chore(deps): Update npm dependencies by prefect-renovate[bot] · Pull Request #23101 · PrefectHQ/prefect

prefect-renovate · 2026-09-14T15:09:13Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`2.5.11` → `2.5.12`
@playwright/test (source)	`1.62.1` → `1.63.0`
@storybook/addon-docs (source)	`10.5.10` → `10.6.0`
@storybook/addon-themes (source)	`10.5.10` → `10.6.0`
@storybook/react (source)	`10.5.10` → `10.6.0`
@storybook/react-vite (source)	`10.5.10` → `10.6.0`
@tanstack/react-router (source)	`1.170.32` → `1.170.33`
@tanstack/react-virtual (source)	`3.14.10` → `3.14.11`
@tanstack/router-plugin (source)	`1.168.35` → `1.168.36`
@testing-library/user-event	`14.6.6` → `14.6.7`
@types/node (source)	`26.4.0` → `26.5.0`
@types/react-dom (source)	`19.2.5` → `19.2.7`
autoprefixer	`10.5.4` → `10.5.5`
aws-cdk (source)	`2.1139.0` → `2.1140.0`
eslint (source)	`10.9.1` → `10.10.0`
eslint-plugin-react-refresh	`0.5.5` → `0.5.6`
eslint-plugin-storybook (source)	`10.5.10` → `10.6.0`
globals	`17.11.0` → `17.12.0`
lucide-react (source)	`1.38.0` → `1.42.0`
postcss (source)	`8.5.26` → `8.5.28`
storybook (source)	`10.5.10` → `10.6.0`
typescript-eslint (source)	`8.68.0` → `8.69.0`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.5.12`

Compare Source

Patch Changes

#11440 b88f1ea Thanks @Princesseuh! - Fixed Astro attribute expressions rejecting TypeScript and JSX syntax that is accepted in text expressions.
```
<Component icon={<Icon />} count={total as number} onSelect={(e: Event) => e} />
```
#11440 b88f1ea Thanks @Princesseuh! - Fixed Astro attribute names being split on : and . inside an expression, such as {x && <button x-on:keyup.enter={go} client:load.foo />}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed a bare > in the children of an Astro expression being treated as markup, such as {x && <div>a > b</div>}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed HTML comments inside an Astro expression failing to parse. They are now read as trivia, wherever they appear among the children.
```
{x && <div>text</div>}
{cond && <a></a><b></b>}
```
#11440 b88f1ea Thanks @Princesseuh! - Fixed is:raw children inside an Astro expression being read as JSX, such as {x && <div is:raw>{not js} < & text</div>}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed an apostrophe or quote in the text of a JSX element inside an Astro expression ending the expression early, such as {items.map((i) => <li>it's {i}</li>)}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed the children of a <script> or <style> inside an Astro expression being read as JSX. Their contents are text, so braces and comparisons no longer have to be escaped.
```
{cond && <style>a { color: red }</style>}
{cond && <script>let x = {a: 1};</script>}
```
#11440 b88f1ea Thanks @Princesseuh! - Added support for template literal attribute values inside an Astro expression, such as {x && <C data-x=`t${x}` />}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed unquoted attribute values being rejected inside an Astro expression, such as {x && <a class=foo maxlength=255 href=/about>go</a>}.
#11440 b88f1ea Thanks @Princesseuh! - Fixed a template literal nested inside ${} breaking the rest of an Astro file, such as const href = `/blog${page === 0 ? '' : `/${page + 1}`}`;.
#11440 b88f1ea Thanks @Princesseuh! - Fixed a quote inside a regex character class breaking the rest of an Astro file, such as const unsafe = /[/"]/;.
#11508 54f3a2e Thanks @dyc3! - Added the nursery rule useFlatMathMinMax. Because Math.min() and Math.max() accept any number of arguments, the rule reports unnecessary nested calls to the same method:
```
Math.max(Math.max(a, b), c);
```
The fix flattens this expression to Math.max(a, b, c).
#11585 c5c8315 Thanks @Netail! - Fixed #11475: noUnresolvedImports no longer reports Bun runtime built-in modules (bun, bun:bundle, bun:ffi, bun:jsc, bun:sqlite, bun:test).
#11368 52a57b3 Thanks @Austin1serb! - Fixed #6830: Biome now reports a diagnostic for excessively deep syntax instead of overflowing the native stack while releasing the parsed tree.
#11596 1fc42ed Thanks @dyc3! - Added the nursery rule noThisOutsideOfClass. The rule reports this outside class members and TypeScript functions with an explicit this parameter.
```
function Person(name) {
    this.name = name;
}
```
#11555 2516335 Thanks @dyc3! - Fixed #11529, where noFloatingPromises missed unhandled Promise chains when the imported function's module belonged to an import cycle. Cyclic modules now preserve types for exports that do not participate in recursive type dependencies.
#11518 0fee70c Thanks @HarperZ9! - Fixed #11500: the formatter now prints the declare modifier before accessibility modifiers on class properties. private declare readonly name: string is now formatted as declare private readonly name: string, matching Prettier and TypeScript's canonical modifier order.
#11580 1277af2 Thanks @ematipico! - Fixed #5091: Biome no longer moves comments next to the < of a generic, which causes invalid TypeScript syntax:
```
- Generic<// a comment
+ Generic<
+   // a comment
```
#11577 42995d2 Thanks @ematipico! - Fixed #4592. Biome no longer crashes while parsing malformed delete expressions.
#11590 67963b4 Thanks @ematipico! - Fixed #6427 so Grit plugins can use function = ... as a node argument.
#11600 a689cb5 Thanks @ematipico! - Fixed #6644: noUnusedVariables now recognizes all interface declarations in a TypeScript declaration-merging group when the interface is referenced.

The following snippet no longer triggers the rule.
```
interface Things {
    foo: string;
}

interface Things {
    bar: string;
}

export type Key = keyof Things;

interface Things {
    baz: string;
}
```
#11591 d4a0716 Thanks @ematipico! - Fixed #6615. noDuplicateProperties no longer reports declarations nested in block at-rules as duplicates of declarations in their parent block.
#11492 f2a07aa Thanks @santichausis! - Fixed #11454: noMisplacedAssertion now recognises @fast-check/vitest's test.prop(...) (and .concurrent.prop, .skip.prop, etc.) as a test function, the same way it already recognises test.each. The JS formatter picks up the same recognition, so a curried test.prop(...)(...) call is now formatted with the regular breakable argument layout used for test.each/test.for, instead of the single-line-hugging layout used for plain it/test calls.

For example, Biome no longer reports the assertion below as misplaced:
```
import { fc, test } from "@fast-check/vitest";

test.prop([fc.string()])("round-trips", (s) => {
  expect(s).toBe(s);
});
```
#11589 65742b3 Thanks @ematipico! - Fixed #4928: noUnusedVariables no longer reports a value declaration as unused when its merged namespace is referenced.
#11559 472dbc2 Thanks @levrik! - Fixed a false positive in noVueDuplicateKeys where a <script setup> variable initialized from props was reported as a duplicate of the prop it derives from. Biome now exempts any variable whose initializer references props, instead of only recognizing defineProps() and toRefs(props).

For example, Biome no longer reports foo below as a duplicate key:
```
<script setup>
import { toRef } from 'vue';
const props = defineProps(['foo']);
const foo = toRef(props, 'foo');
</script>
```
#11594 6586ceb Thanks @ematipico! - Fixed #6640. Biome no longer crashes when linting malformed for...of statements.
#11571 85b197d Thanks @ematipico! - Fixed #10838: useSortedAttributes no longer corrupts JSX attributes when nested JSX elements also require sorting.
#11533 97e76c0 Thanks @ematipico! - Fixed #11520, where the Biome scanner would start analysing dependencies multiple times, leading to long and unresponsive sessions.
#11564 18a0e1f Thanks @Netail! - Fixed the diagnostic range of noInferrableTypes so it now highlights only the type instead of including the leading : colon, spaces and comments.
#11540 124fdaa Thanks @ematipico! - Fixed #11537: noShorthandPropertyOverrides now compares declarations only within the same block. The rule no longer reports @supports feature queries and correctly checks nested, @keyframes, and @page blocks.
#11532 7ceb0ee Thanks @dyc3! - Fixed #11528: noFloatingPromises no longer reports statement-level await expressions that handle Promise values, including overloaded calls returning Promise aliases. Awaited values that resolve to arrays of Promises remain reported because their element Promises are not handled by await.
#11474 3c6412e Thanks @dyc3! - Fixed #10241. Biome no longer reports unsupported text expression diagnostics for double-curly text in vanilla HTML, and the formatter preserves adjacent curly-brace text.
#11593 6c7fd27 Thanks @dyc3! - Added the nursery rule noVueDeprecatedScopedSlots. It reports deprecated $scopedSlots references in Vue templates and component objects, and offers an unsafe replacement with $slots. For example, Biome now reports this.$scopedSlots.default inside a Vue component.
#11440 b88f1ea Thanks @Princesseuh! - Fixed the formatter crashing on an Astro or Svelte expression spanning several lines in a file with CRLF line endings, such as <p>{a +\r\n b}</p>.
#11581 f4e5ebb Thanks @dyc3! - Added the nursery rule useModernMathApis. The rule reports legacy mathematical patterns that have direct modern Math equivalents.
```
Math.sqrt(a * a + b * b);
```
#11597 a20f44a Thanks @Netail! - Added the nursery rule noBunModules, which forbids the use of Bun builtin modules (e.g. bun:sqlite, bun:ffi).
#11545 7d54688 Thanks @dyc3! - Fixed #11542: Biome now reports HTML comments between Svelte tag attributes as parse errors.
#11582 b6611dd Thanks @ematipico! - Fixed #3862. Biome now parses legacy Internet Explorer filter and -ms-filter values such as progid:DXImageTransform... and alpha(opacity=40).
#11575 65da251 Thanks @dyc3! - Improved the Tailwind parser's ability to recover from parsing failures. Whitespace now always allows the parser to recover and start parsing a new class.
#11576 0f78499 Thanks @ematipico! - Fixed #3515 and #10395, where Biome could corrupt Unicode characters while writing source received through standard input to standard output. Characters such as ⚠ and ✔ are now preserved.
#11539 0fca643 Thanks @ematipico! - Fixed #11512, where style/noDescendingSpecificity missed lower-specificity selectors after a later higher-specificity selector with the same tail selector.
#11544 040f867 Thanks @dyc3! - Fixed #11541: formatting a Svelte render tag followed by an HTML comment no longer duplicates the comment.
```
 <div>
   {@render children?.()}
   
-  
 </div>
```
#11565 ee69e0e Thanks @ematipico! - Fixed #11525. Now the configuration schema correctly provides auto-completion for linter domains.
#11583 b19390c Thanks @dyc3! - Fixed #11352: useExplicitLengthCheck no longer reports length-like properties used as value-producing || fallbacks or optional chains, and it no longer offers fixes for value-producing && checks or unsafe negations.
#11562 753e955 Thanks @ematipico! - Fixed an issue where the Biome Language Server would start with logging level set to debug. This would cause logs to grow exponentially in long sessions.
#11217 7d3ee9c Thanks @dyc3! - Fixed handling of biome-ignore format suppression comments on TypeScript declared class properties with string literal names.
```
class A {
	declare /* biome-ignore format: exercise suppression checking */ 'a-b': 0;
}
```
#11497 f5d7896 Thanks @dyc3! - Added the noInvalidFileInputAccept nursery rule. The rule reports invalid literal accept values on file inputs in JSX and HTML, and normalizes common mistakes.
```
<input type="file" accept="image/jpg" />
```
#11345 ac58958 Thanks @jakeleventhal! - Improved type inference performance by avoiding resolution of unused members in object arguments.
#11554 2d55931 Thanks @Netail! - Added the new nursery rule useReactNamingConvention, which enforces naming conventions for React values assigned from createContext, useId, and useRef. A value from createContext must be a PascalCase component name ending with Context, a value from useId must be named id or end with Id, and a value from useRef must be named ref or end with Ref.
#11491 1d6210b Thanks @dyc3! - Added the nursery rule noUnmodifiedLoopCondition, which reports variables in loop conditions that are never modified in the loop.
```
let node = getNode();
while (node) {
    process(node);
}
```

microsoft/playwright (@playwright/test)

`v1.63.0`

Compare Source

🔒 Test locks

Tests that access a shared resource — an external service, a global account setting — can now declare a named lock.
Tests that share a lock name never run concurrently, across files, workers and projects, while
everything else keeps running in parallel:

test('update user settings', { lock: 'user-settings' }, async ({ page }) => {
  // never runs at the same time as other tests holding 'user-settings'
});

A test can hold multiple locks, and test.describe() accepts a lock for the whole group.
Learn more about test locks.

🪟 Locate across frames

page.frameLocator() and frame.frameLocator() called without a selector search in any frame of the
subtree, so you no longer need to locate the iframe first:

// Finds the button in any frame on the page.
await page.frameLocator().getByRole('button').click();

The rest of the locator resolves inside a single frame, just like a regular locator, and an error is thrown when it
matches elements in several frames.

👁️ Visible-only locators

New locator.visible() returns a locator that matches only visible elements. It is the recommended
replacement for the :visible CSS pseudo-class:

await page.locator('button').visible().click();

🧾 Step params and subtitles

Steps now carry structured data for reporters. Playwright API steps report the target locator and call arguments,
and test.step() accepts subtitle and params options for your own steps:

await test.step('Login', async () => {
  // ...
}, { subtitle: 'as admin', params: { user: 'admin' } });

Reporters receive them via testStep.subtitle and testStep.params. For Playwright API
steps, the subtitle is the locator or the navigation url — for example, Click with subtitle getByRole('button').
Both are rendered next to the step title in the trace viewer and the HTML report.

🖼️ Aria and screen snapshots in traces

The snapshots option of tracing.start() and the testOptions.trace fixture option now accept an
object selecting what to capture on every action:

// playwright.config.ts
export default defineConfig({
  use: {
    trace: {
      mode: 'on',
      snapshots: { dom: true, aria: true, screen: true }
    },
  },
});

With aria and screen snapshots recorded, the new Display Aria mode in the trace viewer shows the action screenshot
side by side with the aria snapshot, and hovering an aria node highlights it on the screenshot.

New APIs

Browser and Context

httpCredentials now also accepts an array of credentials. The first entry matching the request origin is used, and entries without an origin match any request.
New option opfs includes the origin private file system in the storage state, so it can be persisted and restored into later contexts.
New events page.on('dialogclosed') and browserContext.on('dialogclosed') are emitted when a JavaScript dialog is accepted, dismissed or closed by the user.

Locators

New locator.ariaSnapshotJSON() and page.ariaSnapshotJSON() return the aria snapshot as a JSON value instead of YAML markup, with mode, depth and boxes options.
apiRequestContext.get() and other request methods accept a type argument that types the response json():

const response = await request.get<User>('/api/users/42');
const user = await response.json(); // typed as User

Test runner

New standalone testOptions.reducedMotion, testOptions.forcedColors and testOptions.contrast options.
New --add-reporter command line option appends a reporter on top of the ones configured in playwright.config, instead of replacing them like --reporter does.
New omitTags option for the list, line, dot, github and junit reporters suppresses the tags that are automatically appended to test titles.

Command line

npx playwright install --no-remove keeps the browsers of other Playwright installations instead of removing them.
npx playwright codegen --http-credentials records against pages behind HTTP authentication.

Miscellaneous

New built-in perfetto reporter writes a Trace Event Format file for the Perfetto UI or chrome://tracing, rendering the test run as a timeline with a lane per worker.
The HTML report renders a duration waterfall next to test steps.

Announcements

⚠️ The experimental @playwright/experimental-ct-react, @playwright/experimental-ct-react17 and @playwright/experimental-ct-vue packages will no longer be updated. Follow the migration guide to move to the stories model introduced in 1.62. Story ids passed to fixtures.mount() can now be typed through the generated Stories registry.
⚠️ Ubuntu 20.04 is not supported anymore.
🐧 On Linux arm64, Playwright now downloads the Chrome for Testing build of Chromium, the same build used on all other platforms.

Browser Versions

Chromium 153.0.8010.12
Mozilla Firefox 155.0
WebKit 26.6

This version was also tested against the following stable channels:

Google Chrome 153
Microsoft Edge 153

storybookjs/storybook (@storybook/addon-docs)

`v10.6.0`

Compare Source

New skills architecture for agentic workflows

Storybook 10.6 contains hundreds of fixes and improvements:

💻 CLI bindings for agent tools/skills
🅰️ Angular-Vite MCP/skills support and improved docgen/snippets (experimental)
🟢 Vue MCP/skills support and improved docgen/snippets (experimental)
🧩 Tanstack / NextJS-Vite framework bugfixes
⚡ Improved performance and reduced bundle size

List of all updates

Addon MCP: Stop silently dropping composed refs from MCP composition - #36077, thanks @kasperpeulen!
Addon Vitest: Pin storybook/test in optimizeDeps so its CJS-only deps are prebundled - #35572, thanks @Nic-Polumeyv!
Addon Vitest: Report test runs with failures as failed tool outcomes - #36080, thanks @kasperpeulen!
Addon Vitest: Resolve story test globs against the project root - #36103, thanks @kasperpeulen!
Addon-vitest: Filter Storybook instrumentation from reported stack traces - #36120, thanks @ghengeveld!
Angular Vite: Resolve tsConfig against the workspace root - #36026, thanks @ndelangen!
Angular-Vite: Run Compodoc on demand - #35776, thanks @valentinpalkovic!
Angular: Add an in-process docgen analyzer, replacing Compodoc under the flag - #35805, thanks @valentinpalkovic!
Angular: Bind only what the component accepts in story snippets, and report the rest - #35943, thanks @valentinpalkovic!
Angular: Decide the migration's zone.js import from the dependency tree - #36008, thanks @valentinpalkovic!
Angular: Declare story args the snippet markup binds by name - #35895, thanks @valentinpalkovic!
Angular: Declare style preprocessors as optional peers and name the missing one - #36098, thanks @valentinpalkovic!
Angular: Derive required inputs from Compodoc's own flag - #35758, thanks @valentinpalkovic!
Angular: Extract Compodoc parsing into its own package - #35749, thanks @valentinpalkovic!
Angular: Extract component JSDoc through TypeScript's APIs - #35977, thanks @huang-julien!
Angular: Extract docgen on the server via Compodoc - #35733, thanks @valentinpalkovic!
Angular: Fix component resolution, MCP output, and dev/build path aliasing - #35952, thanks @valentinpalkovic!
Angular: Fix eight upgrade and migration bugs - #35946, thanks @valentinpalkovic!
Angular: Fix ten docgen bugs found across 22 community repositories - #35941, thanks @valentinpalkovic!
Angular: Generate story-docs snippets from the analyzer - #35807, thanks @valentinpalkovic!
Angular: Give agents real input and output documentation - #35896, thanks @valentinpalkovic!
Angular: Hide class internals from the props table by default - #35887, thanks @valentinpalkovic!
Angular: Install the @storybook/angular-vite peers that nothing else brings in - #36002, thanks @valentinpalkovic!
Angular: Keep the function control on constructor and generic signatures - #35921, thanks @valentinpalkovic!
Angular: Make experimentalDocgenServer the default in angular-vite - #35886, thanks @valentinpalkovic!
Angular: Migrate Analog projects to angular-vite instead of refusing them - #35971, thanks @valentinpalkovic!
Angular: Print unevaluable story args instead of slicing the file - #35888, thanks @valentinpalkovic!
Angular: Read the story shapes that supply their own markup - #35797, thanks @valentinpalkovic!
Angular: Render self-closing tags in server-side docs snippets - #35953, thanks @valentinpalkovic!
Angular: Render the required badge for required inputs in the props table - #36065, thanks @valentinpalkovic!
Angular: Resolve @angular/core through the package manager, not the raw specifier - #35999, thanks @valentinpalkovic!
Angular: Resolve builder styles the way the Angular builders do - #35998, thanks @valentinpalkovic!
Angular: Resolve builder styles against the workspace root - #35974, thanks @valentinpalkovic!
Angular: Skip the runtime source decorator when the docgen server produces snippets - #35906, thanks @valentinpalkovic!
Angular: Stop marking a defaulted input as required in the props table - #35899, thanks @valentinpalkovic!
Angular: Stop treating input/output alias collisions as two-way bindings - #35777, thanks @valentinpalkovic!
Angular: hoist non-literal args onto the host component instead of inlining them - #36003, thanks @valentinpalkovic!
Build: Fix repository.directory path in @storybook/nextjs-vite package.json - #35609, thanks @LHMQ878!
Build: Fix repository.directory path in create-storybook package.json - #35596, thanks @LHMQ878!
Build: Stop nissuer from treating every repro URL as blocklisted - #35827, thanks @ndelangen!
Builder-Webpack5: Use strict mtime equality for mock cache reuse - #35681, thanks @benwarbrooke-auror!
CLI plugins: Delegate to storybook skills / storybook tools and align the evals - #35957, thanks @kasperpeulen!
CLI: Add storybook skills command - #35757, thanks @ghengeveld!
CLI: Align storybook skills with storybook tools shape - #36121, thanks @ghengeveld!
CLI: Allow esbuild builds for Storybook-owned pnpm dlx - #35742, thanks @ndelangen!
CLI: Attach to the most recent matching Storybook instance and add --port target selection - #36076, thanks @kasperpeulen!
CLI: Categorize Execa failures for init telemetry - #35720, thanks @ndelangen!
CLI: Detect Turbopack, Module Federation, and renderer versions - #35949, thanks @yannbf!
CLI: Drop skills get/skills list, add skills --all - #36127, thanks @kasperpeulen!
CLI: Enrich tools-command telemetry with attach dimensions - #36032, thanks @JReinhold!
CLI: Fix stories changed hanging on attach - #36093, thanks @JReinhold!
CLI: Keep storybook tools --json stdout parseable - #36023, thanks @kasperpeulen!
CLI: Label the tools help Output block as the --json shape - #36089, thanks @kasperpeulen!
CLI: Match Storybook instances across Windows drive-letter case - #36108, thanks @JReinhold!
CLI: Offer the new 10.5 experimental feature flags during upgrade - #35417, thanks @valentinpalkovic!
CLI: Point the init outro at storybook skills get setup and remove duplicate sandbox addon - #36024, thanks @kasperpeulen!
CLI: Render the same toolset output as MCP - #36029, thanks @kasperpeulen!
CLI: Serve the skills docs workflow whenever manifests are producible - #36081, thanks @kasperpeulen!
CLI: Silence auto-mode fallback when no Storybook is running - #36092, thanks @JReinhold!
Core: Add additionnal field for component API in manifest - #35585, thanks @huang-julien!
Core: Add security token to instance registry record - #35988, thanks @JReinhold!
Core: Add storybook/internal/tools SDK skeleton - [#35985](https://redirect

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

devin-ai-integration

Devin Review found 1 potential issue.

devin-ai-integration · 2026-09-14T15:11:47Z

 {
  "dependencies": {
-    "aws-cdk": "2.1139.0"
+    "aws-cdk": "2.1140.0"


🔍 CDK templates need regeneration

The CDK upgrade omits regenerated CloudFormation templates. The prefect-aws instructions require regeneration and review after every CDK version change.

Was this helpful? React with 👍 or 👎 to provide feedback.

jimid27 · 2026-09-15T17:31:40Z

TL;DR

🛑 DO NOT MERGE (yet) — UI v2 Checks / Test (2) fails: 35 snapshot mismatches in ui-v2/src/components/schemas/schema-form.snapshot.test.tsx, all caused by lucide-react 1.38 → 1.42 adding alias CSS classes to every icon (lucide-ellipsis-vertical → lucide-ellipsis-vertical lucide-more-vertical). Not a regression in our code. Fix: regenerate the snapshot on this branch and push.

cd ui-v2 && npm ci && npx vitest run src/components/schemas/schema-form.snapshot.test.tsx -u

Everything else in the group is a routine minor/patch bump with no code-facing breaking changes found.

📋 Full Review

Changes

Only three package.json entries change (the rest are caret ranges resolved in package-lock.json).

ui-v2

Dependency	Old → New	Type
lucide-react	1.38.0 → 1.42.0	minor (4 releases)
storybook, @storybook/react, @storybook/react-vite, @storybook/addon-docs, @storybook/addon-themes, eslint-plugin-storybook	10.5.10 → 10.6.0	minor
@playwright/test (+ playwright, playwright-core)	1.62.1 → 1.63.0	minor
eslint	10.9.1 → 10.10.0	minor
typescript-eslint (+ all @typescript-eslint/*)	8.68.0 → 8.69.0	minor
@biomejs/biome (+ platform CLIs)	2.5.11 → 2.5.12	patch
@tanstack/react-router / router-core / history / router-plugin / router-generator	1.170.32 → 1.170.33 (and matching internal bumps)	patch
@tanstack/react-virtual / virtual-core	3.14.10 → 3.14.11	patch
@testing-library/user-event	14.6.6 → 14.6.7	patch
@types/node	26.4.0 → 26.5.0	minor (types)
@types/react-dom	19.2.5 → 19.2.7	patch (types, pinned)
eslint-plugin-react-refresh	0.5.5 → 0.5.6	patch
globals	17.11.0 → 17.12.0	minor
postcss	8.5.26 → 8.5.28	patch
transitive (via eslint 10.10): file-entry-cache 8 → 11, flat-cache 4 → 6, keyv 4 → 5, new `cacheable`/`@keyv/*`/`hookified`/`qified`	major (transitive)	see notes
transitive: @storybook/csf-plugin removed, magic-string nested under react-vite	-	storybook 10.6 internals

ui (legacy)

Dependency	Old → New	Type
autoprefixer	10.5.4 → 10.5.5	patch
transitive: browserslist 4.28.7 → 4.28.9, caniuse-lite, electron-to-chromium, node-releases, baseline-browser-mapping, update-browserslist-db 1.2.3 → 1.3.2	patch/data	browser data refresh

src/integrations/prefect-aws/infra

Dependency	Old → New	Type
aws-cdk (CLI)	2.1139.0 → 2.1140.0	patch

Key Updates

lucide-react (1.39.0, 1.40.0, 1.41.0, 1.42.0)

1.42.0 #4409: icon build logic extracted into @lucide/shared; every icon now also renders lucide-{alias} classes for its aliases. This is the source of the snapshot failure. Also deprecates absoluteStrokeWidth in favour of nonScalingStroke (ui-v2 does not use either).
1.41.0 #3141: trash icon removed in favour of trash-2. ui-v2 only imports Trash2 (5 files checked), so no impact.
1.42.0: swiss-franc icons deprecated; computer and table-2 glyphs changed; leaf changed in 1.41. None referenced by name in ui-v2 aside from possible glyph tweaks (visual only).
Many new icons across all four releases.

storybook 10.6.0 (release notes)

Mostly Angular/Vue/MCP/skills work. React-relevant: shared TS DocumentRegistry for component-meta (#35468); experimental Playwright CT integration removed (#35650, not used here); @storybook/csf-plugin folded into core (lockfile drops it). No config migration required for a React-Vite setup.

@playwright/test 1.63.0 (release notes)

Additive: test lock option, selector-less frameLocator(), locator.visible(), step subtitle/params, aria/screen trace snapshots. New browser builds ship with the minor; CI installs browsers per run, so no manual step. All four E2E jobs passed on this PR.

eslint 10.10.0 (release notes)

Three rule enhancements (no-unexpected-multiline, new-cap, no-extra-bind). Internally swaps file-entry-cache v8 → v11, which pulls the flat-cache 6 / keyv 5 / cacheable tree into the lockfile. Only affects eslint --cache on-disk cache format (ui-v2 does not use --cache). Lint job passed.

typescript-eslint 8.69.0, biome 2.5.12, tanstack, postcss, autoprefixer, aws-cdk: routine patch/minor releases; no notable items.

CI Status

🛑 Failing: UI v2 Checks / Test (2) (job) — 35 snapshot mismatches, 1 of 87 test files. Every diff is the same one-line change in the icon class attribute. Category: real but benign (dependency changed its rendered output; snapshot needs regenerating). Shards 1, 3, 4, Lint, Build, all E2E shards, Build ui, prefect-aws tests, and the Python test matrix all passed.

Breaking Changes

Change	Affected code	Remediation	Handled in PR?
lucide-react 1.42: alias classes added to icon `class`	`ui-v2/src/components/schemas/__snapshots__/schema-form.snapshot.test.tsx.snap` (35 snapshots)	Regenerate snapshot (`vitest -u`)	No (CI red)
lucide-react 1.41: `Trash` icon removed	none (ui-v2 uses `Trash2`)	-	n/a
lucide-react 1.42: `absoluteStrokeWidth` deprecated	none (not used)	-	n/a
eslint 10.10: cache libs major-bumped transitively	none (`--cache` not used)	-	n/a
storybook 10.6: `@storybook/csf-plugin` removed as a separate package	none (not imported directly)	-	n/a

The three E2E specs that select .lucide-ellipsis-vertical (work-pools.spec.ts, deployment-detail.spec.ts, flow-run-actions.spec.ts) keep working because the original class is still present; confirmed by the passing E2E shards.

Risk Assessment

Low (once the snapshot is regenerated) - All bumps are minor/patch, dev-tooling heavy, and the only production-bundle dependencies touched are lucide-react, @tanstack/react-router, and @tanstack/react-virtual (patch-level for the tanstack pair). The lucide class-name change is additive markup with no visual effect. Nothing here needs a migration guide.

Reviewed by Claude Code /review-deps skill

chore(deps): Update npm dependencies

90a1a18

prefect-renovate Bot requested a review from znicholasbrown as a code owner September 14, 2026 15:09

prefect-renovate Bot added automated-dependency-updates renovate labels Sep 14, 2026

prefect-renovate Bot requested review from chrisguidry, desertaxle and zzstoatzz as code owners September 14, 2026 15:09

prefect-renovate Bot added automated-dependency-updates renovate labels Sep 14, 2026

github-actions Bot added the ui Related to the Prefect web interface label Sep 14, 2026

devin-ai-integration Bot reviewed Sep 14, 2026

View reviewed changes

test(ui): refresh schema snapshots for Lucide alias classes

747c267

desertaxle approved these changes Sep 15, 2026

View reviewed changes

desertaxle merged commit 1d8b55e into main Sep 15, 2026
29 checks passed

desertaxle deleted the renovate/npm-dependencies branch September 15, 2026 20:58

Navigation Menu

Repository navigation

chore(deps): Update npm dependencies - #23101

chore(deps): Update npm dependencies#23101
desertaxle merged 2 commits into
mainfrom
renovate/npm-dependencies

prefect-renovate Bot commented Sep 14, 2026

Uh oh!

devin-ai-integration Bot left a comment

Uh oh!

devin-ai-integration Bot Sep 14, 2026

Uh oh!

jimid27 commented Sep 15, 2026

Changes

Key Updates

CI Status

Breaking Changes

Risk Assessment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

prefect-renovate Bot commented Sep 14, 2026

Release Notes

v2.5.12

Patch Changes

v1.63.0

🔒 Test locks

🪟 Locate across frames

👁️ Visible-only locators

🧾 Step params and subtitles

🖼️ Aria and screen snapshots in traces

New APIs

Browser and Context

Locators

Test runner

Command line

Miscellaneous

Announcements

Browser Versions

v10.6.0

Configuration

Uh oh!

devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

Uh oh!

devin-ai-integration Bot Sep 14, 2026

Choose a reason for hiding this comment

Uh oh!

jimid27 commented Sep 15, 2026

TL;DR

Changes

Key Updates

CI Status

Breaking Changes

Risk Assessment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

`v2.5.12`

`v1.63.0`

`v10.6.0`