@storybook/addon-actions is a vital tool for Storybook users, providing a clear and informative log of actions triggered within your components during development and testing. This addon enhances the Storybook experience by displaying the data received when a component's action is triggered, making it easier to debug and verify interactions.
Between versions 6.1.3 and 6.1.4, the core functionality remains consistent. Developers can expect the same robust action logging capabilities, allowing them to confirm event triggers and inspect payload data directly within the Storybook UI. The dependencies received updates with the new peer and internal dependencies, specifically "@storybook/api", "@storybook/addons", "@storybook/theming", "@storybook/client-api", "@storybook/components", "@storybook/core-events" updated from version 6.1.3 to 6.1.4, aligning it with other Storybook packages. This synchronisation ensures greater compatibility and consistency across the Storybook ecosystem.
The update doesn't introduce new features or breaking changes, so upgrading from 6.1.3 to 6.1.4 should be seamless. It’s a recommended upgrade to benefit from potential bug fixes (although not explicitly mentioned) and improved internal consistency within the Storybook framework. By showing the event as it happens it improves the feedback and allows developers to deliver higher quality components. You don't need to setup a lot of things to use it since it's part of the storybook ecosystem.
All the vulnerabilities related to the version 6.1.4 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.