Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jul 1, 2025

Bumps esbuild to 0.25.5 and updates ancestor dependencies esbuild, vitest, @storybook/addon-essentials, @storybook/blocks, @storybook/react, @storybook/react-vite, storybook and vite. These dependencies need to be updated together.

Updates esbuild from 0.18.20 to 0.25.5

Release notes

Sourced from esbuild's releases.

v0.25.5

  • Fix a regression with browser in package.json (#4187)

    The fix to #4144 in version 0.25.3 introduced a regression that caused browser overrides specified in package.json to fail to override relative path names that end in a trailing slash. That behavior change affected the [email protected] package. This regression has been fixed, and now has test coverage.

  • Add support for certain keywords as TypeScript tuple labels (#4192)

    Previously esbuild could incorrectly fail to parse certain keywords as TypeScript tuple labels that are parsed by the official TypeScript compiler if they were followed by a ? modifier. These labels included function, import, infer, new, readonly, and typeof. With this release, these keywords will now be parsed correctly. Here's an example of some affected code:

    type Foo = [
      value: any,
      readonly?: boolean, // This is now parsed correctly
    ]
  • Add CSS prefixes for the stretch sizing value (#4184)

    This release adds support for prefixing CSS declarations such as div { width: stretch }. That CSS is now transformed into this depending on what the --target= setting includes:

    div {
      width: -webkit-fill-available;
      width: -moz-available;
      width: stretch;
    }

v0.25.4

  • Add simple support for CORS to esbuild's development server (#4125)

    Starting with version 0.25.0, esbuild's development server is no longer configured to serve cross-origin requests. This was a deliberate change to prevent any website you visit from accessing your running esbuild development server. However, this change prevented (by design) certain use cases such as "debugging in production" by having your production website load code from localhost where the esbuild development server is running.

    To enable this use case, esbuild is adding a feature to allow Cross-Origin Resource Sharing (a.k.a. CORS) for simple requests. Specifically, passing your origin to the new cors option will now set the Access-Control-Allow-Origin response header when the request has a matching Origin header. Note that this currently only works for requests that don't send a preflight OPTIONS request, as esbuild's development server doesn't currently support OPTIONS requests.

    Some examples:

    • CLI:

      esbuild --servedir=. --cors-origin=https://example.com
      
    • JS:

      const ctx = await esbuild.context({})
      await ctx.serve({
        servedir: '.',
        cors: {

... (truncated)

Changelog

Sourced from esbuild's changelog.

Changelog: 2023

This changelog documents all esbuild versions published in the year 2023 (versions 0.16.13 through 0.19.11).

0.19.11

  • Fix TypeScript-specific class transform edge case (#3559)

    The previous release introduced an optimization that avoided transforming super() in the class constructor for TypeScript code compiled with useDefineForClassFields set to false if all class instance fields have no initializers. The rationale was that in this case, all class instance fields are omitted in the output so no changes to the constructor are needed. However, if all of this is the case and there are #private instance fields with initializers, those private instance field initializers were still being moved into the constructor. This was problematic because they were being inserted before the call to super() (since super() is now no longer transformed in that case). This release introduces an additional optimization that avoids moving the private instance field initializers into the constructor in this edge case, which generates smaller code, matches the TypeScript compiler's output more closely, and avoids this bug:

    // Original code
    class Foo extends Bar {
      #private = 1;
      public: any;
      constructor() {
        super();
      }
    }
    // Old output (with esbuild v0.19.9)
    class Foo extends Bar {
    constructor() {
    super();
    this.#private = 1;
    }
    #private;
    }
    // Old output (with esbuild v0.19.10)
    class Foo extends Bar {
    constructor() {
    this.#private = 1;
    super();
    }
    #private;
    }
    // New output
    class Foo extends Bar {
    #private = 1;
    constructor() {
    super();
    }
    }

  • Minifier: allow reording a primitive past a side-effect (#3568)

    The minifier previously allowed reordering a side-effect past a primitive, but didn't handle the case of reordering a primitive past a side-effect. This additional case is now handled:

... (truncated)

Commits

Updates vitest from 0.34.6 to 3.2.4

Release notes

Sourced from vitest's releases.

v3.2.4

   🐞 Bug Fixes

    View changes on GitHub

v3.2.3

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub

v3.2.2

... (truncated)

Commits
  • c666d14 chore: release v3.2.4
  • 8a18c8e fix(cli): throw error when --shard x/\<count> exceeds count of test files (#...
  • 8abd7cc chore(deps): update tinypool (#8174)
  • 93f3200 fix(deps): update all non-major dependencies (#8123)
  • 0c3be6f fix(coverage): ignore SCSS in browser mode (#8161)
  • 790bc31 chore: update deprecation notice for globs (#8148)
  • c0eae7d chore: update deprecated workspace file log (#8118)
  • 14dc072 fix(pool): auto-adjust minWorkers when only maxWorkers specified (#8110)
  • 85dc019 fix(cli): use absolute path environment on Windows (#8105)
  • 27df68a fix(reporter): task.meta should be available in custom reporter's errors (#...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by vitestbot, a new releaser for vitest since your current version.


Updates @storybook/addon-essentials from 7.6.7 to 8.6.14

Release notes

Sourced from @​storybook/addon-essentials's releases.

v8.6.14

8.6.14

v8.6.13

8.6.13

v8.6.12

8.6.12

v8.6.11

8.6.11

v8.6.10

8.6.10

v8.6.9

8.6.9

v8.6.8

8.6.8

... (truncated)

Changelog

Sourced from @​storybook/addon-essentials's changelog.

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

8.6.7

8.6.6

  • Angular: Make sure that polyfills are loaded before the storybook is loaded - #30811, thanks @​kasperpeulen!

... (truncated)

Commits
  • ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
  • 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
  • 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • 019cd1f Bump version from "8.6.6" to "8.6.7" [skip ci]
  • 9a7a795 Bump version from "8.6.5" to "8.6.6" [skip ci]
  • 4e23d75 Bump version from "8.6.4" to "8.6.5" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for @​storybook/addon-essentials since your current version.


Updates @storybook/blocks from 7.6.7 to 8.6.14

Release notes

Sourced from @​storybook/blocks's releases.

v8.6.14

8.6.14

v8.6.13

8.6.13

v8.6.12

8.6.12

v8.6.11

8.6.11

v8.6.10

8.6.10

v8.6.9

8.6.9

v8.6.8

8.6.8

... (truncated)

Changelog

Sourced from @​storybook/blocks's changelog.

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

8.6.7

8.6.6

  • Angular: Make sure that polyfills are loaded before the storybook is loaded - #30811, thanks @​kasperpeulen!

... (truncated)

Commits
  • ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
  • 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
  • f1838f9 Merge pull request #27193 from H0onnn/fix/#27187
  • 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 549b913 Merge pull request #30913 from JamesIves/next
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • 019cd1f Bump version from "8.6.6" to "8.6.7" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by storybook-bot, a new releaser for @​storybook/blocks since your current version.


Updates @storybook/react from 7.6.7 to 9.0.15

Release notes

Sourced from @​storybook/react's releases.

v9.0.15

9.0.15

  • CLI: Do not fail incompatible package check in doctor if only core packages used - #31886, thanks @​mrginglymus!
  • React: Bump @​joshwooding/vite-plugin-react-docgen-typescript to 0.6.1 - #31899, thanks @​mrginglymus!

v9.0.14

9.0.14

v9.0.13

9.0.13

v9.0.12

9.0.12

v9.0.11

9.0.11

v9.0.10

9.0.10

v9.0.9

... (truncated)

Changelog

Sourced from @​storybook/react's changelog.

9.0.15

  • CLI: Do not fail incompatible package check in doctor if only core packages used - #31886, thanks @​mrginglymus!
  • React: Bump @​joshwooding/vite-plugin-react-docgen-typescript to 0.6.1 - #31899, thanks @​mrginglymus!

9.0.14

9.0.13

9.0.12

9.0.11

9.0.10

9.0.9

  • Angular: Update MiniCssExtractPlugin configuration for cache busting - #31752, thanks @​valentinpalkovic!
  • CSF: Story ComponentAnnotations['subcomponents'] to correctly use its own type for subcomponents rather than attempt to inherit from the component - #31723, thanks @​mihkeleidast!
  • Core: Delete shim addon packages - #31728, thanks @​ndelangen!
  • Core: Disable interactions debugger on composed stories to avoid cross-origin error - #31685, thanks @​ghengeveld!
  • Core: Fix cyclical dependency in core addons - #31750, thanks @​JReinhold!

... (truncated)

Commits
  • d6367d8 Bump version from "9.0.14" to "9.0.15" [skip ci]
  • 677da03 Bump version from "9.0.13" to "9.0.14" [skip ci]
  • caef66a Bump version from "9.0.12" to "9.0.13" [skip ci]
  • 2dc8551 Bump version from "9.0.11" to "9.0.12" [skip ci]
  • a834932 Merge pull request #31715 from storybookjs/valentin/support-vitest-3-2
  • f7e49a4 Bump version from "9.0.10" to "9.0.11" [skip ci]
  • 3b5ba4c Bump version from "9.0.9" to "9.0.10" [skip ci]
  • c5946aa Bump version from "9.0.8" to "9.0.9"...

    Description has been truncated

    Note
    Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

… @storybook/react, @storybook/react-vite, storybook and vite

Bumps [esbuild](https://github.com/evanw/esbuild) to 0.25.5 and updates ancestor dependencies [esbuild](https://github.com/evanw/esbuild), [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest), [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials), [@storybook/blocks](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/blocks), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react), [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite), [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). These dependencies need to be updated together.


Updates `esbuild` from 0.18.20 to 0.25.5
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2023.md)
- [Commits](evanw/esbuild@v0.18.20...v0.25.5)

Updates `vitest` from 0.34.6 to 3.2.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.4/packages/vitest)

Updates `@storybook/addon-essentials` from 7.6.7 to 8.6.14
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/addons/essentials)

Updates `@storybook/blocks` from 7.6.7 to 8.6.14
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/lib/blocks)

Updates `@storybook/react` from 7.6.7 to 9.0.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.0.15/code/renderers/react)

Updates `@storybook/react-vite` from 7.6.7 to 9.0.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.0.15/code/frameworks/react-vite)

Updates `storybook` from 7.6.7 to 9.0.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.0.15/code/core)

Updates `vite` from 4.4.12 to 7.0.0
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/[email protected]/packages/vite)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.25.5
  dependency-type: indirect
- dependency-name: vitest
  dependency-version: 3.2.4
  dependency-type: direct:development
- dependency-name: "@storybook/addon-essentials"
  dependency-version: 8.6.14
  dependency-type: direct:development
- dependency-name: "@storybook/blocks"
  dependency-version: 8.6.14
  dependency-type: direct:development
- dependency-name: "@storybook/react"
  dependency-version: 9.0.15
  dependency-type: direct:development
- dependency-name: "@storybook/react-vite"
  dependency-version: 9.0.15
  dependency-type: direct:development
- dependency-name: storybook
  dependency-version: 9.0.15
  dependency-type: direct:development
- dependency-name: vite
  dependency-version: 7.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner July 1, 2025 12:15
@dependabot dependabot bot added dependencies Changes in npm packages javascript Pull requests that update javascript code labels Jul 1, 2025
@dependabot dependabot bot requested review from ignasveleckisnc and pete-nc July 1, 2025 12:15
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jul 1, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes in npm packages javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants