[krishan711]

Outstanding

• react-dropzone 14 → 20 (20.1.3): not redone, since the earlier PR for it (Fiddle: update kibalabs libraries #18) was closed unmerged on 2026-10-12. Stays on ^14.4.1.
• @kibalabs/build stays on 0.14.1 instead of 0.14.2-next.9. next.9 needs rolldown ^1.2.13, and rolldown 1.2 no longer bundles CSS, so the build still fails on the styles.scss import with UNSUPPORTED_FEATURE (Feedback on native CSS support rolldown/rolldown#4271). The fix belongs in build-js's sassPlugin. For the same reason the lock keeps rolldown at 1.0.0-rc.2: 0.14.1's ^1.0.0-rc.2 range would otherwise resolve to 1.2.13 and break the build.
• Node 24 → 26: not done. Node 26 is still a Current release, not LTS yet.

Held back by the 7-day rule

• node Docker image 24.22.0 (2026-10-14): stays on 24.21.0.
• react / react-dom 19.3.1 (2026-10-14): stays on 19.3.0. The release only changes the React Server Components transport, and 19.3.0 has no OSV advisories.
• storybook, @storybook/react-vite, @storybook/addon-docs 10.6.2 (2026-10-12 18:17 UTC, a few hours short of 7 days): stays on 10.6.1.
• react-dropzone 20.1.4 (2026-10-17): major anyway, see above.

npm audit: 20 remaining findings (6 low, 4 moderate, 10 high). All of them come from @kibalabs/build 0.14.1's webpack-era dependency tree. On main it was 55.