[dependabot]

Bumps the npm_and_yarn group with 6 updates in the /studio/src/wrappers directory:

Package	From	To
storybook	8.6.18	8.6.19
vite	6.4.3	6.4.4
axios	1.18.1	removed
handlebars	4.7.9	4.7.10
http-cache-semantics	4.2.0	4.3.0
source-map-js	1.2.1	1.2.2

Bumps the npm_and_yarn group with 2 updates in the /studio/samples/react/workflow-definition-editor-sample/workflow-definition-editor-app directory: vite and source-map-js.
Bumps the npm_and_yarn group with 2 updates in the /design/video/elsa-readme-video directory: postcss-selector-parser and source-map-js.

Updates storybook from 8.6.18 to 8.6.19

Release notes

Sourced from storybook's releases.

v8.6.19

8.6.19

• Highlight: Prevent menu items from emitting arbitrary channel events
• Channels: Restrict preview postMessage to known manager origins
• Core: Separate manager and preview roles on the dev server channel
• Core: Block iframe embedding of the dev server from non-localhost origins
• Core: Reject component search queries outside the project
• Core: Validate component export name when creating a story
• Core: Add host validation warning and origin validation for MCP
• Core: Contain save story path to the project root
• Core: Validate save story name and arg keys as identifiers
• Addon Vitest: Disable browser file writes and command execution

Changelog

Sourced from storybook's changelog.

8.6.19

• Highlight: Prevent menu items from emitting arbitrary channel events
• Channels: Restrict preview postMessage to known manager origins
• Core: Separate manager and preview roles on the dev server channel
• Core: Block iframe embedding of the dev server from non-localhost origins
• Core: Reject component search queries outside the project
• Core: Validate component export name when creating a story
• Core: Add host validation warning and origin validation for MCP
• Core: Contain save story path to the project root
• Core: Validate save story name and arg keys as identifiers
• Addon Vitest: Disable browser file writes and command execution

Commits

• 117b95a Bump version from "8.6.18" to "8.6.19" [skip ci]
• 7b4f138 Core: Escape the component file name in generated story imports
• 7b62dcb Core: Check the origin of channel messages from registered preview iframes
• bc26ffa Patch v8
• See full diff in compare view

Updates vite from 6.4.3 to 6.4.4

Release notes

Sourced from vite's releases.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.4 (2026-10-06)

• fix(deps): update launch-editor to v2.14.2 (#23654) (8afec69), closes #23654
• fix(html): filename passed to transformIndexHtml should not include queries (#23653) (19902cf), closes #23653
• fix(server): check resolved ids for transform access (#20410) (eec6464), closes #20410
• fix(server): store ids to safeModulePaths rather than URLs (#23656) (e570d8d), closes #23656

Commits

• 5f0d9a4 release: v6.4.4
• eec6464 fix(server): check resolved ids for transform access (#20410)
• e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
• 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
• 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Removes axios

Updates handlebars from 4.7.9 to 4.7.10

Release notes

Sourced from handlebars's releases.

v4.7.10

• security: Sanitize the source map URL when minifying - f37c599
• security: Iterate lazily in #each and strip whitespace in linear time - 812c226
• security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
• security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
• security: Only compile partials that are template strings - c28ee7a
• security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
• security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
• Clarify that --root does not restrict filesystem access - 0fcf25c
• Bump minimist to ^1.2.8 - ea8ed82
• Fix Ruby component publishing documentation - d069c1c
• Fix Composer component definition - 6714e07

Compatibility notes:

• {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.10 - October 5th, 2026

• security: Sanitize the source map URL when minifying - f37c599
• security: Iterate lazily in #each and strip whitespace in linear time - 812c226
• security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
• security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
• security: Only compile partials that are template strings - c28ee7a
• security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
• security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
• Clarify that --root does not restrict filesystem access - 0fcf25c
• Bump minimist to ^1.2.8 - ea8ed82
• Fix Ruby component publishing documentation - d069c1c
• Fix Composer component definition - 6714e07

