build(deps-dev): bump the dev-tooling group across 1 directory with 8 updates - #265
Conversation
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
 |
| Overall Grade | Security Reliability Complexity Hygiene |
Code Review Summary
| Analyzer | Status | Updated (UTC) | Details |
|---|---|---|---|
| Docker |  | Jul 13, 2026 11:48p.m. | Review ↗ |
| JavaScript | | Jul 13, 2026 11:48p.m. | Review ↗ |
| CSS |  | Jul 13, 2026 11:48p.m. | Review ↗ |
| Rust | | Jul 13, 2026 11:48p.m. | Review ↗ |
Important
AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.
🏁 CodeAnt Quality Gate ResultsCommit: ✅ Overall Status: PASSEDQuality Gate Details
|
2c91ab4 to
d51a8cbCompare… updates Bumps the dev-tooling group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@playwright/test](https://github.com/microsoft/playwright) | `1.61.0` | `1.61.1` | | [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.4.5` | `10.5.3` | | [@storybook/builder-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/builders/builder-vite) | `10.4.5` | `10.5.3` | | [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) | `10.4.5` | `10.5.3` | | [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.4.5` | `10.5.3` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.4.5` | `10.5.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `@playwright/test` from 1.61.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.61.0...v1.61.1) Updates `@storybook/addon-a11y` from 10.4.5 to 10.5.3 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/addons/a11y) Updates `@storybook/builder-vite` from 10.4.5 to 10.5.3 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/builders/builder-vite) Updates `@storybook/react` from 10.4.5 to 10.5.3 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/renderers/react) Updates `@storybook/react-vite` from 10.4.5 to 10.5.3 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/frameworks/react-vite) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `storybook` from 10.4.5 to 10.5.3 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.3/code/core) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@playwright/test" dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@storybook/addon-a11y" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@storybook/builder-vite" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@storybook/react" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@storybook/react-vite" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: storybook dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-tooling ... Signed-off-by: dependabot[bot] <support@github.com>
d51a8cb to
edd47c1Compareqnbs
commented
Jul 28, 2026
Leaving this open — the Quality Gate failure is a real upstream incompatibility, not something this repo's code can fix: ``` This group bump pulled in `@babel/core@8.0.1` (Babel 8) transitively, but `react-docgen@8.0.3` (also part of this bump, via the Storybook toolchain) still calls `loadPartialConfig` synchronously — a call Babel 8 removed in favor of `loadPartialConfigSync`. That's an upstream version mismatch between `react-docgen` and `@babel/core`, not something fixable in application code here. Needs either an upstream fix in `react-docgen`, or this group bump split apart so Babel 8 doesn't land until `react-docgen` catches up. |
pnpm-workspace.yaml's override for GHSA-4x5r-pxfx-6jf8 (">=7.29.6") had no upper bound, unlike every sibling override in the same block. When Babel 8.0.1 was published, pnpm resolved it for every consumer -- including react-docgen@8.0.3 (pulled in by this dev-tooling group's Storybook bump to 10.5.3), which declares its own "@babel/core": "^7.28.0" and calls the synchronous loadPartialConfig(), removed in Babel 8 in favor of loadPartialConfigSync(). This crashed every Storybook build: Error: Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback. If you need to call it synchronously, please use 'loadPartialConfigSync'. at buildPluginList (react-docgen@8.0.3/.../babelParser.js:34:27) Bounded to ">=7.29.6 <8", matching the pattern the undici override right below it already documents for the identical failure class (unbounded lower-bound override drifting into an unexpectedly new major that breaks a transitive consumer). Verified: pnpm run build-storybook completes successfully (previously crashed at the react-docgen plugin step), pnpm run lint (clean), pnpm run typecheck (clean), pnpm run i18n:check (clean). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
qnbs
commented
Jul 28, 2026
Found and fixed the actual root cause — this was fixable after all, and it wasn't upstream.
Fixed by bounding the override to Verified: |
qnbs
commented
Jul 28, 2026
@CodeAnt-AI review |
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
Uh oh!
There was an error while loading. Please reload this page.
Bumps the dev-tooling group with 8 updates in the / directory:
1.61.01.61.110.4.510.5.310.4.510.5.310.4.510.5.310.4.510.5.34.1.94.1.1010.4.510.5.34.1.94.1.10Updates
@playwright/testfrom 1.61.0 to 1.61.1Release notes
Sourced from @playwright/test's releases.
Commits
39e3553cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...4328122chore: mark v1.61.1 (#41404)2c29a94fix(tracing): stop recording websocket frames outside of chunks (#41398)4324b19cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend041e7e3cherry-pick(#41364): fix(har):WebSocketmessage timestamps should be in mi...b8a0fc3cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...b5a3175cherry-pick(#41319): fix(loader): support other node versionsd4724a9cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) imageUpdates
@storybook/addon-a11yfrom 10.4.5 to 10.5.3Release notes
Sourced from @storybook/addon-a11y's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-a11y's changelog.
... (truncated)
Commits
9ac2739Bump version from "10.5.2" to "10.5.3" [skip ci]b4b00f2Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6518f711Bump version from "10.5.1" to "10.5.2" [skip ci]c253a06Bump version from "10.5.0" to "10.5.1" [skip ci]9dafcd2Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]ad70914Addon A11y: Keep nested command output while closing stdinc557fc0CLI: Fix silent hang in deferred addon configuration during upgrade448db85Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]a4ce979Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]f0bf138Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]Updates
@storybook/builder-vitefrom 10.4.5 to 10.5.3Release notes
Sourced from @storybook/builder-vite's releases.
... (truncated)
Changelog
Sourced from @storybook/builder-vite's changelog.
... (truncated)
Commits
9ac2739Bump version from "10.5.2" to "10.5.3" [skip ci]518f711Bump version from "10.5.1" to "10.5.2" [skip ci]c253a06Bump version from "10.5.0" to "10.5.1" [skip ci]9dafcd2Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]448db85Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]a4ce979Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]f0bf138Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]fac05a5Bump version from "10.5.0-alpha.10" to "10.5.0-alpha.11" [skip ci]4057c41Bump version from "10.5.0-alpha.9" to "10.5.0-alpha.10" [skip ci]da84210Bump version from "10.5.0-alpha.8" to "10.5.0-alpha.9" [skip ci]Updates
@storybook/reactfrom 10.4.5 to 10.5.3Release notes
Sourced from @storybook/react's releases.
... (truncated)
Changelog
Sourced from @storybook/react's changelog.
... (truncated)
Commits
9ac2739Bump version from "10.5.2" to "10.5.3" [skip ci]b4b00f2Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6518f711Bump version from "10.5.1" to "10.5.2" [skip ci]c253a06Bump version from "10.5.0" to "10.5.1" [skip ci]9dafcd2Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]448db85Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]ccfbb0bMerge branch 'next' into norbert/fix-story-docs-portable-stories80490efCore: Update test for JSX rendering in portable stories5696accCore: Add test for skipping JSX rendering in portable storiesa4ce979Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]Updates
@storybook/react-vitefrom 10.4.5 to 10.5.3Release notes
Sourced from @storybook/react-vite's releases.
... (truncated)
Changelog
Sourced from @storybook/react-vite's changelog.