Bump brace-expansion, @storybook/addon-designs, sucrase, eslint, stylelint, stylelint-config-recommended and stylelint-order

[dependabot]

Bumps brace-expansion to 5.0.7 and updates ancestor dependencies brace-expansion, @storybook/addon-designs, sucrase, eslint, stylelint, stylelint-config-recommended and stylelint-order. These dependencies need to be updated together.

Updates brace-expansion from 2.0.1 to 5.0.7

Release notes

Sourced from brace-expansion's releases.

v4.0.1

• fmt 5a5cc17
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 0b6a978

---

juliangruber/brace-expansion@v4.0.0...v4.0.1

v4.0.0

• feat: use string replaces instead of splits (#64) 278132b
• fmt dd72a59
• add tea.yaml 70e4c1b

juliangruber/brace-expansion@v3.0.0...v4.0.0

As a precaution to not risk breaking anything with 278132b, this is a new semver major release

v3.0.1

• pkg: publish on tag 3.x 3059c07
• fmt 8229e6f
• Fix potential ReDoS Vulnerability or Inefficient Regular Expression (#65) 15f9b3c

---

juliangruber/brace-expansion@v3.0.0...v3.0.1

v3.0.0

• Switch to ES Modules and balanced-match 3.0.0 (#62) c0360e8
• added jsdoc (#55) 68c0e37
• node 16 is EOL 9e781e9
• add standard 3494c4d
• use const and let (#57) dd5a4cb
• docs 6dad209
• remove test e3dd8ae
• ci: update node versions d23ede9
• docs: add @​lanodan to contributors 1eb3fa4
• docs 1e7c9cd
• switch from tape to test module (#60) 2520537
• Bump minimist from 1.2.5 to 1.2.6 (#59) 61a94f1
• Bump path-parse from 1.0.6 to 1.0.7 (#51) dc741cf
• docs: add back ci badge 8ee5626
• Add github actions, remove travis. Closes #52 (#53) 5c8756a
• CI: Drop unused sudo: false Travis directive (#50) 05978a7

juliangruber/brace-expansion@v2.0.1...v3.0.0

v2.1.1

• Backport v5.0.6 change to v2 (#109) c3a817c

---

... (truncated)

Commits

• b735ba6 5.0.7
• c7e33ec Merge commit from fork
• fa1786a Bump tar from 7.5.11 to 7.5.16 (#116)
• c16f1ec fix(package.json): use git+https instead of git+ssh for repository URL (#115)
• 196bbcc Bump ip-address from 10.1.0 to 10.2.0 (#104)
• eb18dd6 Update ci.yml (#107)
• a39928d Bump minimatch (#106)
• 7950ae3 ci: correct test workflow (#105)
• 46317b5 5.0.6
• c0b095b Merge commit from fork
• Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @storybook/addon-designs from 7.0.9 to 11.1.4

Release notes

Sourced from @​storybook/addon-designs's releases.

@​storybook/addon-designs@​11.1.4

Patch Changes

• #299 13bb222 Thanks @​ndelangen! - Fix repository metadata URL.

• #299 13bb222 Thanks @​ndelangen! - Add Storybook 10.5 and 10.6 canary peer dependency support.

• #299 13bb222 Thanks @​ndelangen! - Add npm provenance and support Storybook canary releases.

Commits

• 29be6a9 Merge pull request #300 from storybookjs/changeset-release/master
• 655e47e Version Packages
• e98bfa4 Merge pull request #299 from storybookjs/fix/release-script
• 13bb222 Realign package version with npm after auto->changesets migration
• e68cc7b Fix release script so changeset publish actually runs
• ca26ecd Merge pull request #298 from storybookjs/fix/ghpages-deprecated-actions
• 7eb986d Fix GitHub Pages deploy using deprecated artifact actions
• 96a80c3 Merge pull request #297 from storybookjs/changeset-release/master
• c9493ef Version Packages
• dafa82f Merge pull request #296 from storybookjs/changeset/fix-repository-metadata-url
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​storybook/addon-designs since your current version.

Updates sucrase from 3.35.0 to 3.35.1

Changelog

Sourced from sucrase's changelog.

3.35.1 (2025-11-19)

• Switch from glob to tinyglobby to reduce transitive dependencies. (#846) (Ben McCann)

Commits

• See full diff in compare view

Updates eslint from 8.56.0 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)
• 557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)
• 0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)
• 96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)
• 0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)
• 75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)
• b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)
• e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)
• a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)
• d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)
• 8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)
• a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)
• 8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

• c30d808 docs: Update README (GitHub Actions Bot)
• 5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)
• 04174cb docs: Update README (GitHub Actions Bot)
• 026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)
• 9d42fef docs: Update README (GitHub Actions Bot)
• b230159 docs: Update README (GitHub Actions Bot)
• 0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])
• 81a4774 chore: updates for v9.39.5 release (Jenkins)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)
• 833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])
• 7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)
• 8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)
• e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])
• 0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)
• 1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])
• 4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)
• 993539f chore: update dependency @​eslint/json to ^2.0.1 (#21042) (renovate[bot])
• 53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)
• 5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)
• a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)
• 7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

• b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

• fabd99b 10.7.0
• 37c5e75 Build: changelog update for 10.7.0
• 9489379 chore: update dependency @​eslint/eslintrc to ^3.3.6 (#21076)
• 81a4774 chore: updates for v9.39.5 release
• 3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
• 9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
• cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
• c30d808 docs: Update README
• f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
• 72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by eslintbot, a new releaser for eslint since your current version.

Updates stylelint from 14.16.1 to 17.14.1

Release notes

Sourced from stylelint's releases.

17.14.1

It fixes 4 bugs.

• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).
• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).

17.14.0

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1

It fixes 2 bugs.

• Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
• Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

• Added: loader to experimental referenceFiles: {} (#9251) (@​romainmenke).
• Added: autofixed to the result object (#8771) (@​Rob--W).

17.10.0

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

• Added: selector-no-invalid rule (#9232) (@​jeddy3).
• Added: unit-layout-mappings rule (#9229) (@​jeddy3).
• Added: value-keyword-layout-mappings rule (#9233) (@​jeddy3).
• Fixed: inconsistent error messages when module is not found (#9260) (@​ybiquitous).
• Fixed: property-layout-mappings false negatives for property names in declaration values (#9222) (@​jeddy3).
• Fixed: property-layout-mappings false positives for @page properties (#9223) (@​jeddy3).

... (truncated)

Changelog

Sourced from stylelint's changelog.

17.14.1 - 2026-07-20

• Fixed: declaration-block-no-redundant-longhand-properties autofix producing invalid background shorthand when background-size is present (#9364) (@​sarathfrancis90).
• Fixed: quiet option suppresses report* warning reports (#9387) (@​ychampion).
• Fixed: rule-empty-line-before false positives for shared-line comments with except: ["after-single-line-comment"] (#9394) (@​sarathfrancis90).
• Fixed: reported range of unknown rules (#9385) (@​ybiquitous).

17.14.0 - 2026-06-25

It fixes 3 bugs, including a false negative one.

• Fixed: performance of getting module paths (#9354) (@​jeddy3).
• Fixed: performance by dynamically importing TIMING only on use (#9356) (@​jeddy3).
• Fixed: function-calc-no-unspaced-operator false negatives for unspaced + and - operators following a * or / operator (#9357) (@​sarathfrancis90).

17.13.0 - 2026-06-06

It fixes 3 bugs, including a false negative one.

• Fixed: declaration-block-no-duplicate-properties false negatives for interleaved non-consecutive duplicates with ignore: ["consecutive-duplicates(-*)"] (#9324) (@​sarathfrancis90).
• Fixed: selector-max-type false positives for nested selectors (#9319) (@​romainmenke).
• Fixed: selector-type-no-unknown false positives for install (#9308) (@​Mouvedia).

17.12.0 - 2026-05-20

It fixes 3 bugs, including a false negative one.

• Fixed: block-no-empty reported range when using comments (#9294) (@​romainmenke).
• Fixed: declaration-property-value-no-unknown false negatives for custom properties defined in reference files (#9292) (@​romainmenke).
• Fixed: value-keyword-layout-mappings false positives for caption-side (#9293) (@​romainmenke).

17.11.1 - 2026-05-14

It fixes 2 bugs.

• Fixed: node_modules ignore for codeFilename paths containing a dot-prefixed directory (#9282) (@​tuhtah).
• Fixed: declaration-block-no-redundant-longhand-properties range for contiguous redundant longhand properties (#9273) (@​pamelalozano16).

17.11.0 - 2026-05-05

It adds 2 features, including a loader property to referenceFiles: {} for when the order of appearance in the reference styles matters.

• Added: loader to experimental referenceFiles: {} (#9251) (@​romainmenke).
• Added: autofixed to the result object (#8771) (@​Rob--W).

17.10.0 - 2026-05-03

It adds 3 rules and fixes 4 bugs. You can use the *-layout-mappings rules to enforce logical or physical properties, units and keywords.

• Added: selector-no-invalid rule (#9232) (@​jeddy3).

... (truncated)

Commits

• cd66b03 Release 17.14.1 (#9397)
• 7c30fc5 Refactor to replace void with undefined in union types (#9395)
• 57c8d0e Fix rule-empty-line-before false positives for shared-line comments with `e...
• 226f10a Bump @​vscode/windows-process-tree from 0.7.0 to 0.8.0 (#9392)
• 13c3c5c Bump globby from 16.2.0 to 16.2.1 (#9393)
• 6dafcf5 Document unknown-effort contributions (#9391)
• 54c2bc8 Fix test for Yarn PnP with npm v12 (#9390)
• 3e7eb56 Fix declaration-block-no-redundant-longhand-properties invalid background...
• 438196e Bump postcss from 8.5.15 to 8.5.16 in the postcss group across 1 directory (#...
• c1e1489 Fix quiet option to suppress report* warning reports (#9387)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-config-recommended from 8.0.0 to 18.0.0

Release notes

Sourced from stylelint-config-recommended's releases.

18.0.0

• Removed: stylelint less than 17.0.0 from peer dependencies.
• Removed: support for Node.js less than 20.19.0.
• Changed: module type to ESM.

17.0.0

• Removed: stylelint less than 16.23.0 from peer dependencies.
• Added: media-type-no-deprecated rule.
• Added: nesting-selector-no-missing-scoping-root rule.
• Added: no-invalid-position-declaration rule.
• Added: property-no-deprecated rule.

16.0.0

• Removed: stylelint less than 16.16.0 from peer dependencies.
• Added: syntax-string-no-invalid rule.

15.0.0

• Removed: stylelint less than 16.13.0 from peer dependencies.
• Removed: color-no-invalid-hex rule.
• Removed: function-linear-gradient-no-nonstandard-direction rule.
• Removed: function-no-unknown rule.
• Removed: unit-no-unknown rule.
• Changed: string-no-newline rule option to { ignore: ['at-rule-preludes', 'declaration-values'] }].
• Added: at-rule-descriptor-no-unknown rule.
• Added: at-rule-descriptor-value-no-unknown rule.
• Added: at-rule-no-deprecated rule.
• Added: at-rule-prelude-no-invalid rule.
• Added: declaration-property-value-keyword-no-deprecated rule.
• Added: declaration-property-value-no-unknown rule.
• Added: media-feature-name-value-no-unknown rule.

14.0.1

• Fixed: missing funding field in package.json.

14.0.0

• Removed: stylelint less than 16.0.0 from peer dependencies.
• Removed: Node.js less than 18.12.0 support.

13.0.0

• Removed: stylelint less than 15.10.0 from peer dependencies.
• Added: media-query-no-invalid rule.

12.0.0

• Removed: stylelint less than 15.5.0 from peer dependencies.
• Changed: declaration-block-no-duplicate-properties option to ignore: ['consecutive-duplicates-with-different-syntaxes'].

11.0.0

• Removed: stylelint less than 15.3.0 from peer dependencies.
• Added: selector-anb-no-unmatchable rule.

... (truncated)

Changelog

Sourced from stylelint-config-recommended's changelog.

Commits

• c25f014 Release 18.0.0 (#276)
• 71a4da5 Prepare 18.0.0 (#271)
• 2b960e0 Bump the dev-deps group with 3 updates (#272)
• ac8f5eb Bump stylelint/.github/.github/workflows/call-release.yml from 0.3.1 to 0.5.0...
• 22f4d8d Bump stylelint/.github/.github/workflows/call-test.yml from 0.3.1 to 0.5.0 (#...
• f25904f Bump stylelint/.github/.github/workflows/call-release-pr.yml from 0.3.1 to 0....
• 2aeb96b Fix vulnerable dependencies via npm audit fix (#269)
• 6ca240c Bump mdast-util-to-hast from 13.1.0 to 13.2.1 (#270)
• a2c2df9 Bump the dev-deps group with 2 updates (#268)
• a6230c6 Bump js-yaml from 4.1.0 to 4.1.1 (#266)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for stylelint-config-recommended since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Updates stylelint-order from 5.0.0 to 8.1.1

Release notes

Sourced from stylelint-order's releases.

8.1.1

• Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

• Added custom-properties-alphabetical-order rule

8.0.0

• Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

• Added support for Stylelint 17

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

Changelog

Sourced from stylelint-order's changelog.

8.1.1

• Fixed false positives for non-standard CSS (e.g. SCSS) in <style> tags, when using postcss-html custom syntax

8.1.0

• Added custom-properties-alphabetical-order rule

8.0.0

• Added limited autofix for properties in rules containing interpolation in CSS-in-JS syntax. Previosly such rules were ignored by autofix. Now groups of properties are sorted. See postcss-sorting documentation for an example.

7.0.1

• Added support for Stylelint 17

7.0.0

• Dropped Node.js 18 support
• Dropped support for Stylelint older than 16.18.0
• Changed: Ignore properties case for properties-order and properties-alphabetical-order
• Added support for more properties shorthands
• Fixed order autofix not applied, when Stylelint disable comments are present
• Fixed properties-alphabetical-order autofix not applied, when Stylelint disable comments are present
• Fixed properties-order autofix not applied, when Stylelint disable comments are present
• Fixed: Don't apply properties-alphabetical-order autofixing if there are no violations
• Fixed: Report warnings if they weren't fixed by autofix in properties-alphabetical-order

6.0.4

• Added support for Stylelint 16

6.0.3

• Fixed sorting inside CSS-in-JS css helper

6.0.2

• Added Stylelint v15 to peerDependencies

6.0.1

• Fix regression causing root of CSS or SCSS to report violations

6.0.0

• Dropped Node.js 12 and 14 support.
• Added support for postcss-styled-syntax.

Commits

• 5e0802a 8.1.1
• d63b335 Prepare 8.1.1
• 707f2d9 Change how CSS from the style attribute is detected, when using `postcss-ht...
• 7db7174 Add custom-properties-alphabetical-order in README (#214)
• 6d5b26a 8.1.0
• cfa2267 Prepare 8.1.0
• 6652d6d Add custom-properties-alphabetical-order rule (#212)
• cb01afd 8.0.0
• ff92d6e Update changelog
• 3b45045 Add limited autofix for properties in rules containing interpolation in CSS-i...
• Additional commits viewable in compare view

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[dependabot]

Labels

The following labels could not be found: npm. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.