Compatibility notes:

• {{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

Commits

• 45ce152 v4.7.10
• e47b236 Update release notes
• f37c599 Sanitize the source map URL when minifying
• 812c226 Iterate lazily in #each and strip whitespace in linear time
• 609d1b1 Escape <!-- and <script in precompiled output
• ceec388 Don't trust special properties on context data
• c28ee7a Only compile partials that are template strings
• 7d501a5 Only dispatch known node types in the Compiler and Visitor
• 703fdcc Validate AST values in the compiler instead of the parser
• 0fcf25c Clarify that --root does not restrict filesystem access
• Additional commits viewable in compare view

Updates http-cache-semantics from 4.2.0 to 4.3.0

Commits

• See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Commits

• 0a1d334 1.2.2
• 4c6fa26 Update changelog
• cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
• 7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
• See full diff in compare view

Updates vite from 8.3.1 to 8.3.5

Release notes

Sourced from vite's releases.

v6.4.4

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

6.4.4 (2026-10-06)

• fix(deps): update launch-editor to v2.14.2 (#23654) (8afec69), closes #23654
• fix(html): filename passed to transformIndexHtml should not include queries (#23653) (19902cf), closes #23653
• fix(server): check resolved ids for transform access (#20410) (eec6464), closes #20410
• fix(server): store ids to safeModulePaths rather than URLs (#23656) (e570d8d), closes #23656

Commits

• 5f0d9a4 release: v6.4.4
• eec6464 fix(server): check resolved ids for transform access (#20410)
• e570d8d fix(server): store ids to safeModulePaths rather than URLs (#23656)
• 8afec69 fix(deps): update launch-editor to v2.14.2 (#23654)
• 19902cf fix(html): filename passed to transformIndexHtml should not include queries (...
• See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Commits

• 0a1d334 1.2.2
• 4c6fa26 Update changelog
• cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
• 7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
• See full diff in compare view

Updates postcss-selector-parser from 7.1.5 to 7.1.7

Release notes

Sourced from postcss-selector-parser's releases.

7.1.7

• fix: lossless: true preserves trailing whitespace in a selector that ends empty, such as :not(a, ). Note that :not( ) now yields a selector holding one empty string node rather than an empty selector (#337 by @​theRizwan)
• fix: consume the whitespace that terminates a hexadecimal escape, so [x="\000061 b"] unescapes to ab (#340 by @​jakezwang)
• fix: set the parent on every node passed to insertBefore and insertAfter, not only the first (#343 by @​feritcemkahraman)
• fix: assigning combinator.value clears the stale raw spelling instead of being ignored (#342 by @​SAY-5)
• fix: keep whitespace around the namespace separator in attribute selectors, so [ foo | bar ] round-trips (#339 by @​dkryaklin)

7.1.6

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

Changelog

Sourced from postcss-selector-parser's changelog.

7.1.7 - 2026-10-19

• fix: lossless: true preserves trailing whitespace in a selector that ends empty, such as :not(a, ). Note that :not( ) now yields a selector holding one empty string node rather than an empty selector (#337 by @​theRizwan)
• fix: consume the whitespace that terminates a hexadecimal escape, so [x="\000061 b"] unescapes to ab (#340 by @​jakezwang)
• fix: set the parent on every node passed to insertBefore and insertAfter, not only the first (#343 by @​feritcemkahraman)
• fix: assigning combinator.value clears the stale raw spelling instead of being ignored (#342 by @​SAY-5)
• fix: keep whitespace around the namespace separator in attribute selectors, so [ foo | bar ] round-trips (#339 by @​dkryaklin)

7.1.6 - 2026-09-03

• fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability (CVE-2026-104844 / GHSA-rj75-hqrm-r3gf, reported by Wayde Shi)

Commits

• 154c2b0 7.1.7
• e8dc65f docs: add CVE-2026-104844 to the 7.1.6 changelog entry
• d5122b0 fix: keep whitespace around the namespace separator in attribute selectors (#...
• 80ab254 fix: invalidate stale raw spelling on combinator value assignment (#342)
• ba353c7 fix: set parents for all variadic inserted nodes (#343)
• 8b2d16d Consume whitespace after hexadecimal CSS escapes (#340)
• 8f10b8d fix: lossless mode drops whitespace when a selector ends empty (#337)
• 15c2b45 chore(deps-dev): bump source-map-js from 1.2.1 to 1.2.2 (#347)
• 4eb3468 7.1.6
• 62b1917 fix: parse flat selectors in linear time, closing a CPU exhaustion vulnerability
• See full diff in compare view

Updates source-map-js from 1.2.1 to 1.2.2

Release notes

Sourced from source-map-js's releases.

v1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Changelog

Sourced from source-map-js's changelog.

1.2.2

• Fix crash when executing in browser with CSP script-src that don't permit unsafe-eval (#29) @​xfournet

• Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)

  Reported by @​waydeshi in #76. A fix was also proposed by @​aniebiet in #78.

Commits

• 0a1d334 1.2.2
• 4c6fa26 Update changelog
• cf76580 Fix denial of service from malicious indexed source maps (CVE-2026-93749) (#79)
• 7899a86 Fix crash when executing browser with CSP script-src that don't permit unsafe...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[greptile-apps]

This PR does not match any of the 1 configured review trigger rule.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 162daf76-9cf2-41e5-b3e8-a1f1b789465c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[elsa-workflows-review-bot]

Elsa 3 Code Review: APPROVE + MEDIUM-HIGH @ 09db131

Code Review, Round 1/6

Base main. Dependabot security group across three dev-only npm directories; every listed bump is patch or minor.

Security fixes picked up:

• handlebars 4.7.10: GHSA-8r5x-fm3f-whwj and GHSA-p8wg-vrv2-v86f (critical), GHSA-xw65-4hp5-5hc7.
• storybook / @storybook/core 8.6.19: GHSA-f2ph-cmg5-wxc8 (critical, preview origin validation).
• vite 6.4.4 (wrappers) and 8.3.5 (react sample): GHSA-9jrq-w75r-8gcw, GHSA-rq7h-c2jc-7f22, GHSA-vfpm-58rq-9qcg, GHSA-r825-w8mm-5pxw.
• source-map-js 1.2.2 (GHSA-68fv-2mgg-jv7q), postcss-selector-parser 7.1.7, http-cache-semantics 4.3.0.
• axios 1.18.1 is removed from the wrappers tree (open GHSA-m8m8-qj5v-23w3 and others), because lerna resolves to 10.1.1.

Findings:

1. (Note) The wrappers lockfile also moves lerna 10.0.1 to 10.1.1 (within the existing ^10.0.1 range, not listed in the PR table). That re-resolves its tooling tree with many transitive majors (@inquirer/*, @npmcli/*, @octokit/*, execa, p-queue, and so on) and raises the Node floor for the tooling to ^22.22.2 || ^24.15.0. This is publish tooling only; no runtime dependency of react-wrapper changes beyond patch bumps.
2. (Note) No PR workflow installs or builds studio/src/wrappers, so green CI does not exercise this lockfile. Local check: npm install --package-lock-only reproduces both changed lockfiles with no diff, so they are consistent with their package.json files. A full npm ci stops on the private feed tarball for @elsa-workflows/elsa-studio-wasm, which is identical on main.
3. No duplicate: #8776 was already superseded by this PR; #8975 targets studio/react (vite 8 major) and does not overlap. #8659 targets the old src/studio/wrappers path.

CI on this head: all checks completed green (build, select-tests, GitGuardian, CodeRabbit; CodeQL neutral, affected tests skipped).

— Code Review (Elsa 3), via Elsa Review