build(deps-dev): bump the dev-tooling group across 1 directory with 8 updates

CHANGELOG.md

@@ -133,6 +133,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Security
 
+- **`@babel/core` security override bounded to the 7.x line, fixing a broken Storybook build.**
+  The `pnpm-workspace.yaml` override for GHSA-4x5r-pxfx-6jf8 (`>=7.29.6`) had no upper bound, unlike
+  every sibling override in the same block. When Babel 8.0.1 was published, pnpm resolved it for
+  **every** consumer — including `react-docgen@8.0.3` (via the Storybook toolchain), which declares
+  its own `"@babel/core": "^7.28.0"` and calls the synchronous `loadPartialConfig()`, removed in
+  Babel 8 in favor of `loadPartialConfigSync()`. This crashed every Storybook build
+  (`Error: Starting from Babel 8.0.0, the 'loadPartialConfig' function expects a callback`).
+  Bounded to `>=7.29.6 <8`, matching the pattern the `undici` override right below it already
+  documents for the identical failure class. Verified: `pnpm run build-storybook` completes
+  successfully again.
 - **Tauri HTTP-plugin capability scope pinned (#266).** `http:default` alone grants **no** URL
   scope — every plugin-http call (including AI-SDK cloud calls on desktop) was silently denied by
   the plugin's allow-list check. The capability now explicitly allows loopback any-port

package.json

@@ -150,11 +150,11 @@
     "@axe-core/playwright": "^4.11.0",
     "@biomejs/biome": "^2.4.16",
     "@lhci/cli": "^0.15.1",
-    "@playwright/test": "^1.61.0",
-    "@storybook/addon-a11y": "^10.4.5",
-    "@storybook/builder-vite": "^10.4.5",
-    "@storybook/react": "^10.4.5",
-    "@storybook/react-vite": "^10.4.5",
+    "@playwright/test": "^1.61.1",
+    "@storybook/addon-a11y": "^10.5.3",
+    "@storybook/builder-vite": "^10.5.3",
+    "@storybook/react": "^10.5.3",
+    "@storybook/react-vite": "^10.5.3",
     "@storybook/test-runner": "^0.24.4",
     "@stryker-mutator/core": "^9.2.0",
     "@stryker-mutator/typescript-checker": "^9.6.1",
@@ -171,20 +171,20 @@
     "@typescript/native-preview": "beta",
     "@typescript/typescript6": "npm:typescript@~6.0.3",
     "@vitejs/plugin-react": "^6.0.2",
-    "@vitest/coverage-v8": "^4.1.9",
+    "@vitest/coverage-v8": "^4.1.10",
     "fake-indexeddb": "^6.2.5",
     "http-server": "^14.1.1",
     "jsdom": "^29.1.1",
     "lint-staged": "^17.1.0",
     "rollup-plugin-visualizer": "^7.0.1",
     "simple-git-hooks": "^2.13.1",
-    "storybook": "^10.4.5",
+    "storybook": "^10.5.3",
     "tailwindcss": "^4.3.1",
     "tsx": "^4.22.4",
     "turbo": "^2.9.18",
     "vite": "^8.0.16",
     "vite-plugin-pwa": "^1.3.0",
-    "vitest": "^4.1.9",
+    "vitest": "^4.1.10",
     "wait-on": "^9.0.10",
     "wrangler": "^4.99.0",
     "y-protocols": "^1.0.7"