tech story: [M3-8386] - Update storybook to take care of tar vulnerability - Githubissues

linode / manager

Akamai's Cloud Manager is an open-source, single-page application designed as the primary frontend interface for interacting with the Linode API. It is entrusted by hundreds of thousands of customers with the management of their Linode services.

https://cloud.linode.com

Apache License 2.0

690 stars 361 forks source link

tech story: [M3-8386] - Update storybook to take care of tar vulnerability #10934

Closed coliu-akamai closed 1 month ago

coliu-akamai commented 1 month ago

Description 📝

Updates storybook and related addons to the latest version resolve this tar vulnerability

Changes 🔄

upgrade Storybook to 8.3.0

Target release date 🗓️

n/a

How to test 🧪

confirm giget dependency (and therefore tar 6.2.0) is removed from yarn.lock
Run/build storybook locally to confirm no regression was introduced with this update

As an Author I have considered 🤔

Check all that apply

[ ] 👀 Doing a self review
[ ] ❔ Our contribution guidelines
[ ] 🤏 Splitting feature into small PRs
[x] ➕ Adding a changeset
[ ] 🧪 Providing/Improving test coverage
[ ] 🔐 Removing all sensitive information from the code and PR description
[ ] 🚩 Using a feature flag to protect the release
[ ] 👣 Providing comprehensive reproduction steps
[ ] 📑 Providing or updating our documentation
[ ] 🕛 Scheduling a pair reviewing session
[ ] 📱 Providing mobile support
[ ] ♿ Providing accessibility support

github-actions[bot] commented 1 month ago

Coverage Report: ✅
Base Coverage: 86.64%
Current Coverage: 86.64%

mjac0bs commented 1 month ago

Storybook is actually removing dependencies? 😲 I must be dreaming 💭

They highlighted the change, too. I wonder how many complaints they get. 😄