[dependabot]

Bumps chromaui/action from 18.13.2 to 18.13.3.

Changelog

Sourced from chromaui/action's changelog.

v18.13.4 (Wed Oct 28 2026)

🐛 Bug Fix

• Read the configured gitTimeout in seconds #1595 (@​codykaup)
• fix: honor gitTimeout when comparing TurboSnap baselines #1594 (@​ethriel3695)
• Add an overview, service map, and feature map to AGENTS.md #1584 (@​justin-thurman)
• Only run PR canary releases when shipped code or the release process changes #1588 (@​codykaup)
• Make the CLI verification skill cover main-vs-branch, canaries, and scratch projects #1570 (@​codykaup)
• Tell agents how to label PRs #1571 (@​codykaup)
• Check merged PR build commits with one git cat-file call #1581 (@​codykaup)
• Assign repository code ownership to capture team #1586 (@​justin-thurman)
• Normalize absolute paths passed to chromatic trace #1580 (@​codykaup)
• [TurboSnap v2] Skip every untracked file, not just gitignored ones #1558 (@​codykaup)
• Don't suggest --exit-once-uploaded for local builds #1575 (@​codykaup)
• Look up upload targets by path with a Map #1579 (@​codykaup)
• Use a Map for file lengths in buildFileList #1577 (@​codykaup)
• Reuse one Intl.DateTimeFormat for log timestamps #1578 (@​codykaup)
• Retry action-canary push when a concurrent canary release moves main #1566 (@​justin-thurman)
• Exit non-zero and support --help in trim-stats-file subcommand #1560 (@​codykaup)
• Add E2E fixture projects and a helper to prepare them #1543 (@​codykaup)

Authors: 3

• Cody Kaup (@​codykaup)
• Justin Thurman (@​justin-thurman)
• Reuben Ellis (@​ethriel3695)

---

v18.13.3 (Thu Oct 22 2026)

Release Notes

Lower default TurboSnap lockfile parse concurrency to 1 (#1564)

TurboSnap now parses one lockfile at a time by default (previously 200), which greatly reduces peak memory in repositories with many package manifests. Wall time is unchanged, since parsing is synchronous. Set CHROMATIC_TURBOSNAP_PACKAGE_CONCURRENCY to override the default.

---

🐛 Bug Fix

• Lower default TurboSnap lockfile parse concurrency to 1 #1564 (@​codykaup)
• [TurboSnap v2] Skip generated directories under node_modules #1557 (@​codykaup)
• Replace raceFulfilled with Promise.any and fix findChangedPackageFiles short-circuit #1556 (@​codykaup)
• Show upload task as skipped when TurboSnap bypasses the build #1559 (@​codykaup)

Authors: 1

• Cody Kaup (@​codykaup)

... (truncated)

Commits

• 5bcadb5 v18.13.3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Auto-approved: patch-level bump only (chromaui/action).

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 84.69%. Comparing base (2d2e557) to head (617277f).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #45836   +/-   ##
=======================================
  Coverage   84.68%   84.69%           
=======================================
  Files        3069     3069           
  Lines      205465   205465           
  Branches    48310    48310           
=======================================
+ Hits       174006   174015    +9     
+ Misses      28169    28160    -9     
  Partials     3290     3290           

Flag	Coverage Δ
javascript	80.93% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.