chore(deps): bump the npm-minor-and-patch group with 23 updates by dependabot[bot] · Pull Request #25 · ATLBitLab/aurora

dependabot · 2026-08-08T14:06:54Z

Bumps the npm-minor-and-patch group with 23 updates:

Package	From	To
@radix-ui/react-dialog	`1.1.15`	`1.1.23`
@radix-ui/react-navigation-menu	`1.2.14`	`1.2.22`
@radix-ui/react-slot	`1.2.4`	`1.3.3`
better-auth	`1.4.18`	`1.6.26`
react	`19.2.3`	`19.2.8`
@types/react	`19.2.13`	`19.2.18`
react-dom	`19.2.3`	`19.2.8`
@types/react-dom	`19.2.3`	`19.2.4`
@chromatic-com/storybook	`5.0.0`	`5.2.1`
@eslint/eslintrc	`3.3.3`	`3.3.6`
@storybook/addon-a11y	`10.2.7`	`10.5.6`
@storybook/addon-docs	`10.2.7`	`10.5.6`
@storybook/addon-onboarding	`10.2.7`	`10.5.6`
@storybook/addon-themes	`10.2.7`	`10.5.6`
@storybook/addon-vitest	`10.2.7`	`10.5.6`
@storybook/nextjs-vite	`10.2.7`	`10.5.6`
@vitest/browser-playwright	`4.0.18`	`4.1.10`
@vitest/coverage-v8	`4.0.18`	`4.1.10`
eslint-plugin-storybook	`10.2.7`	`10.5.6`
playwright	`1.58.2`	`1.62.1`
postcss	`8.5.6`	`8.5.25`
storybook	`10.2.7`	`10.5.6`
vitest	`4.0.18`	`4.1.10`

Updates @radix-ui/react-dialog from 1.1.15 to 1.1.23

Changelog

Sourced from @radix-ui/react-dialog's changelog.

1.1.23

Reverted breaking changes that caused compatibility issues with React Server Components.

Updated dependencies: @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-focus-guards@1.1.6, @radix-ui/react-focus-scope@1.1.16, @radix-ui/react-id@1.1.4, @radix-ui/react-portal@1.1.17, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-slot@1.3.3, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4

1.1.22

Updated dependencies: @radix-ui/react-slot@1.3.2, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-focus-scope@1.1.15, @radix-ui/react-portal@1.1.16

1.1.21

Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-focus-guards@1.1.5, @radix-ui/react-focus-scope@1.1.14, @radix-ui/react-id@1.1.3, @radix-ui/react-portal@1.1.15, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-slot@1.3.1, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3

1.1.20

Fixed broken ARIA references in Dialogs where a title or description elements are not rendered.

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-focus-scope@1.1.13, @radix-ui/react-portal@1.1.14, @radix-ui/react-presence@1.1.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-slot@1.3.0, @radix-ui/react-use-layout-effect@1.1.2

1.1.19

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-focus-scope@1.1.12, @radix-ui/react-presence@1.1.7

1.1.18

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-focus-scope@1.1.11, @radix-ui/react-portal@1.1.13

1.1.17

Removed dev-only warnings for dialogs when title and/or description is not rendered.

Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.

Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

1.1.16

Fixed disabled pointer events in closed dialogs

Fixed a bug where iOS text selection and editing on HTML inputs within react-dialog were broken

Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @dodomorandi for the original PR)

Added repository.directory to all package.json files

Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-slot@1.2.5, @radix-ui/react-focus-guards@1.1.4, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-focus-scope@1.1.9, @radix-ui/react-id@1.1.2, @radix-ui/react-portal@1.1.11, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-controllable-state@1.2.3

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-dialog since your current version.

Updates @radix-ui/react-navigation-menu from 1.2.14 to 1.2.22

Changelog

Sourced from @radix-ui/react-navigation-menu's changelog.

1.2.22

Reverted breaking changes that caused compatibility issues with React Server Components.

Updated dependencies: @radix-ui/react-collection@1.1.15, @radix-ui/react-compose-refs@1.1.5, @radix-ui/react-context@1.2.2, @radix-ui/react-direction@1.1.4, @radix-ui/react-dismissable-layer@1.1.19, @radix-ui/react-id@1.1.4, @radix-ui/react-presence@1.1.10, @radix-ui/react-primitive@2.1.10, @radix-ui/react-use-callback-ref@1.1.4, @radix-ui/react-use-controllable-state@1.2.6, @radix-ui/react-use-layout-effect@1.1.4, @radix-ui/react-use-previous@1.1.4, @radix-ui/react-visually-hidden@1.2.11

1.2.21

Updated dependencies: @radix-ui/react-collection@1.1.14, @radix-ui/react-primitive@2.1.9, @radix-ui/react-dismissable-layer@1.1.18, @radix-ui/react-visually-hidden@1.2.10

1.2.20

Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-collection@1.1.13, @radix-ui/react-compose-refs@1.1.4, @radix-ui/react-context@1.2.1, @radix-ui/react-direction@1.1.3, @radix-ui/react-dismissable-layer@1.1.17, @radix-ui/react-id@1.1.3, @radix-ui/react-presence@1.1.9, @radix-ui/react-primitive@2.1.8, @radix-ui/react-use-callback-ref@1.1.3, @radix-ui/react-use-controllable-state@1.2.5, @radix-ui/react-use-layout-effect@1.1.3, @radix-ui/react-use-previous@1.1.3, @radix-ui/react-visually-hidden@1.2.9

1.2.19

Improved tree-shaking so bundlers can drop unused components. Component parts are now marked /* @__PURE__ */ and use named render functions instead of Component.displayName = ... assignments, which previously prevented dead-code elimination with some bundlers.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.16, @radix-ui/react-presence@1.1.8, @radix-ui/react-visually-hidden@1.2.8, @radix-ui/react-use-controllable-state@1.2.4, @radix-ui/primitive@1.1.6, @radix-ui/react-collection@1.1.12, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.2.0, @radix-ui/react-direction@1.1.2, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.7, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2

1.2.18

Added CSS custom properties for item indicators' translate values.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.15, @radix-ui/primitive@1.1.5, @radix-ui/react-context@1.2.0, @radix-ui/react-presence@1.1.7, @radix-ui/react-collection@1.1.12

1.2.17

Fixed infinite re-render loop in React 19 caused by unstable composed ref callback references.

Other updates

Updated dependencies: @radix-ui/react-primitive@2.1.7, @radix-ui/react-dismissable-layer@1.1.14, @radix-ui/react-collection@1.1.11, @radix-ui/react-visually-hidden@1.2.7

1.2.16

Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.

Updated dependencies: @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-visually-hidden@1.2.6

1.2.15

Fixed triggers referencing a non-existent element via aria-controls when their content is removed from the DOM (credit to @dodomorandi for the original PR)

Added repository.directory to all package.json files

Updated dependencies: @radix-ui/react-presence@1.1.6, @radix-ui/react-dismissable-layer@1.1.12, @radix-ui/react-collection@1.1.9, @radix-ui/react-direction@1.1.2, @radix-ui/primitive@1.1.4, @radix-ui/react-compose-refs@1.1.3, @radix-ui/react-context@1.1.4, @radix-ui/react-id@1.1.2, @radix-ui/react-primitive@2.1.5, @radix-ui/react-use-callback-ref@1.1.2, @radix-ui/react-use-controllable-state@1.2.3, @radix-ui/react-use-layout-effect@1.1.2, @radix-ui/react-use-previous@1.1.2, @radix-ui/react-visually-hidden@1.2.5

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-navigation-menu since your current version.

Updates @radix-ui/react-slot from 1.2.4 to 1.3.3

Changelog

Sourced from @radix-ui/react-slot's changelog.

1.3.2, 1.3.3

Reverted breaking changes that caused compatibility issues with React Server Components.

1.3.1

Republish through CI to attach provenance attestations. The previous versions of these packages were published manually outside of CI and therefore shipped without provenance; this patch re-releases the same code through the CI pipeline so every package includes an attestation.

Updated dependencies: @radix-ui/primitive@1.1.7, @radix-ui/react-compose-refs@1.1.4

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.
const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>('Slot');
1.2.5

Fixed infinite re-render loop in React 19 caused by Slot creating a new ref callback on every render

Added support for nested Slottable via a render prop, so a slotted element can be wrapped while still merging Slot props and refs onto it

Added repository.directory to all package.json files

Improved error messages for invalid slot children

Updated dependencies: @radix-ui/react-compose-refs@1.1.3

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @radix-ui/react-slot since your current version.

Updates better-auth from 1.4.18 to 1.6.26

Release notes

Sourced from better-auth's releases.

v1.6.26

better-auth

Bug Fixes

Fixed session cleanup on user deletion to also remove sessions from secondary storage (#10520)

Fixed findSessions to skip invalid secondary-storage session entries without discarding other valid sessions (#10580)

Fixed email OTP sign-up to pass the verification type to custom OTP generators (#10608)

Fixed email OTP password reset to allow retrying after entering an invalid password (#10552)

Fixed email OTP verification to no longer reveal whether an email is registered before the OTP is verified (#10605)

Fixed jwtClient() collapsing createAuthClient type inference when combined with other client plugins (#10513)

Fixed JWT key minting inside database transactions to use the transaction-scoped adapter, preventing deadlocks on SQLite and ensuring keys commit with their surrounding transaction on Postgres and MySQL (#10623)

Fixed oAuthProxy to preserve Apple user data from form_post callbacks (#10599)

Fixed oneTapClient() collapsing createAuthClient type inference when combined with other client plugins (#10635)

Fixed database rate-limit cleanup to complete when no background task handler is configured (#10619)

Improved nextCookies performance in instrumented Next.js applications by reusing the next/headers import promise (#10467)

For detailed changes, see CHANGELOG

@better-auth/core

Features

Added a utility for creating stable, namespaced placeholder emails on the reserved placeholder.invalid domain (#10576)

For detailed changes, see CHANGELOG

@better-auth/redis-storage

Bug Fixes

Fixed listKeys() and clear() to use SCAN instead of KEYS so large keyspaces no longer block the Redis server (#10507)

For detailed changes, see CHANGELOG

Contributors

Thanks to everyone who contributed to this release:

@bytaesu, @Emmaccen, @gustavovalverde, @jashkarangiya, @jeroenvandermerwe, @jlucaso1, @krish-vachhani, @mrosberghaus, @XXMOHAMED012

Full changelog: v1.6.25...v1.6.26

v1.6.25

better-auth

Bug Fixes

Fixed Apple OAuth not sending the PKCE code challenge during authorization, causing token exchange failures (#10294)

Fixed Google One Tap creating new users when sign-up was disabled on the Google provider (#10479)

... (truncated)

Changelog

Sourced from better-auth's changelog.

1.6.26

Patch Changes

#10619 9ede805 Thanks @jeroenvandermerwe! - Ensure database rate-limit cleanup completes when no background task handler is configured.

#10608 5a811f1 Thanks @bytaesu! - Pass the email verification type to custom OTP generators after email sign-up.

#10605 d8327f1 Thanks @XXMOHAMED012! - The email OTP verification check no longer reveals whether an email is registered before the OTP itself is verified.

#10513 e2c73fb Thanks @mrosberghaus! - Fix jwtClient() collapsing createAuthClient type inference when combined with other client plugins such as inferAdditionalFields. Additional user fields (for example on updateUser) are preserved again.

#10635 af50c45 Thanks @krish-vachhani! - Fix oneTapClient() collapsing createAuthClient type inference when combined with other client plugins. The oneTap action is available on the client again.

#10633 701cd43 Thanks @gustavovalverde! - Minting or reading a JWKS signing key inside an active database transaction now uses the transaction-scoped adapter instead of the root connection. On a single-connection SQLite database with native transactions enabled, this no longer deadlocks, and on Postgres and MySQL the key commits with the surrounding transaction instead of independently of it.

#10599 e7b0eba Thanks @bytaesu! - Preserve Apple user data from form_post callbacks when using oAuthProxy.

#10552 2b4a14f Thanks @bytaesu! - Allow users to retry email OTP password resets after entering an invalid password.

#10467 7552a3b Thanks @jlucaso1! - Improve nextCookies performance in instrumented Next.js applications.

#10580 ea38fca Thanks @Emmaccen! - Skip invalid secondary-storage session entries without discarding other valid sessions.

#10520 a03e4c1 Thanks @bytaesu! - Ensure deleting a user also removes their sessions from secondary storage.

Updated dependencies [a30e274]:

@better-auth/core@1.6.26

@better-auth/drizzle-adapter@1.6.26

@better-auth/kysely-adapter@1.6.26

@better-auth/memory-adapter@1.6.26

@better-auth/mongo-adapter@1.6.26

@better-auth/prisma-adapter@1.6.26

@better-auth/telemetry@1.6.26

1.6.25

Patch Changes

#10479 5124c34 Thanks @krish-vachhani! - Prevent Google One Tap from creating new users when sign-up is disabled for the Google provider.

#10444 7439359 Thanks @birkskyum! - Expose the real $fetch instance and $store atoms from the Solid client instead of resolving them as dynamic API routes.

Updated dependencies [0ffd1fb]:

@better-auth/core@1.6.25

@better-auth/drizzle-adapter@1.6.25

@better-auth/kysely-adapter@1.6.25

@better-auth/memory-adapter@1.6.25

@better-auth/mongo-adapter@1.6.25

@better-auth/prisma-adapter@1.6.25

... (truncated)

Commits

a16b30e chore: release v1.6.26 (#10521)
9ede805 fix(rate-limit): await database cleanup by default (#10619)
af50c45 fix(one-tap): preserve client plugin inference with oneTapClient (#10635)
222facf fix(jwt): resolve the transaction-scoped adapter when signing (#10623)
d8327f1 fix(email-otp): verify OTP before revealing whether the email exists (#10605)
e7b0eba fix(oauth-proxy): preserve Apple user data (#10599)
5a811f1 fix(email-otp): pass verification type on sign-up (#10608)
e18606b chore(deps): upgrade OpenTelemetry to v2 (#10601)
ea38fca fix(db): skip null-parsed session token in findSessions instead of returning ...
7552a3b perf(next-js): reuse the next/headers import promise in production (#10467)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for better-auth since your current version.

Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.13 to 19.2.18

Commits

See full diff in compare view

Updates react-dom from 19.2.3 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

Type hardening and performance improvements (#36425 by @eps1lon and @unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

Add more cycle protections (#36236 by @eps1lon and @unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

Type hardening and performance improvements (@eps1lon, @unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

Add more cycle protections (@eps1lon, @unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (@gnoff, @lubieowoce, @sebmarkbage, @unstubbable #35632)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
6117d7c Version 19.2.7 (#36591)
eaf3e95 Version 19.2.6
23f4f9f 19.2.5
90ab3f8 Version 19.2.4
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @types/react-dom from 19.2.3 to 19.2.4

Commits

See full diff in compare view

Updates @chromatic-com/storybook from 5.0.0 to 5.2.1

Release notes

Sourced from @chromatic-com/storybook's releases.

v5.2.1

🐛 Bug Fix

Widen peer-dependency range for storybook #434 (@valentinpalkovic)

Authors: 1

Valentin Palkovic (@valentinpalkovic)

v5.2.1-next.0

🐛 Bug Fix

Widen peer-dependency range for storybook #434 (@valentinpalkovic)

Authors: 1

Valentin Palkovic (@valentinpalkovic)

v5.2.0

🚀 Enhancement

Add missing ChromaticTypes export to support composite mode #410 (@jdpnielsen @ghengeveld)

Add Share tool to quickly publish a Storybook #418 (@valentinpalkovic @ghengeveld @kylegach)

Add refresh-token auth flow and harden HTML injection paths #425 (@ghengeveld @valentinpalkovic)

Replace device_code OAuth flow with authorization_code flow #424 (@ghengeveld @valentinpalkovic)

🐛 Bug Fix

Refresh auth preemptively before token expiry #431 (@ghengeveld)

Merge remote-tracking branch 'origin/valentin/viral-sharing-2' into valentin/viral-sharing-2 #429 (@valentinpalkovic)

Consolidate auth state into a single AuthStore #430 (@valentinpalkovic)

Show share expiry based on daysToExpire from CLI #428 (@ghengeveld @valentinpalkovic)

Fix OAuth authorization_code flow #427 (@ghengeveld)

Authors: 5

Gert Hengeveld (@ghengeveld)

Joshua Daniel Pratt Nielsen (@jdpnielsen)

Kyle Gach (@kylegach)

Piotr Wysocki (@piwysocki)

Valentin Palkovic (@valentinpalkovic)

v5.2.0-next.5

⚠️ Pushed to next

Fix TS error (@ghengeveld)

Authors: 1

Gert Hengeveld (@ghengeveld)

... (truncated)

Changelog

Sourced from @chromatic-com/storybook's changelog.

v5.2.1 (Thu May 14 2026)

🐛 Bug Fix

Widen peer-dependency range for storybook #434 (@valentinpalkovic)

Authors: 1

Valentin Palkovic (@valentinpalkovic)

v5.2.0 (Thu May 14 2026)

🚀 Enhancement

Add missing ChromaticTypes export to support composite mode #410 (@jdpnielsen @ghengeveld)

Add Share tool to quickly publish a Storybook #418 (@valentinpalkovic @ghengeveld @kylegach)

Add refresh-token auth flow and harden HTML injection paths #425 (@ghengeveld @valentinpalkovic)

Replace device_code OAuth flow with authorization_code flow #424 (@ghengeveld @valentinpalkovic)

🐛 Bug Fix

Refresh auth preemptively before token expiry #431 (@ghengeveld)

Merge remote-tracking branch 'origin/valentin/viral-sharing-2' into valentin/viral-sharing-2 #429 (@valentinpalkovic)

Consolidate auth state into a single AuthStore #430 (@valentinpalkovic)

Show share expiry based on daysToExpire from CLI #428 (@ghengeveld @valentinpalkovic)

Fix OAuth authorization_code flow #427 (@ghengeveld)

Authors: 5

Gert Hengeveld (@ghengeveld)

Joshua Daniel Pratt Nielsen (@jdpnielsen)

Kyle Gach (@kylegach)

Piotr Wysocki (@piwysocki)

Valentin Palkovic (@valentinpalkovic)

v5.1.2 (Mon Apr 13 2026)

🐛 Bug Fix

Sidebar: add clear() to test provider to clear visual test statuses #421 (@valentinpalkovic)

Authors: 1

Valentin Palkovic (@valentinpalkovic)

... (truncated)

Commits

55bdb73 Bump version to: 5.2.1 [skip ci]
59b8146 Update CHANGELOG.md [skip ci]
0fe1587 Merge pull request #435 from chromaui/next
2c8182d Merge pull request #434 from chromaui/valentin/widen-peer-deps-range
e1d4e26 Widen peer-dependency range for storybook
652b6d0 Bump version to: 5.2.0 [skip ci]
a16a328 Update CHANGELOG.md [skip ci]
0e8f745 Merge pull request #432 from chromaui/next
9ba520e Fix TS error
f03b35e Merge branch 'main' into next
Additional commits viewable in compare view

Updates @eslint/eslintrc from 3.3.3 to 3.3.6

Release notes

Sourced from @eslint/eslintrc's releases.

eslintrc: v3.3.6

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

eslintrc: v3.3.5

3.3.5 (2026-03-04)

Bug Fixes

update dependency minimatch to ^3.1.5 (#227) (3dc2381)

eslintrc: v3.3.4

3.3.4 (2026-02-22)

Bug Fixes

update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)

update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

Changelog

Sourced from @eslint/eslintrc's changelog.

3.3.6 (2026-07-10)

Bug Fixes

update js-yaml to 4.3.0 to address security vulnerability (#235) (0c5de74)

3.3.5 (2026-03-04)

Bug Fixes

update dependency minimatch to ^3.1.5 (#227) (3dc2381)

3.3.4 (2026-02-22)

Bug Fixes

update ajv to 6.14.0 to address security vulnerabilities (#221) (9139140)

update minimatch to 3.1.3 to address security vulnerabilities (#224) (30339d0)

Commits

b433a22 chore: release 3.3.6 🚀 (#236)
0c5de74 fix: update js-yaml to 4.3.0 to address security vulnerability (#235)
94837a4 docs: Update README sponsors
dbae1a1 docs: Update README sponsors
19fe72a docs: Update README sponsors
92ebd17 docs: Update README sponsors
3ba4c8c ci: add Node.js 26 to CI (#231)
f8d268a docs: Update README sponsors
6e20867 docs: Update README sponsors
6d722b6 docs: Update README sponsors
Additional commits viewable in compare view

Updates @storybook/addon-a11y from 10.2.7 to 10.5.6

Release notes

Sourced from @storybook/addon-a11y's releases.

v10.5.6

10.5.6

Dependencies: Pin `@testing-library/jest-dom` to `6.9.1` - #35614, thanks @ndelangen!

ESLint Plugin: Add plugin meta and document oxlint usage - #35655, thanks @yannbf!

Vue: Skip docgen for module ids carrying a query - #35598, thanks @seanogdev!

v10.5.5

10.5.5

CLI: Update AI setup instructions to msw-storybook-addon v3 - #35512, thanks @yannbf!

Core: Upgrade `ws` to fix security advisories - #35584, thanks @ndelangen!

ReactNative: Telemetry framework detection fix - #35560, thanks @ndelangen!

SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @hxy-asdw!

TanStack: Preserve explicit route ids on pathful clones - #35499, thanks @unpunnyfuns!

TanStack: Resolve mock redirects through Vite's resolver - #35501, thanks @unpunnyfuns!

TanStack: Respect routeOverrides component overrides in stories - #35497, thanks @unpunnyfuns!

v10.5.4

10.5.4

ReactNative: Telemetry framework detection fix - #35560, thanks @ndelangen!

SyntaxHighlighter: Fix PrismJS dark mode mismatch - #35541, thanks @hxy-asdw!

v10.5.3

10.5.3

Dependencies: Upgrade TypeScript to 6.0.3 - #34971, thanks @valentinpalkovic!

v10.5.2

10.5.2

Angular-Vite: Drop @angular/platform-browser-dynamic peer dependency - #35457, thanks @valentinpalkovic!

Angular-Vite: Widen TypeScript peer dependency range to support TypeScript 6 - #35455, thanks @valentinpalkovic!

Core: Include chromatic packages in ecosystem identifier - #35170, thanks @yannbf!

TanStack: Fix createServerFn validator mock - #35185, thanks

Bumps the npm-minor-and-patch group with 23 updates: | Package | From | To | | --- | --- | --- | | [@radix-ui/react-dialog](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/dialog) | `1.1.15` | `1.1.23` | | [@radix-ui/react-navigation-menu](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/navigation-menu) | `1.2.14` | `1.2.22` | | [@radix-ui/react-slot](https://github.com/radix-ui/primitives/tree/HEAD/packages/react/slot) | `1.2.4` | `1.3.3` | | [better-auth](https://github.com/better-auth/better-auth/tree/HEAD/packages/better-auth) | `1.4.18` | `1.6.26` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.3` | `19.2.8` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.13` | `19.2.18` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.3` | `19.2.8` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` | | [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) | `5.0.0` | `5.2.1` | | [@eslint/eslintrc](https://github.com/eslint/eslintrc) | `3.3.3` | `3.3.6` | | [@storybook/addon-a11y](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/a11y) | `10.2.7` | `10.5.6` | | [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/docs) | `10.2.7` | `10.5.6` | | [@storybook/addon-onboarding](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/onboarding) | `10.2.7` | `10.5.6` | | [@storybook/addon-themes](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/themes) | `10.2.7` | `10.5.6` | | [@storybook/addon-vitest](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/vitest) | `10.2.7` | `10.5.6` | | [@storybook/nextjs-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/nextjs) | `10.2.7` | `10.5.6` | | [@vitest/browser-playwright](https://github.com/vitest-dev/vitest/tree/HEAD/packages/browser-playwright) | `4.0.18` | `4.1.10` | | [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.18` | `4.1.10` | | [eslint-plugin-storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/eslint-plugin) | `10.2.7` | `10.5.6` | | [playwright](https://github.com/microsoft/playwright) | `1.58.2` | `1.62.1` | | [postcss](https://github.com/postcss/postcss) | `8.5.6` | `8.5.25` | | [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core) | `10.2.7` | `10.5.6` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.18` | `4.1.10` | Updates `@radix-ui/react-dialog` from 1.1.15 to 1.1.23 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/dialog/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/dialog) Updates `@radix-ui/react-navigation-menu` from 1.2.14 to 1.2.22 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/navigation-menu/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/navigation-menu) Updates `@radix-ui/react-slot` from 1.2.4 to 1.3.3 - [Changelog](https://github.com/radix-ui/primitives/blob/main/packages/react/slot/CHANGELOG.md) - [Commits](https://github.com/radix-ui/primitives/commits/HEAD/packages/react/slot) Updates `better-auth` from 1.4.18 to 1.6.26 - [Release notes](https://github.com/better-auth/better-auth/releases) - [Changelog](https://github.com/better-auth/better-auth/blob/main/packages/better-auth/CHANGELOG.md) - [Commits](https://github.com/better-auth/better-auth/commits/v1.6.26/packages/better-auth) Updates `react` from 19.2.3 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.13 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.3 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@chromatic-com/storybook` from 5.0.0 to 5.2.1 - [Release notes](https://github.com/chromaui/addon-visual-tests/releases) - [Changelog](https://github.com/chromaui/addon-visual-tests/blob/next/CHANGELOG.md) - [Commits](chromaui/addon-visual-tests@v5.0.0...v5.2.1) Updates `@eslint/eslintrc` from 3.3.3 to 3.3.6 - [Release notes](https://github.com/eslint/eslintrc/releases) - [Changelog](https://github.com/eslint/eslintrc/blob/main/CHANGELOG.md) - [Commits](eslint/eslintrc@eslintrc-v3.3.3...eslintrc-v3.3.6) Updates `@storybook/addon-a11y` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/addons/a11y) Updates `@storybook/addon-docs` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/addons/docs) Updates `@storybook/addon-onboarding` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/addons/onboarding) Updates `@storybook/addon-themes` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/addons/themes) Updates `@storybook/addon-vitest` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/addons/vitest) Updates `@storybook/nextjs-vite` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/frameworks/nextjs) Updates `@types/react` from 19.2.13 to 19.2.18 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.3 to 19.2.4 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@vitest/browser-playwright` from 4.0.18 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/browser-playwright) Updates `@vitest/coverage-v8` from 4.0.18 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/coverage-v8) Updates `eslint-plugin-storybook` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/lib/eslint-plugin) Updates `playwright` from 1.58.2 to 1.62.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.2...v1.62.1) Updates `postcss` from 8.5.6 to 8.5.25 - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](postcss/postcss@8.5.6...8.5.25) Updates `storybook` from 10.2.7 to 10.5.6 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v10.5.6/code/core) Updates `vitest` from 4.0.18 to 4.1.10 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest) --- updated-dependencies: - dependency-name: "@radix-ui/react-dialog" dependency-version: 1.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@radix-ui/react-navigation-menu" dependency-version: 1.2.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@radix-ui/react-slot" dependency-version: 1.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: better-auth dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@chromatic-com/storybook" dependency-version: 5.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@eslint/eslintrc" dependency-version: 3.3.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@storybook/addon-a11y" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@storybook/addon-docs" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@storybook/addon-onboarding" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@storybook/addon-themes" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@storybook/addon-vitest" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@storybook/nextjs-vite" dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@types/react" dependency-version: 19.2.18 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.2.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: "@vitest/browser-playwright" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: eslint-plugin-storybook dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: playwright dependency-version: 1.62.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: postcss dependency-version: 8.5.25 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-and-patch - dependency-name: storybook dependency-version: 10.5.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch - dependency-name: vitest dependency-version: 4.1.10 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-08T14:06:55Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-08-08T14:06:57Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
aurora	Error		Aug 8, 2026 2:08pm

vercel Bot had a problem deploying to Preview August 8, 2026 14:08 Failure

Navigation Menu

Uh oh!

chore(deps): bump the npm-minor-and-patch group with 23 updates - #25

chore(deps): bump the npm-minor-and-patch group with 23 updates#25
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/npm-minor-and-patch-e402ed2fd4

dependabot Bot commented on behalf of github Aug 8, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 8, 2026

Uh oh!

vercel Bot commented Aug 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.1.23

1.1.22

1.1.21

1.1.20

1.1.19

1.1.18

1.1.17

1.1.16

1.2.22

1.2.21

1.2.20

1.2.19

1.2.18

1.2.17

Other updates

1.2.16

1.2.15

1.3.2, 1.3.3

1.3.1

1.3.0

Added generic type arguments for SlotProps and createSlot

1.2.5

v1.6.26

better-auth

Bug Fixes

@better-auth/core

Features

@better-auth/redis-storage

Bug Fixes

Contributors

v1.6.25

better-auth

Bug Fixes

1.6.26

Patch Changes

1.6.25

Patch Changes

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.7 (June 1, 2026)

React Server Components

19.2.6 (May 6, 2026)

React Server Components

19.2.5 (March 18, 2026)

React Server Components

19.2.4 (Jan 26, 2026)

React Server Components

v5.2.1

🐛 Bug Fix

Authors: 1

dependabot Bot commented on behalf of github Aug 8, 2026 •

edited

Loading

Added generic type arguments for `SlotProps` and `createSlot`

`better-auth`

`@better-auth/core`

`@better-auth/redis-storage`

`better-auth`

⚠️ Pushed to `next`

vercel Bot commented Aug 8, 2026 •

edited

Loading