chore(deps-dev): bump the dev-deps group across 1 directory with 39 updates

[dependabot]

Bumps the dev-deps group with 39 updates in the /modules/web directory:

Package	From	To
@commitlint/cli	18.6.1	21.0.2
@commitlint/config-conventional	18.6.3	21.0.2
@manypkg/cli	0.21.4	0.25.1
dotenv-cli	7.4.4	11.0.0
eslint	8.57.1	10.4.1
prettier	3.7.4	3.8.3
turbo	1.13.4	2.9.16
typescript	5.9.3	6.0.3
eslint-config-next	14.2.35	16.2.7
replace-in-file	7.2.0	8.4.0
@babel/preset-env	7.28.6	7.29.7
@babel/preset-typescript	7.28.5	7.29.7
@rollup/plugin-node-resolve	15.3.1	16.0.3
@storybook/addon-essentials	7.6.21	8.6.14
@storybook/addon-interactions	7.6.21	8.6.14
@storybook/addon-links	7.6.21	10.4.2
@storybook/blocks	7.6.21	8.6.14
@storybook/react	7.6.21	10.4.2
@storybook/react-vite	7.6.21	10.4.2
@vitejs/plugin-react	4.7.0	6.0.2
autoprefixer	10.4.17	10.5.0
chromatic	10.9.6	17.2.0
concurrently	8.2.2	10.0.3
postcss	8.5.6	8.5.15
postcss-loader	8.2.0	8.2.1
postcss-selector-parser	6.1.2	7.1.1
storybook	7.6.21	10.4.2
tailwindcss	3.4.19	4.3.0
tailwindcss-radix	2.9.0	4.0.2
vite	5.4.21	8.0.16
vite-plugin-dts	3.9.1	5.0.2
vite-tsconfig-paths	4.3.2	6.1.1
@babel/core	7.28.6	7.29.7
@bufbuild/buf	1.63.0	1.70.0
@bufbuild/protoc-gen-es	1.10.1	2.12.0
@connectrpc/protoc-gen-connect-query	1.4.2	2.2.0
@vitejs/plugin-basic-ssl	1.2.0	2.3.0
babel-loader	9.2.1	10.1.1
vite-plugin-svgr	4.5.0	5.2.0

Updates @commitlint/cli from 18.6.1 to 21.0.2

Release notes

Sourced from @​commitlint/cli's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

• fix(load): only resolve relative formatter paths by @​escapedcat in conventional-changelog/commitlint#4761
• fix(types): add presetConfig to ParserPreset interface by @​SAY-5 in conventional-changelog/commitlint#4749

CI

• ci: stop spawning schedule jobs on contributors' forks by @​knocte in conventional-changelog/commitlint#4753
• ci: add weekly non-blocking pnpm audit by @​escapedcat in conventional-changelog/commitlint#4766

New Contributors

• @​SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @​commitlint/cli's changelog.

21.0.2 (2026-05-29)

Bug Fixes

• disallow same commit hash for --from and --to (#4773) (121005e)

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/cli

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/cli

... (truncated)

Commits

• 8069048 v21.0.2
• 121005e fix: disallow same commit hash for --from and --to (#4773)
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• db39968 chore: pre pnpm cleanup (#4759)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• 40d7e36 feat!: show input from a new line (#4727)
• 44c3174 chore: update dependency yargs to v18 #4432 (#4686)
• ac01464 chore: replace dependencies with Node 22 built-ins (#4681)
• Additional commits viewable in compare view

Updates @commitlint/config-conventional from 18.6.3 to 21.0.2

Release notes

Sourced from @​commitlint/config-conventional's releases.

v21.0.2

21.0.2 (2026-05-29)

Bug Fixes

• fix: emit actionable error when --edit cannot find COMMIT_EDITMSG (#589) by @​escapedcat in conventional-changelog/commitlint#4755
• fix: apply oxfmt formatting to get-edit-commit.ts by @​escapedcat in conventional-changelog/commitlint#4768
• fix(read): fail when --from and --to share no merge-base #4555 by @​CervEdin in conventional-changelog/commitlint#4754
• fix: disallow same commit hash for --from and --to by @​knocte in conventional-changelog/commitlint#4773

Chore/CI

• ci: have renovate rebase stale PRs before merging by @​escapedcat in conventional-changelog/commitlint#4782
• chore: have renovate hold PRs for 3 days after release by @​escapedcat in conventional-changelog/commitlint#4788
• chore: anchor vite 8 by @​escapedcat in conventional-changelog/commitlint#4790
• ci: run commitlint once per same-repo PR by @​escapedcat in conventional-changelog/commitlint#4795

New Contributors

• @​CervEdin made their first contribution in conventional-changelog/commitlint#4754

Full Changelog: conventional-changelog/commitlint@v21.0.1...v21.0.2

v21.0.1

21.0.1 (2026-05-12)

Bug Fixes

• fix(load): only resolve relative formatter paths by @​escapedcat in conventional-changelog/commitlint#4761
• fix(types): add presetConfig to ParserPreset interface by @​SAY-5 in conventional-changelog/commitlint#4749

CI

• ci: stop spawning schedule jobs on contributors' forks by @​knocte in conventional-changelog/commitlint#4753
• ci: add weekly non-blocking pnpm audit by @​escapedcat in conventional-changelog/commitlint#4766

New Contributors

• @​SAY-5 made their first contribution in conventional-changelog/commitlint#4749

Full Changelog: conventional-changelog/commitlint@v21.0.0...v21.0.1

v21.0.0

Heads-up: --legacy-output is a transitional escape hatch. It will be removed in a future major release. Plan to migrate your parsers / snapshots to the new format during the v21 lifecycle.

... (truncated)

Changelog

Sourced from @​commitlint/config-conventional's changelog.

21.0.2 (2026-05-29)

Note: Version bump only for package @​commitlint/config-conventional

21.0.1 (2026-05-12)

Note: Version bump only for package @​commitlint/config-conventional

21.0.0 (2026-05-08)

• chore!: minimum node version v22 (#4679) (ac2b3f4), closes #4679

BREAKING CHANGES

• drop node v18 and v20 support

• Bump engines to >=v22 in all 39 package.json files
• Update @​types/node to ^22.0.0
• Update CI matrix to [22, 24]
• Update Ubuntu baseline job to ubuntu:26.04
• Update Dockerfile.ci, .mise.toml, .codesandbox/ci.json
• Update pre-commit hook to use --ignore-engines
• Update README and docs

Co-authored-by: Claude Opus 4.6 (1M context) noreply@anthropic.com

20.5.3 (2026-04-30)

Note: Version bump only for package @​commitlint/config-conventional

20.5.0 (2026-03-15)

... (truncated)

Commits

• 8069048 v21.0.2
• db8d7d6 v21.0.1
• 1329a25 chore: migrate to pnpm (#4762)
• 6099ae5 chore: replace eslint with oxlint (#4756)
• f081a8e v21.0.0
• 44c3174 chore: update dependency yargs to v18 #4432 (#4686)
• ac2b3f4 chore!: minimum node version v22 (#4679)
• 31e959a v20.5.3
• a7918e9 v20.5.0
• 02d7245 v20.4.4
• Additional commits viewable in compare view

Updates @manypkg/cli from 0.21.4 to 0.25.1

Release notes

Sourced from @​manypkg/cli's releases.

@​manypkg/cli@​0.25.1

Patch Changes

• #260 5854938 Thanks @​jasekiw! - Keep detected line endings flavor of package.json files on Windows when updating those files

@​manypkg/cli@​0.25.0

Minor Changes

• #254 2c06ac0 Thanks @​cjkihl! - Add Bun support

Patch Changes

• Updated dependencies [2c06ac0]:
  • @​manypkg/get-packages@​3.1.0

@​manypkg/cli@​0.24.0

Minor Changes

• #248 456ca21 Thanks @​bluwy! - Change the default value of the defaultBranch config from "master" to "main"

• #242 1763058 Thanks @​spanishpear! - This package is now published as a pure ESM package.

• #245 a00f5f7 Thanks @​Andarist! - Drop support for Bolt

• #244 f29df03 Thanks @​Andarist! - Add "engines" field for explicit node version support. The supported node versions are >=20.0.0.

Patch Changes

• Updated dependencies [3cf8c4e, 1763058, a00f5f7, f29df03]:
  • @​manypkg/get-packages@​3.0.0

@​manypkg/cli@​0.23.0

Minor Changes

• #236 1a5ea55 Thanks @​VanTanev! - Change the ROOT_HAS_DEV_DEPENDENCIES rule to ROOT_HAS_PROD_DEPENDENCIES. Monorepo root should use devDependencies instead of dependencies for better support of production-only installs, useful in eg Docker builds.

@​manypkg/cli@​0.22.0

Minor Changes

• #231 aeb50f5 Thanks @​VanTanev! - Upgraded package-json, semver and sembear dependencies.

• #226 2fafd9a Thanks @​VanTanev! - Replace chalk with picocolors

• #228 1cbdcb9 Thanks @​VanTanev! - Remove the find-up dependency.

• #231 aeb50f5 Thanks @​VanTanev! - Node.js version requirement raised to >= 18.0.0

• #224 3c3198a Thanks @​VanTanev! - Replace spawndamnit with tinyexec for fewer dependencies

• #229 4a835ed Thanks @​VanTanev! - Update validate-npm-package-name to 5.0.1 to remove one transitive dependency.

... (truncated)

Changelog

Sourced from @​manypkg/cli's changelog.

0.25.1

Patch Changes

• #260 5854938 Thanks @​jasekiw! - Keep detected line endings flavor of package.json files on Windows when updating those files

0.25.0

Minor Changes

• #254 2c06ac0 Thanks @​cjkihl! - Add Bun support

Patch Changes

• Updated dependencies [2c06ac0]:
  • @​manypkg/get-packages@​3.1.0

0.24.0

Minor Changes

• #248 456ca21 Thanks @​bluwy! - Change the default value of the defaultBranch config from "master" to "main"

• #242 1763058 Thanks @​spanishpear! - This package is now published as a pure ESM package.

• #245 a00f5f7 Thanks @​Andarist! - Drop support for Bolt

• #244 f29df03 Thanks @​Andarist! - Add "engines" field for explicit node version support. The supported node versions are >=20.0.0.

Patch Changes

• Updated dependencies [3cf8c4e, 1763058, a00f5f7, f29df03]:
  • @​manypkg/get-packages@​3.0.0

0.23.0

Minor Changes

• #236 1a5ea55 Thanks @​VanTanev! - Change the ROOT_HAS_DEV_DEPENDENCIES rule to ROOT_HAS_PROD_DEPENDENCIES. Monorepo root should use devDependencies instead of dependencies for better support of production-only installs, useful in eg Docker builds.

0.22.0

Minor Changes

• #231 aeb50f5 Thanks @​VanTanev! - Upgraded package-json, semver and sembear dependencies.

• #226 2fafd9a Thanks @​VanTanev! - Replace chalk with picocolors

• #228 1cbdcb9 Thanks @​VanTanev! - Remove the find-up dependency.

... (truncated)

Commits

• 327e4ac Version Packages (#261)
• 5854938 Keep detected line endings flavor of package.json files on Windows when upd...
• fc5d5e0 Version Packages (#259)
• 2c06ac0 Add Bun Support to manypkg (#254)
• 734a9a8 Version Packages (#240)
• c524543 Update dependencies (#251)
• f29df03 Set engines field to node 20 and above (#244)
• a00f5f7 Drop support for Bolt (#245)
• 3cf8c4e Fixed an issue with projects using npm workspaces being recognized as yarn pr...
• 489b1b0 Migrate to Vitest (#249)
• Additional commits viewable in compare view

Updates dotenv-cli from 7.4.4 to 11.0.0

Release notes

Sourced from dotenv-cli's releases.

v11.0.0: Bump dotenv-expand to ^12

No release notes provided.

v10.0.0: bump dotenv-expand

Fixes entropitor/dotenv-cli#121

v9.0.0 Bump dotenv and be quiet by default

entropitor/dotenv-cli#129

v8.0.0

Improve expansion of configs entropitor/dotenv-cli#101

This might break some configs so it's a major release. In general, you can upgrade without issues.

Commits

• 5ddbe98 v11.0.0
• 04aa586 chore: bump dotenv-expand to ^12
• a4b18d9 chore: prettify README.md
• a979e9a chore: update README.md
• 0bf0073 10.0.0
• d4a3509 chore: bump dotenv-expand
• 6c510a3 9.0.0
• 8d377b1 Add quiet flag to suppress dotenv debug output by default (#129)
• 0da11b9 Update LICENSE with copyright information
• 455b6b5 8.0.0
• Additional commits viewable in compare view

Updates eslint from 8.57.1 to 10.4.1

Release notes

Sourced from eslint's releases.

v10.4.1

Bug Fixes

• e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930) (Francesco Trotta)
• d4ce898 fix: propagate failures from delegated commands (#20917) (Minh Vu)
• f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916) (kuldeep kumar)
• c5bc78b fix: false positive for reference in finally block (#20655) (Tanuj Kanti)
• 27538c0 fix: add missing CodePath and CodePathSegment types (#20853) (Pixel998)

Documentation

• 61b0add docs: remove deprecated rule from related rules of max-params (#20921) (Tanuj Kanti)
• 305d5b9 docs: remove deprecated rules from related rules section (#20911) (Tanuj Kanti)
• 49b0202 docs: fix display: none of ad (#20901) (Tanuj Kanti)
• 9067f94 docs: switch build to Node.js 24 (#20893) (Milos Djermanovic)
• c91b041 docs: Update README (GitHub Actions Bot)
• e349265 docs: clarify semver strings in rule deprecation objects (#20885) (Milos Djermanovic)

Chores

• b0e466b test: add data property to invalid tests cases for rules (#20924) (Tanuj Kanti)
• f78838b test: add CodePath type coverage (#20904) (Pixel998)
• 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20922) (Francesco Trotta)
• 002942c ci: declare contents:read on update-readme workflow (#20919) (Arpit Jain)
• 64bca24 chore: update ecosystem plugins (#20912) (ESLint Bot)
• 6d7c832 chore: ignore fflate updates in renovate (#20908) (Pixel998)
• b2c8638 ci: bump pnpm/action-setup from 6.0.7 to 6.0.8 (#20889) (dependabot[bot])
• a9b8d7f chore: increase maxBuffer for ecosystem tests (#20881) (sethamus)
• b702ead chore: update ecosystem update PR settings (#20884) (Pixel998)
• 507f60e chore: update ecosystem plugins (#20882) (ESLint Bot)
• 92f5c5b test: add unit test for message-count (#20878) (kuldeep kumar)
• df32108 chore: add @​eslint/markdown and typescript-eslint ecosystem tests (#20837) (sethamus)
• 327f91d chore: use includeIgnoreFile internally (#20876) (Kirk Waiblinger)
• f0dc4bd chore: pin fflate@0.8.2 (#20877) (Milos Djermanovic)
• 0f4bd25 ci: run Discord alert for ecosystem test failures (#20873) (Copilot)

v10.4.0

Features

• 1a45ec5 feat: check sequence expressions in for-direction (#20701) (kuldeep kumar)
• 450040b feat: add includeIgnoreFile() to eslint/config (#20735) (Kirk Waiblinger)

Bug Fixes

• 544c0c3 fix: escape code path DOT labels in debug output (#20866) (Pixel998)
• 6799431 fix: update dependency @​eslint/config-helpers to ^0.6.0 (#20850) (renovate[bot])
• f078fef fix: handle non-array deprecated rule replacements (#20825) (xbinaryx)

Documentation

• 7e52a71 docs: add mention of @eslint-react/eslint-plugin (#20869) (Pavel)
• db3468b docs: tweak wording around ambiguous CJS-vs-ESM config (#20865) (Kirk Waiblinger)
• 9084664 docs: Update README (GitHub Actions Bot)
• 9cc7387 docs: Update README (GitHub Actions Bot)
• 3d7b548 docs: Update README (GitHub Actions Bot)
• 191ec3c docs: Update README (GitHub Actions Bot)

... (truncated)

Commits

• 4a3d15a 10.4.1
• 43e7e2b Build: changelog update for 10.4.1
• e557467 fix: update @eslint/plugin-kit version to 0.7.2 (#20930)
• b0e466b test: add data property to invalid tests cases for rules (#20924)
• d4ce898 fix: propagate failures from delegated commands (#20917)
• f4f3507 fix: prefer-arrow-callback invalid autofix with newline after async (#20916)
• f78838b test: add CodePath type coverage (#20904)
• 61b0add docs: remove deprecated rule from related rules of max-params (#20921)
• 1daa4bd chore: update eslint-plugin-eslint-comments test data to latest commit (#20...
• 002942c ci: declare contents:read on update-readme workflow (#20919)
• Additional commits viewable in compare view

Updates prettier from 3.7.4 to 3.8.3

Release notes

Sourced from prettier's releases.

3.8.3

• SCSS: Prevent trailing comma in if() function (prettier/prettier#18471 by @​kovsu)

🔗 Changelog

3.8.2

• Support Angular v21.2

🔗 Changelog

3.8.1

• Include available printers in plugin type declarations (#18706 by @​porada)

🔗 Changelog

3.8.0

• Support Angular v21.1

diff

🔗 Release note "Prettier 3.8: Support for Angular v21.1"

Changelog

Sourced from prettier's changelog.

3.8.3

diff

SCSS: Prevent trailing comma in if() function (#18471 by @​kovsu)

// Input
$value: if(sass(false): 1; else: -1);
// Prettier 3.8.2
$value: if(
sass(false): 1; else: -1,
);
// Prettier 3.8.3
$value: if(sass(false): 1; else: -1);

3.8.2

diff

Angular: Support Angular v21.2 (#18722, #19034 by @​fisker)

Exhaustive typechecking with @default never;

<!-- Input -->
@switch (foo) {
  @case (1) {}
  @default never;
}
<!-- Prettier 3.8.1 -->
SyntaxError: Incomplete block "default never". If you meant to write the @ character, you should use the "&#64;" HTML entity instead. (3:3)
<!-- Prettier 3.8.2 -->
@​switch (foo) {
@​case (1) {}
@​default never;
}

arrow function and instanceof expressions.

</tr></table> 

... (truncated)

Commits

• d7108a7 Release 3.8.3
• 177f908 Prevent trailing comma in SCSS if() function (#18471)
• 1cd4066 Release @​prettier/plugin-oxc@​0.1.4
• a8700e2 Update oxc-parser to v0.125.0
• 752157c Fix tests
• 053fd41 Bump Prettier dependency to 3.8.2
• 904c636 Clean changelog_unreleased
• dc1f7fc Update dependents count
• b31557c Release 3.8.2
• 96bbaed Support Angular v21.2 (#18722)
• Additional commits viewable in compare view

Updates turbo from 1.13.4 to 2.9.16

Release notes

Sourced from turbo's releases.

Turborepo v2.9.16

What's Changed

Changelog

• release(turborepo): 2.9.15 by @​github-actions[bot] in vercel/turborepo#12955
• fix: Avoid hanging PTY shutdown by @​anthonyshew in vercel/turborepo#12958
• fix: Retry npm tlog publish failures by @​anthonyshew in vercel/turborepo#12959
• release(turborepo): 2.9.16-canary.1 by @​anthonyshew in vercel/turborepo#12960
• fix: Preserve nested Bun dependency versions by @​anthonyshew in vercel/turborepo#12963
• Revert "fix: Preserve nested Bun dependency versions" by @​anthonyshew in vercel/turborepo#12964
• release(turborepo): 2.9.16-canary.2 by @​github-actions[bot] in vercel/turborepo#12961
• fix: Preserve nested Bun dependency versions by @​anthonyshew in vercel/turborepo#12965
• fix: Don't delete existing .git when using --no-git flag by @​anthonyshew in vercel/turborepo#12968

Full Changelog: vercel/turborepo@v2.9.15...v2.9.16

Turborepo v2.9.16-canary.2

What's Changed

Changelog

• release(turborepo): 2.9.15-canary.7 by @​github-actions[bot] in vercel/turborepo#12935
• fix: Restore a few internal invariant checks by @​anthonyshew in vercel/turborepo#12933
• fix: Improve profile tracing coverage by @​anthonyshew in vercel/turborepo#12936
• fix: Use build-scale OTel duration buckets by @​anthonyshew in vercel/turborepo#12939
• fix: Preserve pnpm injected peer package entries by @​anthonyshew in vercel/turborepo#12940
• feat: Add heap allocation profiling by @​anthonyshew in vercel/turborepo#12943
• release(turborepo): 2.9.15-canary.8 by @​anthonyshew in vercel/turborepo#12945
• docs: Correct attribute presence claims in turborepo-otel by @​adityasingh2400 in vercel/turborepo#12932
• chore(turbo-codemod): Remove duplicate "in" in transforms path comment by @​mvanhorn in vercel/turborepo#12948
• chore: Switch Geist font imports to npm geist package by @​christopherkindl in vercel/turborepo#12952
• fix: Respect root gitignore during prune by @​anthonyshew in vercel/turborepo#12953
• fix: Harden OTEL endpoint validation by @​anthonyshew in vercel/turborepo#12954
• release(turborepo): 2.9.15 by @​github-actions[bot] in vercel/turborepo#12955
Description has been truncated