Skip to content
This repository has been archived by the owner on Feb 23, 2024. It is now read-only.

Add Storybook 8.0 support #84

Merged
merged 7 commits into from
Jan 25, 2024
Merged

Conversation

valentinpalkovic
Copy link
Contributor

@valentinpalkovic valentinpalkovic commented Jan 24, 2024

Closes storybookjs/storybook#25721

📦 Published PR as canary version: 2.0.0--canary.84.047c2ec.0

✨ Test out this PR locally via:

npm install @storybook/[email protected]
# or 
yarn add @storybook/[email protected]

Version

Published prerelease version: v2.0.0-next.0

Changelog

💥 Breaking Change

  • Add Storybook 8.0 support #84 (valentin@MrRobot)

Authors: 1

Copy link

socket-security bot commented Jan 24, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@radix-ui/[email protected] Transitive: environment +37 7.74 MB benoitgrelard
npm/@storybook/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +318 47.9 MB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem +56 16.1 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] Transitive: environment +7 1.09 MB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +262 39.3 MB alexandrebodin, amalik2, dandean, ...26 more
npm/@storybook/[email protected] Transitive: environment, eval +21 893 kB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem +59 14.4 MB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] None +1 111 kB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem +52 8.82 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] None 0 2.29 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] None 0 334 kB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +362 76.6 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +259 61.2 MB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +255 22.6 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@storybook/[email protected] Transitive: environment +10 5.76 MB hypnosphi, igor-dv, jreinhold, ...5 more
npm/@storybook/[email protected] Transitive: environment, eval, filesystem +39 2.41 MB alexandrebodin, amalik2, dandean, ...23 more
npm/@types/[email protected] None +4 1.66 MB types
npm/@types/[email protected] None +3 1.63 MB types
npm/@vitejs/[email protected] Transitive: environment, filesystem, network, shell, unsafe +67 17.1 MB vitebot
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +222 52.6 MB alisowski
npm/[email protected] None 0 4.3 MB andrewortwein, cdedreuille, codykaup, ...9 more
npm/[email protected] None 0 13.9 kB joshuakgoldberg
npm/[email protected] Transitive: environment +6 7.32 MB adaam2, ankon, anthonyec, ...34 more
npm/[email protected] environment, filesystem, shell Transitive: network +13 484 kB remy
npm/[email protected] environment, filesystem, unsafe 0 8.38 MB prettier-bot
npm/[email protected] environment +4 4.93 MB gnoff
npm/[email protected] environment Transitive: network +28 10.7 MB gilbarbara
npm/[email protected] environment +2 337 kB gnoff
npm/[email protected] environment, filesystem Transitive: shell +33 3.21 MB isaacs
npm/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +586 69.8 MB ndelangen, shilman, usulpro
npm/[email protected] environment, eval, filesystem Transitive: network, shell, unsafe +100 41.8 MB egoist
npm/[email protected] None 0 32 MB typescript-bot
npm/[email protected] Transitive: environment, filesystem, network, shell +6 6.04 MB antfu, patak, soda, ...2 more

🚮 Removed packages: npm/@radix-ui/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@vitejs/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

socket-security bot commented Jan 24, 2024

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
New author npm/[email protected]
New author npm/[email protected]
Shell access npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]

View full report↗︎

Next steps

What is new author?

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

What is shell access?

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@valentinpalkovic valentinpalkovic added the major Increment the major version when merged label Jan 24, 2024
tsup.config.ts Outdated
configs.push({
...commonConfig,
entry: nodeEntries,
format: ['cjs'],
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

you might want to run prettier/format on this file

@valentinpalkovic valentinpalkovic merged commit 245bbce into next Jan 25, 2024
6 of 7 checks passed
@valentinpalkovic valentinpalkovic deleted the valentin/add-sb-8-support branch January 25, 2024 12:08
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
major Increment the major version when merged
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants