chore: version packages

Author: github-actions[bot]

.changeset/deps-security-and-renovate-updates.md

@@ -1,5 +1,13 @@
 # @repo/storybook
 
+## 2.0.4
+
+### Patch Changes
+
+- Updated dependencies [a2466e4]
+- Updated dependencies [a2466e4]
+  - @datum-cloud/datum-ui@1.3.0
+
 ## 2.0.3
 
 ### Patch Changes

.changeset/stepper-v7-upgrade.md

@@ -1,7 +1,7 @@
 {
   "name": "@repo/storybook",
   "type": "module",
-  "version": "2.0.3",
+  "version": "2.0.4",
   "private": true,
   "scripts": {
     "predev": "[ -d '../../packages/datum-ui/dist' ] || pnpm --filter @datum-cloud/datum-ui build",

apps/storybook/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @datum-cloud/datum-ui
 
+## 1.3.0
+
+### Minor Changes
+
+- a2466e4: Upgrade `@stepperize/react` to v7 and refactor the stepper to its redesigned API.
+
+  v7 is a ground-up API redesign, deferred from the dependency-update sweep. The
+  internal refactor remaps the removed v6 surface (`stepper.lookup.*`,
+  `stepper.state.current.data.id`, per-step `metadata`) onto the v7 instance
+  (`current`, `index`, `isFirst`/`isLast`, `goTo`, flow `data`) and the new
+  array-based `defineStepper(steps)` / `Provider` model.
+
+  Consumer-facing changes for the bare `Stepper` (the `FormStepper` API is
+  unchanged):
+  - `Stepper.Provider` prop `initialStep` → `defaultStep` (and `initialMetadata`
+    → `defaultData`).
+  - The render-prop `methods` is now the flat v7 instance: use `methods.current.id`,
+    `methods.next()/prev()/goTo()`, and `methods.isFirst`/`methods.isLast` instead
+    of the old `methods.state.*` / `methods.navigation.*`.
+
+### Patch Changes
+
+- a2466e4: Update dependencies and apply a security fix.
+  - Override `undici` to `^7.28.0` to resolve a critical CRLF Injection
+    vulnerability (pulled in transitively via jsdom, test-only).
+  - Apply open Renovate updates: `@radix-ui/*` primitives, storybook 10.4.6,
+    `@types/react`, tsdown, `@rsbuild/core`.
+  - Bump remaining minor/patch deps: `@tiptap/*` 3.27, react-hook-form,
+    `@conform-to/*`, `@tanstack/react-virtual`, lucide-react,
+    isomorphic-dompurify, tailwindcss 4.3.1, eslint, vitest, turbo.
+  - Upgrade `js-yaml` to v5 (now imported via flat named exports; peer range
+    widened to `>=4.1.1`).
+  - Bump the pinned package manager to pnpm 11.8.0.
+
 ## 1.2.0
 
 ### Minor Changes

apps/storybook/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@datum-cloud/datum-ui",
   "type": "module",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "packageManager": "pnpm@11.8.0",
   "license": "MIT",
   "repository": {