chore(deps-dev): bump the dev-tooling group across 1 directory with 4 updates - #25
Closed
dependabot[bot] wants to merge 1 commit into
Closed
chore(deps-dev): bump the dev-tooling group across 1 directory with 4 updates#25dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
… updates Bumps the dev-tooling group with 4 updates in the / directory: [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react), [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core). Updates `@storybook/addon-a11y` from 10.3.6 to 10.4.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.0/code/addons/a11y) Updates `@storybook/react` from 10.3.6 to 10.4.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.0/code/renderers/react) Updates `@storybook/react-vite` from 10.3.6 to 10.4.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.0/code/frameworks/react-vite) Updates `storybook` from 10.3.6 to 10.4.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.0/code/core) --- updated-dependencies: - dependency-name: "@storybook/addon-a11y" dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: "@storybook/react" dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: "@storybook/react-vite" dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling - dependency-name: storybook dependency-version: 10.4.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-tooling ... Signed-off-by: dependabot[bot] <support@github.com>
Skipping PR review because a bot author is detected. If you want to trigger CodeAnt AI, comment |
3 tasks
qnbs
commented
May 16, 2026
Owner
Superseded by #26 — all package updates (storybook 10.4.0, @types/react@19.2.14, etc.) are included there. |
ContributorAuthor
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
qnbs added a commit
that referenced
this pull request
May 16, 2026
…zz (Scorecard) (#26) * chore(deps): bump ai 6.0.183, vite 8.0.13, turbo 2.9.14, storybook 10.4.0, @types/node 25.8.0 Resolves Dependabot PRs #12#13#20#23#25. Storybook 10.4.0 adds @types/react peer dep alignment. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * chore(security): add CODEOWNERS + cargo-fuzz target (Scorecard Code-Review + Fuzzing) - .github/CODEOWNERS: all PRs require review from @qnbs; enables Scorecard Code-Review credit and require_code_owner_reviews branch protection - src-tauri/fuzz/: cargo-fuzz setup with fuzz_file_name_sanitization target fuzzes arbitrary UTF-8 input through path-sanitization logic; satisfies Scorecard Fuzzing check with a recognized libFuzzer-based harness Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
qnbs added a commit
that referenced
this pull request
Jun 5, 2026
- Add top-level permissions: contents: read to opencode.yml (fixes#75) - Pin actions/checkout to SHA in opencode.yml (fixes#76) - Document opencode-action branch-pin limitation (upstream not SHA-tagged) - Add CONTRIBUTING.md for CII-Best-Practices badge (fixes#25) - Add best-practices-badge.yml configuration - Update copilot-instructions.md with proactive security remediation rules - Update AGENTS.md with CI/CD security hardening section - Update CLAUDE.md with P1 coverage thresholds (L78/B65/F68/S75) - Update vitest.config.ts thresholds to P1 target QNBS-v3: All Scorecard alerts addressed proactively per security policy.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dev-tooling group with 4 updates in the / directory: @storybook/addon-a11y, @storybook/react, @storybook/react-vite and storybook.
Updates
@storybook/addon-a11yfrom 10.3.6 to 10.4.0Release notes
Sourced from @storybook/addon-a11y's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-a11y's changelog.
... (truncated)
Commits
f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]b8bcdf8Merge branch 'next' into valentin/viral-sharing3ff136cMerge remote-tracking branch 'origin/next' into valentin/viral-sharingf191df7Bump version from "10.4.0-alpha.16" to "10.4.0-alpha.17" [skip ci]381d6adUpdate@storybook/iconsto 2.0.2 and use PopOutIcon for isolation modea80ca8fBump version from "10.4.0-alpha.15" to "10.4.0-alpha.16" [skip ci]f1363a4Bump version from "10.4.0-alpha.14" to "10.4.0-alpha.15" [skip ci]Updates
@storybook/reactfrom 10.3.6 to 10.4.0Release notes
Sourced from @storybook/react's releases.
... (truncated)
Changelog
Sourced from @storybook/react's changelog.
... (truncated)
Commits
f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]f191df7Bump version from "10.4.0-alpha.16" to "10.4.0-alpha.17" [skip ci]a80ca8fBump version from "10.4.0-alpha.15" to "10.4.0-alpha.16" [skip ci]f1363a4Bump version from "10.4.0-alpha.14" to "10.4.0-alpha.15" [skip ci]5491707Bump version from "10.4.0-alpha.13" to "10.4.0-alpha.14" [skip ci]3ab0566Bump version from "10.4.0-alpha.12" to "10.4.0-alpha.13" [skip ci]b516e85Bump version from "10.4.0-alpha.11" to "10.4.0-alpha.12" [skip ci]Updates
@storybook/react-vitefrom 10.3.6 to 10.4.0Release notes
Sourced from @storybook/react-vite's releases.
... (truncated)
Changelog
Sourced from @storybook/react-vite's changelog.
... (truncated)
Commits
f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]f191df7Bump version from "10.4.0-alpha.16" to "10.4.0-alpha.17" [skip ci]a80ca8fBump version from "10.4.0-alpha.15" to "10.4.0-alpha.16" [skip ci]f1363a4Bump version from "10.4.0-alpha.14" to "10.4.0-alpha.15" [skip ci]5491707Bump version from "10.4.0-alpha.13" to "10.4.0-alpha.14" [skip ci]3ab0566Bump version from "10.4.0-alpha.12" to "10.4.0-alpha.13" [skip ci]b516e85Bump version from "10.4.0-alpha.11" to "10.4.0-alpha.12" [skip ci]Updates
storybookfrom 10.3.6 to 10.4.0Release notes
Sourced from storybook's releases.