Skip to content

build(deps): bump tar and storybook - #315

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-057be63ebd
Closed

build(deps): bump tar and storybook#315
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-057be63ebd

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Removes tar. It's no longer used after updating ancestor dependency storybook. These dependencies need to be updated together.

Removes tar

Updates storybook from 7.6.24 to 10.5.5

Release notes

Sourced from storybook's releases.

v10.5.5

10.5.5

v10.5.4

10.5.4

v10.5.3

10.5.3

v10.5.2

10.5.2

v10.5.1

10.5.1

v10.5.0

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales

... (truncated)

Changelog

Sourced from storybook's changelog.

10.5.5

10.5.4

10.5.3

10.5.2

  • TanStack: Fix createServerFn validator mock - #35185, thanks @​sjh9714!
  • TanStack: Support pathless layout routes (id-only) in story routing - #35465, thanks @​unpunnyfuns!
  • Tanstack-react: Add missing Hydrate export - #35111, thanks @​arun-357!
  • Tanstack-react: Keep JSX-only component references during dead-code elimination - #35206, thanks @​yatishgoel!
  • Vitest: Fix coverage toggle crash on Vite 6 by clearing closed Vitest instance on restart - #35461, thanks @​yannbf!

10.5.1

10.5.0

Foundational changes for new AI workflows

Storybook 10.5 contains hundreds of fixes and improvements:

  • ⚡️ Angular-vite framework: Modern, fast dev, docs, and test (preview)
  • 🌈 Vitest initialGlobals: Test across themes, viewports, locales
  • 🤖 Agentic review: AI-curated visual changesets and search results (experimental)
  • ⚛️ React docgen service: Unified metadata across MCP, Docs, and Controls (experimental)
  • 🧑‍💻 Claude / Codex plugins: One-click ADE integration (experimental)

... (truncated)

Commits
  • 05a52b7 Bump version from "10.5.4" to "10.5.5" [skip ci]
  • 201e77a Merge pull request #35512 from storybookjs/yann/ai-setup-msw-v3
  • cac1e6d Merge pull request #35584 from storybookjs/norbert/upgrade-ws-8.21
  • 9166a91 Merge pull request #35567 from ia319/bug/35566-npm-12-registry-flags
  • 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
  • 3f07eb7 Merge pull request #35560 from storybookjs/norbert/fix-rn-telemetry-metadata
  • 22e3666 Merge pull request #35541 from hxy-asdw/fix/prismjs-dark-mode-contrast-35540
  • 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
  • b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
  • 518f711 Bump version from "10.5.1" to "10.5.2" [skip ci]
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from henningmu as a code owner July 21, 2026 00:56
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026

@doistbot doistbot left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR updates storybook to 10.5.3 and removes the now-unused tar dependency.

Few things worth tightening:

  • Only the storybook CLI package was bumped to 10.5.3 while all @storybook/* packages (addon-actions, addon-essentials, addon-links, react, react-webpack5) remain at 7.6.24. Storybook requires all packages to share the same major version, so this mismatch will cause storybook dev and storybook build to error out at startup. Either bump the @storybook/* devDependencies to matching 10.x versions in lockstep, or revert the storybook bump until a coordinated upgrade can be done.

Share FeedbackReview Logs

"react-dom": "18.3.1",
"react-is": "18.3.1",
"storybook": "7.6.24"
"storybook": "10.5.3"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P0 storybook was bumped to 10.5.3 but the @storybook/* packages (addon-actions, addon-essentials, addon-links, react, react-webpack5) remain at 7.6.24. Storybook requires all packages to be the same major version; running storybook dev or storybook build with this mismatch will error out at startup. The dependabot update needs to bump all @storybook/* devDependencies to matching 10.x versions, or the storybook bump should be reverted until a coordinated upgrade can be done.

Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core). These dependencies need to be updated together.


Removes `tar`

Updates `storybook` from 7.6.24 to 10.5.5
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.5.5/code/core)

---
updated-dependencies:
- dependency-name: storybook
  dependency-version: 10.5.3
  dependency-type: direct:development
- dependency-name: tar
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-057be63ebd branch from 0dc8e43 to 214efbf Compare August 1, 2026 08:18
@dependabot @github

dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 18, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-057be63ebd branch August 18, 2026 18:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant