build(deps): upgrade Storybook to 10.6.0

[jpyzio123]

Summary

• upgrade Storybook and its first-party addons to 10.6.0
• upgrade Chromatic Storybook integration and storybook-addon-mock-date to compatible releases
• move local and CI runtime to Node.js 22.13.0
• align Testing Library DOM/React packages to keep a single DOM instance in tests
• update the Storybook config for ESM package resolution and pre-optimize fake timers
• include postcss-selector-parser 6.1.4, superseding build(deps): bump postcss-selector-parser from 6.1.0 to 6.1.4 in the npm_and_yarn group across 1 directory #1752

This resolves Dependabot alerts #504 (GHSA-82fw-gwwq-j7x9) and #496 (GHSA-w9m9-85wc-3x92) as part of AC-4477.

The lockfile diff is large because Storybook 10 replaces and re-hoists a substantial part of the Storybook/Vite dependency graph, including platform-specific Oxc packages.

Verification

• npm test: 85 files / 517 tests passed on Node.js 22.13.0
• npm run lint: passed
• npm run build: passed
• Storybook static build: passed
• Storybook dev server: Button story rendered and mock-date toolbar verified in the browser
• npm audit: 0 high / 0 critical; the only remaining local finding is an unrelated moderate colord advisory
• npm ci --dry-run: passed

[Copilot]

🟡 Changes recommended

The direct Chromatic CLI and CI action still predate Storybook 10 support.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Upgrades Storybook and related tooling while moving development and CI to Node.js 22.13.0.

Changes:

• Upgrades Storybook, addons, and Testing Library dependencies.
• Migrates Storybook configuration to ESM resolution and pre-optimizes fake timers.
• Updates CI runtimes and refreshes the dependency lockfile.

File summaries

File	Description
package.json	Updates Storybook linting and Node.js version.
package-lock.json	Locks the upgraded dependency graph and security fixes.
packages/react-components/package.json	Upgrades Storybook, addons, and testing packages.
packages/react-components/.storybook/main.ts	Adds ESM package resolution and fake-timer optimization.
.github/workflows/tests.yml	Configures Node.js 22.13.0 for tests.
.github/workflows/chromatic.yml	Configures Node.js 22.13.0 for Chromatic.

Review details

• Files reviewed: 5/6 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[jpyzio123]

To be re-checked and merged after packages are old enough to be safe

npm error 403 403 Forbidden - blocked by safe-chain direct download minimum package age