Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Storybook 7.0.0 #289

Merged
merged 58 commits into from
Apr 3, 2023
Merged

Support Storybook 7.0.0 #289

merged 58 commits into from
Apr 3, 2023

Conversation

yannbf
Copy link
Member

@yannbf yannbf commented Apr 3, 2023

Version

Published prerelease version: v0.10.0-next.13

Changelog

🚀 Enhancement

🐛 Bug Fix

⚠️ Pushed to next

  • add version support table (@yannbf)

📝 Documentation

Authors: 9

bryanjtc and others added 30 commits October 20, 2022 14:28
Co-authored-by: Yann Braga <yannbf@gmail.com>
New prerelease structure / upgrade to SB7
…[skip ci]

Docs: add recipe for browser name
Make setup-page globally available for index.json mode compatibility
Fix target url in error feedback
yannbf and others added 25 commits January 20, 2023 15:49
…ensions

Support other test-runner config extensions
Document index.json mode for Svelte CSF
…-browser-context

Extend hooks api with `prepare` and `getHttpHeaders` properties
…fined-stories-config

Update getStorybookMain to throw an error if stories are not found in main.js
@yannbf yannbf added the minor Increment the minor version when merged label Apr 3, 2023
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore playwright@1.29.1
  • @SocketSecurity ignore core-js-pure@3.27.0
  • @SocketSecurity ignore esbuild@0.16.12
  • @SocketSecurity ignore esbuild@0.17.14
  • @SocketSecurity ignore @storybook/cli@7.0.0-beta.58
  • @SocketSecurity ignore storybook@7.0.0-beta.58
  • @SocketSecurity ignore playwright-core@1.29.1
  • @SocketSecurity ignore @auto-it/core@10.37.6
  • @SocketSecurity ignore @auto-it/core@10.43.0
  • @SocketSecurity ignore @auto-it/npm@10.37.6
  • @SocketSecurity ignore @auto-it/npm@10.43.0
  • @SocketSecurity ignore @aw-web-design/x-default-browser@1.4.88
  • @SocketSecurity ignore @storybook/telemetry@7.0.0-beta.58
  • @SocketSecurity ignore address@1.2.2
  • @SocketSecurity ignore babel-plugin-istanbul@6.1.1
  • @SocketSecurity ignore better-opn@2.1.1
  • @SocketSecurity ignore commander@2.20.3
  • @SocketSecurity ignore commander@3.0.2
  • @SocketSecurity ignore commander@5.1.0
  • @SocketSecurity ignore cross-spawn@7.0.3
  • @SocketSecurity ignore envinfo@7.8.1
  • @SocketSecurity ignore execa@5.1.1
  • @SocketSecurity ignore fb-watchman@2.0.2
  • @SocketSecurity ignore find-process@1.4.7
  • @SocketSecurity ignore gitlog@4.0.4
  • @SocketSecurity ignore husky@8.0.2
  • @SocketSecurity ignore jake@10.8.5
  • @SocketSecurity ignore jest-haste-map@28.1.3
  • @SocketSecurity ignore jest-haste-map@29.3.1
  • @SocketSecurity ignore jest-image-snapshot@5.2.0
  • @SocketSecurity ignore jest-process-manager@0.3.1
  • @SocketSecurity ignore jest-worker@27.5.1
  • @SocketSecurity ignore jest-worker@29.3.1
  • @SocketSecurity ignore jscodeshift@0.14.0
  • @SocketSecurity ignore open@7.4.2
  • @SocketSecurity ignore open@8.4.0
  • @SocketSecurity ignore package-hash@4.0.0
  • @SocketSecurity ignore pidtree@0.6.0
  • @SocketSecurity ignore puppeteer-core@2.1.1
  • @SocketSecurity ignore requireg@0.2.2
  • @SocketSecurity ignore shelljs@0.8.5
  • @SocketSecurity ignore spawnd@5.0.0
  • @SocketSecurity ignore tree-kill@1.2.2
  • @SocketSecurity ignore ts-node@10.9.1
  • @SocketSecurity ignore typescript@4.9.4
  • @SocketSecurity ignore update-browserslist-db@1.0.10
  • @SocketSecurity ignore webpack@5.75.0
  • @SocketSecurity ignore @sinclair/typebox@0.24.51
  • @SocketSecurity ignore @storybook/components@7.0.0-beta.58
  • @SocketSecurity ignore @storybook/docs-mdx@0.0.1-next.5
📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
playwright@1.29.1 (upgraded) install package.json
core-js-pure@3.27.0 (upgraded) postinstall package.json via @storybook/react-webpack5@7.0.0-beta.58
esbuild@0.16.12 (added) postinstall package.json via storybook@7.0.0-beta.58
esbuild@0.17.14 (added) postinstall package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
@storybook/cli@7.0.0-beta.58 (added) sb package.json via storybook@7.0.0-beta.58
storybook@7.0.0-beta.58 (added) sb package.json
playwright@1.29.1 (upgraded) playwright package.json
playwright-core@1.29.1 (upgraded) playwright package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto-make-changelog.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-current-branch.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-remote.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/release.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/auto.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/release.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/load-plugin.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/verify-auth.test.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/exec-promise.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/get-current-branch.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/load-plugins.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/verify-auth.js package.json via @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.43.0 (upgraded) child_process dist/tests/auto-make-changelog.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/tests/auto.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/tests/get-current-branch.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/tests/get-remote.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/tests/release.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/auto.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/release.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/tests/load-plugin.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/tests/verify-auth.test.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/exec-promise.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/get-current-branch.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/load-plugins.js package.json via storybook@7.0.0-beta.58
@auto-it/core@10.43.0 (upgraded) child_process dist/utils/verify-auth.js package.json via storybook@7.0.0-beta.58
@auto-it/npm@10.37.6 (upgraded) child_process dist/index.js package.json via auto@10.37.6
@auto-it/npm@10.43.0 (upgraded) child_process dist/index.js package.json via storybook@7.0.0-beta.58
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-linux.js package.json via storybook@7.0.0-beta.58
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows.js package.json via storybook@7.0.0-beta.58
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows10.js package.json via storybook@7.0.0-beta.58
@storybook/cli@7.0.0-beta.58 (added) child_process dist/generate.js package.json via storybook@7.0.0-beta.58
@storybook/telemetry@7.0.0-beta.58 (upgraded) child_process dist/index.js package.json via storybook@7.0.0-beta.58
@storybook/telemetry@7.0.0-beta.58 (upgraded) child_process dist/index.mjs package.json via storybook@7.0.0-beta.58
address@1.2.2 (upgraded) child_process lib/address.js package.json via storybook@7.0.0-beta.58
babel-plugin-istanbul@6.1.1 (added) child_process lib/index.js package.json via @storybook/addon-coverage@0.0.7, @storybook/addon-essentials@7.0.0-beta.58, babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
better-opn@2.1.1 (added) child_process dist/index.js package.json via storybook@7.0.0-beta.58
commander@2.20.3 (upgraded) child_process index.js package.json via @storybook/react-webpack5@7.0.0-beta.58, babel-loader@8.3.0
commander@3.0.2 (upgraded) child_process index.js package.json via jest-playwright-preset@2.0.0
commander@5.1.0 (upgraded) child_process index.js package.json via jest-playwright-preset@2.0.0
cross-spawn@7.0.3 (upgraded) child_process index.js package.json via @auto-it/released@10.37.6, @storybook/react-webpack5@7.0.0-beta.58, auto@10.37.6, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, lint-staged@13.1.0, storybook@7.0.0-beta.58, ts-jest@28.0.8
envinfo@7.8.1 (added) child_process dist/envinfo.js package.json via storybook@7.0.0-beta.58
esbuild@0.16.12 (added) child_process install.js package.json via storybook@7.0.0-beta.58
esbuild@0.16.12 (added) child_process lib/main.js package.json via storybook@7.0.0-beta.58
esbuild@0.17.14 (added) child_process install.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
esbuild@0.17.14 (added) child_process lib/main.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
execa@5.1.1 (upgraded) child_process index.js package.json via @auto-it/released@10.37.6, auto@10.37.6, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
fb-watchman@2.0.2 (upgraded) child_process index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
find-process@1.4.7 (added) child_process lib/utils.js package.json via jest-playwright-preset@2.0.0
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.development.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.production.min.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
gitlog@4.0.4 (added) child_process dist/gitlog.esm.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
husky@8.0.2 (upgraded) child_process lib/index.js package.json
jake@10.8.5 (added) child_process jake-v10.8.5/jakefile.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/package_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/publish_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/utils/index.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/concurrent.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/helpers.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/publish_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/rule.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/selfdep.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via storybook@7.0.0-beta.58
jest-haste-map@28.1.3 (upgraded) child_process build/crawlers/node.js package.json via babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
jest-haste-map@28.1.3 (upgraded) child_process build/lib/isWatchmanInstalled.js package.json via babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
jest-haste-map@29.3.1 (upgraded) child_process build/crawlers/node.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jest-haste-map@29.3.1 (upgraded) child_process build/lib/isWatchmanInstalled.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jest-image-snapshot@5.2.0 (added) child_process src/diff-snapshot.js package.json
jest-process-manager@0.3.1 (added) child_process lib/index.js package.json via jest-playwright-preset@2.0.0
jest-worker@27.5.1 (upgraded) child_process build/workers/ChildProcessWorker.js package.json via @storybook/react-webpack5@7.0.0-beta.58, babel-loader@8.3.0
jest-worker@29.3.1 (upgraded) child_process build/workers/ChildProcessWorker.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jscodeshift@0.14.0 (added) child_process dist/Runner.js package.json via storybook@7.0.0-beta.58
jscodeshift@0.14.0 (added) child_process src/Runner.js package.json via storybook@7.0.0-beta.58
open@7.4.2 (added) child_process index.js package.json via storybook@7.0.0-beta.58
open@8.4.0 (added) child_process index.js package.json via storybook@7.0.0-beta.58
package-hash@4.0.0 (added) child_process index.js package.json via jest-playwright-preset@2.0.0
pidtree@0.6.0 (added) child_process lib/bin.js package.json via lint-staged@13.1.0
playwright-core@1.29.1 (upgraded) child_process lib/cli/cli.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/common/userAgent.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/grid/gridAgent.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/grid/simpleGridFactory.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/outofprocess.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/server/registry/browserFetcher.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/server/registry/dependencies.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/utils/processLauncher.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (upgraded) child_process lib/utilsBundleImpl.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
puppeteer-core@2.1.1 (added) child_process lib/Launcher.js package.json via storybook@7.0.0-beta.58
requireg@0.2.2 (added) child_process lib/resolvers.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
shelljs@0.8.5 (added) child_process src/exec-child.js package.json via storybook@7.0.0-beta.58
shelljs@0.8.5 (added) child_process src/exec.js package.json via storybook@7.0.0-beta.58
spawnd@5.0.0 (added) child_process lib/index.js package.json via [jest-playwright

@yannbf yannbf merged commit 05edda6 into main Apr 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
minor Increment the minor version when merged
Projects
None yet
Development

Successfully merging this pull request may close these issues.

9 participants