deps: bump the npm-minor-patch group with 5 updates - #926
Merged
jiashuoz merged 1 commit intoAug 23, 2026
Conversation
Bumps the npm-minor-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.10` | `4.1.11` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` | | [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) | `10.5.7` | `10.5.9` | | [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite) | `10.5.7` | `10.5.9` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.5.7` | `10.5.9` | Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8) Updates `vitest` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) Updates `@storybook/react` from 10.5.7 to 10.5.9 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.9/code/renderers/react) Updates `@storybook/react-vite` from 10.5.7 to 10.5.9 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.9/code/frameworks/react-vite) Updates `storybook` from 10.5.7 to 10.5.9 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.9/code/core) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@storybook/react" dependency-version: 10.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@storybook/react-vite" dependency-version: 10.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: storybook dependency-version: 10.5.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
jiashuoz
approved these changes
Aug 23, 2026
jiashuoz
left a comment
jiashuoz
left a comment
Member
There was a problem hiding this comment.
Approved: vitest/storybook patch bumps, all CI green after coverage-gate re-run.
dependabot
Bot
deleted the
dependabot/npm_and_yarn/npm-minor-patch-6b2b06905b
branch
August 23, 2026 20:15
jiashuoz
added a commit
that referenced
this pull request
Aug 24, 2026
@e2a/sdk 5.7.0 was cut on 2026-08-16 and has been four commits behind the repo ever since, including a SECURITY fix that has sat in an "## Unreleased" changelog section the whole time: #909 reject dot-segment path params that retarget requests #918 shared base-URL resolution (E2A_API_URL, WSListener parity) #923 live domain suite alignment #926 dependency bump The gap is my error in #932. I scoped the TypeScript SDK by diffing against v1.7.10 and concluded "devDependency bump only, no republish". The correct baseline is the last PUBLISHED tag, ts-sdk-v5.7.0, which predates v1.7.10 by four days. So the Python client shipped its dot-segment guard as 5.8.0 while the TypeScript client kept serving 5.7.0 without one — and @e2a/cli depends on @e2a/sdk, so every CLI install carried the unfixed URL builder underneath. Minor rather than patch, matching the Python client: the guard throws E2AValidationError on path parameter values that previously produced a real, misdirected request. The changelog also gains the two user-visible #918 changes it never documented — the E2A_API_URL rename with E2A_BASE_URL deprecated, and WSListener no longer ignoring the environment (it honoured only an explicit opts.baseUrl and otherwise went straight to the hosted service, so a self-hosted deployment's listener silently pointed at api.e2a.dev). Note this is NOT the fail-closed change #918 made elsewhere: the TypeScript client still falls back to https://api.e2a.dev by design. No CLI republish needed — cli 2.5.0 requires @e2a/sdk ^5.7.0, which 5.8.0 satisfies, so installs pick the fix up on resolution. Co-authored-by: Jace <jace@team.tokencanopy.com> Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the npm-minor-patch group with 5 updates:
4.1.104.1.114.1.104.1.1110.5.710.5.910.5.710.5.910.5.710.5.9Updates
@vitest/coverage-v8from 4.1.10 to 4.1.11Release notes
Sourced from @vitest/coverage-v8's releases.
Commits
9bd8d46chore: release v4.1.11 (#10995)Updates
vitestfrom 4.1.10 to 4.1.11Release notes
Sourced from vitest's releases.
Commits
9bd8d46chore: release v4.1.11 (#10995)9851dbcfix(browser): trigger playwright/chromium gc on lower disk availability [back...Updates
@storybook/reactfrom 10.5.7 to 10.5.9Release notes
Sourced from @storybook/react's releases.
Changelog
Sourced from @storybook/react's changelog.
Commits
8f56104Bump version from "10.5.8" to "10.5.9" [skip ci]6ef7d1aBump version from "10.5.7" to "10.5.8" [skip ci]647e982Merge pull request #35743 from storybookjs/norbert/revive-34415-file-aware-ts...Updates
@storybook/react-vitefrom 10.5.7 to 10.5.9Release notes
Sourced from @storybook/react-vite's releases.
Changelog
Sourced from @storybook/react-vite's changelog.
Commits
8f56104Bump version from "10.5.8" to "10.5.9" [skip ci]6ef7d1aBump version from "10.5.7" to "10.5.8" [skip ci]647e982Merge pull request #35743 from storybookjs/norbert/revive-34415-file-aware-ts...Updates
storybookfrom 10.5.7 to 10.5.9Release notes
Sourced from storybook's releases.
Changelog
Sourced from storybook's changelog.
Commits
8f56104Bump version from "10.5.8" to "10.5.9" [skip ci]f31554bBackport the module-graph hot/cold split and no-op index skip to 10.5.9.c1db83aMerge pull request #35521 from TheSeydiCharyyev/fix/35436-urlstore-docs-path6ef7d1aBump version from "10.5.7" to "10.5.8" [skip ci]647e982Merge pull request #35743 from storybookjs/norbert/revive-34415-file-aware-ts...c028e5cMerge pull request #35528 from FrancoKaddour/fix/focus-instrumentation-protot...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions