Skip to content

build(deps): Bump the npm_and_yarn group across 8 directories with 4 updates#8688

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-fa9edfae7c
Closed

build(deps): Bump the npm_and_yarn group across 8 directories with 4 updates#8688
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-fa9edfae7c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2026 •
edited by pr-codex bot
Loading

Bumps the npm_and_yarn group with 2 updates in the /apps/dashboard directory: next and storybook.
Bumps the npm_and_yarn group with 2 updates in the /apps/nebula directory: next and storybook.
Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: vite.
Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: next.
Bumps the npm_and_yarn group with 3 updates in the /packages/thirdweb directory: storybook, happy-dom and vite.
Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: next and storybook.

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.17

Release notes

Sourced from storybook's releases.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

10.2.11

10.2.10

10.2.9

10.2.8

10.2.7

10.2.6

10.2.5

10.2.4

... (truncated)

Commits
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • b3129cd fix exports
  • a78540a Merge pull request #32770 from storybookjs/shilman/preview-first-load
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • 0617aaa improve typings of storybook/internal/babel
  • Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.17

Release notes

Sourced from storybook's releases.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

10.2.11

10.2.10

10.2.9

10.2.8

10.2.7

10.2.6

10.2.5

10.2.4

... (truncated)

Commits
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • b3129cd fix exports
  • a78540a Merge pull request #32770 from storybookjs/shilman/preview-first-load
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • 0617aaa improve typings of storybook/internal/babel
  • Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates vite from 7.1.7 to 7.1.11

Release notes

Sourced from vite's releases.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.11 (2025-10-20)

Bug Fixes

  • dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

Code Refactoring

  • use subpath imports for types module reference (#20921) (d0094af)

Build System

7.1.10 (2025-10-14)

Bug Fixes

  • css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#20767) (3a92bc7)
  • css: respect emitAssets when cssCodeSplit=false (#20883) (d3e7eee)
  • deps: update all non-major dependencies (879de86)
  • deps: update all non-major dependencies (#20894) (3213f90)
  • dev: allow aliases starting with // (#20760) (b95fa2a)
  • dev: remove timestamp query consistently (#20887) (6537d15)
  • esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#20906) (446eb38)
  • normalize path before calling fileToBuiltUrl (#20898) (73b6d24)
  • preserve original sourcemap file field when combining sourcemaps (#20926) (c714776)

Documentation

Miscellaneous Chores

7.1.9 (2025-10-03)

Reverts

7.1.8 (2025-10-02)

Bug Fixes

... (truncated)

Commits
  • 8b69c9e release: v7.1.11
  • f479cc5 fix(dev): trim trailing slash before server.fs.deny check (#20968)
  • 6fb41a2 chore(deps): update all non-major dependencies (#20966)
  • a817307 build: remove hash from built filenames (#20946)
  • ef411ce build: remove cjs reference in files field (#20945)
  • d0094af refactor: use subpath imports for types module reference (#20921)
  • ed4a0dc release: v7.1.10
  • c714776 fix: preserve original sourcemap file field when combining sourcemaps (#20926)
  • 446eb38 fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20906)
  • 879de86 fix(deps): update all non-major dependencies
  • Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.17

Release notes

Sourced from storybook's releases.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

10.2.11

10.2.10

10.2.9

10.2.8

10.2.7

10.2.6

10.2.5

10.2.4

... (truncated)

Commits
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • b3129cd fix exports
  • a78540a Merge pull request #32770 from storybookjs/shilman/preview-first-load
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • 0617aaa improve typings of storybook/internal/babel
  • Additional commits viewable in compare view

Updates happy-dom from 17.4.4 to 20.0.2

Release notes

Sourced from happy-dom's releases.

v20.0.2

👷‍♂️ Patch fixes

  • Adds frozen intrinsics flag to workers in @happy-dom/server-renderer - By @​capricorn86 in task #1934

v20.0.1

👷‍♂️ Patch fixes

  • Adds warning for environment with unfrozen intrinsics (builtins) when JavaScript evaluation is enabled- By @​capricorn86 in task #1932
    • A security advisory has been reported showing that the recommended preventive measure of running Node.js with --disallow-code-generation-from-strings wasn't enough to protect against attackers escaping the VM context and accessing process-level functions. Big thanks to @​cristianstaicu for reporting this!
    • The documentation for how to run Happy DOM with JavaScript evaluation enabled in a safer way has been updated. Read more about it in the Wiki

v20.0.0

I avoid making breaking changes as much as possible in Happy DOM. When I have to make a breaking change, I try to keep it as minimal as possible. This could be a breaking change that impacts many projects, and I am truly sorry if you are negatively affected by this.

💣 Breaking Changes

  • Due to security risks, JavaScript evaluation is now disabled by default - By @​capricorn86 in task #1930
    • A security advisory (GHSA-37j7-fg3j-429f) has been reported that shows a security vulnerability where it's possible to escape the VM context and get access to process level functionality. Big thanks to @​Mas0nShi for reporting this!
    • Due to this security risk, JavaScript evaluation is now disabled by default to prevent that consumers accidentally executes untrusted code without taking precautions
    • JavaScript evaluation can be enabled by setting enableJavaScriptEvaluation to "true". Read more about how to enable this in a safer way in the Wiki

v19.0.2

👷‍♂️ Patch fixes

  • Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By @​capricorn86 in task #1620

v19.0.1

👷‍♂️ Patch fixes

  • Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By @​capricorn86 in task #1908

v19.0.0

💣 Breaking Changes

  • Removes support for CommonJS - By @​capricorn86 in task #1730
    • Support for CommonJS is no longer needed as Node.js v18 is deprecated and v20 and above supports loading ES modules from CommonJS using require()
  • Updates Jest to v30 in the @happy-dom/jest-environment package - By @​capricorn86 in task #1730
  • Makes Jest packages peer dependencies to make it easier to align versions with the project using @happy-dom/jest-environment - By @​capricorn86 in task #1730

🎨 Features

... (truncated)

Commits
  • f4bd4eb fix: #0 Adds frozen intrinsics flag to server-renderer workers (#1934)
  • f45d92e fix: #0 Adds warning for environemnt with unfrozen builtins (#1932)
  • 819d15b BREAKING CHANGE: #0 Changes JavaScript evaluation to be di...

    Description has been truncated

    PR-Codex overview

    This PR focuses on updating various dependencies in multiple package.json files across different applications and packages, primarily upgrading the next and storybook versions.

    Detailed summary

    • Updated vite from 7.1.7 to 7.1.11 in apps/wagmi-demo/package.json.
    • Updated next from 15.3.8 to 15.5.10 in:
      • apps/wallet-ui/package.json
      • apps/portal/package.json
      • apps/playground-web/package.json
      • apps/nebula/package.json
      • apps/dashboard/package.json
      • packages/ui/package.json
    • Updated storybook from 9.0.15 to 9.1.17 in:
      • apps/nebula/package.json
      • apps/dashboard/package.json
      • packages/ui/package.json
      • packages/thirdweb/package.json
    • Updated happy-dom from 17.4.4 to 20.0.2 in packages/thirdweb/package.json.

    ✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@dependabot
build(deps): Bump the npm_and_yarn group across 8 directories with 4 …
d791940 
…updates

Bumps the npm_and_yarn group with 2 updates in the /apps/dashboard directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).
Bumps the npm_and_yarn group with 2 updates in the /apps/nebula directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).
Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 3 updates in the /packages/thirdweb directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core), [happy-dom](https://github.com/capricorn86/happy-dom) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).


Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.17/code/core)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.17/code/core)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `vite` from 7.1.7 to 7.1.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.17/code/core)

Updates `happy-dom` from 17.4.4 to 20.0.2
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v17.4.4...v20.0.2)

Updates `vite` from 7.1.7 to 7.1.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.17/code/core)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.17
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.17
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.17
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: happy-dom
  dependency-version: 20.0.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.17
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested review from a team as code owners February 24, 2026 10:00
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 24, 2026
@vercel
Copy link

vercel bot commented Feb 24, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-v2 Error Error Feb 24, 2026 10:00am
nebula Error Error Feb 24, 2026 10:00am
thirdweb_playground Error Error Feb 24, 2026 10:00am
thirdweb-www Error Error Feb 24, 2026 10:00am
wallet-ui Error Error Feb 24, 2026 10:00am

@github-actions github-actions bot added Dashboard Involves changes to the Dashboard. Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. packages Ecosystem Portal Involves changes to the Ecosystem Portal SDK Involves changes to the thirdweb SDK labels Feb 24, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 24, 2026

⚠️ No Changeset found

Latest commit: d791940

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 26, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-fa9edfae7c branch February 26, 2026 00:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dashboard Involves changes to the Dashboard. Dependencies Pull requests that update a dependency file Ecosystem Portal Involves changes to the Ecosystem Portal javascript Pull requests that update Javascript code packages Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. SDK Involves changes to the thirdweb SDK

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@joaquim-verges