Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

support Storybook 7.0.0 #283

Merged
merged 1 commit into from Mar 31, 2023
Merged

support Storybook 7.0.0 #283

merged 1 commit into from Mar 31, 2023

Conversation

yannbf
Copy link
Member

@yannbf yannbf commented Mar 30, 2023 •
edited by github-actions bot

Preparing for the release of Storybook 7!

📦 Published PR as canary version: 0.9.5--canary.283.2ff4518.0

✨ Test out this PR locally via:

npm install @storybook/test-runner@0.9.5--canary.283.2ff4518.0
# or 
yarn add @storybook/test-runner@0.9.5--canary.283.2ff4518.0

Version

Published prerelease version: v0.10.0-next.12

Changelog

🚀 Enhancement

🐛 Bug Fix

📝 Documentation

Authors: 9

@yannbf yannbf added the patch Increment the patch version when merged label Mar 30, 2023
@socket-security
Copy link

socket-security bot commented Mar 30, 2023 •
edited

New dependency changes detected. Learn more about Socket for GitHub ↗︎

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore esbuild@0.17.14
  • @SocketSecurity ignore execa@5.1.1
  • @SocketSecurity ignore fb-watchman@2.0.2
  • @SocketSecurity ignore find-process@1.4.7
  • @SocketSecurity ignore gitlog@4.0.4
  • @SocketSecurity ignore husky@8.0.2
  • @SocketSecurity ignore jake@10.8.5
  • @SocketSecurity ignore jest-haste-map@28.1.3
  • @SocketSecurity ignore jest-haste-map@29.3.1
  • @SocketSecurity ignore jest-image-snapshot@5.2.0
  • @SocketSecurity ignore jest-process-manager@0.3.1
  • @SocketSecurity ignore jest-worker@27.5.1
  • @SocketSecurity ignore jest-worker@29.3.1
  • @SocketSecurity ignore jscodeshift@0.14.0
  • @SocketSecurity ignore open@7.4.2
  • @SocketSecurity ignore open@8.4.0
  • @SocketSecurity ignore package-hash@4.0.0
  • @SocketSecurity ignore pidtree@0.6.0
  • @SocketSecurity ignore playwright-core@1.29.1
  • @SocketSecurity ignore puppeteer-core@2.1.1
  • @SocketSecurity ignore requireg@0.2.2
  • @SocketSecurity ignore shelljs@0.8.5
  • @SocketSecurity ignore spawnd@5.0.0
  • @SocketSecurity ignore tree-kill@1.2.2
  • @SocketSecurity ignore ts-node@10.9.1
  • @SocketSecurity ignore typescript@4.9.4
  • @SocketSecurity ignore update-browserslist-db@1.0.10
  • @SocketSecurity ignore webpack@5.75.0
  • @SocketSecurity ignore @storybook/csf-tools@7.0.0-rc.10
  • @SocketSecurity ignore @storybook/manager@7.0.0-beta.58
  • @SocketSecurity ignore @storybook/preview@7.0.0-beta.58
  • @SocketSecurity ignore await-to-js@3.0.0
  • @SocketSecurity ignore bottleneck@2.19.5
  • @SocketSecurity ignore get-intrinsic@1.1.3
  • @SocketSecurity ignore loader-runner@4.3.0
  • @SocketSecurity ignore telejson@7.0.4
📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
esbuild@0.17.14 (added) postinstall package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
esbuild@0.17.14 (added) child_process install.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
esbuild@0.17.14 (added) child_process lib/main.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/core-common@7.0.0-rc.10, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, storybook@7.0.0-beta.58
execa@5.1.1 (added) child_process index.js package.json via @auto-it/released@10.37.6, auto@10.37.6, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
fb-watchman@2.0.2 (added) child_process index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
find-process@1.4.7 (added) child_process lib/utils.js package.json via jest-playwright-preset@2.0.0
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.development.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.production.min.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
gitlog@4.0.4 (added) child_process dist/gitlog.esm.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
husky@8.0.2 (added) child_process lib/index.js package.json
jake@10.8.5 (added) child_process jake-v10.8.5/jakefile.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/package_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/publish_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/lib/utils/index.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/concurrent.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/helpers.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/publish_task.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/rule.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/selfdep.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via storybook@7.0.0-beta.58
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via storybook@7.0.0-beta.58
jest-haste-map@28.1.3 (added) child_process build/crawlers/node.js package.json via babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
jest-haste-map@28.1.3 (added) child_process build/lib/isWatchmanInstalled.js package.json via babel-jest@28.1.3, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, ts-jest@28.0.8
jest-haste-map@29.3.1 (added) child_process build/crawlers/node.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jest-haste-map@29.3.1 (added) child_process build/lib/isWatchmanInstalled.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jest-image-snapshot@5.2.0 (added) child_process src/diff-snapshot.js package.json
jest-process-manager@0.3.1 (added) child_process lib/index.js package.json via jest-playwright-preset@2.0.0
jest-worker@27.5.1 (added) child_process build/workers/ChildProcessWorker.js package.json via @storybook/react-webpack5@7.0.0-beta.58, babel-loader@8.3.0
jest-worker@29.3.1 (added) child_process build/workers/ChildProcessWorker.js package.json via @storybook/addon-essentials@7.0.0-beta.58
jscodeshift@0.14.0 (added) child_process dist/Runner.js package.json via storybook@7.0.0-beta.58
jscodeshift@0.14.0 (added) child_process src/Runner.js package.json via storybook@7.0.0-beta.58
open@7.4.2 (added) child_process index.js package.json via storybook@7.0.0-beta.58
open@8.4.0 (added) child_process index.js package.json via storybook@7.0.0-beta.58
package-hash@4.0.0 (added) child_process index.js package.json via jest-playwright-preset@2.0.0
pidtree@0.6.0 (added) child_process lib/bin.js package.json via lint-staged@13.1.0
playwright-core@1.29.1 (added) child_process lib/cli/cli.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/common/userAgent.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/grid/gridAgent.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/grid/simpleGridFactory.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/outofprocess.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/server/registry/browserFetcher.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/server/registry/dependencies.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/utils/processLauncher.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
playwright-core@1.29.1 (added) child_process lib/utilsBundleImpl.js package.json via jest-playwright-preset@2.0.0, playwright@1.29.1
puppeteer-core@2.1.1 (added) child_process lib/Launcher.js package.json via storybook@7.0.0-beta.58
requireg@0.2.2 (added) child_process lib/resolvers.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
shelljs@0.8.5 (added) child_process src/exec-child.js package.json via storybook@7.0.0-beta.58
shelljs@0.8.5 (added) child_process src/exec.js package.json via storybook@7.0.0-beta.58
spawnd@5.0.0 (added) child_process lib/index.js package.json via jest-playwright-preset@2.0.0
tree-kill@1.2.2 (added) child_process index.js package.json via concurrently@7.6.0, jest-playwright-preset@2.0.0
ts-node@10.9.1 (added) child_process dist/child/spawn-child.js package.json via @auto-it/released@10.37.6, auto@10.37.6, jest@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
typescript@4.9.4 (added) child_process lib/tsserver.js package.json via @auto-it/released@10.37.6, @storybook/react-webpack5@7.0.0-beta.58, auto@10.37.6, jest@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
typescript@4.9.4 (added) child_process lib/tsserver.js package.json via @auto-it/released@10.37.6, @storybook/react-webpack5@7.0.0-beta.58, auto@10.37.6, jest@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
update-browserslist-db@1.0.10 (added) child_process check-npm-version.js package.json via @babel/cli@7.20.7, @babel/core@7.20.7, @babel/preset-env@7.20.2, @babel/preset-react@7.18.6, @babel/preset-typescript@7.18.6, @storybook/addon-coverage@0.0.7, @storybook/addon-essentials@7.0.0-beta.58, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, babel-jest@28.1.3, babel-loader@8.3.0, babel-plugin-istanbul@6.1.1, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
update-browserslist-db@1.0.10 (added) child_process index.js package.json via @babel/cli@7.20.7, @babel/core@7.20.7, @babel/preset-env@7.20.2, @babel/preset-react@7.18.6, @babel/preset-typescript@7.18.6, @storybook/addon-coverage@0.0.7, @storybook/addon-essentials@7.0.0-beta.58, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, babel-jest@28.1.3, babel-loader@8.3.0, babel-plugin-istanbul@6.1.1, jest@28.1.3, jest-circus@28.1.3, jest-image-snapshot@5.2.0, jest-playwright-preset@2.0.0, jest-runner@28.1.3, jest-watch-typeahead@2.2.1, storybook@7.0.0-beta.58, ts-jest@28.0.8
webpack@5.75.0 (added) child_process bin/webpack.js package.json via @storybook/react-webpack5@7.0.0-beta.58, babel-loader@8.3.0
⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package Eval Type Location Source
@storybook/csf-tools@7.0.0-rc.10 (upgraded) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, storybook@7.0.0-beta.58
@storybook/csf-tools@7.0.0-rc.10 (upgraded) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, storybook@7.0.0-beta.58
@storybook/csf-tools@7.0.0-rc.10 (upgraded) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, storybook@7.0.0-beta.58
@storybook/manager@7.0.0-beta.58 (added) eval dist/chunk-SIT35WFN.mjs package.json via storybook@7.0.0-beta.58
@storybook/manager@7.0.0-beta.58 (added) eval dist/chunk-SIT35WFN.mjs package.json via storybook@7.0.0-beta.58
@storybook/manager@7.0.0-beta.58 (added) eval dist/chunk-SIT35WFN.mjs package.json via storybook@7.0.0-beta.58
@storybook/manager@7.0.0-beta.58 (added) eval dist/chunk-SIT35WFN.mjs package.json via storybook@7.0.0-beta.58
@storybook/manager@7.0.0-beta.58 (added) eval dist/OverlayScrollbars-VAV6LJAB-ZCK6WCDR.mjs package.json via storybook@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.js package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.js package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.js package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.js package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.mjs package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.mjs package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.mjs package.json via @storybook/react-webpack5@7.0.0-beta.58
@storybook/preview@7.0.0-beta.58 (added) eval dist/runtime.mjs package.json via @storybook/react-webpack5@7.0.0-beta.58
await-to-js@3.0.0 (added) eval dist/docs/assets/js/main.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
await-to-js@3.0.0 (added) eval dist/docs/assets/js/main.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
bottleneck@2.19.5 (added) eval lib/RedisConnection.js package.json via @auto-it/released@10.37.6, auto@10.37.6, storybook@7.0.0-beta.58
get-intrinsic@1.1.3 (added) eval index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/csf-tools@7.0.0-rc.10, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
loader-runner@4.3.0 (added) eval lib/loadLoader.js package.json via @storybook/react-webpack5@7.0.0-beta.58, babel-loader@8.3.0
telejson@7.0.4 (added) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
telejson@7.0.4 (added) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
telejson@7.0.4 (added) eval dist/index.js package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
telejson@7.0.4 (added) eval dist/index.mjs package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
telejson@7.0.4 (added) eval dist/index.mjs package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, @storybook/jest@0.0.11-next.0, @storybook/preview-api@7.0.0-beta.15, @storybook/react@7.0.0-beta.58, @storybook/react-webpack5@7.0.0-beta.58, @storybook/testing-library@0.0.14-next.1, storybook@7.0.0-beta.58
telejson@7.0.4 (added) eval dist/index.mjs package.json via @storybook/addon-essentials@7.0.0-beta.58, @storybook/addon-interactions@7.0.0-beta.58, [@storybook/jest@0.0.11-next.0](https://

@yannbf yannbf force-pushed the feat/prepare-for-sb7 branch 2 times, most recently from 9a6f270 to 4979bd5 Compare March 30, 2023 13:00
@codecov
Copy link

codecov bot commented Mar 30, 2023 •
edited

Codecov Report

Patch and project coverage have no change.

Comparison is base (6427b31) 75.95% compared to head (2ff4518) 75.95%.

Additional details and impacted files 
@@           Coverage Diff           @@
##             next     #283   +/-   ##
=======================================
  Coverage   75.95%   75.95%           
=======================================
  Files          11       11           
  Lines         183      183           
  Branches       39       39           
=======================================
  Hits          139      139           
  Misses         44       44

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.

@yannbf yannbf merged commit 519c438 into next Mar 31, 2023
6 of 7 checks passed
@yannbf yannbf deleted the feat/prepare-for-sb7 branch March 31, 2023 14:16
@github-actions github-actions bot mentioned this pull request Apr 3, 2023
Merged
@github-actions
Copy link

github-actions bot commented Apr 3, 2023

🚀 PR was released in v0.10.0 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
patch Increment the patch version when merged released
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
1 participant
@yannbf