Skip to content

Release: Patch 8.1.6#27427

Merged
valentinpalkovic merged 12 commits intolatest-releasefrom
version-patch-from-8.1.5
Jun 5, 2024
Merged

Release: Patch 8.1.6#27427
valentinpalkovic merged 12 commits intolatest-releasefrom
version-patch-from-8.1.5

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented May 30, 2024

This is an automated pull request that bumps the version from 8.1.5 to 8.1.6.
Once this pull request is merged, it will trigger a new release of version 8.1.6.
If you're not a core maintainer with permissions to release you can ignore this pull request.

To do

Before merging the PR, there are a few QA steps to go through:

  • Add the "freeze" label to this PR, to ensure it doesn't get automatically forced pushed by new changes.
  • Add the "ci:daily" label to this PR, to trigger the full test suite to run on this PR.

And for each change below:

  1. Ensure the change is appropriate for the version bump. E.g. patch release should only contain patches, not new or de-stabilizing features. If a change is not appropriate, revert the PR.
  2. Ensure the PR is labeled correctly with one of: "BREAKING CHANGE", "feature request", "bug", "maintenance", "dependencies", "documentation", "build", "unknown".
  3. Ensure the PR title is correct, and follows the format "[Area]: [Summary]", e.g. "React: Fix hooks in CSF3 render functions". If it is not correct, change the title in the PR.
    • Areas include: React, Vue, Core, Docs, Controls, etc.
    • First word of summary indicates the type: “Add”, “Fix”, “Upgrade”, etc.
    • The entire title should fit on a line

This is a list of all the PRs merged and commits pushed directly to next, that will be part of this release:

  • 🐛 Bug: Tags: Fix unsafe project-level tags lookup #27511
  • 🐛 Bug: Vite: Fix stats-plugin to normalize file names with posix paths #27218
  • 🐛 Bug: CLI: Only log the UpgradeStorybookToSameVersionError but continue the upgrade as normal #27217
  • 🔧 Maintenance: Core: Replace ip function with a small helper function to address security concerns #27529
  • 📝 Documentation: Docs: Use absolute imports in module mocking snippets #27426
  • 🏗️ Build: Build: Fix tempy usage in scripts #27512
  • 🏗️ Build: Build: Fix tempy usage during sandbox generation #27515
  • 📝 Documentation: Docs: Addon Docs - Update transformSource to source.transform #27461

If you've made any changes doing the above QA (change PR titles, revert PRs), manually trigger a re-generation of this PR with this workflow and wait for it to finish. It will wipe your progress in this to do, which is expected.

Feel free to manually commit any changes necessary to this branch after you've done the last re-generation, following the Make Manual Changes section in the docs, especially if you're making changes to the changelog.

When everything above is done:


Generated changelog

8.1.6

  • CLI: Only log the UpgradeStorybookToSameVersionError but continue the upgrade as normal - #27217, thanks @kasperpeulen!
  • Core: Replace ip function with a small helper function to address security concerns - #27529, thanks @tony19!
  • Tags: Fix unsafe project-level tags lookup - #27511, thanks @shilman!
  • Vite: Fix stats-plugin to normalize file names with posix paths - #27218, thanks @AlexAtVista!

@github-actions github-actions bot added the release For PRs that trigger new releases. Automated label May 30, 2024
@storybook-bot storybook-bot force-pushed the version-patch-from-8.1.5 branch from 7893b10 to 82e3140 Compare May 31, 2024 09:59
@nx-cloud
Copy link

nx-cloud bot commented May 31, 2024

☁️ Nx Cloud Report

CI is running/has finished running commands for commit 68cbbaf. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.

📂 See all runs for this CI Pipeline Execution


✅ Successfully ran 2 targets

Sent with 💌 from NxCloud.

@storybook-bot storybook-bot force-pushed the version-patch-from-8.1.5 branch 2 times, most recently from 62deb6f to b5d282f Compare June 2, 2024 11:44
@github-actions github-actions bot changed the title Release: Merge patches to main (without version bump) Release: Patch 8.1.6 Jun 2, 2024
@storybook-bot storybook-bot force-pushed the version-patch-from-8.1.5 branch 7 times, most recently from 9400bb6 to c211152 Compare June 5, 2024 08:37
kylegach and others added 9 commits June 5, 2024 11:35
…ippets

Docs: Use absolute imports in module mocking snippets
(cherry picked from commit fa80d22)
…-tags

Tags: Fix unsafe project-level tags lookup
(cherry picked from commit 341904e)
…ts-json-posix-paths

Vite: Fix stats-plugin to normalize file names with posix paths
(cherry picked from commit abfcc9f)
Build: Fix tempy usage in scripts
(cherry picked from commit 9b12305)
…ation-2

Build: Fix tempy usage during sandbox generation
(cherry picked from commit 183ac32)
Docs: Addon Docs - Update `transformSource` to `source.transform`
(cherry picked from commit 03ef5c6)
…same-version-error

CLI: Only log the UpgradeStorybookToSameVersionError but continue the upgrade as normal
(cherry picked from commit 68809b6)
Core: Replace ip function with a small helper function to address security concerns
(cherry picked from commit 70467ec)
@storybook-bot storybook-bot force-pushed the version-patch-from-8.1.5 branch from c211152 to 68cbbaf Compare June 5, 2024 11:35
@taramason
Copy link

taramason commented Jun 5, 2024

Hi all! Thank you for your work on this. I have been following these changes re: removing ip for security concerns. This is on the tails of my architects concern about security, they do not see Storybook as critical and are on the verge of removing it from our repository. I've managed to convince them to wait a day or so as of yesterday.

Do we think this will be merged soon?

I'm not sure what your process is/how long it takes so I thought I would ask. We are all blocked from merging to our main dev branch until this is resolved, They seem very keen to delete storybook but my team uses and loves it!

@valentinpalkovic valentinpalkovic added freeze Freeze the Release PR with this label ci:daily Run the CI jobs that normally run in the daily job. labels Jun 5, 2024
@valentinpalkovic valentinpalkovic added the ci:daily Run the CI jobs that normally run in the daily job. label Jun 5, 2024
@valentinpalkovic valentinpalkovic merged commit b4b7cdd into latest-release Jun 5, 2024
@valentinpalkovic valentinpalkovic deleted the version-patch-from-8.1.5 branch June 5, 2024 21:30
@valentinpalkovic
Copy link
Contributor

@taramason 8.1.6 is released :)

@taramason
Copy link

@taramason 8.1.6 is released :)

Thank you!! 🎉

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:daily Run the CI jobs that normally run in the daily job. freeze Freeze the Release PR with this label release For PRs that trigger new releases. Automated

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants