Skip to content

build(deps): Bump the npm_and_yarn group across 8 directories with 4 updates#8690

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-1495870693
Open

build(deps): Bump the npm_and_yarn group across 8 directories with 4 updates#8690
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/apps/dashboard/npm_and_yarn-1495870693

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2026 •
edited by pr-codex bot
Loading

Bumps the npm_and_yarn group with 2 updates in the /apps/dashboard directory: next and storybook.
Bumps the npm_and_yarn group with 2 updates in the /apps/nebula directory: next and storybook.
Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: next.
Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: vite.
Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: next.
Bumps the npm_and_yarn group with 3 updates in the /packages/thirdweb directory: storybook, happy-dom and vite.
Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: next and storybook.

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.19

Release notes

Sourced from storybook's releases.

v9.1.19

9.1.19

  • Harden websocket connection

v9.1.18

9.1.18

  • No-op release. No changes.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

9.1.11

9.1.10

9.1.9

  • Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @​yannbf!
  • Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @​steciuk!

... (truncated)

Commits
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • 66b2d8e Fix test
  • 31f16c4 fix linting
  • 62dd25b Core: Require token for websocket connections
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for storybook since your current version.


Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.19

Release notes

Sourced from storybook's releases.

v9.1.19

9.1.19

  • Harden websocket connection

v9.1.18

9.1.18

  • No-op release. No changes.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

9.1.11

9.1.10

9.1.9

  • Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @​yannbf!
  • Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @​steciuk!

... (truncated)

Commits
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • 66b2d8e Fix test
  • 31f16c4 fix linting
  • 62dd25b Core: Require token for websocket connections
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for storybook since your current version.


Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates vite from 7.1.7 to 7.1.11

Release notes

Sourced from vite's releases.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.11 (2025-10-20)

Bug Fixes

  • dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

Code Refactoring

  • use subpath imports for types module reference (#20921) (d0094af)

Build System

7.1.10 (2025-10-14)

Bug Fixes

  • css: avoid duplicate style for server rendered stylesheet link and client inline style during dev (#20767) (3a92bc7)
  • css: respect emitAssets when cssCodeSplit=false (#20883) (d3e7eee)
  • deps: update all non-major dependencies (879de86)
  • deps: update all non-major dependencies (#20894) (3213f90)
  • dev: allow aliases starting with // (#20760) (b95fa2a)
  • dev: remove timestamp query consistently (#20887) (6537d15)
  • esbuild: inject esbuild helpers correctly for esbuild 0.25.9+ (#20906) (446eb38)
  • normalize path before calling fileToBuiltUrl (#20898) (73b6d24)
  • preserve original sourcemap file field when combining sourcemaps (#20926) (c714776)

Documentation

Miscellaneous Chores

7.1.9 (2025-10-03)

Reverts

7.1.8 (2025-10-02)

Bug Fixes

... (truncated)

Commits
  • 8b69c9e release: v7.1.11
  • f479cc5 fix(dev): trim trailing slash before server.fs.deny check (#20968)
  • 6fb41a2 chore(deps): update all non-major dependencies (#20966)
  • a817307 build: remove hash from built filenames (#20946)
  • ef411ce build: remove cjs reference in files field (#20945)
  • d0094af refactor: use subpath imports for types module reference (#20921)
  • ed4a0dc release: v7.1.10
  • c714776 fix: preserve original sourcemap file field when combining sourcemaps (#20926)
  • 446eb38 fix(esbuild): inject esbuild helpers correctly for esbuild 0.25.9+ (#20906)
  • 879de86 fix(deps): update all non-major dependencies
  • Additional commits viewable in compare view

Updates next from 15.3.8 to 15.5.10

Release notes

Sourced from next's releases.

v15.5.10

Please refer the following changelogs for more information about this security release:

v15.4.11

Please see this changelog for more information about this security patch.

v15.3.9

Please see this changelog for more information about this security patch.

Commits

Updates storybook from 9.0.15 to 9.1.19

Release notes

Sourced from storybook's releases.

v9.1.19

9.1.19

  • Harden websocket connection

v9.1.18

9.1.18

  • No-op release. No changes.

v9.1.17

9.1.17

Changelog

Sourced from storybook's changelog.

9.1.19

  • Harden websocket connection

9.1.18

  • No-op release. No changes.

9.1.16

9.1.15

9.1.14

9.1.13

9.1.12

  • Maintenance: Hotfix for missing nextjs dts files, thanks @​ndelangen!

9.1.11

9.1.10

9.1.9

  • Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @​yannbf!
  • Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @​steciuk!

... (truncated)

Commits
  • 20887f1 Bump version from "9.1.18" to "9.1.19" [skip ci]
  • 66b2d8e Fix test
  • 31f16c4 fix linting
  • 62dd25b Core: Require token for websocket connections
  • bbe61e3 Bump version from "9.1.17" to "9.1.18" [skip ci]
  • d0d5a3d Bump version from 9.1.16 to 9.1.17 MANUALLY
  • a06c257 filter env vars from .env files
  • a54a04c Bump version from "9.1.15" to "9.1.16" [skip ci]
  • ebd7ff5 Merge pull request #32859 from storybookjs/shilman/first-load-new-user
  • da2da6e Merge pull request #32862 from storybookjs/yann/patch-dev-server-preset
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for storybook since your current version.


Updates happy-dom from 17.4.4 to 20.0.2

Release notes

Sourced from happy-dom's releases.

v20.0.2

👷‍♂️ Patch fixes

  • Adds frozen intrinsics flag to workers in @happy-dom/server-renderer - By @​capricorn86 in task #1934

v20.0.1

👷‍♂️ Patch fixes

  • Adds warning for environment with unfrozen intrinsics (builtins) when JavaScript evaluation is enabled- By @​capricorn86 in task #1932
    • A security advisory has been reported showing that the recommended preventive measure of running Node.js with --disallow-code-generation-from-strings wasn't enough to protect against attackers escaping the VM context and accessing process-level functions. Big thanks to @​cristianstaicu for reporting this!
    • The documentation for how to run Happy DOM with JavaScript evaluation enabled in a safer way has been updated. Read more about it in the Wiki

v20.0.0

I avoid making breaking changes as much as possible in Happy DOM. When I have to make a breaking change, I try to keep it as minimal as possible. This could be a breaking change that impacts many projects, and I am truly sorry if you are negatively affected by this.

💣 Breaking Changes

  • Due to security risks, JavaScript evaluation is now disabled by default - By @​capricorn86 in task #1930
    • A security advisory (GHSA-37j7-fg3j-429f) has been reported that shows a security vulnerability where it's possible to escape the VM context and get access to process level functionality. Big thanks to @​Mas0nShi for reporting this!
    • Due to this security risk, JavaScript evaluation is now disabled by default to prevent that consumers accidentally executes untrusted code without taking precautions
    • JavaScript evaluation can be enabled by setting enableJavaScriptEvaluation to "true". Read more about how to enable this in a safer way in the Wiki

v19.0.2

👷‍♂️ Patch fixes

  • Fixes issue related to CSS pseudo selector :scope that didn't work correctly for direct descendants to root - By @​capricorn86 in task #1620

v19.0.1

👷‍♂️ Patch fixes

  • Fixes issue with sending in URLs as string in @happy-dom/server-renderer config using CLI - By @​capricorn86 in task #1908

v19.0.0

💣 Breaking Changes

  • Removes support for CommonJS - By @​capricorn86 in task #1730
    • Support for CommonJS is no longer needed as Node.js v18 is deprecated and v20 and above supports loading ES modules from CommonJS using require()
  • Updates Jest to v30 in the @happy-dom/jest-environment package - By @​capricorn86 in task #1730
  • Makes Jest packages peer dependencies to make it easier to align versions with the project using @happy-dom/jest-environment - By @​capricorn86 in task #1730

🎨 Features

... (truncated)

Commits
  • f4bd4eb fix: #0 Adds frozen intrinsics flag to server-renderer workers (#1934)
  • f45d92e fix: #0 Adds warning for environemnt with unfrozen builtins (#1932)
  • 819d15b BREAKING CHANGE: #0 Changes JavaScript evaluation to be disabled by default...
  • c80a08f fix: #1620 Fixes issue related to CSS pseudo selector :scope (#1911)
  • 220df23 fix: #1908 Fixes issue with sending in URLs as string in server-renderer co...
  • 9849f8b chore: #1906 Fixes failing unit test caused by package version (#1907)
  • 48d174e chore: #1904 Updates conventional commit package (#1905)
  • 275efe5 BREAKING CHANGE: #1620 Release v18.0.0
  • cf74f5f fix: #1841 Addresses an issue where an error occurred if the Element ID was...
  • bfd0fff chore: #1154 Fixes failing unit test (#1843)
  • Additional commits viewable in compare view

Updates vite from 7.1.7 to 7.1.11

Release notes

Sourced from vite's releases.

v7.1.11

Please refer to CHANGELOG.md for details.

v7.1.10

Please refer to CHANGELOG.md for details.

v7.1.9

Please refer to CHANGELOG.md for details.

v7.1.8

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

7.1.11 (2025-10-20)

Bug Fixes

  • dev: trim trailing slash before server.fs.deny check (#20968) (f479cc5)

Miscellaneous Chores

Code Refactoring

  • use subpath imports for types module reference (#20921) (d0094af)

Build System

@dependabot
build(deps): Bump the npm_and_yarn group across 8 directories with 4 …
e8642ba 
…updates

Bumps the npm_and_yarn group with 2 updates in the /apps/dashboard directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).
Bumps the npm_and_yarn group with 2 updates in the /apps/nebula directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).
Bumps the npm_and_yarn group with 1 update in the /apps/playground-web directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/portal directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 1 update in the /apps/wagmi-demo directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 1 update in the /apps/wallet-ui directory: [next](https://github.com/vercel/next.js).
Bumps the npm_and_yarn group with 3 updates in the /packages/thirdweb directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core), [happy-dom](https://github.com/capricorn86/happy-dom) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).
Bumps the npm_and_yarn group with 2 updates in the /packages/ui directory: [next](https://github.com/vercel/next.js) and [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core).


Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.19
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.19
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `vite` from 7.1.7 to 7.1.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.19
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core)

Updates `happy-dom` from 17.4.4 to 20.0.2
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v17.4.4...v20.0.2)

Updates `vite` from 7.1.7 to 7.1.11
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.11/packages/vite)

Updates `next` from 15.3.8 to 15.5.10
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v15.3.8...v15.5.10)

Updates `storybook` from 9.0.15 to 9.1.19
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v9.1.19/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v9.1.19/code/core)

---
updated-dependencies:
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.19
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.19
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.19
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: happy-dom
  dependency-version: 20.0.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: vite
  dependency-version: 7.1.11
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.5.10
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 9.1.19
  dependency-type: direct:development
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 26, 2026
@dependabot dependabot bot requested review from a team as code owners February 26, 2026 18:51
@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 26, 2026
@vercel
Copy link

vercel bot commented Feb 26, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
docs-v2 Error Error Feb 26, 2026 6:51pm
nebula Error Error Feb 26, 2026 6:51pm
thirdweb_playground Error Error Feb 26, 2026 6:51pm
thirdweb-www Error Error Feb 26, 2026 6:51pm
wallet-ui Error Error Feb 26, 2026 6:51pm

@github-actions github-actions bot added Dashboard Involves changes to the Dashboard. Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. packages Ecosystem Portal Involves changes to the Ecosystem Portal SDK Involves changes to the thirdweb SDK labels Feb 26, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 26, 2026

⚠️ No Changeset found

Latest commit: e8642ba

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dashboard Involves changes to the Dashboard. Dependencies Pull requests that update a dependency file Ecosystem Portal Involves changes to the Ecosystem Portal javascript Pull requests that update Javascript code packages Playground Changes involving the Playground codebase. Portal Involves changes to the Portal (docs) codebase. SDK Involves changes to the thirdweb SDK

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants