@storybook/addon-actions version 6.1.15 is a minor update focusing on internal dependency alignment within the Storybook ecosystem, released on January 22, 2021. It builds upon the functionality of version 6.1.14, which was released on January 12, 2021, and is designed to capture and display UI interactions within your Storybook stories.
For developers already using @storybook/addon-actions, the upgrade from 6.1.14 to 6.1.15 primarily involves ensuring compatibility across the Storybook platform. Crucially, the core functionality remains consistent: you can still use this addon to effortlessly showcase how components react to user actions like clicks, hovers, or form submissions directly within your Storybook interface. This feedback loop enhances the development and testing processes, making it easier to verify that your components are behaving as expected. Version 6.1.15 shares the same peer dependencies for React and React-DOM (^16.8.0 || ^17.0.0), the same dev dependencies, and the same production dependecies except for the @storybook dependencies wich moved from 6.1.14 to 6.1.15.
If you're new to @storybook/addon-actions, both versions offer a valuable tool for interactive component demonstration. This addon simplifies debugging and validation by providing clear visibility into the actions triggered by your components.
All the vulnerabilities related to the version 6.1.15 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.