Bump the frontend-dependencies group across 1 directory with 22 updates by dependabot[bot] · Pull Request #104 · webstackdev/digest-engine

dependabot · 2026-07-13T18:09:40Z

Bumps the frontend-dependencies group with 22 updates in the / directory:

Package	From	To
turbo	`2.10.3`	`2.10.5`
@eslint/js	`9.39.4`	`9.39.5`
eslint	`9.39.4`	`9.39.5`
lucide-react	`1.23.0`	`1.24.0`
postcss	`8.5.16`	`8.5.19`
prettier	`3.9.4`	`3.9.5`
react-dropzone	`15.0.0`	`17.0.0`
react-hook-form	`7.80.0`	`7.81.0`
typescript-eslint	`8.62.1`	`8.64.0`
@storybook/addon-a11y	`10.4.6`	`10.5.0`
@storybook/addon-docs	`10.4.6`	`10.5.0`
@storybook/addon-themes	`10.4.6`	`10.5.0`
@storybook/addon-vitest	`10.4.6`	`10.5.0`
@storybook/nextjs-vite	`10.4.6`	`10.5.0`
@types/node	`26.1.0`	`26.1.1`
@vitest/browser-playwright	`4.1.9`	`4.1.10`
@vitest/coverage-v8	`4.1.9`	`4.1.10`
eslint-plugin-storybook	`10.4.6`	`10.5.0`
storybook	`10.4.6`	`10.5.0`
typescript	`6.0.3`	`7.0.2`
vite	`8.1.3`	`8.1.4`
vitest	`4.1.9`	`4.1.10`

Updates turbo from 2.10.3 to 2.10.5

Release notes

Sourced from turbo's releases.

Turborepo v2.10.5

What's Changed

Changelog

perf: Evaluate simple include globs without wax compilation by @anthonyshew in vercel/turborepo#13285

chore: Dogfood native Cargo support in this repository by @anthonyshew in vercel/turborepo#13283

release(turborepo): 2.10.4 by @github-actions[bot] in vercel/turborepo#13286

ci: Remove dead sccache configuration by @anthonyshew in vercel/turborepo#13289

feat: Serve the Remote Cache as an sccache backend for Cargo tasks by @anthonyshew in vercel/turborepo#13288

fix: Reject output path traversal by @anthonyshew in vercel/turborepo#13290

fix: Disable the sccache proxy when remote cache use is off by @anthonyshew in vercel/turborepo#13291

feat: Embed sccache so the Cargo compile cache needs no installation by @anthonyshew in vercel/turborepo#13293

release(turborepo): 2.10.5-canary.1 by @github-actions[bot] in vercel/turborepo#13294

fix: Pin a flag-aware turbo canary for the eve-agent deployment by @anthonyshew in vercel/turborepo#13295

fix: Make the sccache compile cache actually cache by @anthonyshew in vercel/turborepo#13296

release(turborepo): 2.10.5-canary.2 by @github-actions[bot] in vercel/turborepo#13297

fix: Stop ambient CARGO_INCREMENTAL from suppressing compile cache injection by @anthonyshew in vercel/turborepo#13298

fix: Never let compile cache storage failures fail the build by @anthonyshew in vercel/turborepo#13299

test: Add outputs path-traversal negative-case regression tests by @dnukumamras in vercel/turborepo#13300

release(turborepo): 2.10.5-canary.3 by @github-actions[bot] in vercel/turborepo#13302

ci: Authenticate to Remote Cache via OIDC token exchange by @anthonyshew in vercel/turborepo#13303

fix: Keep pnpm patches with version range keys during prune by @anthonyshew in vercel/turborepo#13307

test: Scrub ambient turbo configuration from integration test children by @anthonyshew in vercel/turborepo#13306

fix: Show toolchain tasks in the TUI and never run in silence by @anthonyshew in vercel/turborepo#13308

ci: Fix change detection on push events by @anthonyshew in vercel/turborepo#13304

refactor: Rename the Cargo toolchain id to rust by @anthonyshew in vercel/turborepo#13311

fix: Remove extraneous bun.lock entries during prune by @anthonyshew in vercel/turborepo#13317

feat: Require a user-declared name for the Cargo workspace package by @anthonyshew in vercel/turborepo#13312

feat: Parse and validate the task command field by @anthonyshew in vercel/turborepo#13313

chore: Harden turbo-vsc to invoke turbo without a shell by @dnukumamras in vercel/turborepo#13319

feat: Resolve and execute task command overrides by @anthonyshew in vercel/turborepo#13315

release(turborepo): 2.10.5-canary.4 by @github-actions[bot] in vercel/turborepo#13325

feat: Run the Rust workspace tests through nextest via command override by @anthonyshew in vercel/turborepo#13316

feat: Engage the Remote Cache and sccache compile cache for Rust CI by @anthonyshew in vercel/turborepo#13292

ci: Pin GitHub Actions to full commit SHAs by @XananasX7 in vercel/turborepo#13143

fix: Make npm prune rehoisting deterministic and complete by @anthonyshew in vercel/turborepo#13323

feat: Report incremental cache reuse in the run summary by @anthonyshew in vercel/turborepo#13327

chore: Remove planning docs by @anthonyshew in vercel/turborepo#13329

docs: Migrate docs site to @vercel/geistdocs package by @molebox in vercel/turborepo#13320

ci: Update Remote Cache action by @anthonyshew in vercel/turborepo#13330

release(turborepo): 2.10.5-canary.5 by @github-actions[bot] in vercel/turborepo#13331

ci: Remove path-based workflow scheduling by @anthonyshew in vercel/turborepo#13332

fix: Resolve EADDRINUSE in kitchen-sink api dev script by @ashusnapx in vercel/turborepo#13328

ci: Disable telemetry messages in workflows by @anthonyshew in vercel/turborepo#13334

fix: Prevent Cargo run tasks from being cached by @anthonyshew in vercel/turborepo#13335

fix: Isolate Cargo cache by host platform by @anthonyshew in vercel/turborepo#13337

fix: Continue TUI text selection beyond viewport by @anthonyshew in vercel/turborepo#13338

ci: Dogfood Cargo target restoration by @anthonyshew in vercel/turborepo#13336

fix: Require current Cargo lockfiles for caching by @anthonyshew in vercel/turborepo#13339

... (truncated)

Commits

78091b6 publish 2.10.5 to registry
82bcfb6 refactor: Add Toolchain output availability (#13360)
6ed2fb4 fix: Preserve Yarn package extension ranges when pruning (#13363)
38aa7d2 chore: Update agents app Eve dependency (#13364)
ed17249 fix: Synchronize Cargo prune Docker lockfile (#13350)
d533266 fix: Hash Cargo build environment inputs (#13348)
ef122d9 ci: Shard Rust tests across runners (#13356)
b3cd7a1 fix: Include patched Ghostty crate in Cargo workspace (#13357)
f82e2c7 release(turborepo): 2.10.5-canary.6 (#13355)
e76f0b4 fix: Isolate Command Overrides From Toolchain Cache I/O (#13354)
Additional commits viewable in compare view

Updates @eslint/js from 9.39.4 to 9.39.5

Release notes

Sourced from @eslint/js's releases.

v9.39.5

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)

eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)

202117b chore: package.json update for @eslint/js release (Jenkins)

d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)

7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)

daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)

daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)

116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

Commits

202117b chore: package.json update for @eslint/js release
See full diff in compare view

Updates eslint from 9.39.4 to 9.39.5

Release notes

Sourced from eslint's releases.

v9.39.5

Bug Fixes

253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065) (Eric)

Documentation

74930ed docs: switch build to Node.js 24 (#20894) (Milos Djermanovic)

eaec8bb docs: Add ESLint v9.x EOL notice (#20828) (Milos Djermanovic)

Chores

458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077) (Francesco Trotta)

202117b chore: package.json update for @eslint/js release (Jenkins)

d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21074) (Francesco Trotta)

7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068) (Milos Djermanovic)

daf7791 chore: pin fflate@0.8.2 (#20895) (Milos Djermanovic)

daee8ba ci: use pnpm in eslint-flat-config-utils type integration test (#20829) (Milos Djermanovic)

116d4be ci: unpin Node.js 25.x in CI (#20619) (Copilot)

Commits

4a24e8c 9.39.5
1fba874 Build: changelog update for 9.39.5
458205f chore: update @eslint/eslintrc and @eslint/js for v9.39.5 (#21077)
202117b chore: package.json update for @eslint/js release
d9eb6ed test: disable warning for vm.constants.USE_MAIN_CONTEXT_DEFAULT_LOADER (#21...
253be16 fix: handle unavailable require cache (backport of #20812 to v9.x) (#21065)
7b431a7 chore: override re2 dependency for @metascraper/helpers (#21068)
74930ed docs: switch build to Node.js 24 (#20894)
daf7791 chore: pin fflate@0.8.2 (#20895)
eaec8bb docs: Add ESLint v9.x EOL notice (#20828)
Additional commits viewable in compare view

Updates lucide-react from 1.23.0 to 1.24.0

Release notes

Sourced from lucide-react's releases.

Version 1.24.0

What's Changed

fix(scripts): fix typo in renameIcon.function.mts by @karsa-mistmere in lucide-icons/lucide#4514

chore(icons): remove toBeRemovedInVersion metadata and make it optional in schema by @ericfennis with @Copilot in lucide-icons/lucide#4513

feat(site): Add merch link by @ericfennis in lucide-icons/lucide#4524

fix(packages/angular): move child rendering logic to template from effect by @karsa-mistmere in lucide-icons/lucide#4519

docs(site): list @gyeonghokim/lucide-lit as third-party package by @GyeongHoKim in lucide-icons/lucide#4421

fix(icons): changed option icon by @jamiemlaw in lucide-icons/lucide#4326

fix(lucide-react-native): restore the icons entry point in the JS bundles by @pvinis in lucide-icons/lucide#4528

fix(vue): support kebab-case icon-node prop on Icon component by @Sagargupta16 in lucide-icons/lucide#4512

fix(lucide-react-native): Add icon exports property to the package.json file by @ericfennis in lucide-icons/lucide#4522

fix(icons): centered the dot icon by @cnlancehu in lucide-icons/lucide#4492

feat(icons): added circle-euro-sign icon by @Guido3000 in lucide-icons/lucide#4353

feat(icons): added server-plus icon by @Turboman3000 in lucide-icons/lucide#4232

New Contributors

@ericfennis with @Copilot made their first contribution in lucide-icons/lucide#4513

@GyeongHoKim made their first contribution in lucide-icons/lucide#4421

@pvinis made their first contribution in lucide-icons/lucide#4528

@Sagargupta16 made their first contribution in lucide-icons/lucide#4512

@Guido3000 made their first contribution in lucide-icons/lucide#4353

@Turboman3000 made their first contribution in lucide-icons/lucide#4232

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

Commits

See full diff in compare view

Updates postcss from 8.5.16 to 8.5.19

Release notes

Sourced from postcss's releases.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

Changelog

Sourced from postcss's changelog.

8.5.19

Fixed cleaning before for new nodes inserted to Root (by @MahinAnowar).

8.5.18

Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

Fixed Maximum call stack size exceeded error.

Fixed Prototype hijacking for postcss.fromJSON().

Fixed Input#origin() for unmapped end position (by @chatman-media).

Commits

9543b22 Release 8.5.19 version
3d13bf9 Fix CI on Windows too
00d0dd2 Keep explicitly set raws.before when inserting nodes into root (#2111)
7a05b33 Temporary fix CI
4c0d194 Release 8.5.18 version
92b4e78 Update dependencies
95663d3 Limit where source map can be loaded for security reasons
74e25ae Release 8.5.17 version
d1518af Fix Maximum call stack size exceeded error
2421312 Fix linter
Additional commits viewable in compare view

Updates prettier from 3.9.4 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text

999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text

999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text
Markdown: Avoid corrupting empty link with title (#19487 by @andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

[link](https://github.com/prettier/prettier/blob/main/<> "title")

[link](https://github.com/prettier/prettier/blob/main/ "title")

</tr></table>

... (truncated)

Commits

b6c7d18 Release 3.9.5
cd54ccc Avoid corrupting empty Markdown link with title (#19487)
2bb67ce Preserving comments' placement property (#19567)
91bcac8 Add more tests for comment-only object type (#19587)
cbee737 Remove space in empty object type (#19583)
6394c73 Align empty module declaration with TS (#19568)
a4e6f7a Prevent the addition of space in type() with + (#19516)
3d063b5 Ignore dangling comments when checking type parameter comments (#19572)
908503e Handle dangling comments in SwitchStatement (#19581)
943a475 Angular: Support expression for exhaustive typechecking (#19571)
Additional commits viewable in compare view

Updates react-dropzone from 15.0.0 to 17.0.0

Release notes

Sourced from react-dropzone's releases.

v17.0.0

17.0.0 (2026-07-12)

refactor!: migrate source to TypeScript, drop prop-types & defaultProps (db262aa)

BREAKING CHANGES

Requires React >= 18. prop-types and defaultProps are removed in favor of TypeScript types and default parameter values; the hand-written typings are replaced by declarations generated from source.

v16.0.0

16.0.0 (2026-07-12)

chore!: adopt oxc toolchain (tsdown/oxlint/oxfmt/vitest) + Vocs docs (ac5c085)

BREAKING CHANGES

drops the UMD build and dist/es/; the package is now ESM + CJS (dist/index.js / dist/index.cjs) with "type": "module" and an exports map. CDN/script-tag consumers and deep imports of the old paths must migrate. Requires Node >= 20 to build.

Commits

608ad9f style: format entire repo with oxfmt
db262aa refactor!: migrate source to TypeScript, drop prop-types & defaultProps
e9a7ab3 ci: add netlify config for docs deploy
ac5c085 chore!: adopt oxc toolchain (tsdown/oxlint/oxfmt/vitest) + Vocs docs
See full diff in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates react-hook-form from 7.80.0 to 7.81.0

Release notes

Sourced from react-hook-form's releases.

Version 7.81.0

⚜️ feat: FieldArray component (#13394)
<FieldArray
  control={control}
  name="test"
  render={({ fields }) => null}
/>
🐞 fix #13538 useFieldArray min 1 item validation error changes its location in the errors object (#13539) 🐞 fix #13569 calling reset triggers subscribe with latest name instead of undefined (#13574) 🐞 fix(useController): reflect cleared parent object in controlled fields (#13550) (#13553) 🐞 fix(flatten): preserve Date values as leaf nodes (#13566) 🐛 fix(unset): guard against prototype keyword path traversal (#13559) (#13560) 🏸 improve setValue api with shrink value (#13576) 👝 close #13577 improve re-render with useFieldArray reset (#13578) 🐞 fix #13575 issue: clearErrors changes the name value from form.subscribe (#13579)

thanks to @DakshSinghDhami, @JSap0914, @tran-simon & @EduardF1

Changelog

Sourced from react-hook-form's changelog.

[7.81.0] - 2026-07-05

Added

FieldArray component built on useFieldArray for controlled field-array rendering

Fixed

clearErrors changing the name value from form.subscribe

reset triggering subscribe with the latest name instead of undefined

setValues leaving stale elements behind when shrinking a field array

flatten preserving Date values as leaf nodes

useFieldArray min length validation error changing location in the errors object

useController not reflecting a cleared parent object in controlled fields

Security

Harden unset() against prototype-path traversal (__proto__ / constructor / prototype), matching the existing set() guard

Performance

Improve re-render with useFieldArray reset

Commits

46b217e 7.81.0
6595a91 🐞 fix #13575 issue: clearErrors changes the name value from form.subscribe (#...
cae5dfe 👝 close #13577 improve re-render with useFieldArray reset (#13578)
5b2b743 🏸 improve setValue api with shrink value (#13576)
6112441 🐞 fix #13569 calling reset triggers subscribe with latest name instead of und...
f89388f 🐞 fix(flatten): preserve Date values as leaf nodes (#13566)
46381fa Revert "docs: fix grammar in demo descriptions (#13565)" (#13568)
d4c804a Revert "test: remove duplicate UseFieldArray slug (#13564)" (#13567)
63ec54f test: remove duplicate UseFieldArray slug (#13564)
08792ad docs: fix grammar in demo descriptions (#13565)
Additional commits viewable in compare view

Updates typescript-eslint from 8.62.1 to 8.64.0

Release notes

Sourced from typescript-eslint's releases.

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

support parsing import defer (#12513)

eslint-plugin: [no-loop-func] support using / await using declarations and deprecate the rule (#12500)

typescript-estree: throw for invalid definite assignment in class properties (#12543)

🩹 Fixes

eslint-plugin: [require-array-sort-compare] handle constrained arrays (#12512)

❤️ Thank You

Evyatar Daud @StyleShit

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.64.0 (2026-07-13)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

414d9ab chore(release): publish 8.64.0
290cf6c chore(release): publish 8.63.0
See full diff in compare view

Updates @storybook/addon-a11y from 10.4.6 to 10.5.0

Release notes

Sourced from @storybook/addon-a11y's releases.

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)

🌈 Vitest initialGlobals: Test across themes, viewports, locales

🤖 Agentic review: AI-curated visual changesets and search results (experimental)

⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)

🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

A11y: Fix MDX heading anchors not keyboard accessible - #34368, thanks @TheSeydiCharyyev!

A11y: Handle lang attribute throughout preview - #35321, thanks @Sidnioulz!

A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable - #35306, thanks @Sidnioulz!

Addon A11y: Preserve disabled a11y rules with runOnly - #34649, thanks @cyphercodes!

Addon Docs: DocsContent not filling available width when TOC is enabled - #35043, thanks @k-utsumi!

Addon Docs: Resolve CSF4 module exports without a default export - #34834, thanks @TheSeydiCharyyev!

Addon Docs: Resolve providerImportSource to a path instead of a file:// URL - #34841, thanks @TheSeydiCharyyev!

Addon Vitest: Add an initialGlobals option to pin a project's globals - #35226, thanks @lifeiscontent!

Addon Vitest: Avoid erroring out on benign Win process exits - #35287, thanks @Sidnioulz!

Addon Vitest: Fix dynamic import failure with Vitest 3 - #34927, thanks @Sidnioulz!

Addon Vitest: Subscribe for run completion before triggering it - #35291, thanks @tsushanth!

Angular: Add versioned `@types/node` to packages installed during `storybook init` - #34192, thanks @copilot-swe-agent!

Angular: Fix custom paths for stats.json on angular - #34551, thanks @mrginglymus!

Angular: Fix zone.js drop in angular-to-angular-vite migration + schema sync + transform widening - #35386, thanks @valentinpalkovic!

Angular: Install @analogjs/vite-plugin-angular in angular-to-angular-vite automigration - #35432, thanks @valentinpalkovic!

Angular: Introduce @storybook/angular-vite package - #34202, thanks @brandonroberts!

Angular: Support Angular 22 in Webpack framework - #35318, thanks @EtiennePasteur!

Angular: Use future-proof API for component reflection - #35228, thanks @Sidnioulz!

Babel: Remove bugfixes from preset-env in v8 - #35266, thanks @Sidnioulz!

Builder Vite: Fix empty external globals imports - #34348, thanks @raashish1601!

Builder Vite: Support configLoader via builder options - #34080, thanks @holvi-sebastian!

CLI: Add `storybook ai ` MCP passthrough behind `STORYBOOK_FEATURE_AI_CLI` - #35125, thanks @kasperpeulen!

CLI: Add telemetry for the `storybook ai ` passthrough - #35138, thanks @kasperpeulen!

CLI: Allow -p shorthand to --port for ai command - #35390, thanks @huang-julien!

CLI: Bundle the `ai` command in core so it never downloads `@storybook/cli` - #35147, thanks @kasperpeulen!

CLI: Do not auto-open the browser in storybook dev under AI agents - #35412, thanks @kasperpeulen!

CLI: Exit process after successful build - #34735, thanks @torleifhalseth!

CLI: Fix angular-to-angular-vite migration failing to configure addon-vitest - #35404, thanks @valentinpalkovic!

CLI: Fix silent hang in deferred addon configuration during upgrade - #35423, thanks @valentinpalkovic!

CLI: Fix upgrade crash on Storybook latest version check - #35156, thanks @yatishgoel!

CLI: Handle nested array schema for AI help - #35424, thanks @huang-julien!

CLI: Install MCP when upgrade is ran by agent - #35215, thanks @huang-julien!

CLI: Load Storybook AI help from preset metadata - #35212, thanks @kasperpeulen!

CLI: Match `storybook ai` instances by config dir as well as cwd - #35392, thanks @kasperpeulen!

... (truncated)

Changelog

Sourced from @storybook/addon-a11y's changelog.

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)

🌈 Vitest initialGlobals: Test across themes, viewports, locales

🤖 Agentic review: AI-curated visual changesets and search results (experimental)

⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)

🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

A11y: Fix MDX heading anchors not keyboard accessible - #34368, thanks @TheSeydiCharyyev!

A11y: Handle lang attribute throughout preview - #35321, thanks @Sidnioulz!

A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable - #35306, thanks @Sidnioulz!

Addon A11y: Preserve disabled a11y rules with runOnly - #34649, thanks @cyphercodes!
...
Description has been truncated

Bumps the frontend-dependencies group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.10.3` | `2.10.5` | | [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.39.4` | `9.39.5` | | [eslint](https://github.com/eslint/eslint) | `9.39.4` | `9.39.5` | | [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.23.0` | `1.24.0` | | [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.19` | | [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.5` | | [react-dropzone](https://github.com/react-dropzone/react-dropzone) | `15.0.0` | `17.0.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.80.0` | `7.81.0` | | [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.62.1` | `8.64.0` | | [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.4.6` | `10.5.0` | | [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.4.6` | `10.5.0` | | [@storybook/addon-themes](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/themes) | `10.4.6` | `10.5.0` | | [@storybook/addon-vitest](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/vitest) | `10.4.6` | `10.5.0` | | [@storybook/nextjs-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/nextjs) | `10.4.6` | `10.5.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.1.0` | `26.1.1` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.1.9` | `4.1.10` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.9` | `4.1.10` | | [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `10.4.6` | `10.5.0` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.4.6` | `10.5.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.1.3` | `8.1.4` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.9` | `4.1.10` | Updates `turbo` from 2.10.3 to 2.10.5 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.10.3...v2.10.5) Updates `@eslint/js` from 9.39.4 to 9.39.5 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](https://github.com/eslint/eslint/commits/v9.39.5/packages/js) Updates `eslint` from 9.39.4 to 9.39.5 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v9.39.4...v9.39.5) Updates `lucide-react` from 1.23.0 to 1.24.0 - [Release notes](https://github.com/lucide-icons/lucide/releases) - [Commits](https://github.com/lucide-icons/lucide/commits/1.24.0/packages/lucide-react) Updates `postcss` from 8.5.16 to 8.5.19 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.16...8.5.19) Updates `prettier` from 3.9.4 to 3.9.5 - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](prettier/prettier@3.9.4...3.9.5) Updates `react-dropzone` from 15.0.0 to 17.0.0 - [Release notes](https://github.com/react-dropzone/react-dropzone/releases) - [Commits](react-dropzone/react-dropzone@v15.0.0...v17.0.0) Updates `react-hook-form` from 7.80.0 to 7.81.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.80.0...v7.81.0) Updates `typescript-eslint` from 8.62.1 to 8.64.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/typescript-eslint) Updates `@storybook/addon-a11y` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/addons/a11y) Updates `@storybook/addon-docs` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/addons/docs) Updates `@storybook/addon-themes` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/addons/themes) Updates `@storybook/addon-vitest` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/addons/vitest) Updates `@storybook/nextjs-vite` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/frameworks/nextjs) Updates `@types/node` from 26.1.0 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@vitest/browser-playwright` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright) Updates `@vitest/coverage-v8` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `eslint-plugin-storybook` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/lib/eslint-plugin) Updates `storybook` from 10.4.6 to 10.5.0 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.0/code/core) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `vite` from 8.1.3 to 8.1.4 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v8.1.4/packages/vite) Updates `vitest` from 4.1.9 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: turbo dependency-version: 2.10.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: "@eslint/js" dependency-version: 9.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: eslint dependency-version: 9.39.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: lucide-react dependency-version: 1.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: postcss dependency-version: 8.5.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: prettier dependency-version: 3.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: react-dropzone dependency-version: 17.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: frontend-dependencies - dependency-name: react-hook-form dependency-version: 7.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: typescript-eslint dependency-version: 8.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@storybook/addon-a11y" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@storybook/addon-docs" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@storybook/addon-themes" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@storybook/addon-vitest" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@storybook/nextjs-vite" dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: eslint-plugin-storybook dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: storybook dependency-version: 10.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: frontend-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: frontend-dependencies - dependency-name: vite dependency-version: 8.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: frontend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-20T18:10:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026

chore: refresh lockfiles for dependabot

ea8ac47

dependabot Bot closed this Jul 20, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/frontend-dependencies-be9dbac6b6 branch July 20, 2026 18:10

Navigation Menu

Bump the frontend-dependencies group across 1 directory with 22 updates - #104

Bump the frontend-dependencies group across 1 directory with 22 updates#104
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend-dependencies-be9dbac6b6

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Turborepo v2.10.5

What's Changed

Changelog

v9.39.5

Bug Fixes

Documentation

Chores

v9.39.5

Bug Fixes

Documentation

Chores

Version 1.24.0

What's Changed

New Contributors

8.5.19

8.5.18

8.5.17

8.5.19

8.5.18

8.5.17

3.9.5

3.9.5

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

v17.0.0

17.0.0 (2026-07-12)

BREAKING CHANGES

v16.0.0

16.0.0 (2026-07-12)

BREAKING CHANGES

Version 7.81.0

[7.81.0] - 2026-07-05

Added

Fixed

Security

Performance

v8.64.0

8.64.0 (2026-07-13)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

8.64.0 (2026-07-13)

8.63.0 (2026-07-06)

v10.5.0

10.5.0

10.5.0

Uh oh!

dependabot Bot commented on behalf of github Jul 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 13, 2026 •

edited

Loading

Markdown: Cap ordered list mark at 999,999,999 (#19351 by `@tats-u`)

Markdown: Avoid corrupting empty link with title (#19487 by `@andersk`)