deps(npm): bump the npm-minor-patch group in /frontend/taskdeck-web with 13 updates

[dependabot]

Bumps the npm-minor-patch group in /frontend/taskdeck-web with 13 updates:

Package	From	To
@tanstack/vue-virtual	3.13.33	3.13.34
marked	18.0.6	18.0.7
@playwright/test	1.61.1	1.62.0
@storybook/vue3-vite	10.5.2	10.5.5
@typescript-eslint/eslint-plugin	8.64.0	8.65.0
@typescript-eslint/parser	8.64.0	8.65.0
baseline-browser-mapping	2.10.43	2.11.4
eslint	10.7.0	10.8.0
globals	17.7.0	17.8.0
happy-dom	20.11.0	20.11.1
postcss	8.5.20	8.5.23
storybook	10.5.2	10.5.5
vue-tsc	3.3.7	3.3.8

Updates @tanstack/vue-virtual from 3.13.33 to 3.13.34

Release notes

Sourced from @​tanstack/vue-virtual's releases.

@​tanstack/vue-virtual@​3.13.34

Patch Changes

• Updated dependencies [7ae32b5]:
  • @​tanstack/virtual-core@​3.17.6

Changelog

Sourced from @​tanstack/vue-virtual's changelog.

3.13.34

Patch Changes

• Updated dependencies [7ae32b5]:
  • @​tanstack/virtual-core@​3.17.6

Commits

• 32b2f2b ci: Version Packages (#1238)
• See full diff in compare view

Updates marked from 18.0.6 to 18.0.7

Release notes

Sourced from marked's releases.

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

• Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
• Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
• keep empty list after blockquote as a sibling block (#4004) (3f144a0)
• preserve code spans adjacent to tildes (#4012) (0de7188)
• Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
• treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

Commits

• a8971a1 chore(release): 18.0.7 [skip ci]
• d899c2e chore(deps): bump actions/setup-node from 6 to 7 (#4025)
• 7fbf82e chore(deps-dev): bump semantic-release from 25.0.7 to 25.0.8 (#4026)
• 738edf2 chore(deps-dev): bump brace-expansion from 5.0.2 to 5.0.6 (#4027)
• 9154f8f fix: Avoid O(n^2) masked source rebuild in inline tokenizer (#4017)
• f945fc5 fix: Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexe...
• 3f144a0 fix: keep empty list after blockquote as a sibling block (#4004)
• 0de7188 fix: preserve code spans adjacent to tildes (#4012)
• f056437 fix: Recognize setext headings whose first line starts with # (#4015)
• 12bfa94 chore(deps-dev): bump semantic-release from 25.0.5 to 25.0.7 (#4020)
• Additional commits viewable in compare view

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table> 

... (truncated)

Commits

• e3950d9 chore: mark v1.62.0 (#41981)
• f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
• 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
• 2934858 fix: correct pending navigation log spacing (#41949)
• 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
• bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
• 15c4f55 fix(mcp): identify downloads explicitly (#41933)
• f5fa967 fix(network): request.postData() returns null for empty string body override ...
• 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
• 244a1ff feat(firefox): roll to r1538 (#41938)
• Additional commits viewable in compare view

Updates @storybook/vue3-vite from 10.5.2 to 10.5.5

Release notes

Sourced from @​storybook/vue3-vite's releases.

v10.5.5

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade `ws` to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

v10.5.4

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

v10.5.3

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

Changelog

Sourced from @​storybook/vue3-vite's changelog.

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade ws to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

Commits

• 05a52b7 Bump version from "10.5.4" to "10.5.5" [skip ci]
• 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
• 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
• b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
• See full diff in compare view

Updates @typescript-eslint/eslint-plugin from 8.64.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.65.0 (2026-07-20)

🚀 Features

• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)

🩹 Fixes

• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• aa602bd fix(eslint-plugin): [no-unnecessary-parameter-property-assignment] don't flag...
• 1e90d67 feat(eslint-plugin): [no-shadow] specialized error on enum declaration and me...
• b32fb34 docs: fix broken code samples in no-extraneous-class and prefer-function-type...
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• 18c01c7 feat(eslint-plugin): [no-restricted-imports] deprecate extension rule (#12527)
• 96e8fe2 fix(eslint-plugin): [unbound-method] report unbound methods accessed via memb...
• 0d06406 chore: add attw validation to repo (#12437)
• 9d9973b fix(eslint-plugin): [prefer-string-starts-ends-with] handle escaped $ ending ...
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• See full diff in compare view

Updates @typescript-eslint/parser from 8.64.0 to 8.65.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.65.0

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• eslint-plugin: [no-restricted-imports] deprecate extension rule (#12527, #19562, #11889)
• eslint-plugin: [no-shadow] specialized error on enum declaration and member shadowing (#12578)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)
• typescript-estree: throw for invalid import defer syntax (#12552)

🩹 Fixes

• eslint-plugin: [prefer-string-starts-ends-with] handle escaped $ ending regex literals (#12515)
• eslint-plugin: [unbound-method] report unbound methods accessed via member expression on union types (#12448)
• eslint-plugin: [no-unnecessary-parameter-property-assignment] don't flag computed assignments with a variable key (#12568)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• Serhii Leniv @​Serhii-Leniv
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.65.0 (2026-07-20)

🚀 Features

• add warning when TS 7 is detected (#12529)
• parser: add onUnsupportedTypeScriptVersion option to error on unsupported TypeScript versions (#12465)

❤️ Thank You

• Evyatar Daud @​StyleShit
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger
• 송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

• 63ba81b chore(release): publish 8.65.0
• eaf4576 feat: add warning when TS 7 is detected (#12529)
• d8f1044 feat(parser): add onUnsupportedTypeScriptVersion option to error on unsupport...
• 0d06406 chore: add attw validation to repo (#12437)
• c2386e4 chore(deps): update dependency prettier to v3.9.5 (#12486)
• See full diff in compare view

Updates baseline-browser-mapping from 2.10.43 to 2.11.4

Release notes

Sourced from baseline-browser-mapping's releases.

v2.11.0

What's Changed in 2.11.0

• feat: Adds a new getTimeline() method for getting the series of minimum browser changes, either grouped by date or by browser.
• refactor: Substantial refactoring of the data compression process that replaces the full list of browsers from @mdn/browser-compat-data and downstream-browsers.json and features from web-features (in their very pared down form) with a change-list timeline that reflects which versions supported Baseline (newly available) on a given date. Thanks to @​swwind for the idea!
• refactor: Some common functions have been moved to a util.ts module for use in other scripts.
• fix: Removes process.exit() calls when unsupported option combinations are passed to getCompatibleVersions() and getAllVersions() in favour of throwing an Error. There is a small security risk with process.exit() calls that sites accepting unsanitised inputs could be the subject of attacks. Unsupported config options now throw and Error which should allow for more graceful handling. Thanks to @​bnbdr for flagging this as vulnerability CVE-2026-45819 .

Fixes #134

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.10.44...v2.11.0

v2.9.3 - remove process.loadEnvFile()

What's Changed

• Remove process.loadEnfFile() from main script by @​tonypconway in web-platform-dx/baseline-browser-mapping#112

Full Changelog: web-platform-dx/baseline-browser-mapping@v2.9.2...v2.9.3

Commits

• 3181ec7 Patch to 2.11.4 because browser or feature data changed
• 433f067 Browser or feature data changed
• f10fc63 Updating static site
• 5098389 Patch to 2.11.3 because browser or feature data changed
• 12b1a19 Browser or feature data changed
• 001faf1 Patch to 2.11.2 because browser or feature data changed
• 9b11b2d Browser or feature data changed
• 67502fe Updating static site
• 0a7ce51 Patch to 2.11.1 because browser or feature data changed
• 3f08bfe Browser or feature data changed
• Additional commits viewable in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

• 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
• 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
• e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
• 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
• 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
• b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
• 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
• 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
• 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
• 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
• d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
• eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
• c5963f7 docs: Update README (GitHub Actions Bot)

Chores

• 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
• eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
• e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
• ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
• 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
• fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
• 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
• 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
• a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
• 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
• 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
• a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
• c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
• 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
• 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
• dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
• 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
• 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
• d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
• bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)

Commits

• 749dfed 10.8.0
• 4bd0d75 Build: changelog update for 10.8.0
• 4fbf46d test: pin webpack version to 5.108.4 (#21137)
• 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106)
• 784dfbe docs: Clarify no-eq-null description (#21120)
• 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129)
• 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101)
• eccbe7b test: add error locations to no-class-assign (#21123)
• 2fee9bb feat: export ConfigObject from eslint/config (#21082)
• e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118)
• Additional commits viewable in compare view

Updates globals from 17.7.0 to 17.8.0

Release notes

Sourced from globals's releases.

v17.8.0

• Update globals (2026-07-01) (#347) 7394811

---

sindresorhus/globals@v17.7.0...v17.8.0

Commits

• 36c7659 17.8.0
• 7394811 Update globals (2026-07-01) (#347)
• See full diff in compare view

Updates happy-dom from 20.11.0 to 20.11.1

Release notes

Sourced from happy-dom's releases.

v20.11.1

👷‍♂️ Patch fixes

• Improve performance of query selectors by avoiding construction of DOMException when not needed - By @@​cyfung1031 in task #2228

Commits

• b3b31ad fix: #2228 Improve performance of query selectors by avoiding construction ...
• See full diff in compare view

Updates postcss from 8.5.20 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

Changelog

Sourced from postcss's changelog.

8.5.23

• Do not load source map without opts.from for security reasons.

8.5.22

• Fixed custom property losing semicolon before a comment (by @​sarathfrancis90).

8.5.21

• Fixed childless at-rule losing semicolon before comment (by @​sarathfrancis90).
• Fixed docs (by @​isker).

Commits

• eb9e1fe Release 8.5.23 version
• 9d19c78 Update dependencies
• 7beca13 Does no load source map file without opts.from
• decea51 Typo
• c18e30d Update EM banner
• 98a39ad Update EM banner
• a3e48c4 Release 8.5.22 version
• f49d691 Fix custom property losing its semicolon before a comment (#2117)
• 28e0daf Release 8.5.21 version
• 3d2b4e4 Update dependencies
• Additional commits viewable in compare view

Updates storybook from 10.5.2 to 10.5.5

Release notes

Sourced from storybook's releases.

v10.5.5

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade `ws` to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

v10.5.4

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

v10.5.3

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

Changelog

Sourced from storybook's changelog.

10.5.5

• CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @​yannbf!
• Core: Upgrade ws to fix security advisories - #35584, thanks @​ndelangen!
• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!
• TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @​unpunnyfuns!
• TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @​unpunnyfuns!
• TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @​unpunnyfuns!

10.5.4

• ReactNative: Telemetry framework detection fix - #35560, thanks @​ndelangen!
• SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @​hxy-asdw!

10.5.3

• Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @​valentinpalkovic!

Commits

• 05a52b7 Bump version from "10.5.4" to "10.5.5" [skip ci]
• 201e77a Merge pull request #35512 from storybookjs/yann/ai-setup-msw-v3
• cac1e6d Merge pull request #35584 from storybookjs/norbert/upgrade-ws-8.21
• 9166a91 Merge pull request #35567 from ia319/bug/35566-npm-12-registry-flags
• 3327dc4 Bump version from "10.5.3" to "10.5.4" [skip ci]
• 3f07eb7 Merge pull request #35560 from storybookjs/norbert/fix-rn-telemetry-metadata
• 22e3666 Merge pull request #35541 from hxy-asdw/fix/prismjs-dark-mode-contrast-35540
• 9ac2739 Bump version from "10.5.2" to "10.5.3" [skip ci]
• b4b00f2 Merge pull request #34971 from storybookjs/valentin/upgrade-typescript-6
• See full diff in compare view...

  Description has been truncated

[Chris0Jeky]

Fresh adversarial review — current head 291950af68581668270bebda3c2c9a8d2b44a333.

Findings

No code, dependency-compatibility, DCO, or release/security finding. The diff is limited to package.json and its lockfile; the synchronized Storybook, Playwright, TypeScript-ESLint, and Vue TSC resolutions remain within the repository's Node >=24.13.1 / TypeScript 6.0.x constraints. DCO is green. I read all existing PR-conversation comments, reviews, and review threads: all were empty.

Residual merge gates

• The successful checks exercised merge ref ff1ee066 + this head; main is now 397ba9d2368a7c5e7eb2daf31e1e43640b3ca144. Refresh the branch/merge ref, then re-prove checks and this review against that base before merge.
• The Taskdeck Execution project item is Pending with no Priority; with no linked Taskdeck issue it must be set to Priority V before handoff.

Recommendation: merge-ready only after those two current-base/governance gates are satisfied.

[Chris0Jeky]

Fresh independent review — current head 6493efa7a033113206eaf90816abaebf0bb0249e, based on current main 88eb6776ffd0ccaa5a6c87a88cbba31588dc9390.

Findings

No code, dependency-compatibility, or release/security finding in the current-base diff. It remains limited to the npm dependency declarations and lockfile; the Node >=24.13.1 and TypeScript 6.0.x compatibility constraints remain satisfied. I re-read the complete conversation (only the superseded-head review), reviews, and inline threads; there are no untriaged external comments or threads.

The new head is a GitHub web-flow merge commit without a Signed-off-by trailer, as is the earlier branch-refresh commit. The underlying Dependabot dependency commit is signed off. The current DCO job is queued, so its exact-head outcome remains a merge gate.

Residual merge gates

• Required CI, CI Extended, CodeQL, and DCO are running/queued on this exact head; no prior-head check result is being carried forward.
• The Taskdeck Execution project item remains Pending without Priority; it should be Priority V (no linked Taskdeck issue) before handoff.

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 6493efa7a0

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Chris0Jeky]

Exact-head gate update — head 6493efa7a033113206eaf90816abaebf0bb0249e, base 88eb6776ffd0ccaa5a6c87a88cbba31588dc9390.

DCO passed on this head (the server-generated branch-update merge commit has no Signed-off trailer; the underlying Dependabot source commit is signed). Codex's exact-head review reported no major issues.

This PR is not merge-ready: required CI / Backend Unit / Backend Unit (windows-latest) failed in run 30269592371, with 7 Taskdeck.Cli subprocess tests timing out at 30 seconds and orphan dotnet/conhost cleanup. This reproduces the scoped blocker in #1530, rather than identifying a package-update defect.

All other completed required lanes on this head are successful or intentionally skipped. Holding this PR pending #1530 resolution and a fresh exact-head check run.