Skip to content

build(deps-dev): bump the dev-tooling group in /saiku-ui with 12 updates - #2281

Closed
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-068f5e40b6
Closed

build(deps-dev): bump the dev-tooling group in /saiku-ui with 12 updates#2281
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-068f5e40b6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling group in /saiku-ui with 12 updates:

Package From To
@chromatic-com/storybook 5.4.0 5.5.1
@playwright/test 1.64.0 1.64.1
@storybook/addon-a11y 10.6.1 10.6.2
@storybook/addon-docs 10.6.1 10.6.2
@storybook/sveltekit 10.6.1 10.6.2
@sveltejs/kit 3.0.1 3.1.0
@vitest/coverage-v8 5.0.3 5.0.4
eslint-plugin-svelte 3.23.0 3.23.1
prettier 3.9.9 3.9.10
typescript-eslint 8.71.1 8.71.2
vitest 5.0.3 5.0.4
@sveltejs/package 3.0.0 3.0.1

Updates @chromatic-com/storybook from 5.4.0 to 5.5.1

Release notes

Sourced from @​chromatic-com/storybook's releases.

v5.5.1

🐛 Bug Fix

Authors: 1

v5.5.1-next.0

⚠️ Pushed to next

Authors: 1

v5.5.0

🚀 Enhancement

🐛 Bug Fix

Authors: 4

v5.5.0-next.1

🚀 Enhancement

🐛 Bug Fix

Authors: 3

... (truncated)

Changelog

Sourced from @​chromatic-com/storybook's changelog.

v5.5.1 (Mon Oct 12 2026)

🐛 Bug Fix

Authors: 1

v5.5.0 (Mon Oct 12 2026)

🚀 Enhancement

🐛 Bug Fix

Authors: 4

Commits
  • 7481854 Bump version to: 5.5.1 [skip ci]
  • 0879f96 Update CHANGELOG.md [skip ci]
  • 5deb254 Merge pull request #466 from chromaui/next
  • 37388cf Merge commit from fork
  • dcb188e Bump version to: 5.5.0 [skip ci]
  • 1d6f44b Update CHANGELOG.md [skip ci]
  • 6802f86 Merge pull request #464 from chromaui/next
  • 4adde57 Merge pull request #454 from chromaui/dependabot/npm_and_yarn/npm_and_yarn-78...
  • a3afc28 Merge branch 'main' into dependabot/npm_and_yarn/npm_and_yarn-78481560ff
  • a6f20ac Merge branch 'next' into dependabot/npm_and_yarn/npm_and_yarn-78481560ff
  • Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates @storybook/addon-a11y from 10.6.1 to 10.6.2

Release notes

Sourced from @​storybook/addon-a11y's releases.

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-a11y's changelog.

10.6.2

Commits
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • 243c06b Merge pull request #36726 from storybookjs/sidnioulz/patch-internal-v11
  • See full diff in compare view

Updates @storybook/addon-docs from 10.6.1 to 10.6.2

Release notes

Sourced from @​storybook/addon-docs's releases.

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-docs's changelog.

10.6.2

Commits

Updates @storybook/sveltekit from 10.6.1 to 10.6.2

Release notes

Sourced from @​storybook/sveltekit's releases.

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/sveltekit's changelog.

10.6.2

Commits

Updates @sveltejs/kit from 3.0.1 to 3.1.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Commits
  • 73bf98c Version Packages (#17364)
  • 38b95ac fix: continue deployment recovery when service worker updates fail (#17440)
  • c7e59b3 fix: leave focus in the parent page from an unfocused iframe (#17297)
  • 35835f2 feat: support report-sha256/report-sha384/report-sha512 CSP keywords (#17398)
  • 230d00c fix: infer prerendered MIME types from generated files (#17381)
  • 59441bc fix: don't treat every module as server-only when the project is inside a `se...
  • 3bc9234 fix: don't warn about Storybook's Vite plugins that use transformIndexHtml ...
  • 9b56543 fix: leave unchanged generated files alone, and replace changed ones atomical...
  • fd7cd9a docs: fix links (#17363)
  • 51a4e0b feat: emit a span for +server handlers when tracing is enabled (#17325)
  • See full diff in compare view

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.4

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates eslint-plugin-svelte from 3.23.0 to 3.23.1

Release notes

Sourced from eslint-plugin-svelte's releases.

eslint-plugin-svelte@3.23.1

Patch Changes

  • #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

  • #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

  • #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

  • #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

  • #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

  • #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

  • #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

  • #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Changelog

Sourced from eslint-plugin-svelte's changelog.

3.23.1

Patch Changes

  • #1592 ed67eb7 Thanks @​baseballyama! - Exclude deprecated rules from the all configuration while keeping active rules enabled.

  • #1594 af288cd Thanks @​baseballyama! - Recognize browser from SvelteKit's $app/env alias as a browser guard in no-top-level-browser-globals.

  • #1588 9814b51 Thanks @​baseballyama! - Include all active extension rules in the Extension Rules documentation table while preserving their primary-category entries.

  • #1589 57863c5 Thanks @​baseballyama! - Keep the documented project service configuration consistent across TypeScript and Svelte files to avoid unnecessary project reloads.

  • #1593 4ad2c67 Thanks @​baseballyama! - Limit require-each-key diagnostics to the opening each tag instead of the whole block.

  • #1599 90d7b09 Thanks @​baseballyama! - Enable no-navigation-without-resolve on SvelteKit 3 so the recommended config reports internal links and navigation calls that omit resolve().

  • #1590 a28563f Thanks @​baseballyama! - Fix false positives in no-immutable-reactive-statements for TypeScript components when ecmaFeatures.globalReturn is enabled.

  • #1598 4607a2c Thanks @​baseballyama! - Recognize SvelteKit 3 in rule conditions, including prereleases, and document version detection and routes configuration.

Commits
  • 24201e0 chore: release eslint-plugin-svelte (#1604)
  • 90d7b09 fix(no-navigation-without-resolve): enable on SvelteKit 3 (#1599)
  • 4607a2c fix: recognize SvelteKit 3 in rule conditions (#1598)
  • af288cd fix(no-top-level-browser-globals): recognize app env browser guards (#1594)
  • 4ad2c67 fix(require-each-key): highlight only the opening tag (#1593)
  • ed67eb7 fix: omit deprecated rules from the all preset (#1592)
  • ed49083 test: show fixture paths in rule test titles (#1591)
  • a28563f fix(no-immutable-reactive-statements): handle globalReturn module scopes (#1590)
  • 57863c5 docs: share extra file extensions across typed linting (#1589)
  • 9814b51 docs: list all active extension rules in the extension table (#1588)
  • See full diff in compare view

Updates prettier from 3.9.9 to 3.9.10

Release notes

Sourced from prettier's releases.

3.9.10

  • Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.10

diff

Markdown: Update micromark-extension-gfm-table to fix the table parse issue on performance (#20266 by @​fisker)

See micromark/micromark-extension-gfm-table@4f43ead for details.

Commits
  • 1172b82 Release 3.9.10
  • d014227 Update micromark-extension-gfm-table to fix the table parse issue on perfor...
  • 953b908 Bump Prettier dependency to 3.9.9
  • ad8a6bf Clean changelog_unreleased
  • See full diff in compare view

Updates typescript-eslint from 8.71.1 to 8.71.2

Release notes

Sourced from typescript-eslint's releases.

v8.71.2

8.71.2 (2026-10-12)

🩹 Fixes

  • eslint-plugin: [no-unused-vars] avoid false-positives when not using our parser (#12989)
  • eslint-plugin: [no-unnecessary-type-parameters] count instantiated mapped type templates (#12974)
  • eslint-plugin: [no-unused-vars] ignore type-only refs for after-used (#12977)
  • eslint-plugin: [no-unnecessary-type-parameters] parenthesize constraint in optional tuple elements (#12995)
  • eslint-plugin: [prefer-optional-chain] safe fix when the chain ends with a strict null comparison (#12805)
  • type-utils: match linked packages and packages with missing version in TypeOrValueSpecifier (#12948)

❤️ Thank You

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.71.2 (2026-10-12)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

Updates vitest from 5.0.3 to 5.0.4

Release notes

Sourced from vitest's releases.

v5.0.4

   🚀 Features

   🐞 Bug Fixes

@dependabot
build(deps-dev): bump the dev-tooling group in /saiku-ui with 12 updates
f656830 
Bumps the dev-tooling group in /saiku-ui with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `5.4.0` | `5.5.1` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.6.1` | `10.6.2` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.6.1` | `10.6.2` |
| [@storybook/sveltekit](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/sveltekit) | `10.6.1` | `10.6.2` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.0.1` | `3.1.0` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.4` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.23.0` | `3.23.1` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.71.2` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.4` |
| [@sveltejs/package](https://github.com/sveltejs/kit/tree/HEAD/packages/package) | `3.0.0` | `3.0.1` |


Updates `@chromatic-com/storybook` from 5.4.0 to 5.5.1
- [Release notes](https://github.com/chromaui/addon-visual-tests/releases)
- [Changelog](https://github.com/chromaui/addon-visual-tests/blob/v5.5.1/CHANGELOG.md)
- [Commits](chromaui/addon-visual-tests@v5.4.0...v5.5.1)

Updates `@playwright/test` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `@storybook/addon-a11y` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.2/code/addons/a11y)

Updates `@storybook/addon-docs` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.2/code/addons/docs)

Updates `@storybook/sveltekit` from 10.6.1 to 10.6.2
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.2/code/frameworks/sveltekit)

Updates `@sveltejs/kit` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.0/packages/kit)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/coverage-v8)

Updates `eslint-plugin-svelte` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.23.1/packages/eslint-plugin-svelte)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `typescript-eslint` from 8.71.1 to 8.71.2
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.71.2/packages/typescript-eslint)

Updates `vitest` from 5.0.3 to 5.0.4
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.4/packages/vitest)

Updates `@sveltejs/package` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/package/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/package@3.0.1/packages/package)

---
updated-dependencies:
- dependency-name: "@chromatic-com/storybook"
  dependency-version: 5.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/sveltekit"
  dependency-version: 10.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: typescript-eslint
  dependency-version: 8.71.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: vitest
  dependency-version: 5.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/package"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) labels Oct 18, 2026
@github-actions github-actions Bot added risk/high Change risk tier: high (see docs/risk-tiers.md) area/ui area/design-system labels Oct 18, 2026
@spicule-hive

spicule-hive Bot commented Oct 18, 2026

Copy link
Copy Markdown
f656830

ℹ️ Sentinel notice — informational; author is trusted (allow-listed bot), merge is not blocked

Hive flagged this PR (author @dependabot[bot], head f656830185cd) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 2 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • saiku-ui/package-lock.json
    • saiku-ui/package.json

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

@dependabot @github

dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/saiku-ui/dev-tooling-068f5e40b6 branch October 25, 2026 01:44
@github-actions

github-actions Bot commented Oct 25, 2026

Copy link
Copy Markdown

PR acceptance metric

Acceptance rate: 88.0% — 426 merged / 484 decided PRs (16 still open, excluded from the denominator).

Metric Value
Acceptance rate 88.0%
Accepted / rejected / open 426 / 58 / 16
Median time to first review (merged) 0.5 h
Median time to merge (merged) 1.1 h
Median time open (decided) 1.2 h
Mean review rounds on merged PRs 1.0
Authors with at least one merged PR 6
Author Merged Rejected Acceptance
buggtb 198 19 91.2%
juanresendiz813 127 1 99.2%
app/dependabot 92 33 73.6%
app/spicule-hive 6 1 85.7%
oiacub1 2 0 100.0%
Prithvi1994 1 0 100.0%
laborima 0 3 0.0%
spicule-hive-bot 0 1 0.0%

Generated by scripts/pr-metrics.mjs — see docs/metrics.md.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/design-system area/ui dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) risk/high Change risk tier: high (see docs/risk-tiers.md)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants