Skip to content

chore(deps): bump esbuild, storybook, @storybook/addon-essentials, @storybook/addon-interactions, @storybook/blocks, @storybook/react and @storybook/react-webpack5 - #127

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-a38e0ca101
Open

chore(deps): bump esbuild, storybook, @storybook/addon-essentials, @storybook/addon-interactions, @storybook/blocks, @storybook/react and @storybook/react-webpack5#127
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-a38e0ca101

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps esbuild to 0.28.1 and updates ancestor dependencies esbuild, storybook, @storybook/addon-essentials, @storybook/addon-interactions, @storybook/blocks, @storybook/react and @storybook/react-webpack5. These dependencies need to be updated together.

Updates esbuild from 0.18.20 to 0.28.1

Release notes

Sourced from esbuild's releases.

v0.28.1

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}
// Old output (with --minify)
new Resource().activate();
// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#4461, #4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()
// Old output
new foo()bar();
new (foo())?.bar();

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11

  • Fix TypeScript-specific class transform edge case (#3559)

    The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:

    // Original code
class Foo extends Bar {
  #private = 1;
  public: any;
  constructor() {
    super();
  }
}
// Old output (with esbuild v0.19.9)
class Foo extends Bar {
constructor() {
super();
this.#private = 1;
}
#private;
}
// Old output (with esbuild v0.19.10)
class Foo extends Bar {
constructor() {
this.#private = 1;
super();
}
#private;
}
// New output
class Foo extends Bar {
#private = 1;
constructor() {
super();
}
}

  • Minifier: allow reording a primitive past a side-effect (#3568)

    The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for esbuild since your current version.


Updates storybook from 7.6.10 to 10.5.4

Release notes

Sourced from storybook's releases.

v10.5.4

10.5.4

v10.5.3

10.5.3

v10.5.2

10.5.2

v10.5.1

10.5.1

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Changelog

Sourced from storybook's changelog.

10.5.4

10.5.3

10.5.2

  • TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
  • TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
  • Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
  • Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
  • Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
  • 3f07eb7 Merge pull request #35560 from storybookjs/norbert/fix-rn-telemetry-metadata
  • 22e3666 Merge pull request #35541 from hxy-asdw/fix/prismjs-dark-mode-contrast-35540
  • 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
  • b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
  • 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
  • c253a06 Bump version from "10.5.0" to "10.5.1" [skip ci]
  • 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
  • 705d4b0 Fix windows UTs for 10.5
  • 12a9299 Merge pull request #35398 from storybookjs/sidnioulz/agentic-review-a11y
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for storybook since your current version.


Updates @storybook/addon-essentials from 7.0.26 to 8.6.14

Release notes

Sourced from @​storybook/addon-essentials's releases.

v7.6.24

7.6.24

  • Add request validation

v7.6.23

7.6.23

  • Harden websocket connection
Changelog

Sourced from @​storybook/addon-essentials's changelog.

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

8.6.7

8.6.6

  • Angular: Make sure that polyfills are loaded before the storybook is loaded - #30811, thanks @​kasperpeulen!

... (truncated)

Commits
  • ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
  • 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
  • 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • 019cd1f Bump version from "8.6.6" to "8.6.7" [skip ci]
  • 9a7a795 Bump version from "8.6.5" to "8.6.6" [skip ci]
  • 4e23d75 Bump version from "8.6.4" to "8.6.5" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for @​storybook/addon-essentials since your current version.


Updates @storybook/addon-interactions from 7.0.26 to 7.6.24

Release notes

Sourced from @​storybook/addon-interactions's releases.

v7.6.24

7.6.24

  • Add request validation

v7.6.23

7.6.23

  • Harden websocket connection
Changelog

Sourced from @​storybook/addon-interactions's changelog.

7.6.24

  • Add request validation

7.6.23

  • Harden websocke connection

7.6.22

  • No-op release. No changes.

7.6.20

7.6.19

7.6.18

7.6.17

7.6.16

  • Addon Themes: Make type generic less strict - #26042, thanks @​yannbf!
  • Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @​kasperpeulen!

7.6.15

This release accidentally didn't contain anything.

7.6.14

7.6.13

... (truncated)

Commits
  • 2eddd8c Bump version from "7.6.23" to "7.6.24" [skip ci]
  • 736b0f1 Bump version from "7.6.22" to "7.6.23" [skip ci]
  • a159aa9 Bump version from "7.6.21" to "7.6.22" [skip ci]
  • 41b1588 Revert "Bump version from "7.6.21" to "7.6.22" [skip ci]"
  • d845e5d Bump version from "7.6.21" to "7.6.22" [skip ci]
  • 8f19cc2 Bump version from 7.6.20 to 7.6.21 MANUALLY
  • 1fe1c39 Bump version from 7.6.19 to 7.6.20 [skip ci]
  • 0264a14 Bump version from 7.6.18 to 7.6.19 (manual) [skip ci]
  • 5622242 Bump version from 7.6.17 to 7.6.18 MANUALLY (again)
  • 6e6cbcf temporarily decrease version number for CI
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-interactions since your current version.


Updates @storybook/blocks from 7.0.26 to 8.6.14

Release notes

Sourced from @​storybook/blocks's releases.

v7.6.24

7.6.24

  • Add request validation

v7.6.23

7.6.23

  • Harden websocket connection
Changelog

Sourced from @​storybook/blocks's changelog.

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

8.6.7

8.6.6

  • Angular: Make sure that polyfills are loaded before the storybook is loaded - #30811, thanks @​kasperpeulen!

... (truncated)

Commits
  • ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
  • 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
  • f1838f9 Merge pull request #27193 from H0onnn/fix/#27187
  • 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 549b913 Merge pull request #30913 from JamesIves/next
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • 019cd1f Bump version from "8.6.6" to "8.6.7" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for @​storybook/blocks since your current version.


Updates @storybook/react from 7.0.26 to 10.5.4

Release notes

Sourced from @​storybook/react's releases.

v10.5.4

10.5.4

v10.5.3

10.5.3

v10.5.2

10.5.2

v10.5.1

10.5.1

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Changelog

Sourced from @​storybook/react's changelog.

10.5.4

10.5.3

10.5.2

  • TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
  • TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
  • Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
  • Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
  • Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
  • 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
  • b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
  • 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
  • c253a06 Bump version from "10.5.0" to "10.5.1" [skip ci]
  • 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
  • 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
  • ccfbb0b Merge branch 'next' into norbert/fix-story-docs-portable-stories
  • 80490ef Core: Update test for JSX rendering in portable stories
  • 5696acc Core: Add test for skipping JSX rendering in portable stories
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/react since your current version.


Updates @storybook/react-webpack5 from 7.0.26 to 10.5.4

Release notes

Sourced from @​storybook/react-webpack5's releases.

v10.5.4

10.5.4

v10.5.3

10.5.3

v10.5.2

10.5.2

  • Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
  • Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
  • Core: Include chromatic packages in ecosystem identifier -...

    Description has been truncated

@dependabot
chore(deps): bump esbuild, storybook, @storybook/addon-essentials, @s…
77c6fa3 
…torybook/addon-interactions, @storybook/blocks, @storybook/react and @storybook/react-webpack5

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.28.1 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core), [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials), [@storybook/addon-interactions](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/interactions), [@storybook/blocks](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/blocks), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) and [@storybook/react-webpack5](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-webpack5). These dependencies need to be updated together.


Updates `esbuild` from 0.18.20 to 0.28.1
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.18.20...v0.28.1)

Updates `storybook` from 7.6.10 to 10.5.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.4/code/core)

Updates `@storybook/addon-essentials` from 7.0.26 to 8.6.14
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/addons/essentials)

Updates `@storybook/addon-interactions` from 7.0.26 to 7.6.24
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v7.6.24/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.6.24/code/addons/interactions)

Updates `@storybook/blocks` from 7.0.26 to 8.6.14
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/lib/blocks)

Updates `@storybook/react` from 7.0.26 to 10.5.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.4/code/renderers/react)

Updates `@storybook/react-webpack5` from 7.0.26 to 10.5.4
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.4/code/frameworks/react-webpack5)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: indirect
- dependency-name: storybook
  dependency-version: 10.5.4
  dependency-type: direct:production
- dependency-name: "@storybook/addon-essentials"
  dependency-version: 8.6.14
  dependency-type: direct:development
- dependency-name: "@storybook/addon-interactions"
  dependency-version: 7.6.24
  dependency-type: direct:development
- dependency-name: "@storybook/blocks"
  dependency-version: 8.6.14
  dependency-type: direct:development
- dependency-name: "@storybook/react"
  dependency-version: 10.5.4
  dependency-type: direct:development
- dependency-name: "@storybook/react-webpack5"
  dependency-version: 10.5.4
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants