Bump the development-dependencies group across 1 directory with 16 updates

[dependabot]

Bumps the development-dependencies group with 15 updates in the / directory:

Package	From	To
@eslint/css	1.3.0	1.4.0
@tailwindcss/vite	4.3.1	4.3.3
@testing-library/jest-dom	6.9.1	7.0.0
@types/node	26.0.1	26.1.1
@vitejs/plugin-react-swc	4.3.1	4.3.2
concurrently	10.0.3	10.0.4
eslint	10.5.0	10.8.0
eslint-plugin-perfectionist	5.9.1	5.10.0
eslint-plugin-storybook	10.4.6	10.5.4
prettier	3.8.4	3.9.6
prettier-plugin-tailwindcss	0.8.0	0.8.1
typescript	6.0.3	7.0.2
typescript-eslint	8.62.0	8.65.0
vite	8.1.0	8.1.5
vitest	4.1.9	4.1.10

Updates @eslint/css from 1.3.0 to 1.4.0

Release notes

Sourced from @​eslint/css's releases.

css: v1.4.0

1.4.0 (2026-07-01)

Features

• add suggestions to prefer-logical-properties (#474) (045277e)

Bug Fixes

• check for preludes in [@import](https://github.com/import) (#470) (cc8791d)
• false negative when font used as identifier (#471) (f248a32)
• reporting font-size unit with percentage in line-height (#466) (bae9097)
• type compatibility issue between CSS v1 and ESLint v9 (#473) (3cb31a5)
• update baseline data (6726b1f)
• update baseline data (#469) (99ba37f)
• update baseline data (#475) (7dbbb9d)
• update baseline data (#482) (cd52c73)
• update dependency @​eslint/plugin-kit to ^0.7.2 (#463) (1678418)

Changelog

Sourced from @​eslint/css's changelog.

1.4.0 (2026-07-01)

Features

• add suggestions to prefer-logical-properties (#474) (045277e)

Bug Fixes

• check for preludes in [@import](https://github.com/import) (#470) (cc8791d)
• false negative when font used as identifier (#471) (f248a32)
• reporting font-size unit with percentage in line-height (#466) (bae9097)
• type compatibility issue between CSS v1 and ESLint v9 (#473) (3cb31a5)
• update baseline data (6726b1f)
• update baseline data (#469) (99ba37f)
• update baseline data (#475) (7dbbb9d)
• update baseline data (#482) (cd52c73)
• update dependency @​eslint/plugin-kit to ^0.7.2 (#463) (1678418)

Commits

• 8d7c2c5 chore: release 1.4.0 🚀 (#464)
• ae64337 docs: Update README sponsors
• cd52c73 fix: update baseline data (#482)
• 8ada2bb refactor: simplify prefer-logical-properties lookups (#480)
• 045277e feat: add suggestions to prefer-logical-properties (#474)
• bfea565 docs: Update README sponsors
• 3cb31a5 fix: type compatibility issue between CSS v1 and ESLint v9 (#473)
• 7dbbb9d fix: update baseline data (#475)
• 4a7a957 docs: Update README sponsors
• 16bc4e0 chore: update non-major dev-dependencies to v3.8.4 (#472)
• Additional commits viewable in compare view

Updates @tailwindcss/vite from 4.3.1 to 4.3.3

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.3

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.3] - 2026-07-16

Fixed

• Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
• Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
• Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
• Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
• Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
• Parse selectors like [data-foo]div as two selectors instead of one (#20303)
• Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
• Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
• Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
• Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
• Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
• Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
• Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
• Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
• Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Commits

• c2b24dd 4.3.3 (#20334)
• bdcd708 Don't trigger a full page reload for scanned files that Vite processes as mod...
• 056a155 4.3.2 (#20281)
• bb6a109 use .ts instead of .css
• See full diff in compare view

Updates @testing-library/jest-dom from 6.9.1 to 7.0.0

Release notes

Sourced from @​testing-library/jest-dom's releases.

v7.0.0

7.0.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (1e39089)

BREAKING CHANGES

• @​testing-library/dom is now a required peer dependency. The minimum supported Node.js version is now 22.

Repaired release for testing-library/jest-dom#731

v6.10.0

6.10.0 (2026-07-20)

Features

• add toContainAnyBy* and toContainOneBy* query matchers (#731) (cae44df)

Commits

• 1e39089 feat: add toContainAnyBy* and toContainOneBy* query matchers
• cae44df feat: add toContainAnyBy* and toContainOneBy* query matchers (#731)
• 55c07ce ci: switch release to npm trusted publishing (#726)
• 213256f docs: move toHaveSelection from the deprecated section (#717)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​testing-library/jest-dom since your current version.

Updates @types/node from 26.0.1 to 26.1.1

Commits

• See full diff in compare view

Updates @vitejs/plugin-react-swc from 4.3.1 to 4.3.2

Release notes

Sourced from @​vitejs/plugin-react-swc's releases.

plugin-react-swc@4.3.2

Don't apply React Refresh wrapper for non JSX files #1226

Fixes #1225.

Changelog

Sourced from @​vitejs/plugin-react-swc's changelog.

4.3.2 (2026-07-22)

Don't apply React Refresh wrapper for non JSX files #1226

Fixes #1225.

Commits

• See full diff in compare view

Updates concurrently from 10.0.3 to 10.0.4

Release notes

Sourced from concurrently's releases.

v10.0.4

What's Changed

• deps: upgrade shell-quote to 1.9.0 by @​Mayvis in open-cli-tools/concurrently#599
• fix: avoid kill timeout exit delays by @​rajanpanth in open-cli-tools/concurrently#601

New Contributors

• @​Mayvis made their first contribution in open-cli-tools/concurrently#599
• @​rajanpanth made their first contribution in open-cli-tools/concurrently#601

Full Changelog: open-cli-tools/concurrently@v10.0.3...v10.0.4

Commits

• 2524b65 10.0.4
• 1080199 fix: avoid kill timeout exit delays (#601)
• e668211 ci: publish to latest only on npm
• 163b60f chore: sync @​types/node with current min version
• bcde2f5 chore: remove @​types/shell-quote
• 49f7eb4 deps: upgrade shell-quote to 1.9.0 (#599)
• See full diff in compare view

Updates eslint from 10.5.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

... (truncated)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates eslint-plugin-perfectionist from 5.9.1 to 5.10.0

Release notes

Sourced from eslint-plugin-perfectionist's releases.

v5.10.0

   🚀 Features

• sort-intersection-types: Add ignore callable types option  -  by @​hugop95 (967da)

   🐞 Bug Fixes

• Stop treating multiline trailing block comments as leading comments  -  by @​azat-io (5c66d)
• Detect dependencies in iifes, auto-accessors and computed enum access  -  by @​azat-io (119ba)
• sort-arrays: Require options to be provided  -  by @​hugop95 (5417c)
• sort-modules: Allow sorting of decorated exported classes  -  by @​hugop95 (05cc7)
• sort-switch-case: Skip condition-shaped switch statements  -  by @​azat-io (2bea3)

    View changes on GitHub

Changelog

Sourced from eslint-plugin-perfectionist's changelog.

v5.10.0

compare changes

🚀 Features

• sort-intersection-types: Add ignore callable types option (967da574)

🐞 Bug Fixes

• sort-modules: Allow sorting of decorated exported classes (05cc7218)
• sort-arrays: Require options to be provided (5417cb5a)
• Stop treating multiline trailing block comments as leading comments (5c66d19d)
• sort-switch-case: Skip condition-shaped switch statements (2bea3292)
• Detect dependencies in iifes, auto-accessors and computed enum access (119bafe6)

❤️ Contributors

• Azat S. (@​azat-io)
• Hugo (@​hugop95)

Commits

• 84aa039 build: publish v5.10.0
• 2b5649a chore: update github actions
• 111fe80 chore: update dependencies
• 3db7a68 ci: update pnpm to v11
• f26bdfd ci: update nodejs to v26
• 119bafe fix: detect dependencies in iifes, auto-accessors and computed enum access
• 2bea329 fix(sort-switch-case): skip condition-shaped switch statements
• 5c66d19 fix: stop treating multiline trailing block comments as leading comments
• 303ce43 docs(sort-intersection-types): add banner about callable and named types
• 967da57 feat(sort-intersection-types): add ignore callable types option
• Additional commits viewable in compare view

Updates eslint-plugin-storybook from 10.4.6 to 10.5.4

Release notes

Sourced from eslint-plugin-storybook's releases.

v10.5.4

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

v10.5.3

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

v10.5.2

10.5.2

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!
• TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
• TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
• Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
• Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
• Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

v10.5.1

10.5.1

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

• ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
• 🌈 Vitest initialGlobals: Test across themes, viewports, locales
• 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
• ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
• 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

• A11y: Fix MDX heading anchors not keyboard accessible - #34368, thanks @​TheSeydiCharyyev!
• A11y: Handle lang attribute throughout preview - #35321, thanks @​Sidnioulz!
• A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable - #35306, thanks @​Sidnioulz!
• Addon A11y: Preserve disabled a11y rules with runOnly - #34649, thanks @​cyphercodes!

... (truncated)

Changelog

Sourced from eslint-plugin-storybook's changelog.

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

10.5.2

• TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
• TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
• Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
• Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
• Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

• Angular-Vite: Drop @​angular/platform-browser-dynamic peer dependency - #35457, thanks @​valentinpalkovic!
• Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @​valentinpalkovic!
• Core: Include chromatic packages in ecosystem identifier - #35170, thanks @​yannbf!

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

• ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
• 🌈 Vitest initialGlobals: Test across themes, viewports, locales
• 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
• ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
• 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

• A11y: Fix MDX heading anchors not keyboard accessible - #34368, thanks @​TheSeydiCharyyev!
• A11y: Handle lang attribute throughout preview - #35321, thanks @​Sidnioulz!
• A11y: Surface required args and keyboard-reachable Setup controls in ArgsTable - #35306, thanks @​Sidnioulz!
• Addon A11y: Preserve disabled a11y rules with runOnly - #34649, thanks @​cyphercodes!
• Addon Docs: DocsContent not filling available width when TOC is enabled - #35043, thanks @​k-utsumi!
• Addon Docs: Resolve CSF4 module exports without a default export - #34834, thanks @​TheSeydiCharyyev!
• Addon Docs: Resolve providerImportSource to a path instead of a file:// URL - #34841, thanks @​TheSeydiCharyyev!
• Addon Vitest: Add an initialGlobals option to pin a project's globals - #35226, thanks @​lifeiscontent!
• Addon Vitest: Avoid erroring out on benign Win process exits - #35287, thanks @​Sidnioulz!
• Addon Vitest: Fix dynamic import failure with Vitest 3 - #34927, thanks @​Sidnioulz!
• Addon Vitest: Subscribe for run completion before triggering it - #35291, thanks @​tsushanth!
• Angular: Add versioned @types/node to packages installed during storybook init - #34192, thanks @​copilot-swe-agent!

... (truncated)

Commits

• 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
• 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
• b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
• 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
• c253a06 Bump version from "10.5.0" to "10.5.1" [skip ci]
• 9dafcd2 Bump version from "10.5.0-beta.2" to "10.5.0" [skip ci]
• 448db85 Bump version from "10.5.0-beta.1" to "10.5.0-beta.2" [skip ci]
• a4ce979 Bump version from "10.5.0-beta.0" to "10.5.0-beta.1" [skip ci]
• f0bf138 Bump version from "10.5.0-alpha.11" to "10.5.0-beta.0" [skip ci]
• fac05a5 Bump version from "10.5.0-alpha.10" to "10.5.0-alpha.11" [skip ci]
• Additional commits viewable in compare view

Updates prettier from 3.8.4 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

• Preserve quotes for methods named new (prettier/prettier#19621 by @​kovsu)
• Support import defer in typescript parser (prettier/prettier#19624, prettier/prettier#19675 by ...

  Description has been truncated

[bgentry]

🤖 Codex review: Blocked on dependency integrity and compatibility; this head should not merge.

Upgrade

• Development dependency group: 16 direct updates, 50 lock additions, 86 changes, and 9 removals
• Reviewed head: 7e40e8195867a2d819b7a1520e2f5e107513ac34

Blocking security finding

• typescript@7.0.2 changes from the JavaScript compiler to a launcher plus 20 native platform packages. Both new macOS executables contain Microsoft Team ID UBF8T346G9, but strict codesign verification reports that their signatures are invalid because the code or signature was modified.
• The exact compiler SHA-256 values are a82f731365ad69d5c4c15f5e18fba4584bf3b7b839960172a76c3462b5114bf2 (arm64) and 76e4987d060ef8207875a53a73619ce665ff16fb2800c0d57a452e21c829bd7b (x64).
• npm publishes no provenance attestation for TypeScript or its platform packages. Metadata points to an unsigned microsoft/typescript-go merge commit while naming the microsoft/TypeScript repository. This is not proof of compromise, but the newly trusted executables are not presently acceptable.

Blocking compatibility finding

• Exact-head CI npm ci fails with ERESOLVE: typescript-eslint@8.65.0 requires TypeScript >=4.8.4 <6.1.0, while this group selects typescript@7.0.2.
• JS build/test, lint, release, and Docker jobs consequently fail. Do not bypass the conflict with --force or --legacy-peer-deps.
• Split TypeScript 7 from the group, retain TypeScript 6 for the current lint/tooling graph, or use Microsoft's documented compatibility arrangement after corrected artifacts are available.

Other security review

• All 109 reviewed changed/new artifact identities match their official-registry lockfile SHA-512 values. There are no non-registry URLs, weak hashes, same-version rewrites, or new lifecycle hooks.
• Native SWC, Rolldown, and Tailwind families were reviewed; strong npm OIDC provenance exists for most updated tooling. Exact base and head metadata-only npm audits report zero known vulnerabilities.
• This is routine maintenance, not a confirmed security update.

Residual risk

• Windows Authenticode signatures could not be verified locally, and the TypeScript native packages report vcs.modified=true. No dependency code or native executable was run.

[bgentry]

Security gate: clear. Compatibility gate: clear.

Reviewed head 785a12b6111f7d5d1fdae67c0377aad68a36bec2.

TypeScript 7 and its native preview platform packages are removed. The
revised graph retains TypeScript 6.0.3, which satisfies
typescript-eslint 8.65.0. Dependabot now excludes typescript from the
grouped development update so future TypeScript upgrades arrive in a
standalone PR.

The full supply-chain review found no blocker in the remaining packages.
The revised exact lock installs with zero audit vulnerabilities; 499
registry signatures and 203 attestations verify successfully, with no new
nonregistry, lifecycle, or TypeScript native payload.

npm ci, lint, 229 tests, the application build, and the Storybook build
pass. CI is green, including CodeQL and both architectures of the public and
Pro images. Prettier 3.9.6 requires only mechanical formatting in seven
files.

Residual nonblocking npm peer warnings remain in optional Rolldown WASM
internals and Zustand's React range.