Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release 1.0.0 #39

Merged
merged 63 commits into from
Apr 3, 2023
Merged

Release 1.0.0 #39

merged 63 commits into from
Apr 3, 2023

Conversation

shilman
Copy link
Member

@shilman shilman commented Apr 3, 2023 •
edited by github-actions bot
Loading

Issue: N/A

What Changed

New release for SB 7.0

Version

Published prerelease version: v1.0.0-next.8

Changelog

💥 Breaking Change

  • Add JSX transpilation to compiler-generated code #30 (@ndelangen)

🚀 Enhancement

🐛 Bug Fix

⚠️ Pushed to next

Authors: 10

tmeasday and others added 30 commits July 14, 2022 15:57
@tmeasday
Remove uses of AddContext
04ffbe8
@zhyd1997
feat: used getMdxSource fn.
cf3d3e6
@zhyd1997
fix: ommited 'Canvas' tag in 'mdxSource'.
1ddf4f9
@zhyd1997
fix: handled multiple 'Canvas' elements.
c9c1eb0
@zhyd1997
refactor: removed unneccessary variable 'canvasEle'.
0b74cab 
+ added 'child' type guard.
+ added readable comments.
+ renamed 'ele' to 'canvasContainer' (sematic purpose).
@zhyd1997
refactor: replaced forEach-if with filter-map statements (more readab…
1a738ca 
…ility).
@zhyd1997
refactor: split process into smaller fns.
873c587
@zhyd1997
test: mdxSource.
98e938f
@zhyd1997
test: addMdxSourceAttribute.
484c8f6
@zhyd1997
test: updated snapshot.
f5d297b
@ndom91
fix: add debug output to loader.js
7ce92ca 
Was almost impossible to debug where the loader errors were coming from when upgrading storybook with mdx2, until I monkey patched it with this change.
@bryanjtc
chore: Moved @babel/types to dependencies
9dfc216
@shilman
Merge pull request #14 from storybookjs/7.0-remove-addContext
3e908ff 
Remove uses of `AddContext`
@shilman
Merge pull request #19 from bryanjtc/dependency-fix
6fe4b17 
chore: Moved @babel/types to dependencies
@IanVS
Use _jsx function instead of JSX syntax
7363edd
@IanVS
Update snapshot
b3f2a2f
@shilman
Remove generated JSX entirely
5648a54
@shilman
Merge pull request #20 from storybookjs/use-jsx-runtime
d3d6bf3 
Remove JSX from compiler output
@shilman
Add mdx tag for SB7 support
d64a8c0
@shilman
Merge pull request #22 from storybookjs/shilman/add-mdx-tag
706a0bb 
Add mdx tag for SB7 support
@shilman
Prebundle with tsup
2fe1578
@shilman
Clean up package structure
5394b4c
@shilman
Merge pull request #23 from storybookjs/shilman/convert-to-tsup
8412113 
Prebundle with tsup
@shilman
Merge branch 'next' into pr/16
29e4d39
@shilman
Upgrade example to SB7
53955e7
@shilman
Upgrade example to SB7
6a85a5c
@shilman
Merge pull request #24 from storybookjs/shilman/upgrade-to-sb7
27799e1 
Upgrade example to SB7
@shilman
Fix canvas mdxSource generation and add tests
3b5b158
@shilman
Merge branch 'next' into shilman/18342-fix-canvas-source
2de60c7
@shilman
Update tests & lockfile
7adf785
shilman and others added 28 commits November 30, 2022 00:48
@shilman
Delete default renderer
61fd4a6
@shilman
Add GFM example to test storybook
40bfda0
@shilman
Update docs for mdxCompileOptions
6b5fc58
@shilman
Revert react removal
b47ca0a
@shilman
Merge pull request #27 from storybookjs/shilman/accept-mdx-compiler-o…
92b30ff 
…ptions

Add MDX compiler option overrides
@joshwooding
Export CompileOptions
4b5f9fe
@shilman
Merge pull request #28 from storybookjs/export-compile-options
7ccaa62 
Export CompileOptions
@ndelangen
refactor to transpile JSX at the end of the process, ensuring a singl…
c978d7f 
…e JSX runtime.

default jsxRuntime = 'automatic'
@shilman
Merge pull request #30 from storybookjs/norbert/sb-1086-sb20190-bug-v…
30274fb 
…ite4-support-missing-v2

Add JSX transpilation to compiler-generated code
@shilman
JSX: Ignore the user's babel config
7cd0a68
@shilman
Update snapshots - now ESM!
46da497
@shilman
Merge pull request #31 from storybookjs/shilman/fix-babel-config
7c3390b 
JSX: Ignore the user's babel config
@IanVS
Only support webpack 5
accefaa
@IanVS
Export option types
503384f
@IanVS
Remove loader-utils
e03c3aa
@shilman
Merge pull request #32 from storybookjs/cleanup
32d5c6e
@tmeasday
Replace 'mdx' tag with 'stories-mdx'
ab2d92c
@shilman
Merge pull request #33 from storybookjs/mdx-to-stories-mdx
a19f4e1 
Replace `'mdx'` tag with `'stories-mdx'`
@joshwooding
Fix type exports
87960b9
@ndelangen
Merge pull request #34 from storybookjs/fix-type-exports
2d6be80 
Fix type exports
@shilman
Merge pull request #17 from ndom91/patch-1
63e7b1d 
Add debug output to `loader.js`
@JReinhold
Throw descriptive error when of prop is detected
4028385
@JReinhold
add unit tests
6aef72a
@shilman
Merge pull request #37 from storybookjs/error-of-prop
051f37c 
Throw descriptive error when of prop is detected
@shilman
Upgrade to v7
1543b5e
@shilman
Update workflows
8dab49f
@shilman
Merge pull request #38 from storybookjs/shilman/upgrade-to-v7
f241141 
Upgrade to SB7.0
@shilman
Merge branch 'main' into next
5f27b30
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
[email protected] (added) postinstall package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
[email protected] (added) semver package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package Module Location Source
@aw-web-design/[email protected] (added) child_process src/detect-linux.js package.json via [email protected]
@aw-web-design/[email protected] (added) child_process src/detect-windows.js package.json via [email protected]
@aw-web-design/[email protected] (added) child_process src/detect-windows10.js package.json via [email protected]
[email protected] (upgraded) child_process lib/index.js package.json via @storybook/[email protected], [email protected], [email protected], [email protected]
[email protected] (upgraded) child_process index.js package.json via @storybook/[email protected], [email protected]
[email protected] (upgraded) child_process index.js package.json via @storybook/[email protected], [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) child_process dist/envinfo.js package.json via [email protected]
[email protected] (added) child_process install.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added) child_process lib/main.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (upgraded) child_process index.js package.json via [email protected]
[email protected] (upgraded) child_process index.js package.json via [email protected], [email protected], [email protected], [email protected], [email protected]
[email protected] (added) child_process dist/gitlog.cjs.development.js package.json via [email protected]
[email protected] (added) child_process dist/gitlog.cjs.production.min.js package.json via [email protected]
[email protected] (added) child_process dist/gitlog.esm.js package.json via [email protected]
[email protected] (added) child_process lib/index.js package.json
[email protected] (added) child_process jake-v10.8.5/jakefile.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/package_task.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/publish_task.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/lib/utils/index.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/concurrent.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/file_task.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/file.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/helpers.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/jakelib/rule.jake.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/publish_task.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/rule.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/selfdep.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via [email protected]
[email protected] (added) child_process jake-v10.8.5/test/integration/task_base.js package.json via [email protected]
[email protected] (upgraded) child_process build/crawlers/node.js package.json via [email protected], [email protected], [email protected]
[email protected] (upgraded) child_process build/index.js package.json via [email protected], [email protected], [email protected]
[email protected] (upgraded) child_process build/crawlers/node.js package.json via @storybook/[email protected]
[email protected] (upgraded) child_process build/lib/isWatchmanInstalled.js package.json via @storybook/[email protected]
[email protected] (upgraded) child_process build/workers/ChildProcessWorker.js package.json via [email protected], [email protected], [email protected]
[email protected] (upgraded) child_process build/workers/ChildProcessWorker.js package.json via @storybook/[email protected], [email protected]
[email protected] (upgraded) child_process build/workers/ChildProcessWorker.js package.json via @storybook/[email protected]
[email protected] (added) child_process dist/Runner.js package.json via [email protected]
[email protected] (added) child_process src/Runner.js package.json via [email protected]
[email protected] (added) child_process lib/jsdom/living/xhr/XMLHttpRequest-impl.js package.json via [email protected], [email protected], [email protected]
