chore(deps): update npm#1901
Merged
kkedziak-splunk merged 6 commits intodevelopfrom Mar 27, 2026
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/npm
branch
11 times, most recently
from
036c2f1 to
7138ced
Compare
renovate
Bot
force-pushed
the
renovate/npm
branch
9 times, most recently
from
c83f220 to
02ac7de
Compare
renovate
Bot
force-pushed
the
renovate/npm
branch
6 times, most recently
from
faf56c9 to
98025d2
Compare
renovate
Bot
force-pushed
the
renovate/npm
branch
9 times, most recently
from
6ee69a2 to
4cf2f5e
Compare
renovate
Bot
force-pushed
the
renovate/npm
branch
13 times, most recently
from
09824d7 to
ace1341
Compare
… export DatePickerComponentProps
- Pin @splunk/react-ui to 5.2.0 to fix querySelector('undefined') error in jsdom tests
- Revert @splunk/* packages to develop versions (dashboard 29.4.0, etc.)
- Revert vite-plugin-dts to 4.5.3 to fix "Unable to find package.json" build error
- Export DatePickerComponentProps interface to fix TS4023 declaration emit error
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
v0.24.3 fails with "Must use import to load ES Module" when loading .storybook/test-runner.ts config file. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Dependency updates changed Vite's chunking: ArrowBroadUnderbarDown.js and ChevronUp.js are no longer separate chunks, and Search.js is now split into two chunks. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…-2026-33671/33672 Add resolutions for brace-expansion >=5.0.5 and picomatch >=4.0.4. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
The CVE fixes require major version bumps (v2→v5, v2→v4) that break the API for consumers expecting v1/v2. Upstream packages need to update their dependencies first. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
kkedziak-splunk
approved these changes
Mar 27, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Renovatebot npm dependency updates with manual fixes for broken packages.
Updates included
Non-Splunk dependency bumps from the original renovatebot PR (babel, typescript, storybook, vite, msw, zod, etc.)
Packages reverted due to breakage
@splunk/react-ui^5.9.05.2.0(pinned via resolution)querySelector('undefined')error in jsdom — breaks 55 unit tests@splunk/dashboard-*29.5.029.4.0@splunk/react-ui ^5.7+@splunk/*packagesvite-plugin-dts4.5.44.5.3Unable to find package.jsonerror duringrollupTypesin lib build@storybook/test-runner^0.24.3^0.23.0Must use import to load ES Moduleerror loading.tsconfigAdditional fixes
DatePickerComponentPropsinDatePickerComponent.tsx— fixes TS4023 declaration emit error (cannot be named)ArrowBroadUnderbarDown.js,ChevronUp.js;Search.jsnow split into two chunks)Known pre-existing CVEs (not addressed here)
brace-expansion@5.0.4/2.0.2(CVE-2026-33750) — fix requires major version bump, breakseslint-plugin-importpicomatch@2.3.1(CVE-2026-33671/33672) — fix requires major version bump (v2→v4)crypto-js@3.3.0(CVE-2023-46233) — transitive dep of@splunkpackagesTest plan
vitest run— 486 tests pass (54 files)vite build --config vite.lib.config.ts— lib build succeedsvite build --config vite.config.ts— app build succeeds