Skip to content
This repository has been archived by the owner on Jan 31, 2024. It is now read-only.

Support 7.0.0 #140

Merged
merged 24 commits into from
Apr 3, 2023
Merged

Support 7.0.0 #140

merged 24 commits into from
Apr 3, 2023

Conversation

yannbf
Copy link
Member

@yannbf yannbf commented Apr 3, 2023

What Changed

Storybook 7.0.0 is out 🎉

Release Notes

Storybook 7.0.0 is out! This release will make @storybook/testing-react compatible with Storybook 7, though I highly recommend not to use this package anymore!.

@storybook/testing-react has been promoted to a first-class Storybook functionality in Storybook 7. This means that you no longer need this package. Instead, you can import the same utilities, but from the @storybook/react package. Additionally, the internals of composeStories and composeStory have been revamped, so the way a story is composed is more accurate. The @storybook/testing-react package will be deprecated, so we recommend you to migrate.

Please do the following:

  1. Uninstall this package
  2. Update your imports
- import { composeStories } from '@storybook/testing-react';
+ import { composeStories } from '@storybook/react';

// OR
- import { setProjectAnnotations } from '@storybook/testing-react';
+ import { setProjectAnnotations } from '@storybook/react';

Thank you so much for being with me on this journey! ✌️

@yannbf yannbf added the major Increment the major version when merged label Apr 3, 2023
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore core-js@3.26.1
  • @SocketSecurity ignore core-js-pure@3.26.1
  • @SocketSecurity ignore esbuild@0.14.54
  • @SocketSecurity ignore esbuild@0.17.14
  • @SocketSecurity ignore semver@7.3.8
  • @SocketSecurity ignore @storybook/cli@7.0.0-alpha.62
  • @SocketSecurity ignore storybook@7.0.0-alpha.62
  • @SocketSecurity ignore jest@25.5.4
  • @SocketSecurity ignore jest@27.5.1
  • @SocketSecurity ignore jest-cli@25.5.4
  • @SocketSecurity ignore jest-cli@27.5.1
  • @SocketSecurity ignore detect-port@1.5.1
  • @SocketSecurity ignore detect-port-alt@1.1.6
  • @SocketSecurity ignore @auto-it/core@10.37.6
  • @SocketSecurity ignore @auto-it/npm@10.37.6
  • @SocketSecurity ignore @aw-web-design/x-default-browser@1.4.88
  • @SocketSecurity ignore @storybook/telemetry@7.0.0-alpha.62
  • @SocketSecurity ignore address@1.2.1
  • @SocketSecurity ignore babel-plugin-istanbul@6.1.1
  • @SocketSecurity ignore better-opn@2.1.1
  • @SocketSecurity ignore buffer@4.9.2
  • @SocketSecurity ignore commander@2.20.3
  • @SocketSecurity ignore commander@7.2.0
  • @SocketSecurity ignore cross-spawn@7.0.3
  • @SocketSecurity ignore envinfo@7.8.1
  • @SocketSecurity ignore exec-sh@0.3.6
  • @SocketSecurity ignore execa@3.4.0
  • @SocketSecurity ignore execa@4.1.0
  • @SocketSecurity ignore execa@5.1.1
  • @SocketSecurity ignore external-editor@3.1.0
  • @SocketSecurity ignore fb-watchman@2.0.2
  • @SocketSecurity ignore fork-ts-checker-webpack-plugin@6.5.2
  • @SocketSecurity ignore git-raw-commits@2.0.11
  • @SocketSecurity ignore gitlog@4.0.4
  • @SocketSecurity ignore husky@5.2.0
  • @SocketSecurity ignore jake@10.8.5
  • @SocketSecurity ignore jest-haste-map@25.5.1
  • @SocketSecurity ignore jest-haste-map@29.3.1
  • @SocketSecurity ignore jest-worker@24.9.0
  • @SocketSecurity ignore jest-worker@25.5.0
  • @SocketSecurity ignore jest-worker@26.6.2
  • @SocketSecurity ignore jest-worker@27.5.1
  • @SocketSecurity ignore jest-worker@29.3.1
  • @SocketSecurity ignore jscodeshift@0.13.1
  • @SocketSecurity ignore jsdom@15.2.1
  • @SocketSecurity ignore jsdom@16.7.0
  • @SocketSecurity ignore node-notifier@6.0.0
  • @SocketSecurity ignore open@7.4.2
  • @SocketSecurity ignore open@8.4.0
  • @SocketSecurity ignore opener@1.5.2
📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
core-js@3.26.1 (upgraded) postinstall example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/components@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, @storybook/testing-library@0.0.14-next.0, react-scripts@5.0.1, storybook@7.0.0-alpha.62
core-js-pure@3.26.1 (upgraded) postinstall package.json via tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
esbuild@0.14.54 (added) postinstall example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.17.14 (added) postinstall package.json via @storybook/react@7.0.0-rc.10
😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
semver@7.3.8 (upgraded) semver package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, @size-limit/preset-small-lib@4.12.0, auto@10.37.6, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
@storybook/cli@7.0.0-alpha.62 (added) sb example/package.json via storybook@7.0.0-alpha.62
storybook@7.0.0-alpha.62 (added) sb example/package.json
jest@25.5.4 (upgraded) jest package.json via tsdx@0.14.1
jest@27.5.1 (upgraded) jest example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
jest-cli@25.5.4 (upgraded) jest package.json via tsdx@0.14.1
jest-cli@27.5.1 (upgraded) jest example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
detect-port@1.5.1 (upgraded) detect-port example/package.json via storybook@7.0.0-alpha.62
detect-port-alt@1.1.6 (added) detect-port example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
detect-port@1.5.1 (upgraded) detect example/package.json via storybook@7.0.0-alpha.62
detect-port-alt@1.1.6 (added) detect example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto-make-changelog.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/auto.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-current-branch.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/get-remote.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/tests/release.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/auto.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/release.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/load-plugin.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/tests/verify-auth.test.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/exec-promise.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/get-current-branch.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/load-plugins.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/core@10.37.6 (upgraded) child_process dist/utils/verify-auth.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
@auto-it/npm@10.37.6 (upgraded) child_process dist/index.js package.json via auto@10.37.6
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-linux.js example/package.json via storybook@7.0.0-alpha.62
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows.js example/package.json via storybook@7.0.0-alpha.62
@aw-web-design/x-default-browser@1.4.88 (added) child_process src/detect-windows10.js example/package.json via storybook@7.0.0-alpha.62
@storybook/cli@7.0.0-alpha.62 (added) child_process dist/generate.js example/package.json via storybook@7.0.0-alpha.62
@storybook/telemetry@7.0.0-alpha.62 (added) child_process dist/index.js example/package.json via storybook@7.0.0-alpha.62
@storybook/telemetry@7.0.0-alpha.62 (added) child_process dist/index.mjs example/package.json via storybook@7.0.0-alpha.62
address@1.2.1 (upgraded) child_process lib/address.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
babel-plugin-istanbul@6.1.1 (upgraded) child_process lib/index.js package.json via tsdx@0.14.1, example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
better-opn@2.1.1 (added) child_process dist/index.js example/package.json via storybook@7.0.0-alpha.62
buffer@4.9.2 (added) child_process bin/download-node-tests.js package.json via @size-limit/preset-small-lib@4.12.0
buffer@4.9.2 (added) child_process bin/test.js package.json via @size-limit/preset-small-lib@4.12.0
commander@2.20.3 (upgraded) child_process index.js package.json via @size-limit/preset-small-lib@4.12.0, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
commander@7.2.0 (upgraded) child_process index.js package.json via @size-limit/preset-small-lib@4.12.0, example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
cross-spawn@7.0.3 (upgraded) child_process index.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6, tsdx@0.14.1, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1, storybook@7.0.0-alpha.62
envinfo@7.8.1 (added) child_process dist/envinfo.js example/package.json via storybook@7.0.0-alpha.62
esbuild@0.14.54 (added) child_process install.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.14.54 (added) child_process lib/main.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/addon-interactions@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, @storybook/react@7.0.0, @storybook/react-webpack5@7.0.0-alpha.62, storybook@7.0.0-alpha.62
esbuild@0.17.14 (added) child_process install.js package.json via @storybook/react@7.0.0-rc.10
esbuild@0.17.14 (added) child_process lib/main.js package.json via @storybook/react@7.0.0-rc.10
exec-sh@0.3.6 (upgraded) child_process lib/exec-sh.js package.json via tsdx@0.14.1
exec-sh@0.3.6 (upgraded) child_process test/exec-sh.js package.json via tsdx@0.14.1
execa@3.4.0 (added) child_process index.js package.json via tsdx@0.14.1
execa@4.1.0 (added) child_process index.js package.json via tsdx@0.14.1
execa@5.1.1 (added) child_process index.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6, example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1, storybook@7.0.0-alpha.62
external-editor@3.1.0 (added) child_process main/index.js package.json via tsdx@0.14.1
fb-watchman@2.0.2 (upgraded) child_process index.js package.json via tsdx@0.14.1, example/package.json via @storybook/addon-essentials@7.0.0-alpha.62, @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
fork-ts-checker-webpack-plugin@6.5.2 (upgraded) child_process lib/rpc/rpc-ipc/RpcIpcMessagePort.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
git-raw-commits@2.0.11 (upgraded) child_process index.js package.json via @auto-it/conventional-commits@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.development.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.cjs.production.min.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
gitlog@4.0.4 (added) child_process dist/gitlog.esm.js package.json via @auto-it/conventional-commits@10.37.6, @auto-it/first-time-contributor@10.37.6, @auto-it/released@10.37.6, auto@10.37.6
husky@5.2.0 (added) child_process lib/commands/install.js package.json
husky@5.2.0 (added) child_process lib/commands/uninstall.js package.json
jake@10.8.5 (added) child_process jake-v10.8.5/jakefile.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/package_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/publish_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/lib/utils/index.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/concurrent.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/file.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/helpers.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/publish_task.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/rule.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/selfdep.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jake@10.8.5 (added) child_process jake-v10.8.5/test/integration/task_base.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1, storybook@7.0.0-alpha.62
jest-haste-map@25.5.1 (upgraded) child_process build/crawlers/node.js package.json via tsdx@0.14.1
jest-haste-map@25.5.1 (upgraded) child_process build/index.js package.json via tsdx@0.14.1
jest-haste-map@29.3.1 (upgraded) child_process build/crawlers/node.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jest-haste-map@29.3.1 (upgraded) child_process build/lib/isWatchmanInstalled.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jest-worker@24.9.0 (added) child_process build/types.js package.json via tsdx@0.14.1
jest-worker@24.9.0 (added) child_process build/workers/ChildProcessWorker.js package.json via tsdx@0.14.1
jest-worker@25.5.0 (added) child_process build/workers/ChildProcessWorker.js package.json via tsdx@0.14.1
jest-worker@26.6.2 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/preset-create-react-app@4.1.2, react-scripts@5.0.1
jest-worker@27.5.1 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/preset-create-react-app@4.1.2, @storybook/react-webpack5@7.0.0-alpha.62, react-scripts@5.0.1
jest-worker@29.3.1 (added) child_process build/workers/ChildProcessWorker.js example/package.json via @storybook/addon-essentials@7.0.0-alpha.62
jscodeshift@0.13.1 (added) child_process dist/Runner.js example/package.json via storybook@7.0.0-alpha.62
[jscodeshift@0.13.1](https://socket.dev/npm/pack

@yannbf yannbf merged commit 5e53625 into main Apr 3, 2023
@yannbf yannbf deleted the next branch April 3, 2023 11:40
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
major Increment the major version when merged
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants