Bump the storybook group across 1 directory with 6 updates#610
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/storybook-3bea6f77bd
branch
from
67f353b to
dddcbf1
Compare
Contributor
|
@dependabot rebase |
Contributor
|
@dependabot recreate |
Bumps the storybook group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `5.1.2` | `5.2.1` | | [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.3.5` | `10.4.6` | | [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.3.5` | `10.4.6` | | [@storybook/addon-onboarding](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/onboarding) | `10.3.5` | `10.4.6` | | [@storybook/addon-themes](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/themes) | `10.3.5` | `10.4.6` | | [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.3.5` | `10.4.6` | Updates `@chromatic-com/storybook` from 5.1.2 to 5.2.1 - [Release notes](https://github.com/chromaui/addon-visual-tests/releases) - [Changelog](https://github.com/chromaui/addon-visual-tests/blob/v5.2.1/CHANGELOG.md) - [Commits](chromaui/addon-visual-tests@v5.1.2...v5.2.1) Updates `@storybook/addon-docs` from 10.3.5 to 10.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/addons/docs) Updates `@storybook/addon-links` from 10.3.5 to 10.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/addons/links) Updates `@storybook/addon-onboarding` from 10.3.5 to 10.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/addons/onboarding) Updates `@storybook/addon-themes` from 10.3.5 to 10.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/addons/themes) Updates `@storybook/react-vite` from 10.3.5 to 10.4.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.6/code/frameworks/react-vite) --- updated-dependencies: - dependency-name: "@chromatic-com/storybook" dependency-version: 5.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook - dependency-name: "@storybook/addon-docs" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook - dependency-name: "@storybook/addon-links" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook - dependency-name: "@storybook/addon-onboarding" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook - dependency-name: "@storybook/addon-themes" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook - dependency-name: "@storybook/react-vite" dependency-version: 10.4.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: storybook ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/storybook-3bea6f77bd
branch
from
dddcbf1 to
6f82786
Compare
bgentry
approved these changes
Jul 2, 2026
bgentry
left a comment
bgentry
left a comment
Contributor
There was a problem hiding this comment.
Codex 🤖 dependency-upgrade review for PR #610.
Scope reviewed:
- Direct dev dependency updates:
@chromatic-com/storybook5.1.2 -> 5.2.1 and Storybook packages 10.3.5 -> 10.4.6. - Lockfile transitives changed as expected for that upgrade set, including
chromatic13.3.4 -> 16.10.0, Storybook internals 10.3.5 -> 10.4.6,hasown2.0.3 -> 2.0.4,is-core-module2.16.1 -> 2.16.2, and one new nestedsemverunderchromatic.
Security and supply-chain checks:
- All added/changed package tarballs resolve through
registry.npmjs.orgwith sha512 lockfile integrity. - No added or changed package declares install/preinstall/postinstall/prepare lifecycle scripts.
- No native binary packages were introduced by this PR.
- Bin churn is limited to expected CLI metadata:
chromaticnow points its existingchroma,chromatic, andchromatic-clibins atdist/bin.cjs, and the nestedsemverdependency exposes its usualsemverbin. - I did not find evidence of dependency confusion, registry source changes, suspicious lockfile integrity churn, or unexpected manifest expansion in this PR.
Compatibility validation performed locally against the recreated Dependabot merge ref 6f82786abe629722a13ea835b7a4ffde88749eae:
npm ci --ignore-scripts --no-audit --no-fund- Installed-version check for the upgraded Storybook/Chromatic packages.
npm run lintnpm run test:once(30 files / 205 tests)npm run buildnpm run build-storybook
GitHub checks are green for CI, JS lint/build/test, Go lint/test, Release, CodeQL, and the riverui image. The remaining riverproui image failures match the known Dependabot-triggered pipeline limitation being handled separately, so I am not treating them as a blocker for this dependency review.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the storybook group with 6 updates in the / directory:
5.1.25.2.110.3.510.4.610.3.510.4.610.3.510.4.610.3.510.4.610.3.510.4.6Updates
@chromatic-com/storybookfrom 5.1.2 to 5.2.1Release notes
Sourced from @chromatic-com/storybook's releases.
... (truncated)
Changelog
Sourced from @chromatic-com/storybook's changelog.
Commits
55bdb73Bump version to: 5.2.1 [skip ci]59b8146Update CHANGELOG.md [skip ci]0fe1587Merge pull request #435 from chromaui/next2c8182dMerge pull request #434 from chromaui/valentin/widen-peer-deps-rangee1d4e26Widen peer-dependency range for storybook652b6d0Bump version to: 5.2.0 [skip ci]a16a328Update CHANGELOG.md [skip ci]0e8f745Merge pull request #432 from chromaui/next9ba520eFix TS errorf03b35eMerge branch 'main' into nextUpdates
@storybook/addon-docsfrom 10.3.5 to 10.4.6Release notes
Sourced from @storybook/addon-docs's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-docs's changelog.
... (truncated)
Commits
5496a42Bump version from "10.4.5" to "10.4.6" [skip ci]48e7b20Bump version from "10.4.4" to "10.4.5" [skip ci]5adebe7Bump version from "10.4.3" to "10.4.4" [skip ci]624e618Bump version from "10.4.2" to "10.4.3" [skip ci]c898822Merge pull request #34496 from NYCU-Chung/fix/docs-blocks-custom-mdxc920fd0Merge pull request #35021 from LongTangGithub/fix/docs-hmr-scroll-to-top1750494Merge pull request #35031 from storybookjs/jeppe/fix-mdx-no-dev-tag298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]cc19ae1Bump version from "10.4.0" to "10.4.1" [skip ci]f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]Updates
@storybook/addon-linksfrom 10.3.5 to 10.4.6Release notes
Sourced from @storybook/addon-links's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-links's changelog.
... (truncated)
Commits
5496a42Bump version from "10.4.5" to "10.4.6" [skip ci]48e7b20Bump version from "10.4.4" to "10.4.5" [skip ci]5adebe7Bump version from "10.4.3" to "10.4.4" [skip ci]624e618Bump version from "10.4.2" to "10.4.3" [skip ci]298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]cc19ae1Bump version from "10.4.0" to "10.4.1" [skip ci]f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]Updates
@storybook/addon-onboardingfrom 10.3.5 to 10.4.6Release notes
Sourced from @storybook/addon-onboarding's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-onboarding's changelog.
... (truncated)
Commits
5496a42Bump version from "10.4.5" to "10.4.6" [skip ci]48e7b20Bump version from "10.4.4" to "10.4.5" [skip ci]5adebe7Bump version from "10.4.3" to "10.4.4" [skip ci]624e618Bump version from "10.4.2" to "10.4.3" [skip ci]298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]cc19ae1Bump version from "10.4.0" to "10.4.1" [skip ci]f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]Updates
@storybook/addon-themesfrom 10.3.5 to 10.4.6Release notes
Sourced from @storybook/addon-themes's releases.
... (truncated)
Changelog
Sourced from @storybook/addon-themes's changelog.
... (truncated)
Commits
5496a42Bump version from "10.4.5" to "10.4.6" [skip ci]48e7b20Bump version from "10.4.4" to "10.4.5" [skip ci]5adebe7Bump version from "10.4.3" to "10.4.4" [skip ci]624e618Bump version from "10.4.2" to "10.4.3" [skip ci]298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]cc19ae1Bump version from "10.4.0" to "10.4.1" [skip ci]f8c16d1Bump version from "10.4.0-beta.0" to "10.4.0" [skip ci]e02da0bBump version from "10.4.0-alpha.19" to "10.4.0-beta.0" [skip ci]429fb3eBump version from "10.4.0-alpha.18" to "10.4.0-alpha.19" [skip ci]488dd08Bump version from "10.4.0-alpha.17" to "10.4.0-alpha.18" [skip ci]Updates
@storybook/react-vitefrom 10.3.5 to 10.4.6Release notes
Sourced from @storybook/react-vite's releases.