Skip to content

chore(deps): update npm minor dependencies#77

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-minor-dependencies
Open

chore(deps): update npm minor dependencies#77
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-minor-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 24, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@base-ui/react (source) 1.3.0 → 1.4.1 age confidence
@modelcontextprotocol/sdk (source) 1.27.1 → 1.29.0 age confidence
@playwright/test (source) 1.58.2 → 1.60.0 age confidence
@slack/web-api (source) 7.15.2 → 7.16.0 age confidence
@storybook/addon-a11y (source) 10.3.6 → 10.4.0 age confidence
@storybook/addon-vitest (source) 10.3.6 → 10.4.0 age confidence
@storybook/nextjs-vite (source) 10.3.6 → 10.4.0 age confidence
@tailwindcss/postcss (source) 4.2.4 → 4.3.0 age confidence
jsdom 29.0.2 → 29.1.1 age confidence
knip (source) 6.0.6 → 6.14.1 age confidence
oxfmt (source) 0.41.0 → 0.50.0 age confidence
oxlint (source) 1.56.0 → 1.65.0 age confidence
oxlint-tsgolint 0.17.4 → 0.23.0 age confidence
storybook (source) 10.3.6 → 10.4.0 age confidence
tailwind-merge 3.5.0 → 3.6.0 age confidence
tailwindcss (source) 4.2.4 → 4.3.0 age confidence
tsdown (source) 0.21.10 → 0.22.0 age confidence
tsx (source) 4.21.0 → 4.22.2 age confidence
turbo (source) 2.8.20 → 2.9.14 age confidence
wrangler (source) 4.76.0 → 4.92.0 age confidence
zod (source) 4.3.6 → 4.4.3 age confidence

Release Notes

mui/base-ui (@​base-ui/react)

v1.4.1

Compare Source

Apr 20, 2026

General Changes
Navigation Menu

All contributors of this release in alphabetical order : @​atomiks, @​LukasTy

v1.4.0

Compare Source

Apr 13, 2026

General Changes
Alert Dialog
Autocomplete
Avatar
Checkbox
Collapsible
Combobox
Dialog
Drawer
Field
Menu
Navigation Menu
Number Field
OTP Field
  • Add preview OTPField component for one-time password and verification code entry (#​4365) by @​atomiks
Popover
Preview Card
Select
Slider
Switch
Tabs
Toast
Toggle Group

All contributors of this release in alphabetical order : @​arturbien, @​atomiks, @​CiscoFran10, @​devxoul, @​flaviendelangle, @​kyrregjerstad, @​LukasTy, @​lunaxislu, @​mattrothenberg, @​mdm317, @​michaldudak, @​mj12albert, @​Profesor08, @​ryanrhee, @​sai6855, @​tsbehlman

modelcontextprotocol/typescript-sdk (@​modelcontextprotocol/sdk)

v1.29.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.28.0...v1.29.0

v1.28.0

Compare Source

What's Changed

New Contributors

Full Changelog: modelcontextprotocol/typescript-sdk@v1.27.1...v1.28.0

microsoft/playwright (@​playwright/test)

v1.60.0

Compare Source

🌐 HAR recording on Tracing

tracing.startHar() / tracing.stopHar() expose HAR recording as a first-class tracing API, with the same content, mode and urlFilter options as recordHar. The returned Disposable makes it easy to scope a recording with await using:

await using har = await context.tracing.startHar('trace.har');
const page = await context.newPage();
await page.goto('https://playwright.dev');
// HAR is finalized when `har` goes out of scope.

🪝 Drop API

New locator.drop() simulates an external drag-and-drop of files or clipboard-like data onto an element. Playwright dispatches dragenter, dragover, and drop with a synthetic [DataTransfer] in the page context — works cross-browser and is great for testing upload zones:

await page.locator('#dropzone').drop({
  files: { name: 'note.txt', mimeType: 'text/plain', buffer: Buffer.from('hello') },
});

await page.locator('#dropzone').drop({
  data: {
    'text/plain': 'hello world',
    'text/uri-list': 'https://example.com',
  },
});

🎯 Aria snapshots

🛑 test.abort()

New test.abort() aborts the currently running test from a fixture, hook, or route handler with an optional message. Use it when you have detected an unrecoverable misuse and want to fail the test right away:

test('does not publish to the shared page', async ({ page }) => {
  await page.route('**/publish', route => {
    test.abort('Tests must not publish to the shared page. Use the `clone` option.');
    return route.abort();
  });
  // ...
});

New APIs

Browser, Context and Page
Locators and Assertions
Network
  • webSocketRoute.protocols() returns the WebSocket subprotocols requested by the page.
  • New option noDefaults in browserType.connectOverCDP() disables Playwright's default overrides on the default context (download behavior, focus emulation, media emulation), so attaching to a user's daily-driver browser doesn't disturb its state.
Errors and Reporting
Test runner
  • New {testFileBaseName} token in testProject.snapshotPathTemplate — file name without extension.
  • Test runner now errors when a config tries to override a non-option fixture, and rejects workers: 0 or negative values.

🛠️ Other improvements

  • HTML reporter:
    • npx playwright show-report accepts .zip files directly — no need to unzip first.
    • Steps that contain attachments inside nested children show an indicator on the parent step.
    • The repeatEachIndex is shown in the test header when non-zero.
  • Trace Viewer adds a pretty-print toggle for JSON / form request and response bodies in the network details panel.

Breaking Changes ⚠️

  • Removed long-deprecated APIs:
    • Locator.ariaRef() — use the standard locator.ariaSnapshot() pipeline.
    • handle option on BrowserContext.exposeBinding and Page.exposeBinding.
    • logger option on BrowserType.connect and BrowserType.connectOverCDP — use tracing instead.
    • Context options videosPath / videoSize — use recordVideo instead.

Browser Versions

  • Chromium 148.0.7778.96
  • Mozilla Firefox 150.0.2
  • WebKit 26.4

This version was also tested against the following stable channels:

  • Google Chrome 147
  • Microsoft Edge 147

v1.59.1

Compare Source

v1.59.0

Compare Source

slackapi/node-slack-sdk (@​slack/web-api)

v7.16.0

Compare Source

Minor Changes

  • 2814969: feat: add highlight_type to files.completeUploadExternal and filesUploadV2 for optimistic rendering

    import { WebClient } from "@​slack/web-api";

const client = new WebClient(process.env.SLACK_BOT_TOKEN);

await client.filesUploadV2({
  channel_id: "C0123456789",
  file: "./image.png",
  filename: "image.png",
  title: "Image Upload",
  highlight_type: "png",
});
storybookjs/storybook (@​storybook/addon-a11y)

v10.4.0

Compare Source

AI-assisted setup, change-aware review, and stronger framework support

Storybook 10.4 contains hundreds of fixes and improvements including:

  • 🤖 Agentic Setup: New CLI workflow for AI-assisted Storybook setup and onboarding
  • 🔍 Change review: Sidebar filtering to highlight new, modified, and related stories based on git changes
  • 🧭 Sidebar review tools: Status filtering, URL-persisted filters, and clearer review signals in the sidebar
  • ⚛️ TanStack React: New @storybook/tanstack-react framework with routing and server function support
  • 🧩 React MCP: Faster, more accurate component docgen powered by the TypeScript Language Server
  • 📱 React Native: Zero config RN project initialization
  • 🤝 Sharing: Easily publish and share your local Storybook with teammates, powered by Chromatic
List of all updates

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the deps label Mar 24, 2026
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 12 times, most recently from 2337bc8 to f45a490 Compare April 1, 2026 13:35
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 10 times, most recently from 6905ca5 to 06e1fb6 Compare April 8, 2026 09:39
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 3 times, most recently from 8263762 to 4900528 Compare April 10, 2026 08:55
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 10, 2026 •
edited
Loading

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Updated dependency and devDependency version pins across four package.json files: apps/mcp/package.json, apps/simulator/package.json, apps/web/package.json, and the repository root package.json. No source code or public API/exports were changed.

Changes

Cohort / File(s) Summary
MCP App Dependencies
apps/mcp/package.json		 Bumped @modelcontextprotocol/sdk from 1.27.1 → 1.29.0.
Simulator App DevDependencies
apps/simulator/package.json		 Bumped wrangler devDependency from 4.76.0 → 4.81.1.
Web App Dependencies
apps/web/package.json		 Bumped @base-ui/react from 1.3.0 → 1.4.0; bumped @playwright/test devDependency from 1.58.2 → 1.59.1.
Root Dev Dependencies
package.json		 Updated devDependencies: knip 6.0.6 → 6.4.1, oxfmt 0.41.0 → 0.44.0, oxlint 1.56.0 → 1.59.0, oxlint-tsgolint 0.17.4 → 0.20.0, turbo 2.8.20 → 2.9.6.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

Poem

🐇 I hopped through pins and nudged the lot,
Tiny bumps—no tangled knot,
SDK, UI, tools in tune,
The burrow glows beneath the moon,
A soft thump: updates are taught.

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title 'chore(deps): update npm minor dependencies' directly and accurately reflects the main purpose of the changeset, which is updating multiple npm package minor versions across the monorepo.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch renovate/npm-minor-dependencies

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 3 times, most recently from 557e528 to 0ba966a Compare April 12, 2026 17:42
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 11 times, most recently from 4d863f4 to bab2f13 Compare April 27, 2026 16:05
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch 17 times, most recently from 13dcc23 to 4a96785 Compare May 5, 2026 01:26
@renovate renovate Bot force-pushed the renovate/npm-minor-dependencies branch from 4a96785 to 629ae68 Compare May 5, 2026 16:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

deps

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants