Update storybook (resolve pnpm audit errors)#6317
Merged
witoszekdev merged 2 commits intomainfrom Feb 5, 2026
Merged
Conversation
🦋 Changeset detectedLatest commit: 9aa3a78 The changes in this PR will be included in the next version bump. Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Contributor
There was a problem hiding this comment.
Pull request overview
This pull request updates Storybook from version 9.x to 10.x (specifically 10.2.4) to resolve pnpm audit security vulnerabilities. The PR also adds the corresponding ESLint plugin for Storybook and includes necessary trust policy exclusions for transitive dependencies that haven't been updated yet.
Changes:
- Upgraded Storybook packages from 9.x to 10.2.4 (major version upgrade)
- Added eslint-plugin-storybook@10.2.4 for linting Storybook files
- Configured ESLint to use Storybook's recommended flat config
- Added trustPolicyExclude entries for various dependencies with security concerns
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| pnpm-workspace.yaml | Added trustPolicyExclude entries for dependencies with audit issues to allow the upgrade while waiting for upstream fixes |
| package.json | Updated Storybook packages from 9.x to 10.2.4 and added eslint-plugin-storybook |
| eslint.config.mjs | Imported eslint-plugin-storybook, added its recommended config, and cleaned up formatting (removed extraneous blank lines) |
Contributor
Differences FoundExpandLicense Package <<missing>> @sentry/cli <<missing>> @sentry/cli-darwin <<missing>> @sentry/cli-linux-arm <<missing>> @sentry/cli-linux-arm64 <<missing>> @sentry/cli-linux-i686 <<missing>> @sentry/cli-linux-x64 <<missing>> @sentry/cli-win32-arm64 <<missing>> @sentry/cli-win32-i686 <<missing>> @sentry/cli-win32-x64 Apache-2.0 @opentelemetry/api-logs Apache-2.0 @opentelemetry/core Apache-2.0 @opentelemetry/exporter-logs-otlp-http Apache-2.0 @opentelemetry/otlp-exporter-base Apache-2.0 @opentelemetry/otlp-transformer Apache-2.0 @opentelemetry/resources Apache-2.0 @opentelemetry/sdk-logs Apache-2.0 @opentelemetry/sdk-metrics Apache-2.0 @opentelemetry/sdk-trace-base Apache-2.0 long BSD-3-Clause @protobufjs/aspromise BSD-3-Clause @protobufjs/base64 BSD-3-Clause @protobufjs/codegen BSD-3-Clause @protobufjs/eventemitter BSD-3-Clause @protobufjs/fetch BSD-3-Clause @protobufjs/float BSD-3-Clause @protobufjs/inquire BSD-3-Clause @protobufjs/path BSD-3-Clause @protobufjs/pool BSD-3-Clause @protobufjs/utf8 BSD-3-Clause protobufjs BlueOak-1.0.0 jackspeak BlueOak-1.0.0 package-json-from-dist ISC @isaacs/cliui ISC foreground-child MIT @posthog/types MIT @rollup/rollup-linux-loong64-musl MIT @rollup/rollup-linux-ppc64-musl MIT @rollup/rollup-openbsd-x64 MIT @storybook/icons MIT bundle-name MIT default-browser MIT default-browser-id MIT eastasianwidth MIT empathic MIT eslint-plugin-storybook MIT is-inside-container MIT query-selector-shadow-dom MIT run-applescript MIT use-sync-external-store MIT wsl-utils SummaryExpand
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #6317 +/- ##
=======================================
Coverage 42.59% 42.59%
=======================================
Files 2497 2497
Lines 43401 43401
Branches 10271 10232 -39
=======================================
Hits 18485 18485
Misses 23590 23590
Partials 1326 1326 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
lkostrowski
approved these changes
Feb 5, 2026
This was referenced Feb 17, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.