Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2023

Bumps @storybook/addon-docs from 6.5.16 to 7.0.7.

Release notes

Sourced from @​storybook/addon-docs's releases.

v7.0.7

Bug Fixes

  • Core: Pass parameters in SET_INDEX for docs entries #22154
  • Addon-actions: Fix ESM by upgrading from uuid-browser to uuid #22037
  • Addon-actions: Fix decorator type #22175
  • Core: Add new tags to distinguish docs attachment #22120
  • Core: Restore Docs useParameter using DOCS_PREPARED #22118

Maintenance

  • CSF: Improve error message for bad default export #22190
  • CLI: Add addon query-params to list of SB7 incompatible addons #22095
  • UI: Add remount story shortcut #21401

Build

  • Build: Fix lit sandboxes #22201
  • Build: Fix sandbox publish script #22206

v7.0.6

Bug Fixes

  • Core: Fix module guard in non-webpack environments #22085

Maintenance

  • CLI: Mark qwik as using addon-interactions #22000

Build

  • Build: Upgrade Playwright to 1.32.3 #22087

v7.0.5

Bug Fixes

  • Docs: Fix source snippets when parameters.docs.source.type = 'code' #22048
  • CLI: Mention how to setup a monorepo manually in babelrc automigration #22052
  • UI: Fix upgrade command in about page #22056
  • CLI: Fix CLI sandbox command #21977

v7.0.4

Storybook 7.0 is here! 🎉

... (truncated)

Commits
  • c2bbe43 stage0
  • b6b6cf1 fix(addon-docs): pass remark plugins to mdx loader
  • e925226 Merge pull request #18708 from storybookjs/tom/sb-453-dependencies-ensure-rea...
  • 3ff9b31 Rename parameters to docsParameter as per suggestion
  • 107afab Fix TS type error
  • 950ded8 Update MDX stories to use MDXProvider
  • 59a2892 Export DocsRenderer from addon-docs
  • d98b616 Move MDX dependency from blocks and cleanup theme
  • e21f96e Move DocsRenderer back to addon-docs
  • ae12b62 Update mdx1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from aleksaToljic as a code owner May 1, 2023 12:16
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 1, 2023
@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore esbuild@0.17.18

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
esbuild@0.17.18 (added) postinstall package.json via @storybook/addon-docs@7.0.7
Pull request alert summary
Issue Status
Install scripts ⚠️ 1 issue
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

➕ Added Package Capability Access +/- Transitive Count Publisher
@storybook/addon-docs@7.0.7 network, filesystem +100 shilman

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependabot_develop/storybook/addon-docs-7.0.7 branch from e9ec0c1 to 10e62d7 Compare May 1, 2023 12:22
Bumps [@storybook/addon-docs](https://github.com/storybookjs/storybook/tree/HEAD/addons/docs) from 6.5.16 to 7.0.7.
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Commits](https://github.com/storybookjs/storybook/commits/v7.0.7/addons/docs)

---
updated-dependencies:
- dependency-name: "@storybook/addon-docs"
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/dependabot_develop/storybook/addon-docs-7.0.7 branch from 10e62d7 to b78dd9c Compare May 1, 2023 12:24
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 1, 2023

Superseded by #436.

@dependabot dependabot bot closed this Jun 1, 2023
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/dependabot_develop/storybook/addon-docs-7.0.7 branch June 1, 2023 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants