Version 3.3.11 of @storybook/addon-viewport, a Storybook addon designed to simulate various device viewport sizes for mobile development, introduces subtle yet important changes compared to its predecessor, version 3.3.10. Both versions share the same core functionality, allowing developers to easily switch between predefined viewport sizes within their Storybook environment, streamlining responsive design testing. They depend on global, prop-types and @storybook/components to ensure proper functionality. Both versions declare React and @storybook/addons as peer dependencies, so host applications need to provide them.
However, the key difference lies in the internal @storybook/components dependency. Version 3.3.11 depends on @storybook/components version "3.3.11" while version 3.3.10 depends on @storybook/components version "3.3.10". This suggests that version 3.3.11 likely incorporates updates and improvements from within the Storybook ecosystem that could include bug fixes, performance enhancements, and compatibility adjustments within the Storybook UI components.
For developers already using @storybook/addon-viewport, upgrading to version 3.3.11 is recommended to benefit from the latest refinements and potentially address any known issues present in earlier versions. New users will also want to leverage the latest version to ensure compatibility and a stable development experience within their Storybook projects. The releaseDate also emphasizes the update: version 3.3.11 came out on 2018-01-27, about one week after version 3.3.10 was released (2018-01-19).
All the vulnerabilities related to the version 3.3.11 of the package
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as authorization
, www-authenticate
, cookie
, & cookie2
when redirecting to a untrusted site.