Skip to content

Builder-Vite: Update dependencies react-vite framework#33810

Merged
valentinpalkovic merged 2 commits into
nextfrom
valentin/fix-sec-issue
Feb 11, 2026
Merged

Builder-Vite: Update dependencies react-vite framework#33810
valentinpalkovic merged 2 commits into
nextfrom
valentin/fix-sec-issue

Conversation

@valentinpalkovic
Copy link
Copy Markdown
Contributor

@valentinpalkovic valentinpalkovic commented Feb 9, 2026

Closes #33767

What I did

Checklist for Contributors

Testing

The changes in this PR are covered in the following automated tests:

  • stories
  • unit tests
  • integration tests
  • end-to-end tests

Manual testing

Caution

This section is mandatory for all contributions. If you believe no manual test is necessary, please state so explicitly. Thanks!

Documentation

  • Add or update documentation reflecting your changes
  • If you are deprecating/removing a feature, make sure to update
    MIGRATION.MD

Checklist for Maintainers

  • When this PR is ready for testing, make sure to add ci:normal, ci:merged or ci:daily GH label to it to run a specific set of sandboxes. The particular set of sandboxes can be found in code/lib/cli-storybook/src/sandbox-templates.ts

  • Make sure this PR contains one of the labels below:

    Available labels
    • bug: Internal changes that fixes incorrect behavior.
    • maintenance: User-facing maintenance tasks.
    • dependencies: Upgrading (sometimes downgrading) dependencies.
    • build: Internal-facing build tooling & test updates. Will not show up in release changelog.
    • cleanup: Minor cleanup style change. Will not show up in release changelog.
    • documentation: Documentation only changes. Will not show up in release changelog.
    • feature request: Introducing a new feature.
    • BREAKING CHANGE: Changes that break compatibility in some way with current major version.
    • other: Changes that don't fit in the above categories.

🦋 Canary release

This PR does not have a canary release associated. You can request a canary release of this pull request by mentioning the @storybookjs/core team here.

core team members can create a canary release here or locally with gh workflow run --repo storybookjs/storybook publish.yml --field pr=<PR_NUMBER>

Summary by CodeRabbit

  • Chores
    • Updated build tooling dependency to latest patch version.

@valentinpalkovic valentinpalkovic self-assigned this Feb 9, 2026
@valentinpalkovic valentinpalkovic added bug ci:normal security maintenance User-facing maintenance tasks and removed bug labels Feb 9, 2026
@nx-cloud
Copy link
Copy Markdown

nx-cloud Bot commented Feb 9, 2026

View your CI Pipeline Execution ↗ for commit a755ba6

Command Status Duration Result
nx run-many -t compile,check,knip,test,pretty-d... ✅ Succeeded 5m 48s View ↗

☁️ Nx Cloud last updated this comment at 2026-02-11 11:58:59 UTC

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Feb 9, 2026

Fails
🚫 The "#### Manual testing" section must be filled in. Please describe how to test the changes you've made, step by step, so that reviewers can confirm your PR works as intended.

Generated by 🚫 dangerJS against a755ba6

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Feb 9, 2026

📝 Walkthrough

Walkthrough

Updated the @joshwooding/vite-plugin-react-docgen-typescript dependency from version ^0.6.3 to ^0.6.4 in the React Vite framework package configuration.

Changes

Cohort / File(s) Summary
Dependency Update
code/frameworks/react-vite/package.json
Bumped @joshwooding/vite-plugin-react-docgen-typescript from ^0.6.3 to ^0.6.4.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs


No actionable comments were generated in the recent review. 🎉


Comment @coderabbitai help to get the list of available commands and usage tips.

@valentinpalkovic valentinpalkovic added the patch:yes Bugfix & documentation PR that need to be picked to main branch label Feb 11, 2026
@valentinpalkovic valentinpalkovic merged commit dd088b3 into next Feb 11, 2026
120 of 123 checks passed
@valentinpalkovic valentinpalkovic deleted the valentin/fix-sec-issue branch February 11, 2026 11:51
valentinpalkovic added a commit that referenced this pull request Feb 17, 2026
Builder-Vite: Update dependencies react-vite framework
(cherry picked from commit dd088b3)
@github-actions github-actions Bot added the patch:done Patch/release PRs already cherry-picked to main/release branch label Feb 17, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:normal maintenance User-facing maintenance tasks patch:done Patch/release PRs already cherry-picked to main/release branch patch:yes Bugfix & documentation PR that need to be picked to main branch security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Critical severity vulnerability in @storybook/react-vite

1 participant