Skip to content
This repository has been archived by the owner on Jan 31, 2024. It is now read-only.

Support Storybook 7.0.0 #138

Merged
merged 2 commits into from
Mar 31, 2023
Merged

Support Storybook 7.0.0 #138

merged 2 commits into from
Mar 31, 2023

Conversation

yannbf
Copy link
Member

@yannbf yannbf commented Mar 31, 2023 •
edited by github-actions bot
Loading

Preparing for the release of Storybook 7!

Change Type

Indicate the type of change your pull request is:

  • documentation
  • patch
  • minor
  • major
📦 Published PR as canary version: 1.3.1--canary.138.1078df7.0

✨ Test out this PR locally via:

npm install @storybook/[email protected]
# or 
yarn add @storybook/[email protected]

Version

Published prerelease version: v2.0.0-next.1

Changelog

Release Notes

Support Storybook 7.0 (#120)

💥 Breaking Change

This version adds support for Storybook 7.0. It requires you to be using Storybook 7.0, as there were several internal changes required, all of which depend on new Storybook packages.

🚀 Features

In Storybook 7.0, the play function can also be defined in the Meta (default export). This is now supported in @storybook/testing-react.

⚠️ Deprecations

The setGlobalConfig function is now deprecated in favor of setProjectAnnotations, which aligns better with Storybook 7.0 nomenclature.

From:

  import { setGlobalConfig } from '@storybook/testing-react';
  import * as globalStorybookConfig from './.storybook/preview';

  setGlobalConfig(globalStorybookConfig);

To:

  import { setProjectAnnotations } from '@storybook/testing-react';
  import * as globalStorybookConfig from './.storybook/preview';

  setProjectAnnotations(globalStorybookConfig);
---

💥 Breaking Change

🐛 Bug Fix

Authors: 3

@yannbf yannbf added the patch Increment the patch version when merged label Mar 31, 2023
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
[email protected] (added) postinstall package.json via @storybook/[email protected]
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
[email protected] (added) child_process install.js package.json via @storybook/[email protected]
[email protected] (added) child_process lib/main.js package.json via @storybook/[email protected]
[email protected] (added) child_process lib/exec-sh.js package.json via [email protected]
[email protected] (added) child_process test/exec-sh.js package.json via [email protected]
[email protected] (added) child_process index.js package.json via [email protected]
[email protected] (added) child_process index.js package.json via [email protected]
[email protected] (added) child_process index.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process main/index.js package.json via [email protected]
[email protected] (added) child_process index.js package.json via [email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process lib/index.js example/package.json via @storybook/[email protected], @storybook/[email protected]
[email protected] (added) child_process lib/rpc/rpc-ipc/RpcIpcMessagePort.js example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process index.js package.json via @auto-it/[email protected]
[email protected] (added) child_process dist/gitlog.cjs.development.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected]
[email protected] (added) child_process dist/gitlog.cjs.production.min.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected]
[email protected] (added) child_process dist/gitlog.esm.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected]
[email protected] (added) child_process lib/commands/install.js package.json
[email protected] (added) child_process lib/commands/uninstall.js package.json
[email protected] (added) child_process jake-v10.8.5/jakefile.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/package_task.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/publish_task.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/utils/index.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/concurrent.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/file_task.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/file.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/helpers.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/publish_task.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/rule.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/selfdep.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process build/crawlers/node.js package.json via [email protected]
[email protected] (added) child_process build/index.js package.json via [email protected]
[email protected] (added) child_process build/crawlers/node.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process build/lib/isWatchmanInstalled.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process build/types.js package.json via [email protected]
[email protected] (added) child_process build/workers/ChildProcessWorker.js package.json via [email protected]
[email protected] (added) child_process build/workers/ChildProcessWorker.js package.json via [email protected]
[email protected] (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process dist/Runner.js example/package.json via [email protected]
[email protected] (added) child_process src/Runner.js example/package.json via [email protected]
[email protected] (added) child_process lib/jsdom/living/xmlhttprequest.js package.json via [email protected]
[email protected] (added) child_process lib/jsdom/living/xhr/XMLHttpRequest-impl.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process lib/utils.js package.json via [email protected], example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process index.js example/package.json via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process index.js example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process lib/opener.js package.json via @size-limit/[email protected]
[email protected] (added) child_process lib/Launcher.js example/package.json via [email protected]
[email protected] (added) child_process getProcessForPort.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process getProcessForPort.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process launchEditor.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process openBrowser.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process scripts/eject.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process scripts/init.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process scripts/test.js example/package.json via @storybook/[email protected]
[email protected] (added) child_process lib/resolvers.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected]
[email protected] (added) child_process dist/shared/watch-cli.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process src/exec-child.js package.json via [email protected], example/package.json via [email protected]
[email protected] (added) child_process src/exec.js package.json via [email protected], example/package.json via [email protected]
[email protected] (added) child_process index.js package.json via [email protected]
[email protected] (added) child_process dist/child/spawn-child.js package.json via @auto-it/[email protected], @auto-it/[email protected], @auto-it/[email protected], [email protected], example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process check-npm-version.js package.json via @size-limit/[email protected], @storybook/[email protected], [email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process index.js package.json via @size-limit/[email protected], @storybook/[email protected], [email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process bin/webpack.js package.json via @size-limit/[email protected], example/package.json via @storybook/[email protected], @storybook/[email protected]
[email protected] (added) child_process bin/webpack.js example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process bin/webpack-dev-server.js example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) child_process lib/detect-linux.js example/package.json via @storybook/[email protected], @storybook/[email protected]
[email protected] (added) child_process lib/detect-mac.js example/package.json via @storybook/[email protected], @storybook/[email protected]
[email protected] (added) child_process lib/detect-windows.js example/package.json via @storybook/[email protected], @storybook/[email protected]
[email protected] (added) child_process lib/detect-windows10.js example/package.json via @storybook/[email protected], @storybook/[email protected]
⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package Eval Type Location Source
[email protected] (added) Function dist/node.js package.json via @storybook/[email protected]
[email protected] (added) Function build/index.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function build/index.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function build/index.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function build/utils.js example/package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via @auto-it/[email protected], @storybook/[email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via @auto-it/[email protected], @storybook/[email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.js package.json via @auto-it/[email protected], @storybook/[email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.js package.json via @auto-it/[email protected], @storybook/[email protected], example/package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.min.js package.json via @auto-it/[email protected], @storybook/[email protected], example/package.json via [@storybook/[email protected]](https://socket.dev/npm/package/@story

@yannbf yannbf merged commit d7a6e8e into next Mar 31, 2023
@yannbf yannbf deleted the feat/prepare-for-sb7 branch March 31, 2023 14:15
@github-actions github-actions bot mentioned this pull request Apr 3, 2023
Merged
6 tasks
@github-actions
Copy link

github-actions bot commented Apr 3, 2023

🚀 PR was released in v2.0.0 🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers
No reviews
Assignees
No one assigned
Labels
patch Increment the patch version when merged released
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@yannbf