chore(deps): update npm (#1901)

## Summary

Renovatebot npm dependency updates with manual fixes for broken
packages.

### Updates included
Non-Splunk dependency bumps from the original renovatebot PR (babel,
typescript, storybook, vite, msw, zod, etc.)

### Packages reverted due to breakage

| Package | Reverted from | Reverted to | Reason |
|---|---|---|---|
| `@splunk/react-ui` | `^5.9.0` | `5.2.0` (pinned via resolution) |
`querySelector('undefined')` error in jsdom — breaks 55 unit tests |
| `@splunk/dashboard-*` | `29.5.0` | `29.4.0` | Transitive dep on broken
`@splunk/react-ui ^5.7+` |
| Other `@splunk/*` packages | various | develop versions | Kept in sync
with dashboard packages |
| `vite-plugin-dts` | `4.5.4` | `4.5.3` | `Unable to find package.json`
error during `rollupTypes` in lib build |
| `@storybook/test-runner` | `^0.24.3` | `^0.23.0` | `Must use import to
load ES Module` error loading `.ts` config |

### Additional fixes
- **Export `DatePickerComponentProps`** in `DatePickerComponent.tsx` —
fixes TS4023 declaration emit error (`cannot be named`)
- **Update expected UI file list** in smoke test — Vite chunking changed
(removed `ArrowBroadUnderbarDown.js`, `ChevronUp.js`; `Search.js` now
split into two chunks)

### Known pre-existing CVEs (not addressed here)
- `brace-expansion@5.0.4` / `2.0.2` (CVE-2026-33750) — fix requires
major version bump, breaks `eslint-plugin-import`
- `picomatch@2.3.1` (CVE-2026-33671/33672) — fix requires major version
bump (v2→v4)
- `crypto-js@3.3.0` (CVE-2023-46233) — transitive dep of `@splunk`
packages

## Test plan
- [x] `vitest run` — 486 tests pass (54 files)
- [x] `vite build --config vite.lib.config.ts` — lib build succeeds
- [x] `vite build --config vite.config.ts` — app build succeeds
- [x] Smoke test expected file list updated

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: kkedziak-splunk <kkedziak@splunk.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: 3 people

tests/smoke/test_ucc_build.py

@@ -787,9 +787,7 @@ def remove_hash(filename):
     normalized_files = [remove_hash(f) for f in cleaned_files]
 
     expected_js_files_list = [
-        "ArrowBroadUnderbarDown.js",
         "assets",
-        "ChevronUp.js",
         "ConfigurationPage.js",
         "Dashboard.consts.js",
         "Dashboard.Custom.js",
@@ -810,6 +808,7 @@ def remove_hash(filename):
         "purify.es.js",
         "redirect_page.js",
         "Search.js",
+        "Search.js",
         "usePlatform.js",
     ]
     assert sorted(normalized_files) == sorted(expected_js_files_list)

ui/package.json

@@ -40,129 +40,130 @@
     "@splunk/react-icons": "^5.2.0",
     "@splunk/react-page": "^8.0.0",
     "@splunk/react-toast-notifications": "^0.12.0",
-    "@splunk/react-ui": "^5.1.0",
+    "@splunk/react-ui": "5.2.0",
     "@splunk/search-job": "^3.1.0",
     "@splunk/splunk-utils": "^3.2.0",
     "@splunk/themes": "^1.2.0",
     "@splunk/ui-utils": "^1.10.0",
     "@splunk/visualization-context": "^28.4.0",
-    "@storybook/test": "^8.6.14",
-    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/react": "^15.0.6",
+    "@storybook/test": "^8.6.15",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^15.0.7",
     "@vitejs/plugin-react": "^4.7.0",
     "@vitest/coverage-istanbul": "^3.2.4",
     "glob": "^13.0.6",
     "immutability-helper": "^3.1.1",
     "js-yaml": "^4.1.1",
-    "lodash": "^4.17.21",
+    "lodash": "^4.17.23",
     "prop-types": "^15.8.1",
-    "react": "18",
-    "react-dom": "18",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
     "react-is": "^16.13.1",
     "react-router-dom": "6.30.3",
     "styled-components": "^5.3.11",
     "uuid": "^11.1.0",
-    "vite": "^7.1.12",
-    "vite-plugin-checker": "^0.10.2",
+    "vite": "^7.3.1",
+    "vite-plugin-checker": "^0.12.0",
     "vitest": "^3.2.4",
-    "zod": "^4.0.17"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@babel/core": "^7.28.3",
-    "@babel/eslint-parser": "^7.28.0",
-    "@babel/helper-plugin-utils": "^7.27.1",
-    "@babel/plugin-transform-runtime": "^7.28.3",
-    "@babel/preset-env": "^7.28.3",
-    "@babel/preset-react": "^7.27.1",
+    "@babel/core": "^7.29.0",
+    "@babel/eslint-parser": "^7.28.6",
+    "@babel/helper-plugin-utils": "^7.28.6",
+    "@babel/plugin-transform-runtime": "^7.29.0",
+    "@babel/preset-env": "^7.29.2",
+    "@babel/preset-react": "^7.28.5",
     "@kickstartds/core": "^4.1.0",
     "@kickstartds/storybook-addon-jsonschema": "^4.0.0",
-    "@rollup/plugin-commonjs": "^28.0.6",
+    "@rollup/plugin-commonjs": "^28.0.9",
     "@splunk/babel-preset": "^4.0.0",
     "@splunk/eslint-config": "^5.0.0",
-    "@storybook/addon-a11y": "^8.6.14",
+    "@storybook/addon-a11y": "^8.6.18",
     "@storybook/addon-essentials": "^8.6.14",
     "@storybook/addon-interactions": "^8.6.14",
-    "@storybook/addon-links": "^8.6.14",
+    "@storybook/addon-links": "^8.6.18",
     "@storybook/blocks": "^8.6.14",
-    "@storybook/builder-vite": "^8.6.14",
-    "@storybook/react": "^8.6.14",
-    "@storybook/react-vite": "^8.6.14",
+    "@storybook/builder-vite": "^8.6.18",
+    "@storybook/react": "^8.6.18",
+    "@storybook/react-vite": "^8.6.18",
     "@storybook/test-runner": "^0.23.0",
-    "@testing-library/dom": "^10.4.0",
-    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/react": "^15.0.6",
+    "@testing-library/dom": "^10.4.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^15.0.7",
     "@testing-library/user-event": "^14.6.1",
-    "@types/jest-image-snapshot": "^6.4.0",
+    "@types/jest-image-snapshot": "^6.4.1",
     "@types/js-yaml": "^4.0.9",
-    "@types/lodash": "^4.17.20",
+    "@types/lodash": "^4.17.24",
     "@types/node": "^20.17.24",
-    "@types/react": "^18.2.41",
-    "@types/react-dom": "^18.2.17",
-    "@types/styled-components": "^5.1.34",
+    "@types/react": "^18.3.28",
+    "@types/react-dom": "^18.3.7",
+    "@types/styled-components": "^5.1.36",
     "@typescript-eslint/eslint-plugin": "^7.18.0",
     "@typescript-eslint/parser": "^7.18.0",
     "babel-eslint": "^10.1.0",
-    "babel-jest": "^30.0.5",
+    "babel-jest": "^30.3.0",
     "babel-loader": "^8.4.1",
-    "babel-plugin-module-resolver": "^5.0.2",
-    "cross-env": "^10.0.0",
-    "css-loader": "^7.1.2",
-    "esbuild-loader": "^4.3.0",
+    "babel-plugin-module-resolver": "^5.0.3",
+    "cross-env": "^10.1.0",
+    "css-loader": "^7.1.4",
+    "esbuild-loader": "^4.4.2",
     "eslint": "^8.57.1",
     "eslint-config-airbnb": "^19.0.4",
     "eslint-config-prettier": "^7.2.0",
     "eslint-import-resolver-typescript": "^4.4.4",
     "eslint-plugin-import": "^2.32.0",
-    "eslint-plugin-jest": "^29.0.1",
+    "eslint-plugin-jest": "^29.15.1",
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "eslint-plugin-prettier": "^4.2.5",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^4.6.2",
     "eslint-plugin-storybook": "^0.12.0 ",
-    "eslint-plugin-testing-library": "^7.6.6",
-    "jest": "^30.0.5",
-    "jest-environment-jsdom": "^30.0.5",
-    "jest-fixed-jsdom": "^0.0.9",
-    "jest-image-snapshot": "^6.5.1",
+    "eslint-plugin-testing-library": "^7.16.2",
+    "jest": "^30.3.0",
+    "jest-environment-jsdom": "^30.3.0",
+    "jest-fixed-jsdom": "^0.0.11",
+    "jest-image-snapshot": "^6.5.2",
     "jsdom": "^26.1.0",
-    "msw": "^2.10.5",
-    "msw-storybook-addon": "^2.0.5",
+    "msw": "^2.12.14",
+    "msw-storybook-addon": "^2.0.6",
     "prettier": "^2.8.8",
     "querystring-es3": "^0.2.1",
-    "rollup-plugin-license": "^3.6.0",
-    "storybook": "^8.6.14",
+    "rollup-plugin-license": "^3.7.0",
+    "storybook": "^8.6.18",
     "style-loader": "^4.0.0",
     "stylelint": "^14.16.1",
     "ts-node": "^10.9.2",
-    "typescript": "^5.9.2",
+    "typescript": "^5.9.3",
     "undici": "^5.29.0",
     "url": "^0.11.4",
     "vite-plugin-dts": "4.5.3",
-    "vite-plugin-node-polyfills": "^0.24.0"
+    "vite-plugin-node-polyfills": "^0.25.0"
   },
   "peerDependencies": {
-    "react": "^18.0.0",
-    "react-dom": "^18.0.0",
-    "react-is": "^19.1.1",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "react-is": "^19.2.4",
     "styled-components": "^5.3.11",
-    "typescript": "^5.9.2"
+    "typescript": "^5.9.3"
   },
   "resolutions": {
     "@npmcli/git": "^2.1.0",
-    "@types/react": "^18.2.41",
+    "@types/react": "^18.3.28",
     "css-what": "^5.1.0",
     "d3-color": "^3.1.0",
     "d3-interpolate": "^3.0.1",
     "glob-parent": "^5.1.2",
-    "postcss": "^8.5.6",
-    "semver": "^7.7.2",
+    "postcss": "^8.5.8",
+    "semver": "^7.7.4",
     "strip-ansi": "^6.0.1",
     "string-width": "^4.2.3",
-    "esbuild": "^0.25.9",
-    "axios": "^1.12.0",
-    "jspdf": "^4.0.0",
+    "esbuild": "^0.27.4",
+    "axios": "^1.13.6",
+    "jspdf": "^4.2.1",
     "http-proxy-middleware": "^3.0.5",
     "js-yaml": "^4.1.1",
+    "@splunk/react-ui": "5.2.0",
     "@splunk/dashboard-event-handlers": "29.4.0",
     "@splunk/dashboard-inputs": "29.4.0",
     "@splunk/dashboard-search": "29.4.0",

