Skip to content

chore(deps-dev): bump @chromatic-com/storybook from 5.0.1 to 5.1.2#7895

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/chromatic-com/storybook-5.1.2
Open

chore(deps-dev): bump @chromatic-com/storybook from 5.0.1 to 5.1.2#7895
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/chromatic-com/storybook-5.1.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 1, 2026

Bumps @chromatic-com/storybook from 5.0.1 to 5.1.2.

Release notes

Sourced from @​chromatic-com/storybook's releases.

v5.1.2

🐛 Bug Fix

Authors: 1

v5.1.1

🐛 Bug Fix

Authors: 2

v5.1.1-next.0

🐛 Bug Fix

Authors: 1

v5.1.0

🚀 Enhancement

Authors: 1

v5.1.0-next.0

🚀 Enhancement

Authors: 1

v5.0.2

🐛 Bug Fix

... (truncated)

Changelog

Sourced from @​chromatic-com/storybook's changelog.

v5.1.2 (Mon Apr 13 2026)

🐛 Bug Fix

Authors: 1


v5.1.1 (Thu Mar 26 2026)

🐛 Bug Fix

Authors: 2


v5.1.0 (Wed Mar 25 2026)

🚀 Enhancement

Authors: 1


v5.0.2 (Thu Mar 19 2026)

🐛 Bug Fix

Authors: 2


Commits
  • dcc5b60 Bump version to: 5.1.2 [skip ci]
  • 82c9d76 Update CHANGELOG.md [skip ci]
  • 220ce7b Merge pull request #421 from chromaui/valentin/fix-clearing-change-detection-...
  • 149fd3b Sidebar: add clear() to test provider to clear visual test statuses
  • 4dbfa89 Bump version to: 5.1.1 [skip ci]
  • 1c02094 Update CHANGELOG.md [skip ci]
  • 2389ecb Merge pull request #417 from chromaui/next
  • 28e7c37 Merge pull request #416 from chromaui/fix-preview
  • 9a956a3 separate env-derived constants
  • 90efe24 remove preview and manager export entries
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 1, 2026
@monkeytypegeorge monkeytypegeorge added the frontend User interface or web stuff label May 1, 2026
@socket-security
Copy link
Copy Markdown

socket-security Bot commented May 1, 2026

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedetag@​1.8.110010010075100
Addedreadline-sync@​1.4.109910010075100
Addedclsx@​2.1.11001009480100
Addeddamerau-levenshtein@​1.0.81001008380100
Addedobject-hash@​3.0.010010010082100
Addedchalk@​4.1.210010010082100
Addedcors@​2.8.510010010084100
Added@​chromatic-com/​storybook@​5.1.29910092100100
Addeduuid@​14.0.010010010092100
Addedplaywright@​1.58.210010010099100

View full report

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/chromatic-com/storybook-5.1.2 branch 4 times, most recently from 462a9da to 105b12f Compare May 5, 2026 07:35
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/chromatic-com/storybook-5.1.2 branch from 105b12f to 61315c7 Compare May 12, 2026 12:03
Bumps [@chromatic-com/storybook](https://github.com/chromaui/addon-visual-tests) from 5.0.1 to 5.1.2.
- [Release notes](https://github.com/chromaui/addon-visual-tests/releases)
- [Changelog](https://github.com/chromaui/addon-visual-tests/blob/v5.1.2/CHANGELOG.md)
- [Commits](chromaui/addon-visual-tests@v5.0.1...v5.1.2)

---
updated-dependencies:
- dependency-name: "@chromatic-com/storybook"
  dependency-version: 5.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/chromatic-com/storybook-5.1.2 branch from 61315c7 to 24a0799 Compare May 13, 2026 08:19
@socket-security
Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
Obfuscated code: npm entities is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: pnpm-lock.yamlnpm/entities@4.5.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@4.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm entities is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: pnpm-lock.yamlnpm/entities@6.0.1

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@6.0.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file frontend User interface or web stuff javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant