@storybook/addon-links provides a crucial way to navigate between stories within a Storybook, enabling the creation of interactive demos and prototypes from individual UI components. Comparing versions 6.4.17 and 6.4.18, the core functionality remains consistent: linking stories to each other allowing users to create flows and better showcase component interactions.
Both versions share the same set of dependencies, including qs for query string parsing, global for cross-platform global object access, core-js for polyfilling Javascript features for older browsers, @types/qs for Typescript definitions for qs, ts-dedent for removing indentation from template strings, prop-types for runtime type checking, and key Storybook packages like @storybook/csf, @storybook/addons, @storybook/router, @storybook/core-events, and @storybook/client-logger. Crucially, both rely on react and react-dom as peer dependencies, ensuring compatibility with React versions 16.8.0 and 17.0.0 or later.
The shift from 6.4.17 to 6.4.18 is most likely a patch that includes dependency updates of internal packages @storybook/addons, @storybook/router, @storybook/core-events, @storybook/client-logger to the newer version. No changes in the dependencies mean that there are no added features or breaking changes.
For developers using the addon, the upgrade is probably safe.
The are not vulnerabilities for the version 6.4.18 of the package @storybook/addon-links