fix(deps): update npm non-major dependencies by renovate[bot] · Pull Request #4469 · digdir/designsystemet

renovate · 2026-02-05T05:15:23Z

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`2.3.12` → `2.3.13`
@floating-ui/dom (source)	`^1.7.4` → `^1.7.5`
@navikt/aksel-icons (source)	`^8.1.0` → `^8.2.0`
@storybook/addon-a11y (source)	`^10.2.0` → `^10.2.3`
@storybook/addon-docs (source)	`^10.2.0` → `^10.2.3`
@storybook/addon-themes (source)	`^10.2.0` → `^10.2.3`
@storybook/addon-vitest (source)	`^10.2.0` → `^10.2.3`
@storybook/react-vite (source)	`^10.2.0` → `^10.2.3`
@types/react (source)	`^19.2.9` → `^19.2.10`
@vitejs/plugin-react-swc (source)	`^4.2.2` → `^4.2.3`
autoprefixer	`^10.4.23` → `^10.4.24`
commander	`^14.0.2` → `^14.0.3`
isbot (source)	`^5.1.33` → `^5.1.34`
playwright (source)	`^1.58.0` → `^1.58.1`
pnpm (source)	`10.28.1+sha512.7d7dbbca9e99447b7c3bf7a73286afaaf6be99251eb9498baefa7d406892f67b879adb3a1d7e687fc4ccc1a388c7175fbaae567a26ab44d1067b54fcb0d6a316` → `10.28.2`
pnpm (source)	`10.28.1` → `10.28.2`
react (source)	`^19.2.3` → `^19.2.4`
react-dom (source)	`^19.2.3` → `^19.2.4`
react-i18next	`^16.5.3` → `^16.5.4`
rollup (source)	`4.56.0` → `4.57.1`
rollup (source)	`^4.56.0` → `^4.57.1`
storybook (source)	`^10.2.0` → `^10.2.3`
storybook-addon-pseudo-states (source)	`^10.2.0` → `^10.2.3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

biomejs/biome (@biomejs/biome)

`v2.3.13`

Compare Source

Patch Changes

#8815 f924f23 Thanks @dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

Now treated valid:
```
<div @&#8203;keydown.arrow-down="handler"></div>
<div @&#8203;keydown.a="handler"></div>
<div @&#8203;keydown.b="handler"></div>
<div @&#8203;keydown.27="foo"></div>
```
#8856 85f81f9 Thanks @dyc3! - Fixed #8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].
#8850 2a190e0 Thanks @dyc3! - Fixed #8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.
#8863 79386e0 Thanks @dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.
#8771 6f56b6e Thanks @lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #8730
#8714 ac3a71f Thanks @Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

floating-ui/floating-ui (@floating-ui/dom)

`v1.7.5`

Patch Changes

Update dependencies: @floating-ui/core@1.7.4

navikt/aksel (@navikt/aksel-icons)

`v8.2.0`

Compare Source

storybookjs/storybook (@storybook/addon-a11y)

`v10.2.3`

Compare Source

Addon-Vitest: Normalize Windows paths in addon-vitest automigration - #33340, thanks @tanujbhaud!
Core: Fix previewHref when current path does not end with a slash - #33647, thanks @ghengeveld!

`v10.2.2`

Compare Source

Addon Vitest: Support simple vite.config without defineConfig helper - #33694, thanks @valentinpalkovic!
Addon-Vitest: Append Storybook project to existing test.projects array without double nesting - #33708, thanks @valentinpalkovic!
Addon-Vitest: Update Vitest plugin configuration to disable requireAssertions for expect - #33693, thanks @valentinpalkovic!
Composition: Handle 401 responses with loginUrl from Chromatic - #33705, thanks @kasperpeulen!
Telemetry: Add agent detection - #33675, thanks @valentinpalkovic!

vitejs/vite-plugin-react (@vitejs/plugin-react-swc)

`v4.2.3`

Compare Source

postcss/autoprefixer (autoprefixer)

`v10.4.24`

Compare Source

Made Autoprefixer a little faster (by @Cherry).

tj/commander.js (commander)

`v14.0.3`

Compare Source

Added

Release Policy document ([#2462])

Changes

old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date ([#2462])
clarify typing for deprecated callback parameter to .outputHelp() ([#2427])
simple readability improvements to README ([#2465])

microsoft/playwright (playwright)

`v1.58.1`

Compare Source

Highlights

#39036 fix(msedge): fix local network permissions
#39037 chore: update cft download location
#38995 chore(webkit): disable frame sessions on fronzen builds

Browser Versions

Chromium 145.0.7632.6
Mozilla Firefox 146.0.1
WebKit 26.0

pnpm/pnpm (pnpm)

`v10.28.2`: pnpm 10.28.2

Compare Source

Patch Changes

Security fix: prevent path traversal in directories.bin field.
When pnpm installs a file: or git: dependency, it now validates that symlinks point within the package directory. Symlinks to paths outside the package root are skipped to prevent local data from being leaked into node_modules.

This fixes a security issue where a malicious package could create symlinks to sensitive files (e.g., /etc/passwd, ~/.ssh/id_rsa) and have their contents copied when the package is installed.

Note: This only affects file: and git: dependencies. Registry packages (npm) have symlinks stripped during publish and are not affected.
Fixed optional dependencies to request full metadata from the registry to get the libc field, which is required for proper platform compatibility checks #9950.

Platinum Sponsors

Gold Sponsors

facebook/react (react)

`v19.2.4`: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

i18next/react-i18next (react-i18next)

`v16.5.4`

Compare Source

fix: Overriding React component props not working 1902

rollup/rollup (rollup)

`v4.57.1`

Compare Source

2026-01-30

Bug Fixes

Fix heap corruption issue in Windows (#6251)
Ensure exports of a dynamic import are fully included when called from a try...catch (#6254)

Pull Requests

#6251: fix: Isolate and cache process.report.getReport() calls in a child process for robust environment detection (@alan-agius4, @lukastaegert)
#6252: chore(deps): update dependency lru-cache to v11 (@renovate[bot])
#6253: chore(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6254: Fully include dynamic imports in a try-catch (@lukastaegert)
#6255: chore(deps): lock file maintenance (@renovate[bot])

`v4.57.0`

Compare Source

2026-01-27

Features

Add import attributes to all plugin hooks that did not provide them yet (#5700)
Deprecate returning import attributes from load or transform hooks as that will no longer be supported with rollup 5 (#5700)

Pull Requests

#5700: extend more hooks to include import attributes and add warnings (@TrickyPi, @lukastaegert)
#6243: fix(deps): update swc monorepo (major) (@renovate[bot], @lukastaegert)
#6244: fix(deps): lock file maintenance minor/patch updates (@renovate[bot], @lukastaegert)
#6245: chore(deps): lock file maintenance (@renovate[bot])
#6246: Refactor to reduce Rollup 5 upgrade diff (@lukastaegert)

Configuration

📅 Schedule: Branch creation - "before 07:00 on Thursday" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

changeset-bot · 2026-02-05T05:15:27Z

🦋 Changeset detected

Latest commit: 37a8522

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 4 packages

Name	Type
@digdir/designsystemet-react	Patch
@digdir/designsystemet	Patch
@digdir/designsystemet-css	Patch
@digdir/designsystemet-types	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

github-actions · 2026-02-05T05:18:14Z

Preview deployments for this pull request:

storybook - 5. Feb 2026 - 12:11

themebuilder - 5. Feb 2026 - 13:09

www - 5. Feb 2026 - 13:15

renovate · 2026-02-05T12:06:22Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

oddvernes

seems fine!

renovate bot requested review from Barsnes, eirikbacker, mimarz and oddvernes as code owners February 5, 2026 05:15

fix(deps): update npm non-major dependencies

b8e2864

renovate bot force-pushed the renovate/npm-minor-patch branch from 178f54e to b8e2864 Compare February 5, 2026 11:07

changeset + biome

37a8522

oddvernes approved these changes Feb 5, 2026

View reviewed changes

mimarz approved these changes Feb 5, 2026

View reviewed changes

mimarz merged commit d6751f2 into main Feb 5, 2026
25 checks passed

mimarz deleted the renovate/npm-minor-patch branch February 5, 2026 12:35

github-actions bot mentioned this pull request Feb 5, 2026

chore: new release #4426

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update npm non-major dependencies#4469

fix(deps): update npm non-major dependencies#4469
mimarz merged 2 commits intomainfrom
renovate/npm-minor-patch

renovate bot commented Feb 5, 2026 •

edited

Loading

Uh oh!

changeset-bot bot commented Feb 5, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Feb 5, 2026 •

edited

Loading

Uh oh!

renovate bot commented Feb 5, 2026

Uh oh!

oddvernes left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Patch Changes

Patch Changes

Added

Changes

Highlights

Browser Versions

v10.28.2: pnpm 10.28.2

Patch Changes

Platinum Sponsors

Gold Sponsors

v19.2.4: 19.2.4 (January 26th, 2026)

React Server Components

Bug Fixes

Pull Requests

Features

Pull Requests

Configuration

Uh oh!

changeset-bot bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

github-actions bot commented Feb 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

renovate bot commented Feb 5, 2026

Edited/Blocked Notification

Uh oh!

oddvernes left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

renovate bot commented Feb 5, 2026 •

edited

Loading

`v10.28.2`: pnpm 10.28.2

`v19.2.4`: 19.2.4 (January 26th, 2026)

changeset-bot bot commented Feb 5, 2026 •

edited

Loading

github-actions bot commented Feb 5, 2026 •

edited

Loading