search

flatcar / nebraska

Update monitor & manager for applications using the Omaha protocol, optimized for Flatcar Container Linux.
https://www.flatcar.org/docs/latest/nebraska
Apache License 2.0
173 stars 43 forks source link

build(deps): bump micromatch, react-scripts, @storybook/addon-essentials, @storybook/addon-storyshots, @storybook/preset-create-react-app and @storybook/react in /frontend #842

Open dependabot[bot] opened 2 months ago

dependabot[bot] commented 2 months ago

Bumps micromatch to 4.0.8 and updates ancestor dependencies micromatch, react-scripts, @storybook/addon-essentials, @storybook/addon-storyshots, @storybook/preset-create-react-app and @storybook/react. These dependencies need to be updated together.

Updates micromatch from 4.0.4 to 4.0.8

Release notes

Sourced from micromatch's releases.

4.0.8

Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you see automated scanners saying otherwise, don't be scared.

Changelog

Sourced from micromatch's changelog.

[4.0.8] - 2024-08-22

  • backported CVE-2024-4067 fix (from v4.0.6) over to 4.x branch

[4.0.7] - 2024-05-22

  • this is basically v4.0.5, with some README updates
  • it is vulnerable to CVE-2024-4067
  • Updated braces to v3.0.3 to avoid CVE-2024-4068
  • does NOT break API compatibility

[4.0.6] - 2024-05-21

  • Added hasBraces to check if a pattern contains braces.
  • Fixes CVE-2024-4067
  • BREAKS API COMPATIBILITY
  • Should be labeled as a major release, but it's not.

[4.0.1 - 4.0.5]

[4.0.0] - 2019-03-20

Added

  • Adds support for options.onMatch. See the readme for details
  • Adds support for options.onIgnore. See the readme for details
  • Adds support for options.onResult. See the readme for details

Breaking changes

  • Require Node.js >= 8.6
  • Removed support for passing an array of brace patterns to micromatch.braces().
  • To strictly enforce closing brackets (for {, [, and (), you must now use strictBrackets=true instead of strictErrors.
  • cache - caching and all related options and methods have been removed
  • options.unixify was renamed to options.windows
  • options.nodupes Was removed. Duplicates are always removed by default. You can override this with custom behavior by using the onMatch, onResult and onIgnore functions.
  • options.snapdragon was removed, as snapdragon is no longer used.
  • options.sourcemap was removed, as snapdragon is no longer used, which provided sourcemap support.

[3.0.0] - 2017-04-11

Complete overhaul, with 36,000+ new unit tests validated against actual output generated by Bash and minimatch. More specifically, 35,000+ of the tests:

  • micromatch results are directly compared to bash results
  • in rare cases, when micromatch and bash disagree, micromatch's results are compared to minimatch's results
  • micromatch is much more accurate than minimatch, so there were cases where I had to make assumptions. I'll try to document these.

This refactor introduces a parser and compiler that are supersets of more granular parsers and compilers from other sub-modules. Each of these sub-modules has a singular responsibility and focuses on a certain type of matching that aligns with a specific part of the Bash "expansion" API.

These sub-modules work like plugins to seamlessly create the micromatch parser/compiler, so that strings are parsed in one pass, an AST is created, then a new string is generated by the compiler.

... (truncated)

Commits
  • 8bd704e 4.0.8
  • a0e6841 run verb to generate README documentation
  • 4ec2884 Merge branch 'v4' into hauserkristof-feature/v4.0.8
  • 03aa805 Merge pull request #266 from hauserkristof/feature/v4.0.8
  • 814f5f7 lint
  • 67fcce6 fix: CHANGELOG about braces & CVE-2024-4068, v4.0.5
  • 113f2e3 fix: CVE numbers in CHANGELOG
  • d9dbd9a feat: updated CHANGELOG
  • 2ab1315 fix: use actions/setup-node@v4
  • 1406ea3 feat: rework test to work on macos with node 10,12 and 14
  • Additional commits viewable in compare view


Updates react-scripts from 4.0.3 to 5.0.1

Commits


Updates @storybook/addon-essentials from 6.5.16 to 8.3.0

Release notes

Sourced from @​storybook/addon-essentials's releases.

v8.3.0

8.3.0

Fresh out of the oven! Storybook 8.3 brings you:

  • ⚡️ First-class Vitest integration to run stories as component tests
  • 🔼 Next.js-Vite framework for Vitest compatibility and better DX
  • 🗜️ Further reduced bundle size for a smaller install footprint
  • 🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
  • 💯 Hundreds more improvements

... (truncated)

Changelog

Sourced from @​storybook/addon-essentials's changelog.

8.3.0

Fresh out of the oven! Storybook 8.3 brings you:

  • ⚡️ First-class Vitest integration to run stories as component tests
  • 🔼 Next.js-Vite framework for Vitest compatibility and better DX
  • 🗜️ Further reduced bundle size for a smaller install footprint
  • 🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
  • 💯 Hundreds more improvements

... (truncated)

Commits
  • 7e94ba6 Bump version from "8.3.0-beta.5" to "8.3.0" [skip ci]
  • bce7d70 Bump version from "8.3.0-beta.4" to "8.3.0-beta.5" [skip ci]
  • cce24a0 Bump version from "8.3.0-beta.3" to "8.3.0-beta.4" [skip ci]
  • daf6159 Bump version from "8.3.0-beta.2" to "8.3.0-beta.3" [skip ci]
  • 00c1524 Bump version from "8.3.0-beta.1" to "8.3.0-beta.2" [skip ci]
  • acd2b70 Bump version from "8.3.0-beta.0" to "8.3.0-beta.1" [skip ci]
  • d8b6ce8 Bump version from "8.3.0-alpha.11" to "8.3.0-beta.0" [skip ci]
  • 7d6aa6b Bump version from "8.3.0-alpha.10" to "8.3.0-alpha.11" [skip ci]
  • 27d871c Builder-Vite: Fix 'condition node never be used' warning
  • 87c3757 Bump version from "8.3.0-alpha.9" to "8.3.0-alpha.10" [skip ci]
  • Additional commits viewable in compare view


Updates @storybook/addon-storyshots from 6.5.16 to 7.6.17

Release notes

Sourced from @​storybook/addon-storyshots's releases.

v7.6.17

7.6.17

v7.6.16

7.6.16

  • Addon Themes: Make type generic less strict - #26042, thanks @​yannbf!
  • Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @​kasperpeulen!

v7.6.15

7.6.15

  • Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @​kasperpeulen!

v7.6.14

7.6.14

v7.6.13

7.6.13

Changelog

Sourced from @​storybook/addon-storyshots's changelog.

7.6.17

7.6.16

  • Addon Themes: Make type generic less strict - #26042, thanks @​yannbf!
  • Interaction: Make sure that adding spies doesn't cause infinite loops with self referencing args #26019, thanks @​kasperpeulen!

7.6.15

This release accidentally didn't contain anything.

7.6.14

7.6.13

7.6.12

  • CLI: Fix upgrade detecting the wrong version of existing Storybooks - #25752, thanks @​JReinhold!

7.6.11

7.6.10

7.6.9

7.6.8

... (truncated)

Commits
  • 60bf2b5 Bump version from "7.6.16" to "7.6.17" [skip ci]
  • 287300b Bump version from "7.6.15" to "7.6.16" [skip ci]
  • 8bcc3b4 Bump version from "7.6.14" to "7.6.15" [skip ci]
  • 8d42c55 Bump version from "7.6.13" to "7.6.14" [skip ci]
  • 95ed703 Bump version from "7.6.12" to "7.6.13" [skip ci]
  • cebb1a7 Bump version from "7.6.11" to "7.6.12" [skip ci]
  • a8b5861 Bump version from "7.6.10" to "7.6.11" [skip ci]
  • 0a8f25a Bump version from "7.6.9" to "7.6.10" [skip ci]
  • fbb29c1 Bump version from "7.6.8" to "7.6.9" [skip ci]
  • 2eded2e Bump version from "7.6.7" to "7.6.8" [skip ci]
  • Additional commits viewable in compare view


Updates @storybook/preset-create-react-app from 3.2.0 to 8.3.0

Release notes

Sourced from @​storybook/preset-create-react-app's releases.

v8.3.0

8.3.0

Fresh out of the oven! Storybook 8.3 brings you:

  • ⚡️ First-class Vitest integration to run stories as component tests
  • 🔼 Next.js-Vite framework for Vitest compatibility and better DX
  • 🗜️ Further reduced bundle size for a smaller install footprint
  • 🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
  • 💯 Hundreds more improvements

... (truncated)

Changelog

Sourced from @​storybook/preset-create-react-app's changelog.

4.1.2

  • Use overrides from SB rather than defining ourselves #254

4.1.1

  • Update peer dependencies and add a note about versions #252

4.1.0

  • Add support for builder.core options to CRA preset #240

4.0.2

  • Fix bug merging core presets #238 #239

4.0.1

  • Support CJS files using Storybook's config #229

4.0.0

  • CRA: Add compatibility for CRA v5 #214
Commits
  • 7e94ba6 Bump version from "8.3.0-beta.5" to "8.3.0" [skip ci]
  • bce7d70 Bump version from "8.3.0-beta.4" to "8.3.0-beta.5" [skip ci]
  • cce24a0 Bump version from "8.3.0-beta.3" to "8.3.0-beta.4" [skip ci]
  • daf6159 Bump version from "8.3.0-beta.2" to "8.3.0-beta.3" [skip ci]
  • 00c1524 Bump version from "8.3.0-beta.1" to "8.3.0-beta.2" [skip ci]
  • acd2b70 Bump version from "8.3.0-beta.0" to "8.3.0-beta.1" [skip ci]
  • d8b6ce8 Bump version from "8.3.0-alpha.11" to "8.3.0-beta.0" [skip ci]
  • 7d6aa6b Bump version from "8.3.0-alpha.10" to "8.3.0-alpha.11" [skip ci]
  • 87c3757 Bump version from "8.3.0-alpha.9" to "8.3.0-alpha.10" [skip ci]
  • 6388f93 Bump version from "8.3.0-alpha.8" to "8.3.0-alpha.9" [skip ci]
  • Additional commits viewable in compare view


Updates @storybook/react from 6.5.16 to 8.3.0

Release notes

Sourced from @​storybook/react's releases.

v8.3.0

8.3.0

Fresh out of the oven! Storybook 8.3 brings you:

  • ⚡️ First-class Vitest integration to run stories as component tests
  • 🔼 Next.js-Vite framework for Vitest compatibility and better DX
  • 🗜️ Further reduced bundle size for a smaller install footprint
  • 🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
  • 💯 Hundreds more improvements

... (truncated)

Changelog

Sourced from @​storybook/react's changelog.

8.3.0

Fresh out of the oven! Storybook 8.3 brings you:

  • ⚡️ First-class Vitest integration to run stories as component tests
  • 🔼 Next.js-Vite framework for Vitest compatibility and better DX
  • 🗜️ Further reduced bundle size for a smaller install footprint
  • 🌐 Experimental Story globals to standardize stories for themes, viewports, and locales
  • 💯 Hundreds more improvements
  • Addon Test: Improve messages and post install script handling - #29036, thanks @​yannbf!
  • Addon Viewport: Add default options via parameters - #28944, thanks @​ndelangen!
  • Addon Test: Add experimental vitest integration - #28768, thanks @​kasperpeulen!
  • Addon Test: Fix error message logic in set up file - #28906, thanks @​yannbf!
  • Addon Test: Fix indentation of 'vitePluginNext' in generated Vitest config file - #29011, thanks @​ghengeveld!
  • Addon Test: Fix postinstall file types - #28978, thanks @​shilman!
  • Addon Test: Fix tests potentially not existing in non-isolate mode - #28993, thanks @​yannbf!
  • Addon Test: Improve transformation logic to avoid duplicate tests - #28929, thanks @​yannbf!
  • Addon Test: Set default viewport if applicable - #28905, thanks @​yannbf!
  • Addon Test: Set screenshotFailures to false by default - #28908, thanks @​yannbf!
  • Addon Docs: Remove babel dependency - #28915, thanks @​shilman!
  • Addon Interactions: Fix status in panel tab - #28580, thanks @​yannbf!
  • Angular: Fix Angular template error for props with a circular reference - #28498, thanks @​Marklb!
  • Angular: Fix template props not able to use dot notation - #28588, thanks @​Marklb!
  • Backgrounds/Viewports: Make defaults ove... _Description has been truncated_