ui/src/components/DatePickerComponent/DatePickerComponent.tsx

@@ -1,7 +1,7 @@
 import React from 'react';
 import SUIDate, { DateChangeHandler } from '@splunk/react-ui/Date';
 
-interface DatePickerComponentProps {
+export interface DatePickerComponentProps {
     value: string;
     handleChange: (field: string, value: string) => void;
     field: string;

ui/src/public/mockServiceWorker.js

@@ -7,8 +7,8 @@
  * - Please do NOT modify this file.
  */
 
-const PACKAGE_VERSION = '2.11.1'
-const INTEGRITY_CHECKSUM = 'f5825c521429caf22a4dd13b66e243af'
+const PACKAGE_VERSION = '2.12.14'
+const INTEGRITY_CHECKSUM = '4db4a41e972cec1b64cc569c66952d82'
 const IS_MOCKED_RESPONSE = Symbol('isMockedResponse')
 const activeClientIds = new Set()
 
@@ -71,11 +71,6 @@ addEventListener('message', async function (event) {
       break
     }
 
-    case 'MOCK_DEACTIVATE': {
-      activeClientIds.delete(clientId)
-      break
-    }
-
     case 'CLIENT_CLOSED': {
       activeClientIds.delete(clientId)
 
@@ -94,6 +89,8 @@ addEventListener('message', async function (event) {
 })
 
 addEventListener('fetch', function (event) {
+  const requestInterceptedAt = Date.now()
+
   // Bypass navigation requests.
   if (event.request.mode === 'navigate') {
     return
@@ -110,23 +107,29 @@ addEventListener('fetch', function (event) {
 
   // Bypass all requests when there are no active clients.
   // Prevents the self-unregistered worked from handling requests
-  // after it's been deleted (still remains active until the next reload).
+  // after it's been terminated (still remains active until the next reload).
   if (activeClientIds.size === 0) {
     return
   }
 
   const requestId = crypto.randomUUID()
-  event.respondWith(handleRequest(event, requestId))
+  event.respondWith(handleRequest(event, requestId, requestInterceptedAt))
 })
 
 /**
  * @param {FetchEvent} event
  * @param {string} requestId
+ * @param {number} requestInterceptedAt
  */
-async function handleRequest(event, requestId) {
+async function handleRequest(event, requestId, requestInterceptedAt) {
   const client = await resolveMainClient(event)
   const requestCloneForEvents = event.request.clone()
-  const response = await getResponse(event, client, requestId)
+  const response = await getResponse(
+    event,
+    client,
+    requestId,
+    requestInterceptedAt,
+  )
 
   // Send back the response clone for the "response:*" life-cycle events.
   // Ensure MSW is active and ready to handle the message, otherwise
@@ -202,9 +205,10 @@ async function resolveMainClient(event) {
  * @param {FetchEvent} event
  * @param {Client | undefined} client
  * @param {string} requestId
+ * @param {number} requestInterceptedAt
  * @returns {Promise<Response>}
  */
-async function getResponse(event, client, requestId) {
+async function getResponse(event, client, requestId, requestInterceptedAt) {
   // Clone the request because it might've been already used
   // (i.e. its body has been read and sent to the client).
   const requestClone = event.request.clone()
@@ -255,6 +259,7 @@ async function getResponse(event, client, requestId) {
       type: 'REQUEST',
       payload: {
         id: requestId,
+        interceptedAt: requestInterceptedAt,
         ...serializedRequest,
       },
     },