Skip to content

build(deps-dev): bump the dev-tooling group across 1 directory with 19 updates - #2295

Closed
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-fe87d3906b
Closed

build(deps-dev): bump the dev-tooling group across 1 directory with 19 updates#2295
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-fe87d3906b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling group with 19 updates in the /saiku-ui directory:

Package From To
@antithesishq/bombadil 0.7.8 0.7.10
@chromatic-com/storybook 5.4.0 5.6.0
@playwright/test 1.64.0 1.64.1
@storybook/addon-a11y 10.6.1 10.6.3
@storybook/addon-docs 10.6.1 10.6.3
@storybook/sveltekit 10.6.1 10.6.3
@sveltejs/kit 3.0.1 3.1.0
@types/node 26.6.4 26.6.5
@vitest/coverage-v8 5.0.3 5.0.5
eslint 10.12.0 10.13.0
eslint-plugin-svelte 3.23.0 3.23.1
jsdom 30.1.2 30.1.3
prettier 3.9.9 3.9.10
storybook 10.6.1 10.6.3
svelte-check 4.7.6 4.7.7
typescript-eslint 8.71.1 8.72.0
vite 8.3.4 8.3.5
vitest 5.0.3 5.0.5
@sveltejs/package 3.0.0 3.0.1

Updates @antithesishq/bombadil from 0.7.8 to 0.7.10

Release notes

Sourced from @​antithesishq/bombadil's releases.

v0.7.10

Major updates:

  • Add shrink command for browser and terminal drivers (#372)
  • Add generator filtering, mapping, and enabling (#390)
  • Unhide fuzz command and mark experimental (#403)
  • Write trace and screenshots when running in Antithesis (#402)

Minor updates:

  • Add a "Workflows" chapter to the manual (#404)
  • Downgrade error logs for acceptable browser driver errors (#389)

Bug fixes:

  • Fix incorrect reference to canvasCenter in manual (#397)
  • Capture last state at program termination in fuzzer (#386, #388)

Internal:

  • Accept inner strategy for runs in fuzzer (#373)

v0.7.9

Major updates:

  • browser: deprecate delayMillis for TypeText action (#385)
  • runner: add global timeout for stall detection (#370)
  • fuzzer: accept --parallelism option (#371)
  • browser: add --allow-url exploration boundary (#353)

Minor updates:

  • docs: add LLM usage notes in issue and PR templates (#378)
  • browser: quote URLs in reproduction commands (#275)
  • inspect: show loading message and tolerate in spec (#364)
  • docs: generate CLI reference in manual (#357)

Bug fixes:

  • browser: tolerate state capture failure and resume on unexpected pauses (#383)
  • browser: wait for commit on cross-document history navigations (#381)
  • browser: only act on main-frame load events while navigating or loading (#380)
  • browser: missing match arms in action accepts function (#379)
  • browser: send quiesced event also on quiescence errors (#377)
  • browser: preserve directive prologues during js instrumentation (#375)
  • browser: negative coverage index (#367)
  • browser: match button replay fingerprints (#356)
  • browser: generate valid numbers for input type=number (#351)

... (truncated)

Changelog

Sourced from @​antithesishq/bombadil's changelog.

0.7.10

Major updates:

  • Add shrink command for browser and terminal drivers (#372)
  • Add generator filtering, mapping, and enabling (#390)
  • Unhide fuzz command and mark experimental (#403)
  • Write trace and screenshots when running in Antithesis (#402)

Minor updates:

  • Add a "Workflows" chapter to the manual (#404)
  • Downgrade error logs for acceptable browser driver errors (#389)

Bug fixes:

  • Fix incorrect reference to canvasCenter in manual (#397)
  • Capture last state at program termination in fuzzer (#386, #388)

Internal:

  • Accept inner strategy for runs in fuzzer (#373)

0.7.9

Major updates:

  • browser: deprecate delayMillis for TypeText action (#385)
  • runner: add global timeout for stall detection (#370)
  • fuzzer: accept --parallelism option (#371)
  • browser: add --allow-url exploration boundary (#353)

Minor updates:

  • docs: add LLM usage notes in issue and PR templates (#378)
  • browser: quote URLs in reproduction commands (#275)
  • inspect: show loading message and tolerate in spec (#364)
  • docs: generate CLI reference in manual (#357)

Bug fixes:

  • browser: tolerate state capture failure and resume on unexpected pauses (#383)
  • browser: wait for commit on cross-document history navigations (#381)
  • browser: only act on main-frame load events while navigating or loading (#380)
  • browser: missing match arms in action accepts function (#379)
  • browser: send quiesced event also on quiescence errors (#377)
  • browser: preserve directive prologues during js instrumentation (#375)
  • browser: negative coverage index (#367)
  • browser: match button replay fingerprints (#356)
  • browser: generate valid numbers for input type=number (#351)

... (truncated)

Commits

Updates @chromatic-com/storybook from 5.4.0 to 5.6.0

Release notes

Sourced from @​chromatic-com/storybook's releases.

v5.6.0

🚀 Enhancement

🐛 Bug Fix

Authors: 3

v5.6.0-next.2

⚠️ Pushed to next

Authors: 1

v5.6.0-next.1

🚀 Enhancement

🐛 Bug Fix

⚠️ Pushed to next

Authors: 4

v5.6.0-next.0

🚀 Enhancement

Authors: 1

... (truncated)

Changelog

Sourced from @​chromatic-com/storybook's changelog.

v5.6.0 (Tue Oct 20 2026)

🚀 Enhancement

🐛 Bug Fix

Authors: 3

v5.5.1 (Mon Oct 12 2026)

🐛 Bug Fix

Authors: 1

v5.5.0 (Mon Oct 12 2026)

🚀 Enhancement

🐛 Bug Fix

Authors: 4

Commits
  • 4e6f653 Bump version to: 5.6.0 [skip ci]
  • ec181ff Update CHANGELOG.md [skip ci]
  • 29337ea Merge pull request #470 from chromaui/next
  • 2c2c710 Format the changelog
  • 2bd6536 Merge branch 'main' into next
  • 7122294 Merge pull request #471 from chromaui/storybook-11-ui-migration
  • 8599481 Move the pointer before hovering the quarantine badge
  • c5a8871 Cover the migrated toggle and tooltips with play functions
  • c0dbd9f Build the stories' shared-state channel without mockChannel
  • 8facf34 Replace UI components removed in Storybook 11
  • Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates @storybook/addon-a11y from 10.6.1 to 10.6.3

Release notes

Sourced from @​storybook/addon-a11y's releases.

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-a11y's changelog.

10.6.3

10.6.2

Commits
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • 243c06b Merge pull request #36726 from storybookjs/sidnioulz/patch-internal-v11
  • See full diff in compare view

Updates @storybook/addon-docs from 10.6.1 to 10.6.3

Release notes

Sourced from @​storybook/addon-docs's releases.

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-docs's changelog.

10.6.3

10.6.2

Commits
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • d0c7fa2 Merge pull request #36526 from storybookjs/validate/preact-11
  • See full diff in compare view

Updates @storybook/sveltekit from 10.6.1 to 10.6.3

Release notes

Sourced from @​storybook/sveltekit's releases.

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/sveltekit's changelog.

10.6.3

10.6.2

Commits
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • See full diff in compare view

Updates @sveltejs/kit from 3.0.1 to 3.1.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Commits
  • 73bf98c Version Packages (#17364)
  • 38b95ac fix: continue deployment recovery when service worker updates fail (#17440)
  • c7e59b3 fix: leave focus in the parent page from an unfocused iframe (#17297)
  • 35835f2 feat: support report-sha256/report-sha384/report-sha512 CSP keywords (#17398)
  • 230d00c fix: infer prerendered MIME types from generated files (#17381)
  • 59441bc fix: don't treat every module as server-only when the project is inside a `se...
  • 3bc9234 fix: don't warn about Storybook's Vite plugins that use transformIndexHtml ...
  • 9b56543 fix: leave unchanged generated files alone, and replace changed ones atomical...
  • fd7cd9a docs: fix links (#17363)
  • 51a4e0b feat: emit a span for +server handlers when tracing is enabled (#17325)
  • See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.5

Commits

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

Updates eslint from 10.12.0 to 10.13.0

Release notes

Sourced from eslint's releases.

v10.13.0

Features

  • 48d5cc4 feat: report references inside IIFEs in no-use-before-define (#21238) (Irfan fandi)
  • a39d9fb feat: add globalThis to no-obj-calls (#21382) (synthex-byte)
  • 66ac583 feat: check yield* expressions in no-unsafe-optional-chaining (#21399) (xbinaryx)

Bug Fixes

  • 87bd2ce fix: avoid redeclared let when no-var and one-var fix together (#21389) (Daniel Pinto)

Documentation

  • 4783a68 docs: Update README (GitHub Actions Bot)
  • 43f0ac9 docs: clarify parameter description in getText (#21287) (lumir)

Chores

  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412) (renovate[bot])
  • 95e51a0 ci: re-enable @typescript-eslint/typescript-eslint in ecosystem tests (#21410) (Francesco Trotta)
  • 317fcb3 chore: update ecosystem plugins (#21409) (ESLint Bot)
  • b92decf perf: skip no-redeclare scan for single-declaration variables (#21365) (James Ross)
  • 47b7063 chore: update dependency @​eslint/json to ^2.1.1 (#21398) (renovate[bot])
  • e5aea41 chore: update ecosystem plugins (#21390) (ESLint Bot)
Commits
  • 4637f98 10.13.0
  • 96df05c Build: changelog update for 10.13.0
  • 4783a68 docs: Update README
  • b59d889 chore: update github/codeql-action action to v4.38.3 (#21412)
  • 95e51a0 ci: re-enable @typescript-eslint/typescript...

    Description has been truncated

@dependabot
build(deps-dev): bump the dev-tooling group across 1 directory with 1…
7bfab48 
…9 updates

Bumps the dev-tooling group with 19 updates in the /saiku-ui directory:

| Package | From | To |
| --- | --- | --- |
| [@antithesishq/bombadil](https://github.com/antithesishq/bombadil) | `0.7.8` | `0.7.10` |
| [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `5.4.0` | `5.6.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.6.1` | `10.6.3` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.6.1` | `10.6.3` |
| [@storybook/sveltekit](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/sveltekit) | `10.6.1` | `10.6.3` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.0.1` | `3.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.5` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.23.0` | `3.23.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.6.1` | `10.6.3` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.7.6` | `4.7.7` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.72.0` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |
| [@sveltejs/package](https://github.com/sveltejs/kit/tree/HEAD/packages/package) | `3.0.0` | `3.0.1` |



Updates `@antithesishq/bombadil` from 0.7.8 to 0.7.10
- [Release notes](https://github.com/antithesishq/bombadil/releases)
- [Changelog](https://github.com/antithesishq/bombadil/blob/main/CHANGELOG.md)
- [Commits](antithesishq/bombadil@v0.7.8...v0.7.10)

Updates `@chromatic-com/storybook` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/chromaui/addon-visual-tests/releases)
- [Changelog](https://github.com/chromaui/addon-visual-tests/blob/main/CHANGELOG.md)
- [Commits](chromaui/addon-visual-tests@v5.4.0...v5.6.0)

Updates `@playwright/test` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `@storybook/addon-a11y` from 10.6.1 to 10.6.3
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.3/code/addons/a11y)

Updates `@storybook/addon-docs` from 10.6.1 to 10.6.3
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.3/code/addons/docs)

Updates `@storybook/sveltekit` from 10.6.1 to 10.6.3
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.3/code/frameworks/sveltekit)

Updates `@sveltejs/kit` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.0/packages/kit)

Updates `@types/node` from 26.6.4 to 26.6.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-svelte` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.23.1/packages/eslint-plugin-svelte)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `storybook` from 10.6.1 to 10.6.3
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.3/code/core)

Updates `svelte-check` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.7.6...svelte-check@4.7.7)

Updates `typescript-eslint` from 8.71.1 to 8.72.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.0/packages/typescript-eslint)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `@sveltejs/package` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/package/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/package@3.0.1/packages/package)

---
updated-dependencies:
- dependency-name: "@antithesishq/bombadil"
  dependency-version: 0.7.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@chromatic-com/storybook"
  dependency-version: 5.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 10.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/sveltekit"
  dependency-version: 10.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@types/node"
  dependency-version: 26.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: storybook
  dependency-version: 10.6.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: svelte-check
  dependency-version: 4.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: typescript-eslint
  dependency-version: 8.72.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/package"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) labels Oct 25, 2026
@dependabot dependabot Bot mentioned this pull request Oct 25, 2026
Closed
@github-actions github-actions Bot added risk/high Change risk tier: high (see docs/risk-tiers.md) area/ui area/design-system labels Oct 25, 2026
@dependabot dependabot Bot mentioned this pull request Oct 25, 2026
Closed
@spicule-hive

spicule-hive Bot commented Oct 25, 2026

Copy link
Copy Markdown
7bfab48

ℹ️ Sentinel notice — informational; author is trusted (allow-listed bot), merge is not blocked

Hive flagged this PR (author @dependabot[bot], head 7bfab480c400) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 2 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • saiku-ui/package-lock.json
    • saiku-ui/package.json

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

@dependabot @github

dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/saiku-ui/dev-tooling-fe87d3906b branch November 1, 2026 01:46
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown

PR acceptance metric

Acceptance rate: 87.2% — 422 merged / 484 decided PRs (16 still open, excluded from the denominator).

Metric Value
Acceptance rate 87.2%
Accepted / rejected / open 422 / 62 / 16
Median time to first review (merged) 0.5 h
Median time to merge (merged) 1.1 h
Median time open (decided) 1.5 h
Mean review rounds on merged PRs 1.0
Authors with at least one merged PR 6
Author Merged Rejected Acceptance
buggtb 198 19 91.2%
juanresendiz813 123 1 99.2%
app/dependabot 92 37 71.3%
app/spicule-hive 6 1 85.7%
oiacub1 2 0 100.0%
Prithvi1994 1 0 100.0%
laborima 0 3 0.0%
spicule-hive-bot 0 1 0.0%

Generated by scripts/pr-metrics.mjs — see docs/metrics.md.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/design-system area/ui dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) risk/high Change risk tier: high (see docs/risk-tiers.md)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants