@storybook/addon-actions is a crucial tool for Storybook users, providing a clear and interactive way to log and display actions triggered within your stories. It allows developers to easily visualize how components respond to user interactions, making it invaluable for testing and debugging.
Comparing versions 6.1.8 and 6.1.9, the core functionality remains consistent, ensuring a smooth upgrade path for existing users. Both versions provide the same seamless action logging experience. The primary differences lie in the internal dependencies of the package. Version 6.1.9 upgrades several core Storybook dependencies, including @storybook/api, @storybook/addons, @storybook/theming, @storybook/client-api, @storybook/components, and @storybook/core-events from version 6.1.8 to 6.1.9. These updates likely include bug fixes, performance improvements, and potential enhancements to the Storybook ecosystem that might affect the action addon in subtle and non-breaking ways. These changes ensure compatibility and stability with other Storybook addons and features as part of the broader Storybook platform. Developers are advised to upgrade to version 6.1.9 to benefit from the latest improvements in these core Storybook components and ensure a more robust and reliable experience. Although, the direct impact to the addon-actions is likely minimal, staying current with the latest Storybook versions always lead to a better developer experience.
All the vulnerabilities related to the version 6.1.9 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.