[email protected] (added) child_process lib/resolvers.js package.json via [email protected]
[email protected] (added) child_process dist/shared/watch-cli.js package.json via [email protected]
[email protected] (added) child_process src/exec-child.js package.json via [email protected]
[email protected] (added) child_process src/exec.js package.json via [email protected]
[email protected] (added) child_process index.js package.json via [email protected], [email protected]
[email protected] (added) child_process check-npm-version.js package.json via @storybook/[email protected], [email protected]
[email protected] (added) child_process index.js package.json via @storybook/[email protected], [email protected]
[email protected] (upgraded) child_process bin/webpack.js package.json via @storybook/[email protected], [email protected]
⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package Eval Type Location Source
@sinclair/[email protected] (added) Function compiler/compiler.js package.json via @storybook/[email protected]
@sinclair/[email protected] (added) Function errors/errors.js package.json via @storybook/[email protected]
@sinclair/[email protected] (added) Function value/cast.js package.json via @storybook/[email protected]
@sinclair/[email protected] (added) Function value/check.js package.json via @storybook/[email protected]
@sinclair/[email protected] (added) Function value/create.js package.json via @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/formatter-UT3ZCDIS.mjs package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/formatter-UT3ZCDIS.mjs package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/cjs/index.js package.json via @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/esm/index.js package.json via @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/modern/index.js package.json via @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/chunk-NQZQ3SVL.mjs package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/index.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded) Function dist/utils.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.min.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.min.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.pure.umd.min.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.min.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.min.js package.json
@testing-library/[email protected] (added) Function dist/@testing-library/react.umd.min.js package.json
[email protected] (added) Function dist/ajv.bundle.js package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function lib/compile/index.js package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function dist/compile/index.js package.json via @storybook/[email protected]
[email protected] (added) Function dist/compile/jtd/parse.js package.json via @storybook/[email protected]
[email protected] (added) Function dist/compile/jtd/serialize.js package.json via @storybook/[email protected]
[email protected] (added) Function internals/async-iterator-prototype.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function internals/function-bind.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function internals/task.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function modules/web.timers.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (upgraded) Function index.js package.json via @storybook/[email protected], [email protected]
[email protected] (added) Function ejs-v3.1.8/ejs.js package.json via [email protected]
[email protected] (added) Function ejs-v3.1.8/ejs.js package.json via [email protected]
[email protected] (added) Function ejs-v3.1.8/ejs.min.js package.json via [email protected]
[email protected] (added) Function ejs-v3.1.8/ejs.min.js package.json via [email protected]
[email protected] (added) Function ejs-v3.1.8/lib/ejs.js package.json via [email protected]
[email protected] (added) Function ejs-v3.1.8/lib/ejs.js package.json via [email protected]
[email protected] (added) Function dist/envinfo.js package.json via [email protected]
[email protected] (added) Function dist/envinfo.js package.json via [email protected]
[email protected] (added) Function build/asymmetricMatchers.js package.json via [email protected], [email protected]
[email protected] (added) Function build/index.js package.json via [email protected], [email protected]
[email protected] (added) Function build/index.js package.json via [email protected], [email protected]
[email protected] (added) Function build/index.js package.json via [email protected], [email protected]
[email protected] (added) Function build/jestMatchersObject.js package.json via [email protected], [email protected]
[email protected] (added) Function build/utils.js package.json via [email protected], [email protected]
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/cjs/handlebars/compiler/javascript-compiler.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function dist/handlebars.amd.js package.json via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added) Function [dist/handlebars.amd.js](https://socket.dev/npm/package/handlebars/files/4.7.7/dist/handlebar

@shilman shilman merged commit 7a3b0d3 into main Apr 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
10 participants
@shilman @tmeasday @zhyd1997 @ndom91 @bryanjtc @IanVS @eirslett-visma @joshwooding @ndelangen @JReinhold