fix(deps): update all non-major dependencies#2025
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
Conversation
|
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
ef1c4a8 to
a8e2d2b
Compare
renovate
bot
changed the title
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
16 times, most recently
from
eeb13f2 to
d80b3e6
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
5 times, most recently
from
7e83f39 to
7685053
Compare
renovate
bot
force-pushed
the
renovate/all-minor-patch
branch
from
7685053 to
bde7335
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^5.2.0→^5.5.0^8.0.0-rc.2→^8.0.0-rc.3^7.29.0→^7.29.2^7.28.6→^7.29.2^10.2.19→^10.3.3^10.2.19→^10.3.3^0.1.37→^0.1.38^4.2.0→^4.2.1^8.57.0→^8.57.2^8.57.0→^8.57.2^4.25.8→^4.25.9^4.25.8→^4.25.9^6.0.0→^6.0.1^146.0.3→^146.0.6^41.0.2→^41.0.4^29.15.0→^29.15.1^7.1.0→^7.2.0^16.13.1→^16.13.2^3.1.0→^3.2.6^5.1.6→^5.1.710.32.1→10.33.0^7.13.1→^7.13.2^10.2.19→^10.3.3^8.57.0→^8.57.2^8.0.0→^8.0.3^7.0.0→^7.0.2Release Notes
apollographql/apollo-server (@apollo/server)
v5.5.0Compare Source
Minor Changes
#8191⚠️ SECURITY
ada1200Thanks @glasser! -@apollo/server/standalone:Apollo Server now rejects GraphQL
GETrequests which contain aContent-Typeheader other thanapplication/json(with optional parameters such as; charset=utf-8). Any other value is now rejected with a 415 status code.(GraphQL
GETrequests without aContent-Typeheader are still allowed, though they do still need to contain a non-emptyX-Apollo-Operation-NameorApollo-Require-Preflightheader to be processed if the default CSRF prevention feature is enabled.)This improvement makes Apollo Server's CSRF more resistant to browsers which implement CORS in non-spec-compliant ways. Apollo is aware of one browser which as of March 2026 has a bug which allows an attacker to circumvent Apollo Server's CSRF prevention feature to carry out read-only XS-Search-style CSRF attacks. The browser vendor is in the process of patching this vulnerability; upgrading Apollo Server to v5.5.0 mitigates this vulnerability.
If your server uses cookies (or HTTP Basic Auth) for authentication, Apollo encourages you to upgrade to v5.5.0.
This is technically a backwards-incompatible change. Apollo is not aware of any GraphQL clients which provide non-empty
Content-Typeheaders withGETrequests with types other thanapplication/json. If your use case requires such requests, please file an issue and we may add more configurability in a follow-up release.See advisory GHSA-9q82-xgwf-vj6h for more details.
babel/babel (@babel/code-frame)
v8.0.0-rc.3Compare Source
👓 Spec Compliance
babel-parser💥 Breaking Change
babel-parser,babel-plugin-proposal-do-expressions,babel-plugin-proposal-pipeline-operator,babel-plugin-transform-exponentiation-operator,babel-plugin-transform-instanceof,babel-traverse,babel-typesImportfrom theExpressionalias (@JLHwung)babel-plugin-transform-react-jsx-development,babel-plugin-transform-react-jsx,babel-preset-reactdevelopmentSourceSelfoption (@rootvector2)babel-generator,babel-parser,babel-typesdecoratorsfromTSDeclareMethod(@liuxingbaoyu)babel-helper-import-to-platform-api,babel-plugin-proposal-import-wasm-source,babel-plugin-transform-json-modulesfileinstead ofpathto importToPlatformApi builders (@nicolo-ribaudo)🚀 New Feature
babel-plugin-transform-react-jsx-development,babel-plugin-transform-react-jsx,babel-preset-reactsourceSelfoption to@babel/plugin-transform-react-jsx-development(@nicolo-ribaudo)babel-parserlocationsoption to parser (@liuxingbaoyu)🐛 Bug Fix
babel-compat-data,babel-plugin-bugfix-safari-rest-destructuring-rhs-array,babel-preset-envbabel-generator,babel-parser,babel-traverse,babel-typesbabel-build-external-helpers,babel-cli,babel-node,babel-parserbabel-build-external-helpers,babel-cli,babel-node,babel-registerbabel-plugin-transform-parameters,babel-traversepath.get("body.${index}")(@liuxingbaoyu)babel-parserbabel-build-external-helpersbabel-core,babel-generator,babel-helper-transform-fixture-test-runner,babel-plugin-transform-runtime,babel-types💅 Polish
babel-parserbabel-plugin-transform-regeneratorawaitAsyncGeneratorinawait yield(@nicolo-ribaudo)📝 Documentation
🏠 Internal
babel-parsermake buildwill build Babel parser typings (@JLHwung)babel-runtime-corejs3,babel-runtimeenginesfield from@babel/runtime(@nicolo-ribaudo)allowUnreachableCode: false(@liuxingbaoyu)🏃♀️ Performance
babel-helper-import-to-platform-api,babel-plugin-proposal-import-wasm-source,babel-plugin-transform-json-modulesbabel-parserbabel/babel (@babel/preset-env)
v7.29.2Compare Source
babel/babel (@babel/runtime)
v7.29.2Compare Source
v7.29.2 (2026-03-16)
👓 Spec Compliance
babel-parser🐛 Bug Fix
babel-helpers,babel-plugin-transform-async-generator-functions,babel-preset-env,babel-runtime-corejs3babel-preset-env🏠 Internal
Committers: 2
storybookjs/storybook (@storybook/addon-onboarding)
v10.3.3Compare Source
10.3.3
v10.3.2Compare Source
10.3.2
v10.3.1Compare Source
10.3.1
v10.3.0Compare Source
10.3.0
> Improved developer experience, AI-assisting tools, and broader ecosystem support
Storybook 10.3 contains hundreds of fixes and improvements including:
List of all updates
storybookjs/storybook (@storybook/react-vite)
v10.3.3Compare Source
v10.3.2Compare Source
v10.3.1Compare Source
v10.3.0Compare Source
> Improved developer experience, AI-assisting tools, and broader ecosystem support
Storybook 10.3 contains hundreds of fixes and improvements including:
react-component-metaprop extraction tool for accurate controls and args tablesList of all updates
- A11y: Add ScrollArea prop focusable for when it has static children - [#33876](https://redirect.github.com/storybookjs/storybook/pull/33876), thanks @Sidnioulz! - A11y: Ensure popover dialogs have an ARIA label - [#33500](https://redirect.github.com/storybookjs/storybook/pull/33500), thanks @gayanMatch! - A11y: Make resize handles for addon panel and sidebar accessible [#33980](https://redirect.github.com/storybookjs/storybook/pull/33980) - A11y: Underline MDX links for WCAG SC 1.4.1 compliance - [#33139](https://redirect.github.com/storybookjs/storybook/pull/33139), thanks @NikhilChowdhury27! - Actions: Add expandLevel parameter to configure tree depth - [#33977](https://redirect.github.com/storybookjs/storybook/pull/33977), thanks @mixelburg! - Actions: Fix HandlerFunction type to support async callback props - [#33864](https://redirect.github.com/storybookjs/storybook/pull/33864), thanks @mixelburg! - Addon-Docs: Add React as optimizeDeps entry - [#34176](https://redirect.github.com/storybookjs/storybook/pull/34176), thanks @valentinpalkovic! - Addon-Docs: Add support for `sourceState: 'none'` to canvas block parameters - [#33627](https://redirect.github.com/storybookjs/storybook/pull/33627), thanks @quisido! - Addon-docs: Restore `docs.components` overrides for doc blocks [#34111](https://redirect.github.com/storybookjs/storybook/pull/34111) - Addon-Vitest: Add channel API to programmatically trigger test runs - [#33206](https://redirect.github.com/storybookjs/storybook/pull/33206), thanks @JReinhold! - Addon-Vitest: Handle additional vitest config export patterns in postinstall - [#34106](https://redirect.github.com/storybookjs/storybook/pull/34106), thanks @copilot-swe-agent! - Addon-Vitest: Make Playwright `--with-deps` platform-aware to avoid `sudo` prompt on Linux [#34121](https://redirect.github.com/storybookjs/storybook/pull/34121) - Addon-Vitest: Refactor Vitest setup to eliminate the need for a dedicated setup file - [#34025](https://redirect.github.com/storybookjs/storybook/pull/34025), thanks @valentinpalkovic! - Addon-Vitest: Support Vitest canaries - [#33833](https://redirect.github.com/storybookjs/storybook/pull/33833), thanks @valentinpalkovic! - Angular: Add moduleResolution: bundler to tsconfig - [#34085](https://redirect.github.com/storybookjs/storybook/pull/34085), thanks @valentinpalkovic! - Angular: only load webpack dependencies on demand - [#34043](https://redirect.github.com/storybookjs/storybook/pull/34043), thanks @sod! - Angular: Storybook fails with unknown option silent - [#33736](https://redirect.github.com/storybookjs/storybook/pull/33736), thanks @tanujbhaud! - Build: Update @types/node - [#34037](https://redirect.github.com/storybookjs/storybook/pull/34037), thanks @valentinpalkovic! - Builder-Vite: Centralize Vite plugins for builder-vite and addon-vitest - [#33819](https://redirect.github.com/storybookjs/storybook/pull/33819), thanks @valentinpalkovic! - Builder-Vite: Fix cold-cache vitest failures for story paths containing glob special characters - [#34044](https://redirect.github.com/storybookjs/storybook/pull/34044), thanks @copilot-swe-agent! - Builder-Vite: Use preview annotations as entry points for optimizeDeps - [#33875](https://redirect.github.com/storybookjs/storybook/pull/33875), thanks @copilot-swe-agent! - CI: declare explicit permissions for stale and weekly cron workflows - [#33902](https://redirect.github.com/storybookjs/storybook/pull/33902), thanks @Rohan5commit! - CLI: Add vike CLI metadata - [#34189](https://redirect.github.com/storybookjs/storybook/pull/34189), thanks @yannbf! - CLI: Avoid hanging of postinstall during init - [#34175](https://redirect.github.com/storybookjs/storybook/pull/34175), thanks @valentinpalkovic! - CLI: Fix onboarding not opening - [#33609](https://redirect.github.com/storybookjs/storybook/pull/33609), thanks @ndelangen! - CLI: Show multiple favicons warning as debug message - [#34069](https://redirect.github.com/storybookjs/storybook/pull/34069), thanks @remino! - Cli: Use npm for registry URL in PNPMProxy to avoid workspace errors - [#33571](https://redirect.github.com/storybookjs/storybook/pull/33571), thanks @ia319! - Controls: Allow story argTypes to override control: false from meta - [#33729](https://redirect.github.com/storybookjs/storybook/pull/33729), thanks @jonathan-fulton! - Controls: Fix Object contrast issue and tidy up code - [#33923](https://redirect.github.com/storybookjs/storybook/pull/33923), thanks @Sidnioulz! - Core: Ensure telemetry is never triggered on initial load of checklist data - [#33918](https://redirect.github.com/storybookjs/storybook/pull/33918), thanks @ghengeveld! - Core: Fix event source URL based on refId when multiple iframes share the same origin [#34105](https://redirect.github.com/storybookjs/storybook/pull/34105) - Core: Fix false-positive CJS warning when 'exports' appears in strings or comments - [#33572](https://redirect.github.com/storybookjs/storybook/pull/33572), thanks @reeseo3o! - Core: Fix handling complex viewport sizes [#33615](https://redirect.github.com/storybookjs/storybook/pull/33615) - Core: Fix iframe reference for composed Storybook on a subpath [#34100](https://redirect.github.com/storybookjs/storybook/pull/34100) - Core: Fix typos: occured -> occurred, recieves -> receives - [#33727](https://redirect.github.com/storybookjs/storybook/pull/33727), thanks @jonathan-fulton! - Core: Handle BROWSER=none correctly and improve error messages - [#33730](https://redirect.github.com/storybookjs/storybook/pull/33730), thanks @jonathan-fulton! - Core: Ignore empty files when indexing - [#33782](https://redirect.github.com/storybookjs/storybook/pull/33782), thanks @JReinhold! - Core: Register CORS middleware before index.json route - [#33728](https://redirect.github.com/storybookjs/storybook/pull/33728), thanks @jonathan-fulton! - Core: Revert Pull Request #33420 from Maelryn/fix/copy-button-overlap - [#33877](https://redirect.github.com/storybookjs/storybook/pull/33877), thanks @Sidnioulz! - Core: Zoom tool refinements - Hide reset button when value is initial - [#33635](https://redirect.github.com/storybookjs/storybook/pull/33635), thanks @superLipbalm! - Docs: Edit JSON button is now accessible at 320x256 viewport (WCAG 2.1 Reflow test) - [#33707](https://redirect.github.com/storybookjs/storybook/pull/33707), thanks @TheSeydiCharyyev! - Docs: Make CSS ordering in DocsContainer more predictable [#34015](https://redirect.github.com/storybookjs/storybook/pull/34015) - ESLint-plugin: Disallow extra properties in eslint plugin rule options - [#32056](https://redirect.github.com/storybookjs/storybook/pull/32056), thanks @andreww2012! - ESLint: bail out config setup if eslint-plugin-storybook is already imported - [#34089](https://redirect.github.com/storybookjs/storybook/pull/34089), thanks @copilot-swe-agent! - HMR: Fix race conditions causing stale play functions to fire on re-rendered stories - [#33930](https://redirect.github.com/storybookjs/storybook/pull/33930), thanks @copilot-swe-agent! - Maintenance: Revert pull request #33930 HMR events - [#34190](https://redirect.github.com/storybookjs/storybook/pull/34190), thanks @yannbf! - Maintenance: Use std-env for AI agent detection in telemetry [#34114](https://redirect.github.com/storybookjs/storybook/pull/34114) - Manifest: Add docs entries to debugger - [#33607](https://redirect.github.com/storybookjs/storybook/pull/33607), thanks @JReinhold! - Manifest: Rename `experimentalComponentsManifest` → `componentsManifest`, default to `true` [#33974](https://redirect.github.com/storybookjs/storybook/pull/33974) - Manifests: Fix Attached MDX causing wrong component entries [#34101](https://redirect.github.com/storybookjs/storybook/pull/34101) - Next.js-Vite: Fix failing postcss mutation - [#33879](https://redirect.github.com/storybookjs/storybook/pull/33879), thanks @valentinpalkovic! - Next.js: Move image configuration from FrameworkOptions to parameters [#32639](https://redirect.github.com/storybookjs/storybook/pull/32639), thanks @y-hsgw! - Preact: Support inferring props from component types - [#33828](https://redirect.github.com/storybookjs/storybook/pull/33828), thanks @JoviDeCroock! - React Native Web: Fix inconsistent example stories - [#33891](https://redirect.github.com/storybookjs/storybook/pull/33891), thanks @danielalanbates! - React: Add react-docgen-typescript to component manifest - [#33818](https://redirect.github.com/storybookjs/storybook/pull/33818), thanks @kasperpeulen! - Revert "Toolbar: Remove extra toolbar divider when zoom controls not shown" - [#34099](https://redirect.github.com/storybookjs/storybook/pull/34099), thanks @valentinpalkovic! - Test: Fix clearing mocks in Vitest [#34078](https://redirect.github.com/storybookjs/storybook/pull/34078) - Test: Update @testing-library/jest-dom - [#33928](https://redirect.github.com/storybookjs/storybook/pull/33928), thanks @valentinpalkovic! - Theming: Export interface declaration for `ThemesGlobals` - [#33343](https://redirect.github.com/storybookjs/storybook/pull/33343), thanks @icopp! - Toolbar: Remove extra toolbar divider when zoom controls not shown - [#33731](https://redirect.github.com/storybookjs/storybook/pull/33731), thanks @jonathan-fulton! - UI: Allow direct kb/mouse actions on zoom tool button - [#33496](https://redirect.github.com/storybookjs/storybook/pull/33496), thanks @Sidnioulz! - UI: Avoid large animation for reduced motion users - [#33530](https://redirect.github.com/storybookjs/storybook/pull/33530), thanks @Sidnioulz! - UI: Ensure Link without href is keyboard-reachable - [#34163](https://redirect.github.com/storybookjs/storybook/pull/34163), thanks @Sidnioulz! - UI: Fix `z-index` problem with `popover`s and `modal`s nesting - [#33757](https://redirect.github.com/storybookjs/storybook/pull/33757), thanks @ndelangen! - UI: Fix code/copy buttons overlap with content - [#33889](https://redirect.github.com/storybookjs/storybook/pull/33889), thanks @Sidnioulz! - UI: Fix Copy button overlapping code in portrait mode - [#33420](https://redirect.github.com/storybookjs/storybook/pull/33420), thanks @Maelryn! - UI: Fix modal text selection - [#33967](https://redirect.github.com/storybookjs/storybook/pull/33967), thanks @Sidnioulz! - UI: Fix tab navigation after closing addon panel - [#33971](https://redirect.github.com/storybookjs/storybook/pull/33971), thanks @copilot-swe-agent! - UI: Handle kb nav edge cases when preview and panel are hidden - [#33588](https://redirect.github.com/storybookjs/storybook/pull/33588), thanks @Sidnioulz! - UI: Hide addon panel Drag on pages without a panel - [#34162](https://redirect.github.com/storybookjs/storybook/pull/34162), thanks @Sidnioulz! - UI: Hide manifest tag for now - [#34165](https://redirect.github.com/storybookjs/storybook/pull/34165), thanks @Sidnioulz! - UI: Make disabled Buttons keyboard-focusable - [#34166](https://redirect.github.com/storybookjs/storybook/pull/34166), thanks @Sidnioulz! - UI: Make TagsFilter state persistent [#33374](https://redirect.github.com/storybookjs/storybook/pull/33374) - UI: Use correct selector for addon panel focus check - [#34164](https://redirect.github.com/storybookjs/storybook/pull/34164), thanks @Sidnioulz! - UI: Zoom faster when pressing shift - [#34185](https://redirect.github.com/storybookjs/storybook/pull/34185), thanks @Sidnioulz! - Viewport: Skip viewport validation before parameters load - [#33794](https://redirect.github.com/storybookjs/storybook/pull/33794), thanks @ia319! - Vite: Add mock entries to optimizeDeps.entries - [#34167](https://redirect.github.com/storybookjs/storybook/pull/34167), thanks @valentinpalkovic! - Vue3-Vite: Allow paths in docgen tsconfig option [#32310](https://redirect.github.com/storybookjs/storybook/pull/32310), thanks @Thomaash!typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
v8.57.2Compare Source
🩹 Fixes
❤️ Thank You