Skip to content

Comments

Bump bn.js, next, @storybook/addon-essentials and @storybook/react#189

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-420acd99a2
Open

Bump bn.js, next, @storybook/addon-essentials and @storybook/react#189
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-420acd99a2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 21, 2026

Bumps bn.js to 5.2.3 and updates ancestor dependencies bn.js, next, @storybook/addon-essentials and @storybook/react. These dependencies need to be updated together.

Updates bn.js from 4.12.0 to 5.2.3

Release notes

Sourced from bn.js's releases.

v5.2.1

  • fix: serious issue in .toString(16) (#295)

v5.2.0

  • fix: Buffer not using global in browser (#260)
  • fix: LE constructor for HEX (#265)

v5.1.3

  • Add support for defined but not implemented Symbol.for (#252)

v5.1.2

  • Fix BN v5/v4 interoperability issue (#249)

v5.1.1

  • Temporary workaround for BN#_move (#236)
  • Add eslintrc instead config in package.json (#237)

v5.1.0

  • Benchmark for BigInt (#226)
  • Add documentation for max/min (#232)
  • Update BN#inspect for Symbols (#225)
  • Improve performance of toArrayLike (#222)
  • temporary disable jumboMulTo in BN#mulTo (#221)
  • optimize toBitArray function (#212)
  • fix iaddn sign issue (#216)

v5.0.0

  • travis: update node versions (#205)
  • Refactor buffer constructor (#200)
  • lib: fix for negative numbers: imuln, modrn, idivn (#185)
  • bn: fix Red#imod (#178)
  • check unexpected high bits for invalid characters (#173)
  • document support very large integers (#158)
  • only define toBuffer if Buffer is defined (#172)
  • lib: better validation of string input (#151)
  • tests: reject decimal input in constructor (#91)
  • bn: make .strip() an internal method (#105)
  • lib: deprecate .modn() introduce .modrn() (#112 #129 #130)
  • bn: don't accept invalid characters (#141)
  • package: use files insteadof .npmignore (#152)
  • bn: improve allocation speed for buffers (#167)
  • toJSON to default to interoperable hex (length % 2) (#164)
Changelog

Sourced from bn.js's changelog.

5.2.3 / 2026-02-19

  • fix: imaskn state (#317)

5.2.2 / 2025-04-25

  • fix: imuln/muln with zero (#313)

5.2.1 / 2022-02-23

  • fix: serious issue in .toString(16) (#295)

5.2.0 / 2021-02-23

  • fix: Buffer not using global in browser (#260)
  • Fix LE constructor for HEX (#265)

5.1.3 / 2020-08-14

  • Add support for defined but not implemented Symbol.for (#252)

5.1.2 / 2020-05-20

  • Fix BN v5/v4 interoperability issue (#249)

5.1.1 / 2019-12-24

  • Temporary workaround for BN#_move (#236)
  • Add eslintrc instead config in package.json (#237)

5.1.0 / 2019-12-23

  • Benchmark for BigInt (#226)
  • Add documentation for max/min (#232)
  • Update BN#inspect for Symbols (#225)
  • Improve performance of toArrayLike (#222)
  • temporary disable jumboMulTo in BN#mulTo (#221)
  • optimize toBitArray function (#212)
  • fix iaddn sign issue (#216)

5.0.0 / 2019-07-04

... (truncated)

Commits

Updates next from 10.2.3 to 16.1.6

Release notes

Sourced from next's releases.

v16.1.6

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Upgrade to swc 54 (#88207)
  • implement LRU cache with invocation ID scoping for minimal mode response cache (#88509)
  • tweak LRU sentinel key (#89123)

Credits

Huge thanks to @​mischnic, @​wyattjoh, and @​ztanner for helping!

v16.1.5

Please refer the following changelogs for more information about this security release:

https://vercel.com/changelog/summaries-of-cve-2025-59471-and-cve-2025-59472 https://vercel.com/changelog/summary-of-cve-2026-23864

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @​mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix linked list bug in LRU deleteFromLru (#88652)
  • Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @​acdlite and @​ijjk for helping!

v16.1.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.


Updates @storybook/addon-essentials from 6.3.9 to 6.5.16

Commits

Updates @storybook/react from 6.3.9 to 6.5.16

Changelog

Sourced from @​storybook/react's changelog.

  • MDX: Upgrade csf-mdx libraries (#18300)
  • security: update x-default-browser (#18157)

6.5.0-rc.1 (May 18, 2022)

Bug Fixes

  • CLI: Improve webpack version and add detection of nextjs (#18220)
  • ArgsTable: Gracefully handle conditional args failures (#18248)
  • Controls: Fix reset button broken for !undefined URL values (#18231)
  • Vue3: Add support for TSX in single file components (#18038)

6.5.0-rc.0 (May 17, 2022)

Features

  • Addon-a11y: Show % of users in toolbar menu (#18003)

Bug Fixes

  • Web-components: Clean Lit Expression comments in story source (#18108)
  • Vue: Map args correctly in CSF3 implicit render function (#18209)
  • Vue3: Fix CSF3 implicit render function when storyStoreV7 is enabled (#18208

Maintenance

  • CLI: Don't throw is Ctrl + C was pressed when selecting a package in the build command (#18195)
  • Build: Cleanup noise from unit tests (#18196)

Dependency Upgrades

  • Fixed PnP compatibility for bundled components package (#18015)

6.5.0-beta.8 (May 11, 2022)

Bug Fixes

  • Composition: Fix metadata.json incorrectly overriding main.js refs versions (#18185)

Maintenance

  • Examples: Set channelOptions to disallow function serialization (#18071)

Dependency Upgrades

  • Upgrade to telejson 6 (#18164)

6.5.0-beta.7 (May 9, 2022)

Features

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [bn.js](https://github.com/indutny/bn.js) to 5.2.3 and updates ancestor dependencies [bn.js](https://github.com/indutny/bn.js), [next](https://github.com/vercel/next.js), [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials) and [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react). These dependencies need to be updated together.


Updates `bn.js` from 4.12.0 to 5.2.3
- [Release notes](https://github.com/indutny/bn.js/releases)
- [Changelog](https://github.com/indutny/bn.js/blob/master/CHANGELOG.md)
- [Commits](indutny/bn.js@v4.12.0...v5.2.3)

Updates `next` from 10.2.3 to 16.1.6
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@v10.2.3...v16.1.6)

Updates `@storybook/addon-essentials` from 6.3.9 to 6.5.16
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Commits](https://github.com/storybookjs/storybook/commits/v6.5.16/code/addons/essentials)

Updates `@storybook/react` from 6.3.9 to 6.5.16
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.v6.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v6.5.16/code/renderers/react)

---
updated-dependencies:
- dependency-name: bn.js
  dependency-version: 5.2.3
  dependency-type: indirect
- dependency-name: next
  dependency-version: 16.1.6
  dependency-type: direct:production
- dependency-name: "@storybook/addon-essentials"
  dependency-version: 6.5.16
  dependency-type: direct:development
- dependency-name: "@storybook/react"
  dependency-version: 6.5.16
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants