Chore: Upgrade to support Storybook 7.0 #8

senicar · 2023-03-23T06:32:46Z

Hi, this is my first time contributing to storybook addon code, so I would appreciate any guidance to improve this PR fix and to make it more inline with Storybook codestyle and principles.

This is a fix to make CSS Resources addon work on Storybook v7.0.

What have I done:

Installed next version of Storybook
Added React 18 to permitted peerDependencies
Added "Modern browser support" as described in https://github.com/storybookjs/storybook/blob/next/MIGRATION.md#modern-browser-support
Fixed undefined "document" error by updating import { document } from 'global';
Fixed implicit any eslint error for storyOptions

How I tested:

I have validated that it works with npm run storybook
I have created a local package to test it in a custom Storybook v7.0 build

What does not work:

Due to changes, addon does not work in Storybook 6 anymore

socket-security · 2023-03-23T06:34:50Z

Socket Security Pull Request Report

Dependency issues detected: If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
[email protected] (upgraded)	`postinstall`	`package.json` via @storybook/[email protected]
[email protected] (added)	`postinstall`	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]

😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package	Bin script	Source
@storybook/[email protected] (added)	`sb`	`package.json` via [email protected]
[email protected] (added)	`sb`	`package.json`

⚠️ Shell access

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

Package	Module	Location	Source
@auto-it/[email protected] (upgraded)	child_process	dist/tests/auto-make-changelog.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/tests/auto.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/tests/get-current-branch.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/tests/get-remote.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/tests/release.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/auto.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/release.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/tests/load-plugin.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/tests/verify-auth.test.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/exec-promise.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/get-current-branch.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/load-plugins.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/utils/verify-auth.js	`package.json` via [email protected]
@auto-it/[email protected] (upgraded)	child_process	dist/index.js	`package.json` via [email protected]
@aw-web-design/[email protected] (added)	child_process	src/detect-linux.js	`package.json` via [email protected]
@aw-web-design/[email protected] (added)	child_process	src/detect-windows.js	`package.json` via [email protected]
@aw-web-design/[email protected] (added)	child_process	src/detect-windows10.js	`package.json` via [email protected]
@storybook/[email protected] (added)	child_process	dist/generate.js	`package.json` via [email protected]
@storybook/[email protected] (added)	child_process	dist/index.js	`package.json` via [email protected]
@storybook/[email protected] (added)	child_process	dist/index.mjs	`package.json` via [email protected]
[email protected] (upgraded)	child_process	lib/address.js	`package.json` via [email protected]
[email protected] (added)	child_process	dist/index.js	`package.json` via [email protected]
[email protected] (added)	child_process	index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	child_process	index.js	`package.json` via @storybook/[email protected], [email protected], [email protected]
[email protected] (added)	child_process	dist/envinfo.js	`package.json` via [email protected]
[email protected] (added)	child_process	install.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	child_process	lib/main.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (upgraded)	child_process	index.js	`package.json` via [email protected], [email protected]
[email protected] (added)	child_process	dist/gitlog.cjs.development.js	`package.json` via [email protected]
[email protected] (added)	child_process	dist/gitlog.cjs.production.min.js	`package.json` via [email protected]
[email protected] (added)	child_process	dist/gitlog.esm.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/jakefile.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/lib/package_task.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/lib/publish_task.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/lib/utils/index.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/concurrent.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/file_task.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/file.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/helpers.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/jakelib/rule.jake.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/publish_task.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/rule.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/selfdep.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/task_base.js	`package.json` via [email protected]
[email protected] (added)	child_process	jake-v10.8.5/test/integration/task_base.js	`package.json` via [email protected]
[email protected] (upgraded)	child_process	build/workers/ChildProcessWorker.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	child_process	dist/Runner.js	`package.json` via [email protected]
[email protected] (added)	child_process	src/Runner.js	`package.json` via [email protected]
[email protected] (added)	child_process	index.js	`package.json` via [email protected]
[email protected] (added)	child_process	index.js	`package.json` via [email protected]
[email protected] (added)	child_process	lib/Launcher.js	`package.json` via [email protected]
[email protected] (added)	child_process	lib/resolvers.js	`package.json` via [email protected]
[email protected] (added)	child_process	src/exec-child.js	`package.json` via [email protected]
[email protected] (added)	child_process	src/exec.js	`package.json` via [email protected]
[email protected] (added)	child_process	index.js	`package.json` via [email protected]
[email protected] (added)	child_process	dist/child/spawn-child.js	`package.json` via [email protected]
[email protected] (upgraded)	child_process	lib/tsserver.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (upgraded)	child_process	lib/tsserver.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (upgraded)	child_process	lib/typingsInstaller.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	child_process	check-npm-version.js	`package.json` via @babel/[email protected], @babel/[email protected], @babel/[email protected], @babel/[email protected], @babel/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]
[email protected] (added)	child_process	index.js	`package.json` via @babel/[email protected], @babel/[email protected], @babel/[email protected], @babel/[email protected], @babel/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected], [email protected]

⚠️ Uses eval

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Package	Eval Type	Location	Source
@storybook/[email protected] (upgraded)	Function	dist/formatter-UT3ZCDIS.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (upgraded)	Function	dist/formatter-UT3ZCDIS.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/index.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/chunk-ZOUMJK5U.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/formatter-UT3ZCDIS-52LVTYWQ.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/formatter-UT3ZCDIS-52LVTYWQ.mjs	`package.json` via [email protected]
@storybook/[email protected] (added)	Function	dist/runtime.js	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.js	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.js	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.js	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.js	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (added)	Function	dist/runtime.mjs	`package.json` via @storybook/[email protected]
@storybook/[email protected] (upgraded)	Function	dist/chunk-NQZQ3SVL.mjs	`package.json` via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded)	Function	dist/index.js	`package.json` via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
@storybook/[email protected] (upgraded)	Function	dist/utils.js	`package.json` via @storybook/[email protected], @storybook/[email protected], @storybook/[email protected]
[email protected] (added)	Function	dist/ajv.bundle.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	Function	lib/compile/index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/compile/index.js	`package.json` via @storybook/[email protected]
[email protected] (added)	Function	dist/compile/jtd/parse.js	`package.json` via @storybook/[email protected]
[email protected] (upgraded)	Function	internals/async-iterator-prototype.js	`package.json` via @storybook/[email protected]
[email protected] (upgraded)	Function	index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	Function	ejs-v3.1.9/ejs.js	`package.json` via [email protected]
[email protected] (added)	Function	ejs-v3.1.9/ejs.js	`package.json` via [email protected]
[email protected] (added)	Function	ejs-v3.1.9/ejs.min.js	`package.json` via [email protected]
[email protected] (added)	Function	ejs-v3.1.9/ejs.min.js	`package.json` via [email protected]
[email protected] (added)	Function	ejs-v3.1.9/lib/ejs.js	`package.json` via [email protected]
[email protected] (added)	Function	ejs-v3.1.9/lib/ejs.js	`package.json` via [email protected]
[email protected] (added)	Function	dist/envinfo.js	`package.json` via [email protected]
[email protected] (added)	Function	dist/envinfo.js	`package.json` via [email protected]
[email protected] (added)	Function	dist/node.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/cjs/handlebars/compiler/javascript-compiler.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/cjs/handlebars/compiler/javascript-compiler.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/handlebars.amd.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/handlebars.amd.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/handlebars.amd.min.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (added)	Function	dist/handlebars.amd.min.js	`package.json` via @storybook/[email protected], @storybook/[email protected], [email protected]
[email protected] (upgraded)	Function	test/index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (upgraded)	Function	test/index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	Function	index.js	`package.json` via @storybook/[email protected], [email protected]
[email protected] (added)	Function	_root.js	[`package.json`](https://github.com/storybookjs/addon-cssresources/pull/8/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d

Chore: Upgrade to support Storybook 7.0

3ee284e

senicar force-pushed the update-to-storybook-v7 branch from 75e2699 to 3ee284e Compare March 23, 2023 06:47

Limit storybook peerDependencies to v7.0 only

069f3b9

EliezerB123 mentioned this pull request Aug 4, 2024

Use the new Framework API #7

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Chore: Upgrade to support Storybook 7.0 #8

Chore: Upgrade to support Storybook 7.0 #8

senicar commented Mar 23, 2023

Uh oh!

socket-security bot commented Mar 23, 2023 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Chore: Upgrade to support Storybook 7.0 #8

Are you sure you want to change the base?

Chore: Upgrade to support Storybook 7.0 #8

Conversation

senicar commented Mar 23, 2023

Uh oh!

socket-security bot commented Mar 23, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Socket Security Pull Request Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

socket-security bot commented Mar 23, 2023 •

edited

Loading