chore(deps): bump the npm-dependencies group across 1 directory with 16 updates

[dependabot]

Bumps the npm-dependencies group with 16 updates in the / directory:

Package	From	To
@codemirror/commands	6.10.0	6.11.1
@codemirror/view	6.38.8	6.43.14
@reduxjs/toolkit	2.11.0	2.13.0
@uiw/react-codemirror	4.25.3	4.25.12
tslib	2.5.3	2.8.1
@grafana/plugin-e2e	3.4.2	3.15.0
@playwright/test	1.63.0	1.64.0
@storybook/test	8.6.14	8.6.15
@swc/core	1.15.3	1.16.13
@swc/helpers	0.5.17	0.5.23
@testing-library/user-event	14.6.1	14.6.7
@types/lodash	4.17.21	4.17.26
sass	1.63.2	1.105.1
storybook	8.6.18	8.6.19
swc-loader	0.2.6	0.2.7
webpack	5.108.4	5.111.1

Updates @codemirror/commands from 6.10.0 to 6.11.1

Changelog

Sourced from @​codemirror/commands's changelog.

6.10.3 (2026-03-12)

Bug fixes

Make sure selection-extending commands preserve the associativity of the selection head.

6.10.2 (2026-02-06)

Bug fixes

Move the selection to a less surprising place when undoing, moving the selection, redoing, then undoing again.

6.10.1 (2025-12-17)

Bug fixes

Fix a bug where copyLineDown would leave the cursor on the wrong line when it was at the start of the line.

Commits

• See full diff in compare view

Updates @codemirror/view from 6.38.8 to 6.43.14

Changelog

Sourced from @​codemirror/view's changelog.

6.41.0 (2026-04-01)

Bug fixes

Fix an issue where EditorView.posAtCoords could incorrectly return a position near a higher element on the line, in mixed-font-size lines.

Expand the workaround for the Webkit bug that causes nonexistent selections to stay visible to be active on non-Safari Webkit browsers.

New features

The new EditorView.cursorScrollMargin facet can now be used to configure the extra space used when scrolling the cursor into view.

6.40.0 (2026-03-12)

Bug fixes

Fix a bug that caused Shift-Enter/Backspace/Delete on iOS to lose the shift modifier when delivered to key event handlers.

Fix an issue where EditorView.moveVertically could move to the wrong place in wrapped lines with a large line height.

Make sure the selection head associativity is properly set for mouse selections made with shift held down.

New features

WidgetType.updateDOM is now called with the previous widget value as third argument.

6.39.17 (2026-03-10)

Bug fixes

Improve touch tap-selection on line wrapping boundaries.

Make drawSelection draw our own selection handles on iOS.

Fix an issue where posAtCoords, when querying line wrapping points, got confused by extra empty client rectangles produced by Safari.

6.39.16 (2026-03-02)

Bug fixes

Perform scroll stabilization on the document or wrapping scrollable elements, when the user scrolls the editor.

Fix an issue where changing decorations right before a composition could end up corrupting the visible DOM.

Fix an issue where some types of text input over a selection would be read as happening in wrong position.

6.39.15 (2026-02-20)

Bug fixes

... (truncated)

Commits

• See full diff in compare view

Updates @reduxjs/toolkit from 2.11.0 to 2.13.0

Release notes

Sourced from @​reduxjs/toolkit's releases.

v2.13.0

This feature release updates our build tooling to TSDown and PNPM, adds official TypeScript 7 support, and includes a long list of bugfixes across RTK Query, createAsyncThunk, createEntityAdapter, and combineSlices.

Changelog

Build Tooling Updates

We've fully modernizing modernized our build tooling across all of the Redux repos. That included switching from Yarn to PNPM, ESLint to Oxlint, Prettier to Oxfmt, and TSUp to TSDown.

The part that matters for users is that we now build the package with TSDown instead of tsup. The package layout, exports definitions, and exported APIs are all unchanged from 2.12. We've checked the new build with attw, and verified that CJS and ESM entry points load in both dev and prod builds, and that the legacy-esm artifacts still target ES2017. The contents of the bundles do look a bit different (smaller CJS artifacts, slightly different helper output in the legacy-esm files). If you see any behavior differences that look build-related, please file an issue!

This is also our first release published via the updated PNPM-based workflow, still using NPM Trusted Publishing. We've also added pkg.pr.new previews for every commit, so you can try out a PR build before it's released.

Docs Updates

We've shipped a new combined Redux libraries docs site! The core docs site at https://redux.js.org now contains the docs for all of our libraries: Redux core and usage guides, Redux Toolkit, React Redux, and Reselect. The prior standalone docs sites for RTK, R-R, and Reselect now redirect to their respective sections of the combined docs. We've also done a major cleanup pass on the docs, deduplicating pages that had similarities (like the Next.js or RTK2 migration pages that lived in both the core and RTK docs), and updating outdated content (modernizing example code snippets, deleting dead links, and making RTK and hooks the default patterns shown). The RTK content now lives at https://redux.js.org/toolkit/ .

TypeScript 7 Support

TS 7.0 (the native Go port) is now out! We fixed the remaining type errors in RTK when checked by TS 7.0 and 7.1, and TS 7.0 is now part of our CI test matrix.

Per our TS support policy of matching DefinitelyTyped's support window, we've also updated our support matrix to TS 5.6+. As always, RTK may still work with earlier versions, but we no longer test against them.

RTK Query Fixes

useQueryState (and thus useQuery) was passing a new inline selector to useSelector on every render, and also reading the store directly during render. The selector is now memoized, and the direct store read is gone. This also fixes a bug where isSuccess could flip from false to true on an unrelated re-render while a query was refetching after an error. isSuccess now correctly stays false in that case.

data now reflects cache updates made via updateQueryData while a refetch is in flight, instead of showing the previous result.

Polling now reads the current cache state when each poll fires, rather than the state at the time the poll was scheduled. This means skipPollingIfUnfocused respects focus loss that happens after scheduling, and polls stop if their cache entry was removed.

We fixed a race where a duplicate query request rejected by the thunk condition could cause queued tag invalidations to run too early and be lost, leaving stale data in the cache.

Tags with falsy ids like 0 now invalidate and clean up correctly.

Lazy query hooks now re-subscribe correctly when effects restart while the hook state is preserved, such as with Fast Refresh or <Activity>.

Infinite queries no longer trigger onQueryStarted when fetching past the end of the list, and the infinite query hook result type now includes the page error flags.

fetchBaseQuery only treats a URL as absolute if it starts with a scheme.

We also fixed an error when rehydrating state for an endpoint name that has no definition.

Other Fixes

createAsyncThunk no longer swallows aborts that happen before the pending action is dispatched, and now correctly sets rejectedWithValue when rejectWithValue is called with a falsy payload.

createEntityAdapter's setAll now keeps the last item when given duplicate IDs, matching setMany. The sorted adapter's updateMany now merges multiple updates for the same ID before applying them.

combineSlices now keeps its internal state proxy cache per instance, so multiple combined reducers no longer interfere with each other.

... (truncated)

Commits

• 370f7eb Release 2.13.0
• 8c40241 Fix release-it commands for PNPM
• 483f0fb Fix unstable selector reference inside of useQueryState and isSuccess dur...
• 62103f5 Fix TS7 errors and update TS matrix (#5455)
• 71db2d4 Fetch the other libraries' docs from master in previews (#5454)
• 0eeae5c Convert Redux Toolkit docs to the combined site format (#5451)
• c9dac93 docs: clarify browser ESM import map usage (#5375)
• 00b133f fix(toolkit): handle circular references in immutable state middleware (#5433)
• ded675e docs site: fix pagefind search by preloading window.pagefind (#5447)
• 322c01a Reinstate lazy queries after preserved effects restart (#5424)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​reduxjs/toolkit since your current version.

Updates @uiw/react-codemirror from 4.25.3 to 4.25.12

Release notes

Sourced from @​uiw/react-codemirror's releases.

v4.25.12

Documentation v4.25.12: https://raw.githack.com/uiwjs/react-codemirror/5d05e26/index.html
Comparing Changes: uiwjs/react-codemirror@v4.25.11...v4.25.12

npm i @uiw/react-codemirror@4.25.12

• 🐞 fix(themes): declare generated runtime dependencies (#771) c0be46f @​dahukish
• 🌍 website: fix type error. #771 #755 2be57f0 @​jaywcjlove
• 🐞 fix: fix tsconfig issue. f4fa3e1 @​jaywcjlove

v4.25.11

Documentation v4.25.11: https://raw.githack.com/uiwjs/react-codemirror/22c79da/index.html
Comparing Changes: uiwjs/react-codemirror@v4.25.10...v4.25.11

npm i @uiw/react-codemirror@4.25.11

• 📖 doc: Update README.md 0b71006 @​jaywcjlove
• 📖 doc: Update README.md e275fb6 @​jaywcjlove
• 🐞 fix: prevent memory leak on default theme recreation (#769) bc982aa @​zukmkv

v4.25.10

Documentation v4.25.10: https://raw.githack.com/uiwjs/react-codemirror/5e24acf/index.html
Comparing Changes: uiwjs/react-codemirror@v4.25.9...v4.25.10

npm i @uiw/react-codemirror@4.25.10

... (truncated)

Commits

• 1e2e11f released v4.25.12 #771 #755
• f4fa3e1 fix: fix tsconfig issue.
• 2be57f0 website: fix type error. #771 #755
• c0be46f fix(themes): declare generated runtime dependencies (#771)
• 990500a released v4.25.11 #769
• bc982aa fix: prevent memory leak on default theme recreation (#769)
• e275fb6 doc: Update README.md
• 0b71006 doc: Update README.md
• d54c130 released v4.25.10
• 229eb4f chore: add sponsor SubList.
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​uiw/react-codemirror since your current version.

Updates tslib from 2.5.3 to 2.8.1

Release notes

Sourced from tslib's releases.

v2.8.1

What's Changed

• Fix publish workflow by @​andrewbranch in microsoft/tslib#271
• Include non-enumerable keys in __importStar helper by @​rbuckton in microsoft/tslib#272
• Remove use of ES2015 syntax by @​andrewbranch in microsoft/tslib#275

Full Changelog: microsoft/tslib@v2.8.0...v2.8.1

v2.8.0

What's Changed

• Validate export structure of every entrypoint by @​andrewbranch in microsoft/tslib#269
• Add rewriteRelativeImportExtension helper by @​andrewbranch in microsoft/tslib#270

Full Changelog: microsoft/tslib@v2.7.0...v2.8.0

v2.7.0

What's Changed

• Implement deterministic collapse of await in await using by @​rbuckton in microsoft/tslib#262
• Use global 'Iterator.prototype' for downlevel generators by @​rbuckton in microsoft/tslib#267

Full Changelog: microsoft/tslib@v2.6.3...v2.7.0

v2.6.3

What's Changed

• 'await using' normative changes by @​rbuckton in microsoft/tslib#258

Full Changelog: microsoft/tslib@v2.6.2...v2.6.3

tslib 2.6.2

What's Changed

• Fix path to exports["module"]["types"] by @​andrewbranch in microsoft/tslib#217

Full Changelog: microsoft/tslib@v2.6.1...v2.6.2

tslib 2.6.1

What's Changed

• Allow functions as values in __addDisposableResource by @​rbuckton in microsoft/tslib#215
• Stop using es6 syntax in the es6 file by @​andrewbranch in microsoft/tslib#216

Full Changelog: microsoft/tslib@2.6.0...v2.6.1

tslib 2.6.0

What's Changed

• Add helpers for using and await using by @​rbuckton in microsoft/tslib#213

... (truncated)

Commits

• d72d6f7 2.8.1
• 11fa982 Merge pull request #275 from microsoft/bug/es5-compat
• 3c532eb Remove use of ES2015 syntax
• b0076c4 Include non-enumerable keys in __importStar helper (#272)
• 7c11588 Add missing registry-url parameter
• 1fec667 Merge pull request #271 from microsoft/fix-publish
• 097e99e Fix publish workflow
• ca5f7fb 2.8.0
• 2334267 Merge pull request #270 from microsoft/rewriteRelativeImportExtension
• c4cde74 Missed update
• Additional commits viewable in compare view

Updates @grafana/plugin-e2e from 3.4.2 to 3.15.0

Changelog

Sourced from @​grafana/plugin-e2e's changelog.

3.15.0 (2026-10-09)

Features

• plugin-e2e: vendor e2e-selectors instead of depending on it (#2907) (390ef30)

3.14.1 (2026-10-06)

Bug Fixes

• docs: redirect dead plugin-tools urls and fix two broken links (#2931) (d26d21c)

3.14.0 (2026-09-17)

Features

• plugin-e2e: enable runtime e2e-selectors by default (#2886) (a5b5480)

3.13.0 (2026-09-16)

Features

• plugin-e2e: fetch e2e-selectors from Grafana at runtime (#2819) (f771f00)
• plugin-e2e: log when runtime selectors are used (#2885) (0be56f7)

3.12.0 (2026-09-07)

Features

• plugin-e2e: expose response body from waitForQueryDataResponse (#2854) (e0e8411)

Bug Fixes

• plugin-e2e: fix setVisualization race with Grafana's viz picker (#2860) (b866625)

3.11.2 (2026-08-28)

Bug Fixes

• wait for options pane before the viz picker check (#2857) (23dd63c)

3.11.1 (2026-08-27)

... (truncated)

Commits

• 98008e2 chore: release main (#2938)
• 390ef30 feat(plugin-e2e): vendor e2e-selectors instead of depending on it (#2907)
• c9a5fab chore: release main (#2900)
• d26d21c fix(docs): redirect dead plugin-tools urls and fix two broken links (#2931)
• 90b2dcf chore: release main (#2888)
• a5b5480 feat(plugin-e2e): enable runtime e2e-selectors by default (#2886)
• 2395dc5 docs: add accessibility testing guide for plugin-e2e (#2835)
• e0bf891 chore: release main (#2861)
• 0be56f7 feat(plugin-e2e): log when runtime selectors are used (#2885)
• f771f00 feat(plugin-e2e): fetch e2e-selectors from Grafana at runtime (#2819)
• Additional commits viewable in compare view

Updates @playwright/test from 1.63.0 to 1.64.0

Release notes

Sourced from @​playwright/test's releases.

v1.64.0

🧰 WebMCP

New page.webmcp and frame.webmcp give access to the tools that a page registers through the experimental WebMCP browser API, so you can test them like any other part of your app:

const browser = await chromium.launch({ args: ['--enable-features=WebMCP'] });
const page = await browser.newPage();
await page.goto('https://example.com');
for (const tool of await page.webmcp.tools())
console.log(tool.name, tool.description);
const result = await page.webmcp.callTool('add', { a: 2, b: 40 });
console.log(result.content[0].text); // "42"

Playwright MCP also supports WebMCP by default, with page-defined tools offered to the agent as webmcp_<tool>. Pass --no-webmcp to opt out.

playwright-cli exposes them as well:

playwright-cli webmcp-list
playwright-cli webmcp-call search_catalog --params '{"query":"cats"}'

🎬 Better videos

Videos can now be recorded at a custom frame rate, and the decorations for actions are styled with plain CSS:

// playwright.config.ts
import { defineConfig } from '@playwright/test';
export default defineConfig({
use: {
video: {
mode: 'on',
size: { width: 1920, height: 1080 },
fps: 60,
show: {
actions: {
style: {
point: 'width: 20px; height: 20px; border-radius: 50%; background: red',
highlight: 'outline: 2px solid #333; background: rgba(0, 128, 255, .15)',
title: 'font-size: 16px',
},
},
},
},
</tr></table>

... (truncated)

Commits

• 606ecd8 cherry-pick(#43192): fix(locators): parse locators the way the client API bui...
• e4f872c cherry-pick(#43188): feat(api): expose asLocatorDescription via LocalUtils fo...
• f6a439e cherry-pick(#43189): docs(webmcp): expose WebMCP to all languages
• e2335c3 cherry-pick(#43174): fix(mcp): do not close the browser twice when the client...
• d2a436e cherry-pick(#43163): Revert "fix(blob): do not remove existing reports from o...
• a0c4b5e cherry-pick(#43175): feat(api): return language-specific locator code from re...
• 3f7d535 cherry-pick(#43131): docs: fix broken C# samples in API docs and handles guide
• 1cde64f cherry-pick(#43170): fix(locators): parse mixed role options
• 8851e72 cherry-pick(#43171): fix(locators): parse JavaScript escapes and regex classes
• dcc5065 cherry-pick(#43172): fix(locator): parse within and getByRef locators
• Additional commits viewable in compare view

Updates @storybook/test from 8.6.14 to 8.6.15

Commits

• 3812b43 Bump version from 8.6.14 to 8.6.15 MANUALLY
• See full diff in compare view

Updates @swc/core from 1.15.3 to 1.16.13

Changelog

Sourced from @​swc/core's changelog.

[1.16.13] - 2026-09-30

Bug Fixes

• (swc_config) Show why an options object failed to deserialize (#12441) (e92460a)

Performance

• (node) Optimize macOS native addon first load (#12436) (0b151bf)

Testing

• (es/ast) Add missing ctxt field to jsx_element serde test (#12439) (7dc1796)

[1.16.12] - 2026-09-29

Bug Fixes

• (binding/node) Return an error when a file cannot be read instead of panicking (#12379) (d342acd)

• (bindings) Detect macOS ACLs with supported APIs (#12391) (a73ea68)

• (es) Decode template raw values when cooked is missing (#12347) (7898152)

• (es/codegen) Minify unicode escapes in template literals (#12284) (76ef91c)

• (es/codegen) Separate generic type assertion openers (#12340) (8948dac)

• (es/compat) Preserve array rest when lowering nested object rest (#12352) (9348083)

• (es/lexer) Stop iteration when input is exhausted (#12388) (c392686)

• (es/minifier) Check eval and arguments usage in var define scope (#12174) (5d1aa16)

... (truncated)

Commits

• 1391a34 chore: Publish 1.16.13 with swc_core v81.0.2
• a006b7f chore: Publish 1.16.13-nightly-20260930.1 with swc_core v81.0.2
• 1b2c264 chore: Publish 1.16.12 with swc_core v81.0.1
• 5a1b45a chore: Publish 1.16.12-nightly-20260929.1 with swc_core v81.0.1
• 75a5566 chore: Publish 1.16.11-nightly-20260928.1 with swc_core v81.0.0
• 4c771b8 chore: Publish 1.16.10-nightly-20260928.1 with swc_core v81.0.0
• 2b292c8 fix(node): Repair native release verification and cache handling (#12415)
• 0c5c602 chore: Publish 1.16.9-nightly-20260923.1 with swc_core v80.0.1
• f6561b8 chore: Publish 1.16.8-nightly-20260918.1 with swc_core v80.0.0
• eea8cf9 chore: Publish 1.16.8-nightly-20260917.1 with swc_core v80.0.0
• Additional commits viewable in compare view

Updates @swc/helpers from 0.5.17 to 0.5.23

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​swc/helpers since your current version.

Updates @testing-library/user-event from 14.6.1 to 14.6.7

Release notes

Sourced from @​testing-library/user-event's releases.

v14.6.7

14.6.7 (2026-09-02)

Bug Fixes

• normalize DataTransfer format aliases (#1326) (1e0020b)
• feature: Add iframe support for user.keyboard typing (#1275) (1e0020b)

v14.6.6

14.6.6 (2026-08-22)

Bug Fixes

• default pointer event pointerType to empty string instead of the string "undefined" (#1325) (71a5475)

v14.6.5

14.6.5 (2026-08-18)

Bug Fixes

• tab retargeting if focus moved during keydown (#1296) (43efda7)

v14.6.4

14.6.4 (2026-08-11)

Bug Fixes

• keyboard event repeat property (#1312) (d7e80e3)

v14.6.3

14.6.3 (2026-08-03)

Bug Fixes

• release: manually release a patch version (#1321) (1d18b1f), closes #1317

v14.6.2

14.6.2 (2026-08-03)

Commits

• 1e0020b fix: normalize DataTransfer format aliases (#1326)
• d4b0593 feature: Add iframe support for user.keyboard typing (#1275)
• 71a5475 fix: default pointer event pointerType to empty string instead of the string ...
• 43efda7 fix: tab retargeting if focus moved during keydown (#1296)
• d7e80e3 fix: keyboard event repeat property (#1312)
• 43d8e6c ci: remove broken npm backfill step (#1322)
• 1d18b1f fix(release): manually release a patch version (#1321)
• 232f3e6 docs: add migration note and clean up README badges (#1320)
• 83e2b22 ci: remove deprecated CodeSandbox CI (#1318)
• e8da819 ci: publish to npm via OIDC trusted publishing (#1317)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/user-event since your current version.

Updates @types/lodash from 4.17.21 to 4.17.26

Commits

• See full diff in compare view

Updates sass from 1.63.2 to 1.105.1

Release notes

Sourced from sass's releases.

Dart Sass 1.105.1

To install Sass 1.105.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Improve error messages for @extends across different media queries.

See the full changelog for changes in earlier releases.

Dart Sass 1.105.0

To install Sass 1.105.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

• Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

• Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

• Add a SassModule class and a corresponding Value.assertModule() method.

See the full changelog for changes in earlier releases.

Dart Sass 1.104.1

To install Sass 1.104.1, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

• Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

• Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

• Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

... (truncated)

Changelog

Sourced from sass's changelog.

1.105.1

• Improve error messages for @extends across different media queries.

1.105.0

• Add support for first-class modules. These can be accessed using the new meta.load() and meta.get-module() functions, and may be passed as the $module argument to numerous eisting sass:meta functions.

• Add the meta.css() mixin, which includes CSS from a first-class module.

JS API

• Add a SassModule class and a corresponding Value.assertModule() method.

Dart API

• Add a SassModule class and a corresponding Value.assertModule() method.

1.104.1

• Fix a bug where loud comments before @use rules could be emitted multiple times under certain circumstances.

• Fix a bug in which an invalid selector at the end of an indented syntax stylesheet would cause the parser to crash instead of emitting a useful error message.

Command Line Interface

• Many-to-many compilations no longer compile any files that appear in the output directory if the output directory is also within the source directory. This fixes a bug where --watch mode could enter an infinite loop recompiling the same CSS file over and over.

• Sass now sets the modification time of output files to the time compilation started rather than the time it ended. This ensures that, if a source file is modified during compilation, --watch and --update mode will recompile the outputs to include the new source file contents.

1.104.0

• Potentially breaking compatibility fix: Colors now convert the special values NaN and negative zero, as well as infinity and negative infinity for polar-hue channels, to 0 as per the CSS spec.

• The special value negative zero is now serialized as -0 instead of 0 for greater compatibility when using it in CSS calculations.

... (truncated)

Commits

• db3c666 Merge pull request #2869 from sass/extend-media-errors
• 2ac4515 Improve span boundaries for media queries and selectors
• 706cfbf Fix InterpolationMap._expandInterpolationSpanRight()
• 792a948 Bump bufbuild/buf-action from 1.5.0 to 1.6.0 in /.github/util/initialize (#2870)
• 61ab702 Improve errors for @extend across media queries
• 288d4e2 Auto-merge dependabot PRs as the Sass bot account (#2866)
• 4bf2b92 Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 (#2865)
• 850d57e [meta.load] Add support for meta.load() and related features (#2861)
• 6180be0 Bump postcss from 8.5.26 to 8.5.28 in /pkg/sass-parser (#2863)
• da84fb5 Fix --watch not recompiling sources modified during a compilation (#2850)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sass since your current version.

Updates storybook from 8.6.18 to 8.6.19

Release notes

Sourced from storybook's releases.

v8.6.19

8.6.19

• Highlight: Prevent menu items from emitting arbitrary channel events
• Channels: Restrict preview postMessage to known manager origins
• Core: Separate manager and preview roles on the dev server channel
• Core: Block iframe embedding of the dev server from non-localhost origins
• Core: Reject component search queries outside the project
• Core: Validate component export name when creating a story
• Core: Add host validation warning and origin validation for MCP
• Core: Contain save story path to the project root
• Core: Validate save story name and arg keys as identifiers
• Addon Vitest: Disable browser file writes and command execution

Changelog

Sourced from storybook's changelog.

8.6.19

• Highlight: Prevent menu items from emitting arbitrary channel events
• Channels: Restrict preview postMessage to known manager origins
• Core: Separate manager and preview roles on the dev server channel
• Core: Block iframe embedding of the dev server from non-localhost origins
• Core: Reject component search queries outside the project
• Core: Validate component export name when creating a story
• Core: Add host validation warning and origin validation for MCP
• Core: Contain save story path to the project root
• Core: Validate save story name and arg keys as identifiers
• Addon Vitest: Disable browser file writes and command execution

Commits

• 117b95a Bump version from "8.6.18" to "8.6.19" [skip ci]
• 7b4f138 Core: Escape the component file name in generated story imports
• 7b62dcb Core: Check the origin of channel messages from registered preview iframes
• bc26ffa Patch v8
• See full diff in compare view

Updates swc-loader from 0.2.6 to 0.2.7

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for swc-loader since your current version.

Updates webpack from 5.108.4 to 5.111.1

Release notes

Sourced from webpack's releases.

v5.111.1

Patch Changes

• Throw on a write to an imported binding without losing concatenation. (by @​alexander-akait in #22141)

• Keep the </html> a page was written with, whatever opened the element. (by @​aryanraj45 in #22103)

• Look an attribute up by what its value decodes to, not how it was spelled. (by @​aryanraj45 in #22107)

• Minify HTML by what a value says rather than how it was spelled. (by @​alexander-akait in #22154)

• Follow HTML template form and frameset rules during tree construction. (by @​dependabot in #22129)

• Keep the whitespace calc() needs around + and - in a custom property. (by @​alexander-akait in #22150)

• Keep an attribute's delimiter and spell its value back where quoting is frozen. (by @​alexander-akait in #22119)

• Rewrite an attribute value the source spelled with character references. (by @​aryanraj45 in #22110)

• Unquote an HTML attribute value carrying a vertical tab. (by @​alexander-akait in #22162)

• Keep...

  Description has been truncated

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-13T15:15:58.834872Z	501be1a	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 501be1a092

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Raise the advertised Node minimum for Sass

For Node 20.0–20.18 installations—which the package's engines.node value still declares supported—the newly pinned Sass 1.105.1 and its Chokidar dependency require Node >=20.19.0, as recorded in package-lock.json. Consequently, installs with engine-strict enabled fail, while other installs run the build toolchain on an unsupported runtime; either retain a compatible Sass version or raise the project's Node minimum to >=20.19.0.

Useful? React with 👍 / 👎.