chore(deps): bump trim, @storybook/addon-essentials, @storybook/builder-vite, @storybook/react and @storybook/test-runner #293
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
the
dependencies
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/trim-and-storybook/addon-essentials-and-storybook/builder-vite-and-storybook/react-and-storybook/test-runner--removed
branch
from
f94987c
to
40f670a
Compare
|
@dependabot recreate |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/trim-and-storybook/addon-essentials-and-storybook/builder-vite-and-storybook/react-and-storybook/test-runner--removed
branch
from
40f670a
to
a5e90e7
Compare
|
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected], npm/@storybook/[email protected] |
|
@dependabot rebase |
…er-vite, @storybook/react and @storybook/test-runner Removes [trim](https://github.com/Trott/trim). It's no longer used after updating ancestor dependencies [trim](https://github.com/Trott/trim), [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/addons/essentials), [@storybook/builder-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/builder-vite), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/renderers/react) and [@storybook/test-runner](https://github.com/storybookjs/test-runner). These dependencies need to be updated together. Removes `trim` Updates `@storybook/addon-essentials` from 6.5.14 to 7.0.4 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Commits](https://github.com/storybookjs/storybook/commits/v7.0.4/addons/essentials) Updates `@storybook/builder-vite` from 0.2.5 to 7.0.4 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.v1-5.md) - [Commits](https://github.com/storybookjs/storybook/commits/v7.0.4/code/lib/builder-vite) Updates `@storybook/react` from 6.5.14 to 7.0.4 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Commits](https://github.com/storybookjs/storybook/commits/v7.0.4/renderers/react) Updates `@storybook/test-runner` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/storybookjs/test-runner/releases) - [Changelog](https://github.com/storybookjs/test-runner/blob/future/CHANGELOG.md) - [Commits](storybookjs/test-runner@v0.9.1...v0.10.0) --- updated-dependencies: - dependency-name: trim dependency-type: indirect - dependency-name: "@storybook/addon-essentials" dependency-type: direct:development - dependency-name: "@storybook/builder-vite" dependency-type: direct:development - dependency-name: "@storybook/react" dependency-type: direct:development - dependency-name: "@storybook/test-runner" dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/trim-and-storybook/addon-essentials-and-storybook/builder-vite-and-storybook/react-and-storybook/test-runner--removed
branch
from
a5e90e7
to
b102d2d
Compare
Removes trim. It's no longer used after updating ancestor dependencies trim, @storybook/addon-essentials, @storybook/builder-vite, @storybook/react and @storybook/test-runner. These dependencies need to be updated together.
Removes
trimUpdates
@storybook/addon-essentialsfrom 6.5.14 to 7.0.4Release notes
Sourced from
@storybook/addon-essentials's releases.... (truncated)
Commits
c2bbe43stage0ba3aa9eUpdate git head to 7.0.0-alpha.13, update yarn.lock9ac4d2ev7.0.0-alpha.1392eb893Update git head to 7.0.0-alpha.12, update yarn.lock5070effv7.0.0-alpha.120bcc17bUpdate git head to 7.0.0-alpha.11, update yarn.lock688d338v7.0.0-alpha.11a5c35e1improvements to setup17801dfUpdate git head to 7.0.0-alpha.10, update yarn.lockb13dd8fv7.0.0-alpha.10Updates
@storybook/builder-vitefrom 0.2.5 to 7.0.4Release notes
Sourced from
@storybook/builder-vite's releases.... (truncated)
Changelog
Sourced from
@storybook/builder-vite's changelog.... (truncated)
Commits
Updates
@storybook/reactfrom 6.5.14 to 7.0.4Release notes
Sourced from
@storybook/react's releases.... (truncated)
Commits
c2bbe43stage0057c401Merge branch 'future/base' into future/drop-emotion-10-typese21f96eMoveDocsRendererback toaddon-docsba3aa9eUpdate git head to 7.0.0-alpha.13, update yarn.lock9ac4d2ev7.0.0-alpha.1392eb893Update git head to 7.0.0-alpha.12, update yarn.lock5070effv7.0.0-alpha.120bcc17bUpdate git head to 7.0.0-alpha.11, update yarn.lock688d338v7.0.0-alpha.11590cc50cleanupUpdates
@storybook/test-runnerfrom 0.9.1 to 0.10.0Release notes
Sourced from
@storybook/test-runner's releases.... (truncated)
Changelog
Sourced from
@storybook/test-runner's changelog.... (truncated)
Commits
638623fBump version to: 0.10.0 [skip ci]5d81f7aUpdate CHANGELOG.md [skip ci]05edda6Merge pull request #289 from storybookjs/nexte4fe17bfix version in support table [skip ci]15afffcadd version support table666d70cMerge branch 'main' into next [skip ci]141978dMerge pull request #288 from storybookjs/kasper/update-csf1b073f4Bump@storybook/csfto 0.1.0519c438Merge pull request #283 from storybookjs/feat/prepare-for-sb72ff4518support Storybook 7.0.0You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.