storybook/pull/35305), thanks @​ndelangen! - Docs: Add ariaLabel support to ActionItem interface - [#​34749](https://redirect.github.com/storybookjs/storybook/pull/34749), thanks @​TheSeydiCharyyev! - Docs: Add shallow MDX ref manifests for experimentalDocgenServer - [#​35189](https://redirect.github.com/storybookjs/storybook/pull/35189), thanks @​JReinhold! - Docs: Deprecate ExternalDocs - [#​35074](https://redirect.github.com/storybookjs/storybook/pull/35074), thanks @​Sidnioulz! - Docs: Fix Controls losing focus when subcomponents are defined - [#​35018](https://redirect.github.com/storybookjs/storybook/pull/35018), thanks @​cssinate! - Docs: Improve DocsParameters types - [#​35190](https://redirect.github.com/storybookjs/storybook/pull/35190), thanks @​mrginglymus! - Docs: Prevent heading anchor cutoff on docs pages - [#​34945](https://redirect.github.com/storybookjs/storybook/pull/34945), thanks @​copilot-swe-agent! - Docs: Restore React 16/17 support in useServiceDocgen - [#​35179](https://redirect.github.com/storybookjs/storybook/pull/35179), thanks @​JReinhold! - Docs: Route ArgTypes and Controls through docgen service when flag enabled - [#​35109](https://redirect.github.com/storybookjs/storybook/pull/35109), thanks @​JReinhold! - Docs: Scope control input ids to each block instance - [#​34793](https://redirect.github.com/storybookjs/storybook/pull/34793), thanks @​TheSeydiCharyyev! - Docs: Support explicit id prop on for standalone MDX - [#​34808](https://redirect.github.com/storybookjs/storybook/pull/34808), thanks @​TheSeydiCharyyev! - ESLint Plugin: Avoid ESLint Unstable API Load - [#​35269](https://redirect.github.com/storybookjs/storybook/pull/35269), thanks @​pupuking723! - Index: Remove `hasActiveFilters` check - [#​35151](https://redirect.github.com/storybookjs/storybook/pull/35151), thanks @​mrginglymus! - Init: Support pnpm catalogs when adding addon-vitest dependencies - [#​35415](https://redirect.github.com/storybookjs/storybook/pull/35415), thanks @​yannbf! - Interactions: Prevent debugger controls from stealing focus - [#​35073](https://redirect.github.com/storybookjs/storybook/pull/35073), thanks @​BrenoSI03! - Maintenance: Centralize supported file extension lists - [#​34844](https://redirect.github.com/storybookjs/storybook/pull/34844), thanks @​valentinpalkovic! - Maintenance: Replace `resolve` and `resolve.exports` with `oxc-resolver` - [#​34692](https://redirect.github.com/storybookjs/storybook/pull/34692), thanks @​valentinpalkovic! - Manager: Apply addon-registered filters to the initial story index - [#​35408](https://redirect.github.com/storybookjs/storybook/pull/35408), thanks @​ndelangen! - Manager: Fix crash when toggling addon panel on mobile (LandmarkManager TypeError) - [#​34790](https://redirect.github.com/storybookjs/storybook/pull/34790), thanks @​valentinpalkovic! - Manager: Fix layout.showPanel config - [#​34777](https://redirect.github.com/storybookjs/storybook/pull/34777), thanks @​kalinco-glitch! - Manager: Fix race condition in `experimental_setFilter` - [#​35194](https://redirect.github.com/storybookjs/storybook/pull/35194), thanks @​mrginglymus! - Manager: Keep local preview iframe on host URL when a ref story loads first - [#​35078](https://redirect.github.com/storybookjs/storybook/pull/35078), thanks @​TheSeydiCharyyev! - Manager: Restructure review feature state, layout integration, and thumbnail pipeline - [#​35351](https://redirect.github.com/storybookjs/storybook/pull/35351), thanks @​ghengeveld! - Measure & Outline: Honor the `disable` parameter - [#​35150](https://redirect.github.com/storybookjs/storybook/pull/35150), thanks @​yatishgoel! - ModuleGraph: Refactor from StoryDependencyService to open service-based ModuleGraphService - [#​35048](https://redirect.github.com/storybookjs/storybook/pull/35048), thanks @​JReinhold! - ModuleGraph: Stop bumping the graph revision on story-index invalidation - [#​35178](https://redirect.github.com/storybookjs/storybook/pull/35178), thanks @​JReinhold! - Next: Call link onClick before preventing default - [#​35311](https://redirect.github.com/storybookjs/storybook/pull/35311), thanks @​yatishgoel! - Next: Support `as` prop in next/link mock - [#​35148](https://redirect.github.com/storybookjs/storybook/pull/35148), thanks @​yatishgoel! - Next Vite: Add Link mock with useLinkStatus to nextjs-vite framework - [#​34736](https://redirect.github.com/storybookjs/storybook/pull/34736), thanks @​yatishgoel! - Next Vite: Bump vite-plugin-storybook-nextjs to ^3.3.0 - [#​34838](https://redirect.github.com/storybookjs/storybook/pull/34838), thanks @​yatishgoel! - Open Service: Add `internal` property to control visibility - [#​35057](https://redirect.github.com/storybookjs/storybook/pull/35057), thanks @​JReinhold! - Open Service: Add schema-driven service runtime - [#​34860](https://redirect.github.com/storybookjs/storybook/pull/34860), thanks @​JReinhold! - Open Service: Add sync between server, manager and preview - [#​35017](https://redirect.github.com/storybookjs/storybook/pull/35017), thanks @​ndelangen! - Open Service: Call remote commands in load functions - [#​35106](https://redirect.github.com/storybookjs/storybook/pull/35106), thanks @​JReinhold! - Open Service: Fix docgen hot update controls refresh - [#​35158](https://redirect.github.com/storybookjs/storybook/pull/35158), thanks @​JReinhold! - Open Service: Fix reactivity on deep signals, fire subscribers on load dependencies - [#​34979](https://redirect.github.com/storybookjs/storybook/pull/34979), thanks @​JReinhold! - Open Service: Implement service registration on the server - [#​34875](https://redirect.github.com/storybookjs/storybook/pull/34875), thanks @​JReinhold! - Open Service: Implement service registration on the server (attempt 2) - [#​34961](https://redirect.github.com/storybookjs/storybook/pull/34961), thanks @​JReinhold! - Open Service: Introduce query states (loading/error/success) - [#​35214](https://redirect.github.com/storybookjs/storybook/pull/35214), thanks @​JReinhold! - Open Service: Load static query snapshots in browser builds - [#​35154](https://redirect.github.com/storybookjs/storybook/pull/35154), thanks @​JReinhold! - Open Service: Mark module-graph engine commands as internal - [#​35144](https://redirect.github.com/storybookjs/storybook/pull/35144), thanks @​JReinhold! - Open Service: Split story docs from docgen service - [#​35169](https://redirect.github.com/storybookjs/storybook/pull/35169), thanks @​JReinhold! - Open Service: Sync queries, load/loaded() API, strict reader handlers - [#​34932](https://redirect.github.com/storybookjs/storybook/pull/34932), thanks @​JReinhold! - Open Service: Type getService for core services per runtime - [#​35242](https://redirect.github.com/storybookjs/storybook/pull/35242), thanks @​JReinhold! - Preview: Preserve @​ts-expect-error in web-component and vue preview - [#​34839](https://redirect.github.com/storybookjs/storybook/pull/34839), thanks @​brentswisher! - Preview: Preserve primitive args for non-ReactNode other types - [#​35088](https://redirect.github.com/storybookjs/storybook/pull/35088), thanks @​TheSeydiCharyyev! - Preview: Restore iframe scrolling after resizing the layout - [#​35310](https://redirect.github.com/storybookjs/storybook/pull/35310), thanks @​yatishgoel! - Preview: Use width/height instead of min-* in CanvasWrap - [#​35056](https://redirect.github.com/storybookjs/storybook/pull/35056), thanks @​DevLikhith5! - Pseudo States: Keep combinator broad pseudo selectors valid - [#​35060](https://redirect.github.com/storybookjs/storybook/pull/35060), thanks @​mturac! - Pseudo States: Preserve URL globals on story change - [#​35211](https://redirect.github.com/storybookjs/storybook/pull/35211), thanks @​Sidnioulz! - React Native: Remove babel deps from RN setup (not needed) - [#​35243](https://redirect.github.com/storybookjs/storybook/pull/35243), thanks @​dannyhw! - React: Add an optional TypeScript peer to react-vite - [#​34627](https://redirect.github.com/storybookjs/storybook/pull/34627), thanks @​wojtekmaj! - React: Align react-docgen versions - [#​35271](https://redirect.github.com/storybookjs/storybook/pull/35271), thanks @​Sidnioulz! - React: Fix subcomponent prop extraction without JSX usage - [#​35107](https://redirect.github.com/storybookjs/storybook/pull/35107), thanks @​JReinhold! - React: Render boolean props set to false in source snippets - [#​34968](https://redirect.github.com/storybookjs/storybook/pull/34968), thanks @​valentinpalkovic! - Review: Dynamic thumbnail scaling based on content dimensions - [#​35282](https://redirect.github.com/storybookjs/storybook/pull/35282), thanks @​ghengeveld! - Review: Fix accessibility/UX issues in the review UI - [#​35398](https://redirect.github.com/storybookjs/storybook/pull/35398), thanks @​Sidnioulz! - Review: Fix inaccurate review story counts in sidebar - [#​35391](https://redirect.github.com/storybookjs/storybook/pull/35391), thanks @​ghengeveld! - Review: Improve review thumbnail scaling and loading UX - [#​35335](https://redirect.github.com/storybookjs/storybook/pull/35335), thanks @​ghengeveld! - Review: Notify on review arrival instead of auto-navigating - [#​35276](https://redirect.github.com/storybookjs/storybook/pull/35276), thanks @​ghengeveld! - Review: Simplify layout handling - [#​35322](https://redirect.github.com/storybookjs/storybook/pull/35322), thanks @​ghengeveld! - Tanstack: Export `TanStackPreview` from `@storybook/tanstack-react` to unblock CSF Next typing - [#​34949](https://redirect.github.com/storybookjs/storybook/pull/34949), thanks @​copilot-swe-agent! - TanStack: Normalize route-group handling in createRoute mock - [#​34948](https://redirect.github.com/storybookjs/storybook/pull/34948), thanks @​copilot-swe-agent! - Tanstack: Remove Outlet mock - [#​35010](https://redirect.github.com/storybookjs/storybook/pull/35010), thanks @​huang-julien! - Tanstack: Supply id OR path when using RouteOptions for route mock - [#​34950](https://redirect.github.com/storybookjs/storybook/pull/34950), thanks @​copilot-swe-agent! - Telemetry: Preserve state machine when the module loads more than once - [#​35140](https://redirect.github.com/storybookjs/storybook/pull/35140), thanks @​kasperpeulen! - Telemetry: Prevent pnpm paths from leaking into framework.name - [#​35345](https://redirect.github.com/storybookjs/storybook/pull/35345), thanks @​Sidnioulz! - Test: Move @​testing-library/dom to dependencies - [#​34604](https://redirect.github.com/storybookjs/storybook/pull/34604), thanks @​XionWCFM! - UI: Allow manager-head favicon override - [#​34809](https://redirect.github.com/storybookjs/storybook/pull/34809), thanks @​MukundaKatta! - UI: Fix args not preserved in isolation mode - [#​35055](https://redirect.github.com/storybookjs/storybook/pull/35055), thanks @​sijie-Z! - UI: Hide onboarding menu with feature flag - [#​35299](https://redirect.github.com/storybookjs/storybook/pull/35299), thanks @​Sidnioulz! - Viewport: Highlight toolbar button when custom viewport is active - [#​35075](https://redirect.github.com/storybookjs/storybook/pull/35075), thanks @​derinbarutcu17! - Viewport: Warn when legacy `defaultViewport` parameter is used - [#​35087](https://redirect.github.com/storybookjs/storybook/pull/35087), thanks @​yatishgoel! - Vitest: Reset playwright cursor position to avoid hover bug - [#​34765](https://redirect.github.com/storybookjs/storybook/pull/34765), thanks @​Sidnioulz! - Vue: Ensure vue-component-meta runs in post - [#​34976](https://redirect.github.com/storybookjs/storybook/pull/34976), thanks @​Sidnioulz! - Vue: Fix Unicode Default Values In Docs - [#​34909](https://redirect.github.com/storybookjs/storybook/pull/34909), thanks @​Arunsiva003! - Vue: Use AST to inject __docgenInfo correctly - [#​35201](https://redirect.github.com/storybookjs/storybook/pull/35201), thanks @​Sidnioulz! - Webpack: Gate lazy-compilation import pipeline on webpack version - [#​34931](https://redirect.github.com/storybookjs/storybook/pull/34931), thanks @​copilot-swe-agent!
vitest-dev/vitest (@​vitest/coverage-v8)

v4.1.10

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
xyflow/xyflow (@​xyflow/react)

v12.11.2

Compare Source

Patch Changes
withastro/astro (astro)

v7.0.7

Compare Source

Patch Changes
  • #​17318 23a4120 Thanks @​astrobot-houston! - Fixes CSS module scoped-name hash mismatch in astro dev when using vite.css.transformer: 'lightningcss' with content collections. Previously, a component importing a CSS module and rendered via content collection render() would get different class name hashes in the element and the injected <style> tag, causing styles not to apply.

  • #​17323 4298883 Thanks @​ematipico! - Fixes a dev server memory leak which caused Node.js to emit warnings in the console.

  • #​17323 4298883 Thanks @​ematipico! - Fixes a dev server crash when a .html or /index.html suffixed request (such as those netlify dev probes as pretty-URL fallbacks) matched a dynamic endpoint route, causing a TypeError: Missing parameter error

  • #​17325 cebc404 Thanks @​astrobot-houston! - Fixes a bug where CSS @import rules could end up mid-stylesheet after inline CSS chunks were merged during build, causing browsers to silently ignore them

  • #​17323 4298883 Thanks @​ematipico! - Fixes a build regression that could leave unresolved preload markers in inlined scripts with external dynamic imports

  • Updated dependencies [4298883, 4298883]:

eslint/eslint (eslint)

[v10.7.0](https://redirect.github.com/eslint/eslint

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • Between 12:00 AM and 06:59 AM, only on Saturday (* 0-6 * * 6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from Aureliolo as a code owner July 11, 2026 02:07
@renovate renovate Bot added dependencies Pull requests that update a dependency file scope:web Vue 3 dashboard type:chore Maintenance, cleanup, dependency updates labels Jul 11, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

@socket-security

socket-security Bot commented Jul 11, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm astro is 90.0% likely obfuscated

Confidence: 0.90

Location: Package overview

From: site/package-lock.jsonnpm/astro@7.0.7

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/astro@7.0.7. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@renovate renovate Bot temporarily deployed to cloudflare-preview July 11, 2026 02:10 Inactive
@codspeed-hq

codspeed-hq Bot commented Jul 11, 2026

Copy link
Copy Markdown

Merging this PR will not alter performance

✅ 41 untouched benchmarks
⏩ 66 skipped benchmarks1


Comparing renovate/web (6c5adfe) with main (731d20c)

Open in CodSpeed

Footnotes

  1. 66 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports.

@codecov

codecov Bot commented Jul 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.04%. Comparing base (731d20c) to head (6c5adfe).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2568   +/-   ##
=======================================
  Coverage   89.04%   89.04%           
=======================================
  Files        3293     3293           
  Lines      169285   169285           
=======================================
+ Hits       150736   150737    +1     
+ Misses      18549    18548    -1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate Bot temporarily deployed to cloudflare-preview July 11, 2026 06:34 Inactive
@renovate

renovate Bot commented Jul 11, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@Aureliolo Aureliolo temporarily deployed to cloudflare-preview July 11, 2026 07:30 — with GitHub Actions Inactive

@Aureliolo Aureliolo left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Decision: Web dependency bump (26 packages); two changes were reworked before merge (TypeScript held at 6.x, js-yaml build overrides restored to v4) so the ecosystem stays consistent; CI now fully green.

Changelog digest:
Covered the web batch; most bumps are safe minor/patch, two were reverted on this branch.

  • Reworked (breaking, excluded): TypeScript 6.0.3->7.0.2 (major) was held at 6.0.3. TS 7 is the native compiler; it broke openapi-typescript (DTO generation crashed on createKeywordTypeNode) and the lint stack (typescript-eslint declares peer typescript <6.1.0, so 7.0.2 crashed ESLint on a module-kind enum). The scoped @redocly/openapi-core and @lhci/utils js-yaml overrides were restored to 4.3.0 - v5 removed the types export redocly's vendored shim calls, which would re-break the build. The app-level direct js-yaml stays at v5.
  • Relevant (kept): storybook 10.5, eslint 10.7, typescript-eslint 8.63, react-router 8.2, msw 2.15, lucide-react 1.24, vite 8.1.4, vitest 4.1.10, wrangler 4.110, knip 6.26, fast-check 4.9, @xyflow/react, astro, codemirror, node engine 26.5 - all verified via green type-check, lint, build, and zero DTO drift.
  • Reviewed but not relevant: @types/node patch, coverage-v8 patch - no consumer impact.

Follow-ups: TypeScript 7 stays excluded until openapi-typescript and typescript-eslint support it; Renovate will re-propose the major, and the js-yaml override must stay pinned to v4 each time it does.

@Aureliolo Aureliolo temporarily deployed to cloudflare-preview July 11, 2026 08:15 — with GitHub Actions Inactive
@Aureliolo Aureliolo merged commit 9b6b60f into main Jul 11, 2026
106 checks passed
@Aureliolo Aureliolo deleted the renovate/web branch July 11, 2026 08:22
@Aureliolo Aureliolo temporarily deployed to cloudflare-preview July 11, 2026 08:22 — with GitHub Actions Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file scope:web Vue 3 dashboard type:chore Maintenance, cleanup, dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant