From 62d2cf7a5beeac73b94c3544125dc5a79a720b82 Mon Sep 17 00:00:00 2001 From: haschek Date: Mon, 5 Oct 2026 15:36:03 +0000 Subject: [PATCH 1/6] Update changelog section to 26.2.0 --- CHANGELOG.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a395d4d0..303eee5d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p ## [Unreleased] +## [26.2.0] - 2026-10-05 + ### Added - `` From 4410a1e28e5c9a26cb6b9022ef52b7e2a1fd0abd Mon Sep 17 00:00:00 2001 From: haschek Date: Wed, 28 Oct 2026 14:03:19 +0000 Subject: [PATCH 2/6] Prepare release v26.2.1 --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index eb952efb..260163ef 100644 --- a/package.json +++ b/package.json @@ -1,7 +1,7 @@ { "name": "@eccenca/gui-elements", "description": "GUI elements based on other libraries, usable in React application, written in Typescript.", - "version": "26.2.0", + "version": "26.2.1", "license": "Apache-2.0", "homepage": "https://github.com/eccenca/gui-elements", "bugs": "https://github.com/eccenca/gui-elements/issues", From 95957eb718aa1099eb1537ea63bfc959ebb49e85 Mon Sep 17 00:00:00 2001 From: Michael Haschke Date: Wed, 28 Oct 2026 16:02:48 +0100 Subject: [PATCH 3/6] update storybook packages to fix security issues --- package.json | 14 ++--- yarn.lock | 166 +++++++++++++++++++++++++-------------------------- 2 files changed, 89 insertions(+), 91 deletions(-) diff --git a/package.json b/package.json index 260163ef..33798f60 100644 --- a/package.json +++ b/package.json @@ -118,13 +118,13 @@ "@eslint/compat": "^2.1.0", "@eslint/eslintrc": "^3.3.6", "@eslint/js": "^10.0.1", - "@storybook/addon-a11y": "^10.5.10", - "@storybook/addon-docs": "^10.5.10", - "@storybook/addon-links": "^10.5.10", + "@storybook/addon-a11y": "^10.6.5", + "@storybook/addon-docs": "^10.6.5", + "@storybook/addon-links": "^10.6.5", "@storybook/addon-webpack5-compiler-babel": "^4.0.1", - "@storybook/cli": "^10.5.10", - "@storybook/react": "^10.5.10", - "@storybook/react-webpack5": "^10.5.10", + "@storybook/cli": "^10.6.5", + "@storybook/react": "^10.6.5", + "@storybook/react-webpack5": "^10.6.5", "@testing-library/dom": "^10.4.1", "@testing-library/jest-dom": "^7.0.1", "@testing-library/react": "^16.3.2", @@ -160,7 +160,7 @@ "rimraf": "^6.1.3", "sass": "^1.103.1", "sass-loader": "^17.0.0", - "storybook": "^10.5.10", + "storybook": "^10.6.5", "style-loader": "^4.0.0", "stylelint": "^17.14.1", "stylelint-config-recess-order": "^7.8.0", diff --git a/yarn.lock b/yarn.lock index ed8d92fe..77c77804 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2918,6 +2918,11 @@ resolved "https://registry.yarnpkg.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.0.tgz#3188bcb273a414b0d215fd22a58540b989b9409a" integrity sha512-gv3ZRaISU3fjPAgNsriBRqGWQL6quFx04YMPW/zD8XMLsU32mhCCbfbO6KZFLjvYpCZ8zyDEgqsgf+PwPaM7GQ== +"@jridgewell/sourcemap-codec@^1.6.0": + version "1.6.0" + resolved "https://registry.yarnpkg.com/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.6.0.tgz#f4c663e862f06dc98ca4d453862c46902789a18d" + integrity sha512-T7jf+5zgsZHwNJ4lvQ7/aezbyk0nNX+zJVWpmHA7VYsEx7a7qr5Rg5IbtJFqkgze5Y2sruq1RUY8Q837Od7iFw== + "@jridgewell/trace-mapping@0.3.9": version "0.3.9" resolved "https://registry.yarnpkg.com/@jridgewell/trace-mapping/-/trace-mapping-0.3.9.tgz#6534fd5933a53ba7cbf3a17615e273a0d1273ff9" @@ -3614,31 +3619,31 @@ dependencies: "@sinonjs/commons" "^3.0.1" -"@storybook/addon-a11y@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/addon-a11y/-/addon-a11y-10.5.10.tgz#e13a0686051ac545a4ff585ee5e1759dc76f1c4d" - integrity sha512-RpRQV5xUbrl6hCiNrd5FSMIo6pnRZ0VZxWvEW/ASLcreGkKUW5jl2AeLCe5YROE2i80s/dU+6VPzOYKrwWNFbQ== +"@storybook/addon-a11y@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/addon-a11y/-/addon-a11y-10.6.5.tgz#9a72afc2f8607435681bcc3c2892744d50100f14" + integrity sha512-7dEH3OHKdE+0zakqEy50KtfhPORIm1xnhWeehyROO1Ct7Rx9s7cYcx6edUZvh0tCuX5VhDnDmkvQV+dbrPDmCA== dependencies: "@storybook/global" "^5.0.0" axe-core "^4.2.0" -"@storybook/addon-docs@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/addon-docs/-/addon-docs-10.5.10.tgz#c65d1d4a6d1e2de50f0decaf82ea57583f220b30" - integrity sha512-06JoK3/a7FWI/6GzuidJP9iHp1/Vejboe6lzS1jW+d8ItpecriBt+oXh1VNmUM7i7PjI6pZnet+j51QnLyeOoQ== +"@storybook/addon-docs@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/addon-docs/-/addon-docs-10.6.5.tgz#456c8727652e2d280f823e881539baddc5b36f0f" + integrity sha512-Kt0pGLA+nwdu2g80p8jbdoiiKXxwQbhrY6uzMzq/0G1lytxpJUzrOQAM+GDcEbqyvpKr0u5d1q05/LPem/uooQ== dependencies: "@mdx-js/react" "^3.0.0" - "@storybook/csf-plugin" "10.5.10" "@storybook/icons" "^2.0.2" - "@storybook/react-dom-shim" "10.5.10" + "@storybook/react-dom-shim" "10.6.5" react "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" react-dom "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0" ts-dedent "^2.0.0" + unplugin "^2.3.5" -"@storybook/addon-links@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/addon-links/-/addon-links-10.5.10.tgz#7ea408f308dc90b4f917508b587baac92a02d230" - integrity sha512-wZQX26vSKEBuQB+EKHuAoeDh0XiUDrN2GMX2lhhj2KpJ/di4OyXFaHXspXOXWkjNtyMTRd0QkCHQqKx4LY3E6w== +"@storybook/addon-links@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/addon-links/-/addon-links-10.6.5.tgz#8537a366296112dbdaf97524362a84b658054351" + integrity sha512-O0DN6C3tRmrpMRZIuMD2SDLAgS02zI7Yca0h4RBiBKPxm7i6a9lwc7gqrZ9HCJHVFbfapub0bhj7BD3FK0XDsA== dependencies: "@storybook/global" "^5.0.0" @@ -3650,19 +3655,19 @@ "@babel/core" "^7.26.0" babel-loader "^10.0.0" -"@storybook/builder-webpack5@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/builder-webpack5/-/builder-webpack5-10.5.10.tgz#104fc4b9e832ef00921db1594228a959fbaadc31" - integrity sha512-9ZBRusBwZStoCj3Wm4wVpSpKV8OlLMpadEQ+vvOVrtDQdVJWM5xdLQpqrG21r/cJC4ZX53ZpbrDL+NMsIp1Rkw== +"@storybook/builder-webpack5@10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/builder-webpack5/-/builder-webpack5-10.6.5.tgz#054ac1e563b24d51cd7a97c27ceaa308e3e86135" + integrity sha512-v5MsBGUS7NT3byrFJ+H3LWUkijMUK+o112gd2U2F/g6IEXgDPWnusSkvmDCcPN9rNLOGTp1h6/uksMN3FslJoQ== dependencies: - "@storybook/core-webpack" "10.5.10" + "@storybook/core-webpack" "10.6.5" case-sensitive-paths-webpack-plugin "^2.4.0" cjs-module-lexer "^1.2.3" css-loader "^7.1.2" es-module-lexer "^1.5.0" fork-ts-checker-webpack-plugin "^9.1.0" html-webpack-plugin "^5.5.0" - magic-string "^0.30.5" + magic-string "^1.1.0" semver "^7.7.3" style-loader "^4.0.0" terser-webpack-plugin "^5.3.17" @@ -3672,47 +3677,40 @@ webpack-hot-middleware "^2.25.1" webpack-virtual-modules "^0.6.0" -"@storybook/cli@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/cli/-/cli-10.5.10.tgz#6682c9af9c53813353e0ad9d350cce9e9880c940" - integrity sha512-4gE2l/MQ3ft0CTEhxunq1Ga2HMY7nfdZc6T96ODYp7rogVADjy0QGEqwExyegY8wQ+WZpN09IUnhY9wQFrnQXg== +"@storybook/cli@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/cli/-/cli-10.6.5.tgz#9a1456a7a74454caa0d971b31227dff75474a2df" + integrity sha512-MncljlLB1ZtbUgsF5AdOMPEvlOHZUD7KtF9opQJ7W6vpflKRfvNQT7jrlvXZ98nTs8GovFB1Zkft1LP5boSb7Q== dependencies: - "@storybook/codemod" "10.5.10" + "@storybook/codemod" "10.6.5" "@types/semver" "^7.7.1" commander "^14.0.2" - create-storybook "10.5.10" + create-storybook "10.6.5" jscodeshift "^0.15.1" - storybook "10.5.10" + storybook "10.6.5" ts-dedent "^2.0.0" -"@storybook/codemod@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/codemod/-/codemod-10.5.10.tgz#b24c34e076340c2575e0c062dd4600871f30071c" - integrity sha512-KfHrSC3WzF0R7QLxjoiywQyA27uiU67/BMV94nWBtsiE1KF/MwxfEd779aLV3ym3/Ks8HiTKB+Hdd825q/7Icw== +"@storybook/codemod@10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/codemod/-/codemod-10.6.5.tgz#6f2521b81867ec928ee54ce7c99a968a9ace4495" + integrity sha512-DAqf+oe0roZ2Omnyqxm0m0uDVWxtbCE9IpByn+wEJOB+IFhSliZoYp65Ayn2aro4P9UjbF5ZZCueeFT+UhXPAQ== dependencies: "@types/cross-spawn" "^6.0.6" cross-spawn "^7.0.6" es-toolkit "^1.43.0" jscodeshift "^0.15.1" prettier "^3.7.1" - storybook "10.5.10" + storybook "10.6.5" tiny-invariant "^1.3.1" tinyglobby "^0.2.13" -"@storybook/core-webpack@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/core-webpack/-/core-webpack-10.5.10.tgz#b3f2d99aa085c2bf782154383fb5ea5034fdae4e" - integrity sha512-CiUo4AZRKm3nVb6KWw+yfV6g6VSTA97msiVN9bJlBOFS1dax2ulrRNJnHJxR/U1AT51hONfU4dZOpCXRwaobTA== +"@storybook/core-webpack@10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/core-webpack/-/core-webpack-10.6.5.tgz#3dab29f376f8cb72672580b3c41db8f7591d01ea" + integrity sha512-HAEpKijJ7ufrN/pcnxhlJOmqld0CWkFj4p1p7hQtcUvIKb4AraM5526IPGsaf6KLK6NeWriIR8FdwLWGSXiJZg== dependencies: ts-dedent "^2.0.0" -"@storybook/csf-plugin@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/csf-plugin/-/csf-plugin-10.5.10.tgz#c65da1cdfe0a11795a14c518e9f8f828b8d54b3b" - integrity sha512-TaCLBrqVEr767+w58QDotDUiCTuE5cyRJuRcDlsKQyUIyGBv+lYD3lu8wBiVCYxgIjB/gu9HmqiC+0yx1rHzaw== - dependencies: - unplugin "^2.3.5" - "@storybook/global@^5.0.0": version "5.0.0" resolved "https://registry.yarnpkg.com/@storybook/global/-/global-5.0.0.tgz#b793d34b94f572c1d7d9e0f44fac4e0dbc9572ed" @@ -3723,15 +3721,15 @@ resolved "https://registry.yarnpkg.com/@storybook/icons/-/icons-2.0.2.tgz#765b49b902a2bdf6f3a5a1aa8dc0cdcd3c55c5b5" integrity sha512-KZBCpXsshAIjczYNXR/rlxEtCUX/eAbpFNwKi8bcOomrLA4t/SyPz5RF+lVPO2oZBUE4sAkt43mfJUevQDSEEw== -"@storybook/preset-react-webpack@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/preset-react-webpack/-/preset-react-webpack-10.5.10.tgz#73cb5ff4dc22c869e97f017bedeb0fab0cedb26c" - integrity sha512-erAyPdNKqzOQOQVHm/kMSO4Nrr/g279KoA5LyzMOTJAQJHjDdsqmYdGXRDVfcnDL+H+Qm9pWaP+re2S8YG6JNg== +"@storybook/preset-react-webpack@10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/preset-react-webpack/-/preset-react-webpack-10.6.5.tgz#d9fab4aaee3db52184e93d788bcc5ffd8befab42" + integrity sha512-Cp3pRUyeNl4MqoaZIIGLuu0D6pXonK1zFiYsqLip5kw0Vl6J91ZbUXOXAbJzar4maArTS2l/eHFywJX/gY5llg== dependencies: - "@storybook/core-webpack" "10.5.10" + "@storybook/core-webpack" "10.6.5" "@storybook/react-docgen-typescript-plugin" "1.0.6--canary.9.0c3f3b7.0" "@types/semver" "^7.7.1" - magic-string "^0.30.5" + magic-string "^1.1.0" react-docgen "^8.0.2" resolve "^1.22.8" semver "^7.7.3" @@ -3751,27 +3749,27 @@ react-docgen-typescript "^2.2.2" tslib "^2.0.0" -"@storybook/react-dom-shim@10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/react-dom-shim/-/react-dom-shim-10.5.10.tgz#8ddcad879d8804a9bbc09a5d0ea10f8356f01ed6" - integrity sha512-rbu62ILo/VE3iXKmu+kWXFpD1H1Lwi0f19q/x7JnDsD2dxKS9w5znLEqPIq2qxpzi/wjjIb2iUP1cRG1d/9W5A== +"@storybook/react-dom-shim@10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/react-dom-shim/-/react-dom-shim-10.6.5.tgz#501efa6a06da077e5a9acad13ffce630a1db7437" + integrity sha512-Qbbkp+5Otg32w8Ddav6rH6MGPiYVfEzrgn0HqbqlqS8kY+DRXo+NYXJwZTVSDSwrYPrfH+Ok2tV4uE8Zo0c3cg== -"@storybook/react-webpack5@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/react-webpack5/-/react-webpack5-10.5.10.tgz#ef4cca70977444abdb954d43c29ffc2741b08e20" - integrity sha512-PpC2CYbeqKGDYpG64PR/wkjo+Sm9EKWvdE0ZaKHBQb1PfC0p/TUxHy8XfXQp/4atjhET0VqSUDc0TP/ii1bGxw== +"@storybook/react-webpack5@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/react-webpack5/-/react-webpack5-10.6.5.tgz#b9148c796b74af1b3cac1e3f3e12ed7291213482" + integrity sha512-DBmRR+hLXIHF+Qy8UbHK9SWfDYcF+Dz3vDfr0zdE3cRM6ZqS+GqRqinRZcUimnmvTEm0IlODSBy+uX2+cj3Fgg== dependencies: - "@storybook/builder-webpack5" "10.5.10" - "@storybook/preset-react-webpack" "10.5.10" - "@storybook/react" "10.5.10" + "@storybook/builder-webpack5" "10.6.5" + "@storybook/preset-react-webpack" "10.6.5" + "@storybook/react" "10.6.5" -"@storybook/react@10.5.10", "@storybook/react@^10.5.10": - version "10.5.10" - resolved "https://registry.yarnpkg.com/@storybook/react/-/react-10.5.10.tgz#d28d575869df5514ccbaf27c5cf828d8f458172e" - integrity sha512-4MBV5e1SXIMfPynLHzr+Mp0dwGv/FW1bklWAsS4ynBOAbC98W9p/I9vqBnUctsvE3BJkhzHQQyPwMHL5tTcHVA== +"@storybook/react@10.6.5", "@storybook/react@^10.6.5": + version "10.6.5" + resolved "https://registry.yarnpkg.com/@storybook/react/-/react-10.6.5.tgz#051163108152ea12a9a3a70b5dea76d5db3fc1ce" + integrity sha512-vvRjRe/O8NRiQbGyA7Ne6h2jbD6GjwNZFkMdHl+0kZH8Z/S9ZWWmKmjCySvH/OmgighdCOQ98tcfND7m65WQBg== dependencies: "@storybook/global" "^5.0.0" - "@storybook/react-dom-shim" "10.5.10" + "@storybook/react-dom-shim" "10.6.5" react-docgen "^8.0.2" react-docgen-typescript "^2.2.2" @@ -3827,10 +3825,10 @@ dependencies: "@babel/runtime" "^7.12.5" -"@testing-library/user-event@^14.6.1": - version "14.6.1" - resolved "https://registry.yarnpkg.com/@testing-library/user-event/-/user-event-14.6.1.tgz#13e09a32d7a8b7060fe38304788ebf4197cd2149" - integrity sha512-vq7fv0rnt+QTXgPxr5Hjc210p6YKq2kmdziLgnsZGgLJ9e6VAShx1pACLuRjd/AS/sr7phAR58OIIpf0LlmQNw== +"@testing-library/user-event@^14.6.3": + version "14.6.8" + resolved "https://registry.yarnpkg.com/@testing-library/user-event/-/user-event-14.6.8.tgz#9433b5008d8aff4cdf60c177f5789ce32062b763" + integrity sha512-vgSSqnANMnkcYR/vUNDbwS7aM3OErRLNUG8vCVVlj4oc6cKffUrccX7UAS5AmJQQNZTSibi9z5GvvRZ0aYgUCQ== "@topoconfig/extends@^0.16.2": version "0.16.2" @@ -5638,13 +5636,13 @@ create-require@^1.1.0: resolved "https://registry.yarnpkg.com/create-require/-/create-require-1.1.1.tgz#c1d7e8f1e5f6cfc9ff65f9cd352d37348756c333" integrity sha512-dcKFX3jn0MpIaXjisoRvexIJVEKzaq7z2rZKxf+MSr9TkdmHmsU4m2lcLojrj/FHl8mk5VxMmYA+ftRkP/3oKQ== -create-storybook@10.5.10: - version "10.5.10" - resolved "https://registry.yarnpkg.com/create-storybook/-/create-storybook-10.5.10.tgz#ea07e4b8f9ff4e00ea9de8ba8f244850c685a693" - integrity sha512-o9+wYd1QV/b3ZpO/SmDvB2eQclzLdTy+yhQcAx1Dtpxth455k8VchrJ0HujIm+AhX1quk/Xr3V510PTJelRdWg== +create-storybook@10.6.5: + version "10.6.5" + resolved "https://registry.yarnpkg.com/create-storybook/-/create-storybook-10.6.5.tgz#82b34674ce4de033de3538f2bf675fbbe7c26fc3" + integrity sha512-+7osEf01179kMUpKdN0ICNHgh6+a5BdH+r29LUUMVpPzaXhkKUFnQyXqslJxyJ/wK3ZaJ09xsAnVqO2rWhsMhw== dependencies: semver "^7.7.3" - storybook "10.5.10" + storybook "10.6.5" crelt@^1.0.5: version "1.0.6" @@ -8956,12 +8954,12 @@ lz-string@^1.5.0: resolved "https://registry.yarnpkg.com/lz-string/-/lz-string-1.5.0.tgz#c1ab50f77887b712621201ba9fd4e3a6ed099941" integrity sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ== -magic-string@^0.30.5: - version "0.30.17" - resolved "https://registry.yarnpkg.com/magic-string/-/magic-string-0.30.17.tgz#450a449673d2460e5bbcfba9a61916a1714c7453" - integrity sha512-sNPKHvyjVf7gyjwS4xGTaW/mCnF8wnjtifKBEhxfZ7E/S8tQ0rssrwGNn6q8JH/ohItJfSQp9mBtQYuTlH5QnA== +magic-string@^1.1.0: + version "1.4.5" + resolved "https://registry.yarnpkg.com/magic-string/-/magic-string-1.4.5.tgz#201c852d51eb0664d6f66cf7ab93b20b416e48d9" + integrity sha512-oLLC2+YvQUfAa+vxoufE/yc1icb87M9iXIRqAoR/2EhE/8cb3SF/+Gi0c2By1B+5Vz2e2vQtUvHiu1+63Znh+w== dependencies: - "@jridgewell/sourcemap-codec" "^1.5.0" + "@jridgewell/sourcemap-codec" "^1.6.0" make-dir@^2.0.0, make-dir@^2.1.0: version "2.1.0" @@ -11404,16 +11402,16 @@ stack-utils@^2.0.6: dependencies: escape-string-regexp "^2.0.0" -storybook@10.5.10, storybook@^10.5.10: - version "10.5.10" - resolved "https://registry.yarnpkg.com/storybook/-/storybook-10.5.10.tgz#97e9b4a71b4df7732e82d64edffe07f9e8d70083" - integrity sha512-Rz8k9ejFHsi7lbtJTaxZlhCUz4GkbJIKEoKDjXeLfr/ZhXip73E6keKxW0KH8iGeKiCqHAbJCV4YIQrxTOLiig== +storybook@10.6.5, storybook@^10.6.5: + version "10.6.5" + resolved "https://registry.yarnpkg.com/storybook/-/storybook-10.6.5.tgz#9fc7e7de1275156f84d9055f6be98ade10c55b92" + integrity sha512-qurC38Nx4PDF9YIq6GO95dpUx8a3B9AZwlcHBo4cOI9At09ifjQRsqcwcdOf2YX0cpVhFKmHkI20SWCrxqYQrg== dependencies: "@storybook/global" "^5.0.0" "@storybook/icons" "^2.0.2" "@testing-library/dom" "^10.4.1" "@testing-library/jest-dom" "6.9.1" - "@testing-library/user-event" "^14.6.1" + "@testing-library/user-event" "^14.6.3" "@vitest/expect" "3.2.4" "@vitest/spy" "3.2.4" "@webcontainer/env" "^1.1.1" From 10be6ed0094e35cc3f3bb71bb9ce0d4df464dbcf Mon Sep 17 00:00:00 2001 From: Michael Haschke Date: Wed, 28 Oct 2026 16:14:55 +0100 Subject: [PATCH 4/6] set version resolutions for source-map-js and zod packages to fix high security risk --- package.json | 4 +++- yarn.lock | 16 ++++++++-------- 2 files changed, 11 insertions(+), 9 deletions(-) diff --git a/package.json b/package.json index 33798f60..2bc00266 100644 --- a/package.json +++ b/package.json @@ -191,7 +191,9 @@ "@eslint/eslintrc/**/js-yaml": "^4.3.2", "**/fast-uri": "^3.1.6", "**/browserslist": "^4.28.7", - "@storybook/react-webpack5/**/webpack-dev-middleware": "^7.4.6" + "@storybook/react-webpack5/**/webpack-dev-middleware": "^7.4.6", + "**/source-map-js": "^1.2.2", + "**/zod": "^4.6.6" }, "husky": { "hooks": { diff --git a/yarn.lock b/yarn.lock index 77c77804..d354e1a4 100644 --- a/yarn.lock +++ b/yarn.lock @@ -11359,10 +11359,10 @@ snake-case@^3.0.4: dot-case "^3.0.4" tslib "^2.0.3" -"source-map-js@>=0.6.2 <2.0.0", source-map-js@^1.0.1, source-map-js@^1.2.1: - version "1.2.1" - resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.1.tgz#1ce5650fddd87abc099eda37dcff024c2667ae46" - integrity sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA== +"source-map-js@>=0.6.2 <2.0.0", source-map-js@^1.0.1, source-map-js@^1.2.1, source-map-js@^1.2.2: + version "1.2.2" + resolved "https://registry.yarnpkg.com/source-map-js/-/source-map-js-1.2.2.tgz#79fb88d97535a21cb27162cb05d211b67acea4ab" + integrity sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw== source-map-support@0.5.13: version "0.5.13" @@ -12853,10 +12853,10 @@ yocto-queue@^0.1.0: resolved "https://registry.yarnpkg.com/zod-validation-error/-/zod-validation-error-4.0.2.tgz#bc605eba49ce0fcd598c127fee1c236be3f22918" integrity sha512-Q6/nZLe6jxuU80qb/4uJ4t5v2VEZ44lzQjPDhYJNztRQ4wyWc6VF3D3Kb/fAuPetZQnhS3hnajCf9CsWesghLQ== -"zod@^3.25.0 || ^4.0.0": - version "4.1.13" - resolved "https://registry.yarnpkg.com/zod/-/zod-4.1.13.tgz#93699a8afe937ba96badbb0ce8be6033c0a4b6b1" - integrity sha512-AvvthqfqrAhNH9dnfmrfKzX5upOdjUVJYFqNSlkmGf64gRaTzlPwz99IHYnVs28qYAybvAlBV+H7pn0saFY4Ig== +"zod@^3.25.0 || ^4.0.0", zod@^4.6.6: + version "4.6.7" + resolved "https://registry.yarnpkg.com/zod/-/zod-4.6.7.tgz#e806cf64a7f4e37635ce9f2f52c04c3766f75e5b" + integrity sha512-g8W2D2kU6a8untc053fX1uVBKzM7yqAxW/3zwk83+6RyF2+SKOuV+c0wBDhUwzV1PaGapmZH+rmcUzPf+3CGwg== zustand@^4.4.0: version "4.5.6" From b41aa1d803634750e53a93bd82350a79aca5a417 Mon Sep 17 00:00:00 2001 From: Michael Haschke Date: Wed, 28 Oct 2026 16:25:51 +0100 Subject: [PATCH 5/6] set resolution version for @ungap/structured-clone package because Wiz and Trivy scanners detected vulnerability issues --- package.json | 3 ++- yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index 2bc00266..955f87e3 100644 --- a/package.json +++ b/package.json @@ -193,7 +193,8 @@ "**/browserslist": "^4.28.7", "@storybook/react-webpack5/**/webpack-dev-middleware": "^7.4.6", "**/source-map-js": "^1.2.2", - "**/zod": "^4.6.6" + "**/zod": "^4.6.6", + "**/@ungap/structured-clone": "^1.3.1" }, "husky": { "hooks": { diff --git a/yarn.lock b/yarn.lock index d354e1a4..9c9ceebe 100644 --- a/yarn.lock +++ b/yarn.lock @@ -4328,10 +4328,10 @@ "@typescript-eslint/types" "8.68.0" eslint-visitor-keys "^5.0.0" -"@ungap/structured-clone@^1.0.0", "@ungap/structured-clone@^1.3.0": - version "1.3.0" - resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.3.0.tgz#d06bbb384ebcf6c505fde1c3d0ed4ddffe0aaff8" - integrity sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g== +"@ungap/structured-clone@^1.0.0", "@ungap/structured-clone@^1.3.0", "@ungap/structured-clone@^1.3.1": + version "1.4.0" + resolved "https://registry.yarnpkg.com/@ungap/structured-clone/-/structured-clone-1.4.0.tgz#5e2e1374c0a30b5a42e8b083523a225c6945f88a" + integrity sha512-1mEZtMKPM09vDmQt5y7YvmN2+DFTP7Tg0EWXdic8/C6VRnpb33e4ghisCIE3WZjsE2N8mf+QV1Zqh7ZFYLWInQ== "@unrs/resolver-binding-android-arm-eabi@1.11.1": version "1.11.1" From 97b7d33bbe016fc93ec945efc7aa7dd4311f91d2 Mon Sep 17 00:00:00 2001 From: Michael Haschke Date: Wed, 28 Oct 2026 16:27:59 +0100 Subject: [PATCH 6/6] update changelog --- CHANGELOG.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 303eee5d..8ad452f3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,10 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/) and this p ## [26.2.0] - 2026-10-05 +### Fixed + +- resolution for package `@ungap/structured-clone` was set to `v1.3.1` because it was the source why Wiz and Trivy scanners detected vulnerability issues for the gui elements package + ### Added - ``