Skip to content
This repository has been archived by the owner on Jan 31, 2024. It is now read-only.

Bump @storybook/csf to 0.1.0 #139

Merged
merged 1 commit into from
Apr 3, 2023
Merged

Bump @storybook/csf to 0.1.0 #139

merged 1 commit into from
Apr 3, 2023

Conversation

kasperpeulen
Copy link
Contributor

@kasperpeulen kasperpeulen commented Apr 3, 2023

Issue:

What Changed

Bump @storybook/csf to 0.1.0

Checklist

Check the ones applicable to your change:

  • Tests are updated
  • Documentation is updated

Change Type

Indicate the type of change your pull request is:

  • documentation
  • patch
  • minor
  • major
📦 Published PR as canary version: 1.3.1--canary.139.649899e.0

✨ Test out this PR locally via:

npm install @storybook/testing-react@1.3.1--canary.139.649899e.0
# or 
yarn add @storybook/testing-react@1.3.1--canary.139.649899e.0

Version

Published prerelease version: v2.0.0-next.2

Changelog

Release Notes

Support Storybook 7.0 (#120)

💥 Breaking Change

This version adds support for Storybook 7.0. It requires you to be using Storybook 7.0, as there were several internal changes required, all of which depend on new Storybook packages.

🚀 Features

In Storybook 7.0, the play function can also be defined in the Meta (default export). This is now supported in @storybook/testing-react.

⚠️ Deprecations

The setGlobalConfig function is now deprecated in favor of setProjectAnnotations, which aligns better with Storybook 7.0 nomenclature.

From:

  import { setGlobalConfig } from '@storybook/testing-react';
  import * as globalStorybookConfig from './.storybook/preview';

  setGlobalConfig(globalStorybookConfig);

To:

  import { setProjectAnnotations } from '@storybook/testing-react';
  import * as globalStorybookConfig from './.storybook/preview';

  setProjectAnnotations(globalStorybookConfig);
---

💥 Breaking Change

🐛 Bug Fix

Authors: 3

@kasperpeulen kasperpeulen self-assigned this Apr 3, 2023
@kasperpeulen kasperpeulen added the patch Increment the patch version when merged label Apr 3, 2023
@kasperpeulen kasperpeulen changed the base branch from main to next April 3, 2023 07:44
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore core-js@3.26.1
  • @SocketSecurity ignore core-js-pure@3.26.1
  • @SocketSecurity ignore esbuild@0.14.54
  • @SocketSecurity ignore esbuild@0.17.14
  • @SocketSecurity ignore semver@7.3.8
  • @SocketSecurity ignore @storybook/cli@7.0.0-alpha.62
  • @SocketSecurity ignore storybook@7.0.0-alpha.62
  • @SocketSecurity ignore jest@25.5.4
  • @SocketSecurity ignore jest@27.5.1
  • @SocketSecurity ignore jest-cli@25.5.4
  • @SocketSecurity ignore jest-cli@27.5.1
  • @SocketSecurity ignore detect-port@1.5.1
  • @SocketSecurity ignore detect-port-alt@1.1.6
  • @SocketSecurity ignore @auto-it/core@10.37.6
  • @SocketSecurity ignore @auto-it/npm@10.37.6
  • @SocketSecurity ignore @aw-web-design/x-default-browser@1.4.88
  • @SocketSecurity ignore @storybook/telemetry@7.0.0-alpha.62
  • @SocketSecurity ignore address@1.2.1
  • @SocketSecurity ignore babel-plugin-istanbul@6.1.1
  • @SocketSecurity ignore better-opn@2.1.1
  • @SocketSecurity ignore buffer@4.9.2
  • @SocketSecurity ignore commander@2.20.3
  • @SocketSecurity ignore commander@7.2.0
  • @SocketSecurity ignore cross-spawn@7.0.3
  • @SocketSecurity ignore envinfo@7.8.1
  • @SocketSecurity ignore exec-sh@0.3.6
  • @SocketSecurity ignore execa@3.4.0
  • @SocketSecurity ignore execa@4.1.0
  • @SocketSecurity ignore execa@5.1.1
  • @SocketSecurity ignore external-editor@3.1.0
  • @SocketSecurity ignore fb-watchman@2.0.2
  • @SocketSecurity ignore fork-ts-checker-webpack-plugin@6.5.2
  • @SocketSecurity ignore git-raw-commits@2.0.11
  • @SocketSecurity ignore gitlog@4.0.4
  • @SocketSecurity ignore husky@5.2.0
  • @SocketSecurity ignore jake@10.8.5
  • @SocketSecurity ignore jest-haste-map@25.5.1
  • @SocketSecurity ignore jest-haste-map@29.3.1
  • @SocketSecurity ignore jest-worker@24.9.0
  • @SocketSecurity ignore jest-worker@25.5.0
  • @SocketSecurity ignore jest-worker@26.6.2
  • @SocketSecurity ignore jest-worker@27.5.1
  • @SocketSecurity ignore jest-worker@29.3.1
  • @SocketSecurity ignore jscodeshift@0.13.1
  • @SocketSecurity ignore jsdom@15.2.1
  • @SocketSecurity ignore jsdom@16.7.0
  • @SocketSecurity ignore node-notifier@6.0.0
  • @SocketSecurity ignore open@7.4.2
  • @SocketSecurity ignore open@8.4.0
  • @SocketSecurity ignore opener@1.5.2
📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
core-js@3.26.1 (upgraded) postinstall example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/components@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, @storybook/testing-library@0.0.14-next.0, react-scripts@5.0.1, storybook@7.0.0-alpha.62
core-js-pure@3.26.1 (upgraded) postinstall package.json via tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
esbuild@0.14.54 (added) postinstall example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.17.14 (added) postinstall package.json via @storybook/react@7.0.0-rc.10
😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
semver@7.3.8 (upgraded) semver package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, @size-limit/preset-small-lib@4.12.0, auto@10.37.6, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
@storybook/cli@7.0.0-alpha.62 (added) sb example/package.json via storybook@7.0.0-alpha.62
storybook@7.0.0-alpha.62 (added) sb example/package.json
jest@25.5.4 (upgraded) jest package.json via tsdx@0.14.1
jest@27.5.1 (upgraded) jest example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
jest-cli@25.5.4 (upgraded) jest package.json via tsdx@0.14.1
jest-cli@27.5.1 (upgraded) jest example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
detect-port@1.5.1 (upgraded) detect-port example/package.json via storybook@7.0.0-alpha.62
detect-port-alt@1.1.6 (added) detect-port example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
detect-port@1.5.1 (upgraded) detect example/package.json via storybook@7.0.0-alpha.62
detect-port-alt@1.1.6 (added) detect example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto-make-changelog.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-current-branch.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-remote.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/release.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/auto.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/release.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/load-plugin.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/verify-auth.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/exec-promise.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/get-current-branch.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/load-plugins.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/verify-auth.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/npm@10.37.6 (upgraded) child_process dist/index.js package.json via auto@10.37.6
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-linux.js example/package.json via storybook@7.0.0-alpha.62
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows.js example/package.json via storybook@7.0.0-alpha.62
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows10.js example/package.json via storybook@7.0.0-alpha.62
@storybook/cli@7.0.0-alpha.62 (added) child_process dist/generate.js example/package.json via storybook@7.0.0-alpha.62
@storybook/telemetry@7.0.0-alpha.62 (added) child_process dist/index.js example/package.json via storybook@7.0.0-alpha.62
@storybook/telemetry@7.0.0-alpha.62 (added) child_process dist/index.mjs example/package.json via storybook@7.0.0-alpha.62
address@1.2.1 (upgraded) child_process lib/address.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
babel-plugin-istanbul@6.1.1 (upgraded) child_process lib/index.js package.json via tsdx@0.14.1, example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
better-opn@2.1.1 (added) child_process dist/index.js example/package.json via storybook@7.0.0-alpha.62
buffer@4.9.2 (added) child_process bin/download-node-tests.js package.json via @size-limit/preset-small-lib@4.12.0
buffer@4.9.2 (added) child_process bin/test.js package.json via @size-limit/preset-small-lib@4.12.0
commander@2.20.3 (upgraded) child_process index.js package.json via @size-limit/preset-small-lib@4.12.0, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
commander@7.2.0 (upgraded) child_process index.js package.json via @size-limit/preset-small-lib@4.12.0, example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
cross-spawn@7.0.3 (upgraded) child_process index.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1, storybook@7.0.0-alpha.62
envinfo@7.8.1 (added) child_process dist/envinfo.js example/package.json via storybook@7.0.0-alpha.62
esbuild@0.14.54 (added) child_process install.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.14.54 (added) child_process lib/main.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.17.14 (added) child_process install.js package.json via @storybook/react@7.0.0-rc.10
esbuild@0.17.14 (added) child_process lib/main.js package.json via @storybook/react@7.0.0-rc.10
exec-sh@0.3.6 (upgraded) child_process lib/exec-sh.js package.json via tsdx@0.14.1
exec-sh@0.3.6 (upgraded) child_process test/exec-sh.js package.json via tsdx@0.14.1
execa@3.4.0 (added) child_process index.js package.json via tsdx@0.14.1
execa@4.1.0 (added) child_process index.js package.json via tsdx@0.14.1
execa@5.1.1 (added) child_process index.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1, storybook@7.0.0-alpha.62
external-editor@3.1.0 (added) child_process main/index.js package.json via tsdx@0.14.1
fb-watchman@2.0.2 (upgraded) child_process index.js package.json via tsdx@0.14.1, example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
fork-ts-checker-webpack-plugin@6.5.2 (upgraded) child_process lib/rpc/rpc-ipc/RpcIpcMessagePort.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
git-raw-commits@2.0.11 (upgraded) child_process index.js package.json via @auto-it/conventional-commits@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.development.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.production.min.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.esm.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
husky@5.2.0 (added) child_process lib/commands/install.js package.json
husky@5.2.0 (added) child_process lib/commands/uninstall.js package.json
jake@10.8.5 (added) child_process jake-v10.8.5/jakefile.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/package_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/publish_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/utils/index.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/concurrent.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/helpers.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/publish_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/rule.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/selfdep.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jest-haste-map@25.5.1 (upgraded) child_process build/crawlers/node.js package.json via tsdx@0.14.1
jest-haste-map@25.5.1 (upgraded) child_process build/index.js package.json via tsdx@0.14.1
jest-haste-map@29.3.1 (upgraded) child_process build/crawlers/node.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jest-haste-map@29.3.1 (upgraded) child_process build/lib/isWatchmanInstalled.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jest-worker@24.9.0 (added) child_process build/types.js package.json via tsdx@0.14.1
jest-worker@24.9.0 (added) child_process build/workers/ChildProcessWorker.js package.json via tsdx@0.14.1
jest-worker@25.5.0 (added) child_process build/workers/ChildProcessWorker.js package.json via tsdx@0.14.1
jest-worker@26.6.2 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
jest-worker@27.5.1 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
jest-worker@29.3.1 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jscodeshift@0.13.1 (added) child_process dist/Runner.js example/package.json via storybook@7.0.0-alpha.62
[jscodeshift@0.13.1](https://socket.dev/npm/pack

Copy link
Member

@shilman shilman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@shilman shilman merged commit 724b3ac into next Apr 3, 2023
@shilman shilman deleted the kasper/update-csf branch April 3, 2023 07:50
@github-actions
Copy link

github-actions bot commented Apr 3, 2023

🚀 PR was released in v2.0.0 🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
patch Increment the patch version when merged released
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants