Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

yarn berry changes #500

Merged
merged 2 commits into from
Jul 30, 2023
Merged

yarn berry changes #500

merged 2 commits into from
Jul 30, 2023

Conversation

dannyhw
Copy link
Member

@dannyhw dannyhw commented Jul 20, 2023

Issue:

What I did

  • update to yarn berry

How to test

  • run build
  • run example app

@dannyhw dannyhw self-assigned this Jul 20, 2023
@socket-security
Copy link

socket-security bot commented Jul 20, 2023

New and updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
ts-node 10.9.1 filesystem, shell, environment +30 10.7 MB cspotcode
@react-native/eslint-config 0.72.1...0.72.2 None +60/-47 16.5 MB react-native-bot
@babel/core 7.21.0...7.22.9 None +56/-56 19 MB nicolo-ribaudo
lerna 6.6.1...6.6.2 None +89/-84 53.9 MB jameshenry
core-js 3.28.0...3.31.1 None +0/-0 1.14 MB zloirock
deepmerge 4.3.0...4.3.1 None +0/-0 31.2 kB tehshrike

@socket-security
Copy link

socket-security bot commented Jul 20, 2023

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue Package Version Note Source
New author @npmcli/git 4.1.0
New author @npmcli/map-workspaces 3.0.4
New author ignore-walk 6.0.3
New author nopt 7.2.0
New author npm-install-checks 6.1.1
New author @npmcli/metavuln-calculator 5.0.1
New author fs-minipass 3.0.2
New author isobject 4.0.0
New author url 0.11.1
New author bin-links 4.0.2
New author gauge 5.0.1
New author npm-normalize-package-bin 3.0.1
New author which 3.0.1
New author write-file-atomic 5.0.1
New author fast-diff 1.3.0
New author exponential-backoff 3.1.1
Shell access foreground-child 3.1.1
Shell access ts-node 10.9.1
Uses eval @sinclair/typebox 0.27.8
Uses eval telejson 6.0.8

Next steps

What is new author?

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

What is shell access?

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

What is eval?

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

@dannyhw
Copy link
Member Author

dannyhw commented Jul 30, 2023

@SocketSecurity ignore-all

@dannyhw dannyhw merged commit ade5a2f into next Jul 30, 2023
5 checks passed
hyochan pushed a commit to dooboolab-community/dooboo-ui that referenced this pull request Aug 2, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@storybook/addon-ondevice-actions](https://storybook.js.org/)
([source](https://togithub.com/storybookjs/react-native)) | [`6.5.4` ->
`6.5.5`](https://renovatebot.com/diffs/npm/@storybook%2faddon-ondevice-actions/6.5.4/6.5.5)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@storybook%2faddon-ondevice-actions/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@storybook%2faddon-ondevice-actions/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@storybook%2faddon-ondevice-actions/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@storybook%2faddon-ondevice-actions/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[@storybook/addon-ondevice-knobs](https://togithub.com/storybookjs/react-native)
| [`6.5.4` ->
`6.5.5`](https://renovatebot.com/diffs/npm/@storybook%2faddon-ondevice-knobs/6.5.4/6.5.5)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@storybook%2faddon-ondevice-knobs/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@storybook%2faddon-ondevice-knobs/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@storybook%2faddon-ondevice-knobs/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@storybook%2faddon-ondevice-knobs/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [@storybook/react-native](https://storybook.js.org/)
([source](https://togithub.com/storybookjs/react-native)) | [`6.5.4` ->
`6.5.5`](https://renovatebot.com/diffs/npm/@storybook%2freact-native/6.5.4/6.5.5)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@storybook%2freact-native/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@storybook%2freact-native/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@storybook%2freact-native/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@storybook%2freact-native/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [@storybook/react-native-server](https://storybook.js.org/)
([source](https://togithub.com/storybookjs/react-native)) | [`6.5.4` ->
`6.5.5`](https://renovatebot.com/diffs/npm/@storybook%2freact-native-server/6.5.4/6.5.5)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@storybook%2freact-native-server/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@storybook%2freact-native-server/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@storybook%2freact-native-server/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@storybook%2freact-native-server/6.5.4/6.5.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>storybookjs/react-native
(@&#8203;storybook/addon-ondevice-actions)</summary>

###
[`v6.5.5`](https://togithub.com/storybookjs/react-native/releases/tag/v6.5.5)

[Compare
Source](https://togithub.com/storybookjs/react-native/compare/v6.5.4...v6.5.5)

##### What's Changed

- chore(deps): bump fast-xml-parser from 4.2.4 to 4.2.5 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[storybookjs/react-native#493
- chore(deps): bump semver from 5.7.1 to 5.7.2 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[storybookjs/react-native#496
- feat: nested grouping of stories with "group/story" syntax by
[@&#8203;dannyhw](https://togithub.com/dannyhw) in
[storybookjs/react-native#486
- chore(deps): bump word-wrap from 1.2.3 to 1.2.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[storybookjs/react-native#499
- chore: update expo, ts and emotion by
[@&#8203;dannyhw](https://togithub.com/dannyhw) in
[storybookjs/react-native#498
- yarn berry changes by [@&#8203;dannyhw](https://togithub.com/dannyhw)
in
[storybookjs/react-native#500
- feat/require context by
[@&#8203;dannyhw](https://togithub.com/dannyhw) in
[storybookjs/react-native#501
- you can use --unstable_useRequireContext on storybook generate to try
this out

**Full Changelog**:
storybookjs/react-native@v6.5.4...v6.5.5

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/dooboolab-community/dooboo-ui).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yNy4xIiwidXBkYXRlZEluVmVyIjoiMzYuMjcuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dannyhw dannyhw deleted the feat/enable-yarn-berry branch February 2, 2024 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant