Skip to content

build(deps-dev): bump the dev-tooling group across 1 directory with 21 updates - #2304

Open
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-49de944a7d
Open

build(deps-dev): bump the dev-tooling group across 1 directory with 21 updates#2304
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/saiku-ui/dev-tooling-49de944a7d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dev-tooling group with 21 updates in the /saiku-ui directory:

Package From To
@antithesishq/bombadil 0.7.8 0.7.10
@chromatic-com/storybook 5.4.0 5.6.0
@playwright/test 1.64.0 1.64.1
@storybook/addon-a11y 10.6.1 10.6.5
@storybook/addon-docs 10.6.1 10.6.5
@storybook/addon-svelte-csf 5.1.5 5.1.6
@storybook/sveltekit 10.6.1 10.6.5
@sveltejs/kit 3.0.1 3.1.0
@types/node 26.6.4 26.6.6
@vitest/coverage-v8 5.0.3 5.0.5
eslint 10.12.0 10.13.0
eslint-plugin-svelte 3.23.0 3.23.1
jsdom 30.1.2 30.1.3
prettier 3.9.9 3.9.10
storybook 10.6.1 10.6.5
svelte 5.57.2 5.57.3
svelte-check 4.7.6 4.7.7
typescript-eslint 8.71.1 8.72.1
vite 8.3.4 8.3.5
vitest 5.0.3 5.0.5
@sveltejs/package 3.0.0 3.0.1

Updates @antithesishq/bombadil from 0.7.8 to 0.7.10

Release notes

Sourced from @​antithesishq/bombadil's releases.

v0.7.10

Major updates:

  • Add shrink command for browser and terminal drivers (#372)
  • Add generator filtering, mapping, and enabling (#390)
  • Unhide fuzz command and mark experimental (#403)
  • Write trace and screenshots when running in Antithesis (#402)

Minor updates:

  • Add a "Workflows" chapter to the manual (#404)
  • Downgrade error logs for acceptable browser driver errors (#389)

Bug fixes:

  • Fix incorrect reference to canvasCenter in manual (#397)
  • Capture last state at program termination in fuzzer (#386, #388)

Internal:

  • Accept inner strategy for runs in fuzzer (#373)

v0.7.9

Major updates:

  • browser: deprecate delayMillis for TypeText action (#385)
  • runner: add global timeout for stall detection (#370)
  • fuzzer: accept --parallelism option (#371)
  • browser: add --allow-url exploration boundary (#353)

Minor updates:

  • docs: add LLM usage notes in issue and PR templates (#378)
  • browser: quote URLs in reproduction commands (#275)
  • inspect: show loading message and tolerate in spec (#364)
  • docs: generate CLI reference in manual (#357)

Bug fixes:

  • browser: tolerate state capture failure and resume on unexpected pauses (#383)
  • browser: wait for commit on cross-document history navigations (#381)
  • browser: only act on main-frame load events while navigating or loading (#380)
  • browser: missing match arms in action accepts function (#379)
  • browser: send quiesced event also on quiescence errors (#377)
  • browser: preserve directive prologues during js instrumentation (#375)
  • browser: negative coverage index (#367)
  • browser: match button replay fingerprints (#356)
  • browser: generate valid numbers for input type=number (#351)

... (truncated)

Changelog

Sourced from @​antithesishq/bombadil's changelog.

0.7.10

Major updates:

  • Add shrink command for browser and terminal drivers (#372)
  • Add generator filtering, mapping, and enabling (#390)
  • Unhide fuzz command and mark experimental (#403)
  • Write trace and screenshots when running in Antithesis (#402)

Minor updates:

  • Add a "Workflows" chapter to the manual (#404)
  • Downgrade error logs for acceptable browser driver errors (#389)

Bug fixes:

  • Fix incorrect reference to canvasCenter in manual (#397)
  • Capture last state at program termination in fuzzer (#386, #388)

Internal:

  • Accept inner strategy for runs in fuzzer (#373)

0.7.9

Major updates:

  • browser: deprecate delayMillis for TypeText action (#385)
  • runner: add global timeout for stall detection (#370)
  • fuzzer: accept --parallelism option (#371)
  • browser: add --allow-url exploration boundary (#353)

Minor updates:

  • docs: add LLM usage notes in issue and PR templates (#378)
  • browser: quote URLs in reproduction commands (#275)
  • inspect: show loading message and tolerate in spec (#364)
  • docs: generate CLI reference in manual (#357)

Bug fixes:

  • browser: tolerate state capture failure and resume on unexpected pauses (#383)
  • browser: wait for commit on cross-document history navigations (#381)
  • browser: only act on main-frame load events while navigating or loading (#380)
  • browser: missing match arms in action accepts function (#379)
  • browser: send quiesced event also on quiescence errors (#377)
  • browser: preserve directive prologues during js instrumentation (#375)
  • browser: negative coverage index (#367)
  • browser: match button replay fingerprints (#356)
  • browser: generate valid numbers for input type=number (#351)

... (truncated)

Commits

Updates @chromatic-com/storybook from 5.4.0 to 5.6.0

Release notes

Sourced from @​chromatic-com/storybook's releases.

v5.6.0

🚀 Enhancement

🐛 Bug Fix

Authors: 3

v5.6.0-next.2

⚠️ Pushed to next

Authors: 1

v5.6.0-next.1

🚀 Enhancement

🐛 Bug Fix

⚠️ Pushed to next

Authors: 4

v5.6.0-next.0

🚀 Enhancement

Authors: 1

... (truncated)

Changelog

Sourced from @​chromatic-com/storybook's changelog.

v5.6.0 (Tue Oct 20 2026)

🚀 Enhancement

🐛 Bug Fix

Authors: 3

v5.5.1 (Mon Oct 12 2026)

🐛 Bug Fix

Authors: 1

v5.5.0 (Mon Oct 12 2026)

🚀 Enhancement

🐛 Bug Fix

Authors: 4

Commits
  • 4e6f653 Bump version to: 5.6.0 [skip ci]
  • ec181ff Update CHANGELOG.md [skip ci]
  • 29337ea Merge pull request #470 from chromaui/next
  • 2c2c710 Format the changelog
  • 2bd6536 Merge branch 'main' into next
  • 7122294 Merge pull request #471 from chromaui/storybook-11-ui-migration
  • 8599481 Move the pointer before hovering the quarantine badge
  • c5a8871 Cover the migrated toggle and tooltips with play functions
  • c0dbd9f Build the stories' shared-state channel without mockChannel
  • 8facf34 Replace UI components removed in Storybook 11
  • Additional commits viewable in compare view

Updates @playwright/test from 1.64.0 to 1.64.1

Release notes

Sourced from @​playwright/test's releases.

v1.64.1

Bug Fixes

  • #43247 [Bug]: _electron.launch intermittently loses a packaged app's first window since 1.64.0
  • #43242 [Regression]: Chromium 155+ aborts a preflighted cross-origin redirect whenever any route is registered (net::ERR_ABORTED)
Commits
  • cfe490d cherry-pick(#43353): docs: release notes for v1.64 Python
  • 866cbb8 chore: mark v1.64.1 (#43354)
  • 1b29247 cherry-pick(#43250): fix(electron): do not drop windows that have not navigat...
  • 632d976 cherry-pick(#43249): fix(chromium): disable AvoidCorsURLLoaderRestartOnRedirect
  • 824d0c5 cherry-pick(#43217): chore(dotnet): fix async suffix of optional-arg overload...
  • See full diff in compare view

Updates @storybook/addon-a11y from 10.6.1 to 10.6.5

Release notes

Sourced from @​storybook/addon-a11y's releases.

v10.6.5

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

v10.6.4

10.6.4

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-a11y's changelog.

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

10.6.4

10.6.3

10.6.2

Commits
  • 4f0a7d2 Bump version from "10.6.4" to "10.6.5" [skip ci]
  • 303276d Bump version from "10.6.3" to "10.6.4" [skip ci]
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • 243c06b Merge pull request #36726 from storybookjs/sidnioulz/patch-internal-v11
  • See full diff in compare view

Updates @storybook/addon-docs from 10.6.1 to 10.6.5

Release notes

Sourced from @​storybook/addon-docs's releases.

v10.6.5

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

v10.6.4

10.6.4

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/addon-docs's changelog.

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

10.6.4

10.6.3

10.6.2

Commits
  • 4f0a7d2 Bump version from "10.6.4" to "10.6.5" [skip ci]
  • 303276d Bump version from "10.6.3" to "10.6.4" [skip ci]
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • d0c7fa2 Merge pull request #36526 from storybookjs/validate/preact-11
  • See full diff in compare view

Updates @storybook/addon-svelte-csf from 5.1.5 to 5.1.6

Release notes

Sourced from @​storybook/addon-svelte-csf's releases.

v5.1.6

Patch Changes

Changelog

Sourced from @​storybook/addon-svelte-csf's changelog.

5.1.6

Patch Changes

Commits

Updates @storybook/sveltekit from 10.6.1 to 10.6.5

Release notes

Sourced from @​storybook/sveltekit's releases.

v10.6.5

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

v10.6.4

10.6.4

v10.6.3

10.6.3

v10.6.2

10.6.2

Changelog

Sourced from @​storybook/sveltekit's changelog.

10.6.5

  • Typescript: Exclude all dunderscore prefixed folders from production compilation - #36740, thanks @​mrginglymus!

10.6.4

10.6.3

10.6.2

Commits
  • 4f0a7d2 Bump version from "10.6.4" to "10.6.5" [skip ci]
  • 303276d Bump version from "10.6.3" to "10.6.4" [skip ci]
  • 9b4e295 Bump version from "10.6.2" to "10.6.3" [skip ci]
  • 5f00d7d Bump version from "10.6.1" to "10.6.2" [skip ci]
  • See full diff in compare view

Updates @sveltejs/kit from 3.0.1 to 3.1.0

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Changelog

Sourced from @​sveltejs/kit's changelog.

3.1.0

Minor Changes

  • feat: support report-sha256/report-sha384/report-sha512 CSP hash-reporting keywords (#17398)

  • feat: emit a sveltekit.endpoint span for +server handlers when server tracing is enabled (#17325)

Patch Changes

  • fix: don't treat every module as server-only when the project is inside a server directory (#17376)

  • fix: continue deployment recovery when service worker updates fail (#17440)

  • fix: infer prerendered MIME types from generated files (#17381)

  • fix: leave generated files alone when their contents are unchanged (#17310)

  • fix: leave focus in the parent page when an app in an unfocused iframe starts or navigates (#17297)

  • fix: don't warn about Storybook's Vite plugins that use transformIndexHtml (#17373)

Commits
  • 73bf98c Version Packages (#17364)
  • 38b95ac fix: continue deployment recovery when service worker updates fail (#17440)
  • c7e59b3 fix: leave focus in the parent page from an unfocused iframe (#17297)
  • 35835f2 feat: support report-sha256/report-sha384/report-sha512 CSP keywords (#17398)
  • 230d00c fix: infer prerendered MIME types from generated files (#17381)
  • 59441bc fix: don't treat every module as server-only when the project is inside a `se...
  • 3bc9234 fix: don't warn about Storybook's Vite plugins that use transformIndexHtml ...
  • 9b56543 fix: leave unchanged generated files alone, and replace changed ones atomical...
  • fd7cd9a docs: fix links (#17363)
  • 51a4e0b feat: emit a span for +server handlers when tracing is enabled (#17325)
  • See full diff in compare view

Updates @types/node from 26.6.4 to 26.6.6

Commits

Updates @vitest/coverage-v8 from 5.0.3 to 5.0.5

Release notes

Sourced from @​vitest/coverage-v8's releases.

v5.0.5

   🐞 Bug Fixes

    View changes on GitHub

v5.0.4

   🚀 Features

   🐞 Bug Fixes

@dependabot
build(deps-dev): bump the dev-tooling group across 1 directory with 2…
5c1b3e4 
…1 updates

Bumps the dev-tooling group with 21 updates in the /saiku-ui directory:

| Package | From | To |
| --- | --- | --- |
| [@antithesishq/bombadil](https://github.com/antithesishq/bombadil) | `0.7.8` | `0.7.10` |
| [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `5.4.0` | `5.6.0` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.64.0` | `1.64.1` |
| [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.6.1` | `10.6.5` |
| [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.6.1` | `10.6.5` |
| [@storybook/addon-svelte-csf](https://github.com/storybookjs/addon-svelte-csf) | `5.1.5` | `5.1.6` |
| [@storybook/sveltekit](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/sveltekit) | `10.6.1` | `10.6.5` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `3.0.1` | `3.1.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.4` | `26.6.6` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `5.0.3` | `5.0.5` |
| [eslint](https://github.com/eslint/eslint) | `10.12.0` | `10.13.0` |
| [eslint-plugin-svelte](https://github.com/sveltejs/eslint-plugin-svelte/tree/HEAD/packages/eslint-plugin-svelte) | `3.23.0` | `3.23.1` |
| [jsdom](https://github.com/jsdom/jsdom) | `30.1.2` | `30.1.3` |
| [prettier](https://github.com/prettier/prettier) | `3.9.9` | `3.9.10` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.6.1` | `10.6.5` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.57.2` | `5.57.3` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.7.6` | `4.7.7` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.71.1` | `8.72.1` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.3.4` | `8.3.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `5.0.3` | `5.0.5` |
| [@sveltejs/package](https://github.com/sveltejs/kit/tree/HEAD/packages/package) | `3.0.0` | `3.0.1` |



Updates `@antithesishq/bombadil` from 0.7.8 to 0.7.10
- [Release notes](https://github.com/antithesishq/bombadil/releases)
- [Changelog](https://github.com/antithesishq/bombadil/blob/main/CHANGELOG.md)
- [Commits](antithesishq/bombadil@v0.7.8...v0.7.10)

Updates `@chromatic-com/storybook` from 5.4.0 to 5.6.0
- [Release notes](https://github.com/chromaui/addon-visual-tests/releases)
- [Changelog](https://github.com/chromaui/addon-visual-tests/blob/main/CHANGELOG.md)
- [Commits](chromaui/addon-visual-tests@v5.4.0...v5.6.0)

Updates `@playwright/test` from 1.64.0 to 1.64.1
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.64.0...v1.64.1)

Updates `@storybook/addon-a11y` from 10.6.1 to 10.6.5
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.5/code/addons/a11y)

Updates `@storybook/addon-docs` from 10.6.1 to 10.6.5
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.5/code/addons/docs)

Updates `@storybook/addon-svelte-csf` from 5.1.5 to 5.1.6
- [Release notes](https://github.com/storybookjs/addon-svelte-csf/releases)
- [Changelog](https://github.com/storybookjs/addon-svelte-csf/blob/main/CHANGELOG.md)
- [Commits](storybookjs/addon-svelte-csf@v5.1.5...v5.1.6)

Updates `@storybook/sveltekit` from 10.6.1 to 10.6.5
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.5/code/frameworks/sveltekit)

Updates `@sveltejs/kit` from 3.0.1 to 3.1.0
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@3.1.0/packages/kit)

Updates `@types/node` from 26.6.4 to 26.6.6
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vitest/coverage-v8` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/coverage-v8)

Updates `eslint` from 10.12.0 to 10.13.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.12.0...v10.13.0)

Updates `eslint-plugin-svelte` from 3.23.0 to 3.23.1
- [Release notes](https://github.com/sveltejs/eslint-plugin-svelte/releases)
- [Changelog](https://github.com/sveltejs/eslint-plugin-svelte/blob/main/packages/eslint-plugin-svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/eslint-plugin-svelte/commits/eslint-plugin-svelte@3.23.1/packages/eslint-plugin-svelte)

Updates `jsdom` from 30.1.2 to 30.1.3
- [Release notes](https://github.com/jsdom/jsdom/releases)
- [Commits](jsdom/jsdom@v30.1.2...v30.1.3)

Updates `prettier` from 3.9.9 to 3.9.10
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.9...3.9.10)

Updates `storybook` from 10.6.1 to 10.6.5
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.6.5/code/core)

Updates `svelte` from 5.57.2 to 5.57.3
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.57.3/packages/svelte)

Updates `svelte-check` from 4.7.6 to 4.7.7
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.7.6...svelte-check@4.7.7)

Updates `typescript-eslint` from 8.71.1 to 8.72.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint)

Updates `vite` from 8.3.4 to 8.3.5
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite)

Updates `vitest` from 5.0.3 to 5.0.5
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.0.5/packages/vitest)

Updates `@sveltejs/package` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/package/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/package@3.0.1/packages/package)

---
updated-dependencies:
- dependency-name: "@antithesishq/bombadil"
  dependency-version: 0.7.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@chromatic-com/storybook"
  dependency-version: 5.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@playwright/test"
  dependency-version: 1.64.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-a11y"
  dependency-version: 10.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-docs"
  dependency-version: 10.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/addon-svelte-csf"
  dependency-version: 5.1.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@storybook/sveltekit"
  dependency-version: 10.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/kit"
  dependency-version: 3.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: "@types/node"
  dependency-version: 26.6.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: eslint
  dependency-version: 10.13.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: eslint-plugin-svelte
  dependency-version: 3.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: jsdom
  dependency-version: 30.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: prettier
  dependency-version: 3.9.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: storybook
  dependency-version: 10.6.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: svelte
  dependency-version: 5.57.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: svelte-check
  dependency-version: 4.7.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: typescript-eslint
  dependency-version: 8.72.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-tooling
- dependency-name: vite
  dependency-version: 8.3.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: vitest
  dependency-version: 5.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
- dependency-name: "@sveltejs/package"
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) labels Nov 1, 2026
@github-actions github-actions Bot added risk/high Change risk tier: high (see docs/risk-tiers.md) area/ui area/design-system labels Nov 1, 2026
@spicule-hive

spicule-hive Bot commented Nov 1, 2026

Copy link
Copy Markdown
5c1b3e4

ℹ️ Sentinel notice — informational; author is trusted (allow-listed bot), merge is not blocked

Hive flagged this PR (author @dependabot[bot], head 5c1b3e4f9fae) because it matches behaviors that can override security controls, escalate privileges or damage the codebase. This is a heuristic, not an accusation — a maintainer should confirm the change is intended before it merges.

  • sensitive_path — changes 2 sensitive path(s) (Touches a sensitive path (OWNERS, workflows, policies, hive config, security docs, …))
    • saiku-ui/package-lock.json
    • saiku-ui/package.json

Hive did not add the sentinel-alert label because this author is trusted. The finding remains recorded for audit and the dashboard Security tab; set sentinel.trusted_authors_block: true to require the blocking label for trusted authors too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/design-system area/ui dependencies Pull requests that update a dependency file npm Dependabot: npm ecosystem (saiku-ui) risk/high Change risk tier: high (see docs/risk-tiers.md)

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants