Skip to content

Chore(deps-dev): Bump the storybook group across 1 directory with 8 updates - #6185

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/storybook-603bc29186
Open

Chore(deps-dev): Bump the storybook group across 1 directory with 8 updates#6185
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/storybook-603bc29186

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the storybook group with 8 updates in the / directory:

Package From To
@chromatic-com/storybook 4.0.1 4.1.4
@storybook/addon-a11y 9.0.18 9.1.21
@storybook/addon-docs 9.0.18 9.1.21
@storybook/addon-onboarding 9.0.18 9.1.21
@storybook/addon-vitest 9.0.18 9.1.21
@storybook/react-vite 9.0.18 9.1.21
storybook 9.0.18 9.1.21
eslint-plugin-storybook 9.1.5 9.1.21

Updates @chromatic-com/storybook from 4.0.1 to 4.1.4

Release notes

Sourced from @​chromatic-com/storybook's releases.

v4.1.4

🐛 Bug Fix

⚠️ Pushed to main

Authors: 1

v4.1.3

🐛 Bug Fix

Authors: 1

v4.1.3-next.0

🐛 Bug Fix

Authors: 1

v4.1.2

🐛 Bug Fix

  • Broaden version-range for storybook peerDependency to include 10.1.0-0 #392 (@​ndelangen)

Authors: 2

v4.1.2-next.4

⚠️ Pushed to next

  • Broaden version-range for storybook peerDependency to include 10.2.0-0 and 10.3.0-0 (@​ndelangen)

Authors: 1

... (truncated)

Changelog

Sourced from @​chromatic-com/storybook's changelog.

v4.1.4 (Mon Oct 12 2026)

🐛 Bug Fix

⚠️ Pushed to main

Authors: 1

v4.1.3 (Mon Nov 17 2025)

🐛 Bug Fix

Authors: 1

v4.1.2 (Wed Oct 29 2025)

🐛 Bug Fix

Authors: 2

v4.1.1 (Wed Aug 20 2025)

🐛 Bug Fix

Authors: 1

... (truncated)

Commits
  • d72006d Bump version to: 4.1.4 [skip ci]
  • c73af92 Update CHANGELOG.md [skip ci]
  • 8d07c1c Merge pull request #467 from chromaui/ghengeveld/release-4.x-oidc
  • da87418 Publish from release branch via trusted publishing
  • 6aba44b Merge commit from fork
  • 783b243 Remove the channel fetch relay and restrict channel data
  • f382bd5 Bump version to: 4.1.3 [skip ci]
  • eeea239 Update CHANGELOG.md [skip ci]
  • 05e1b8a Merge pull request #395 from chromaui/next
  • bf78815 Merge pull request #394 from chromaui/upgrade-chromatic-cli
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​chromatic-com/storybook since your current version.


Updates @storybook/addon-a11y from 9.0.18 to 9.1.21

Release notes

Sourced from @​storybook/addon-a11y's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from @​storybook/addon-a11y's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • 81d4a04 Patch v9
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • c2483f0 Bump version from "9.1.12" to "9.1.13" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-a11y since your current version.


Updates @storybook/addon-docs from 9.0.18 to 9.1.21

Release notes

Sourced from @​storybook/addon-docs's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from @​storybook/addon-docs's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • c2483f0 Bump version from "9.1.12" to "9.1.13" [skip ci]
  • efe8a7c Bump version from "9.1.11" to "9.1.12" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-docs since your current version.


Updates @storybook/addon-onboarding from 9.0.18 to 9.1.21

Release notes

Sourced from @​storybook/addon-onboarding's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from @​storybook/addon-onboarding's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • c2483f0 Bump version from "9.1.12" to "9.1.13" [skip ci]
  • efe8a7c Bump version from "9.1.11" to "9.1.12" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-onboarding since your current version.


Updates @storybook/addon-vitest from 9.0.18 to 9.1.21

Release notes

Sourced from @​storybook/addon-vitest's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from @​storybook/addon-vitest's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • 81d4a04 Patch v9
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • 36a10dd dedupe lockfile & fix typings
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-vitest since your current version.


Updates @storybook/react-vite from 9.0.18 to 9.1.21

Release notes

Sourced from @​storybook/react-vite's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from @​storybook/react-vite's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • c2483f0 Bump version from "9.1.12" to "9.1.13" [skip ci]
  • efe8a7c Bump version from "9.1.11" to "9.1.12" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/react-vite since your current version.


Updates storybook from 9.0.18 to 9.1.21

Release notes

Sourced from storybook's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from storybook's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • dc03253 Core: Escape the component file name in generated story imports
  • 0cd2fc4 Core: Check the origin of channel messages from registered preview iframes
  • 81d4a04 Patch v9
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 046ce4d Formatting
  • 98e74eb Clarify hostname validation for HTTP requests and WebSocket connections
  • 5f27e88 Core: Backport origin/host validation and update related configurations
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • 66b2d8e Fix test
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for storybook since your current version.


Updates eslint-plugin-storybook from 9.1.5 to 9.1.21

Release notes

Sourced from eslint-plugin-storybook's releases.

v9.1.21

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution
Changelog

Sourced from eslint-plugin-storybook's changelog.

9.1.21

  • Highlight: Prevent menu items from emitting arbitrary channel events
  • Channels: Restrict preview postMessage to known manager origins
  • Core: Separate manager and preview roles on the dev server channel
  • Core: Block iframe embedding of the dev server from non-localhost origins
  • Core: Reject component search queries outside the project
  • Core: Validate component export name when creating a story
  • Core: Add host validation warning and origin validation for MCP
  • Core: Contain save story path to the project root
  • Core: Validate save story name and arg keys as identifiers
  • Addon Vitest: Disable browser file writes and command execution

9.1.20

  • Add request validation

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

... (truncated)

Commits
  • 9abaf68 Bump version from "9.1.20" to "9.1.21" [skip ci]
  • f4eff48 Bump version from "9.1.19" to "9.1.20" [skip ci]
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • d0d17d9 Bump version from "9.1.14" to "9.1.15" [skip ci]
  • 5afb39f Bump version from "9.1.13" to "9.1.14" [skip ci]
  • c2483f0 Bump version from "9.1.12" to "9.1.13" [skip ci]
  • efe8a7c Bump version from "9.1.11" to "9.1.12" [skip ci]
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-storybook since your current version.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 2, 2026
@coderabbitai

coderabbitai Bot commented Nov 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Review in Change Stack →

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4c23f968-08a7-4303-8e50-63848564f91e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review

No actionable comments were generated in the recent review.

Walkthrough

Storybook-related development dependencies were updated in vscode/react/package.json and web/common/package.json. The updates include Storybook packages, eslint-plugin-storybook, and Chromatic.

Changes: Storybook dependency updates

Layer / File(s) Summary
Update Storybook dependency versions
vscode/react/package.json, web/common/package.json		 The manifests update Storybook, addon, React-Vite, and CLI versions. The VS Code React manifest also updates Chromatic, and the web common manifest updates eslint-plugin-storybook.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Possibly related PRs

  • SQLMesh/sqlmesh#6177: Groups updates for Storybook, Chromatic, and eslint-plugin-storybook, which are also updated here.
  • SQLMesh/sqlmesh#6164: Updates @storybook/addon-a11y, which is part of the Storybook addon dependency family.

Suggested labels: dependencies, javascript

Suggested reviewers: benfdking, mykalmax

Merge Risk: Minimal · previous review 27fec

No actionable merge-blocking risk is identified in these dependency-only updates.

Architecture risk: Low · up to 27fec

The change affects 2 systems.

Changed systems: vscode, web

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

  • observed — vscode (service) was modified; 1 changed file maps to changed impact.
  • observed — web (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

  • observed — Modified behavior in vscode/react/package.json: Updated @chromatic-com/storybook from ^4.0.1 to ^4.1.4 and the five Storybook addon and React-Vite packages from ^9.0.18 to ^9.1.21.
  • observed — Modified behavior in vscode/react/package.json: Updated the storybook dev dependency from ^9.0.18 to ^9.1.21.
  • observed — Modified behavior in web/common/package.json: The @storybook/addon-docs and @storybook/react-vite development dependency versions changed from 9.1.5 to 9.1.21.
  • observed — Modified behavior in web/common/package.json: The eslint-plugin-storybook and storybook development dependency versions changed from 9.1.5 to 9.1.21; the intervening dependency entries are unchanged.
Pre-merge checks: Passed 5

Check name Status Explanation
Title check Passed The title clearly identifies a development dependency update for the Storybook group and states that eight updates are included.
Description check Passed The description clearly documents all eight dependency updates and includes relevant release notes. It does not include the template's explicit Test Plan or Checklist sections, and it provides no test…
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Description check

Explanation

The description clearly documents all eight dependency updates and includes relevant release notes. It does not include the template's explicit Test Plan or Checklist sections, and it provides no test results, but the main change description is complete and on topic.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

Finishing Touches

Generate unit tests (beta)

  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 8efc2e77-5d53-410d-b80a-c0ee488d174d
Commits

Reviewing files that changed from the base of the PR and between c4dbac4 and 27fec9c.

Files ignored due to path filters: 1

  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
Files selected for processing: 2

  • vscode/react/package.json
  • web/common/package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

@dependabot
Chore(deps-dev): Bump the storybook group across 1 directory with 8 u…
16ae9ca 
…pdates

Bumps the storybook group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `4.0.1` | `4.1.4` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `9.0.18` | `9.1.21` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `9.0.18` | `9.1.21` |
| [@storybook/addon-onboarding](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/onboarding) | `9.0.18` | `9.1.21` |
| [@storybook/addon-vitest](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/vitest) | `9.0.18` | `9.1.21` |
| [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `9.0.18` | `9.1.21` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `9.0.18` | `9.1.21` |
| [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `9.1.5` | `9.1.21` |



Updates `@chromatic-com/storybook` from 4.0.1 to 4.1.4
- [Release notes](https://github.com/chromaui/addon-visual-tests/releases)
- [Changelog](https://github.com/chromaui/addon-visual-tests/blob/v4.1.4/CHANGELOG.md)
- [Commits](chromaui/addon-visual-tests@v4.0.1...v4.1.4)

Updates `@storybook/addon-a11y` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/addons/a11y)

Updates `@storybook/addon-docs` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/addons/docs)

Updates `@storybook/addon-onboarding` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/addons/onboarding)

Updates `@storybook/addon-vitest` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/addons/vitest)

Updates `@storybook/react-vite` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/frameworks/react-vite)

Updates `storybook` from 9.0.18 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/core)

Updates `eslint-plugin-storybook` from 9.1.5 to 9.1.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.21/code/lib/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@chromatic-com/storybook"
  dependency-version: 4.1.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/addon-docs"
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/addon-onboarding"
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/addon-vitest"
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: "@storybook/react-vite"
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
- dependency-name: eslint-plugin-storybook
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-version: 9.1.21
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Chore(deps-dev): Bump the storybook group with 8 updates Chore(deps-dev): Bump the storybook group across 1 directory with 8 updates Nov 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/storybook-603bc29186 branch from 27fec9c to 16ae9ca Compare November 9, 2026 20:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants