chore(deps): bump the storybook group across 1 directory with 8 updates#2404
Merged
Merged
Conversation
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![mergify[bot]](https://avatars.githubusercontent.com/in/10562?s=60&v=4){kind=small}
Bumps the storybook group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.4.1` | `10.4.2` | | [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.4.1` | `10.4.2` | | [@storybook/addon-links](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/links) | `10.4.1` | `10.4.2` | | [@storybook/addon-themes](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/themes) | `10.4.1` | `10.4.2` | | [@storybook/nextjs](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/nextjs) | `10.4.1` | `10.4.2` | | [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.4.1` | `10.4.2` | | [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `10.4.1` | `10.4.2` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.4.1` | `10.4.2` | Updates `@storybook/addon-a11y` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/a11y) Updates `@storybook/addon-docs` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/docs) Updates `@storybook/addon-links` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/links) Updates `@storybook/addon-themes` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/addons/themes) Updates `@storybook/nextjs` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/frameworks/nextjs) Updates `@storybook/react-vite` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/frameworks/react-vite) Updates `eslint-plugin-storybook` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/lib/eslint-plugin) Updates `storybook` from 10.4.1 to 10.4.2 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.4.2/code/core) --- updated-dependencies: - dependency-name: "@storybook/addon-a11y" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/addon-docs" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/addon-links" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/addon-themes" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/nextjs" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: "@storybook/react-vite" dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: eslint-plugin-storybook dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook - dependency-name: storybook dependency-version: 10.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: storybook ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/storybook-a0e10762e8
branch
from
cd1bbd8 to
a509245
Compare
- Added necessary permissions for the id-token to support the Claude Code Action's GitHub App token. - Replaced the OpenCode action with the Claude Code Action for improved reliability in posting dependency upgrade reviews. - Enhanced the review prompt and allowed tools for better reporting and clarity during the review process. These changes improve the functionality and maintainability of the dependency review workflow.
- Removed several allowed tools from the Dependabot workflow to streamline the review process. - This change enhances the clarity and focus of the workflow, ensuring only essential tools are permitted for use during dependency reviews.
- Added an ID for the Claude Code Action step to facilitate token handling. - Updated the label removal step to utilize the Claude Code Action's GitHub App token, ensuring proper permissions for Dependabot PRs. - Improved comments for clarity regarding the workflow's functionality and token usage. These changes enhance the reliability and maintainability of the dependency review process.
adriangohjw
added
review-dependency-upgrade
and removed
review-dependency-upgrade
labels
Contributor
|
@claude /review-dependency-upgrade |
|
Claude finished @adriangohjw's task in 34s —— View job 🤖 Dependency upgrade reviewstorybook group (8 packages):
|
| Version | Change | Type | Impact | Where in codebase | Note |
|---|---|---|---|---|---|
| v10.4.2 | Fix Windows command resolution for non-Node package managers (#33534) | Bug fix | Safe | — | Dev-only tooling fix |
| v10.4.2 | Upgrade type-fest to 5.6.0 (#34791) |
Internal build dep | Safe | — | Transitive type-only dep, not in your direct deps |
| v10.4.2 | Fix CSF parsing of string-literal export names (#34901) | Bug fix | Safe | — | Stricter/correct parsing; only relevant if you export stories with string-literal names |
| v10.4.2 | Add npm provenance attestations (#34936) | Publish metadata | Safe | — | Supply-chain hardening only |
No documented breaking changes between 10.4.1 and 10.4.2. No API, config-key, or import-path removals/renames to grep for. Safe to merge.
Note on the bundled workflow change
This PR also modifies .github/workflows/code_review_dependabot.yml (+28/−14), swapping OpenCode for anthropics/claude-code-action — this is not part of the Dependabot bump and is outside the scope of a dependency-upgrade review. Flagging it here only so it isn't conflated with the storybook bump; it should be reviewed on its own merits.
· branch dependabot/npm_and_yarn/storybook-a0e10762e8
- Removed the manual label handling for 'review-dependency-upgrade' to streamline the workflow. - Adjusted permissions to only allow reading issues, enhancing security. - Updated job conditions to focus solely on Dependabot PRs, improving clarity and efficiency. These changes enhance the maintainability and simplicity of the dependency review process.
- Modified the Claude workflow to remove unnecessary allowed tools, streamlining the process. - Enhanced the Dependabot workflow by updating the pull request event types to include 'synchronize'. - Adjusted permissions to ensure Claude can read CI results on PRs, improving integration and feedback. These changes enhance the clarity and efficiency of the workflows, ensuring better collaboration and maintainability.
- Changed the name of the Claude workflow to include a robot emoji for better visual identification. - Simplified the Dependabot workflow by limiting the pull request event types to only 'opened', enhancing focus on new PRs. These updates improve the clarity and user experience of the workflows.
adriangohjw
approved these changes
Jun 9, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the storybook group with 8 updates in the / directory:
10.4.110.4.210.4.110.4.210.4.110.4.210.4.110.4.210.4.110.4.210.4.110.4.210.4.110.4.210.4.110.4.2Updates
@storybook/addon-a11yfrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/addon-a11y's releases.
Changelog
Sourced from @storybook/addon-a11y's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
@storybook/addon-docsfrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/addon-docs's releases.
Changelog
Sourced from @storybook/addon-docs's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
@storybook/addon-linksfrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/addon-links's releases.
Changelog
Sourced from @storybook/addon-links's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
@storybook/addon-themesfrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/addon-themes's releases.
Changelog
Sourced from @storybook/addon-themes's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
@storybook/nextjsfrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/nextjs's releases.
Changelog
Sourced from @storybook/nextjs's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
@storybook/react-vitefrom 10.4.1 to 10.4.2Release notes
Sourced from @storybook/react-vite's releases.
Changelog
Sourced from @storybook/react-vite's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
eslint-plugin-storybookfrom 10.4.1 to 10.4.2Release notes
Sourced from eslint-plugin-storybook's releases.
Changelog
Sourced from eslint-plugin-storybook's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]Updates
storybookfrom 10.4.1 to 10.4.2Release notes
Sourced from storybook's releases.
Changelog
Sourced from storybook's changelog.
Commits
298dea2Bump version from "10.4.1" to "10.4.2" [skip ci]40c81c8Merge pull request #33534 from storybookjs/copilot/fix-pnpm-command-resolutio...bfb942bMerge pull request #34901 from storybookjs/shilman/fix-csf-export-as-string-l...fad8dd2Merge pull request #34791 from tobiasdiez/type-fest-upgrade