@storybook/addon-viewport is a valuable tool for Storybook users, enabling developers to easily simulate various screen sizes and resolutions within their component library. This allows for thorough testing and ensures responsive designs across different devices, enhancing the overall user experience. Comparing versions 6.1.3 and 6.1.2, the primary difference lies in the internal dependency versions of other Storybook packages like @storybook/api, @storybook/addons, @storybook/theming, @storybook/components, @storybook/core-events, and @storybook/client-logger.
Specifically, these dependencies incremented from 6.1.2 to 6.1.3. While no functional changes may be immediately apparent from these version bumps, they likely address internal bug fixes, performance improvements, or compatibility enhancements within the broader Storybook ecosystem. Developers upgrading from 6.1.2 to 6.1.3 can anticipate a more stable and refined experience, benefiting from the latest updates in Storybook's core modules. The peer dependencies for React and React DOM remain unchanged, ensuring compatibility with existing projects using React versions 16.8.0 or 17.0.0 and above. Ultimately, the 6.1.3 release provides a subtle but important upgrade, keeping the addon aligned with the ongoing improvements within the Storybook platform and promoting optimal development workflows.
All the vulnerabilities related to the version 6.1.3 of the package
Cross site scripting in markdown-to-jsx
Versions of the package markdown-to-jsx before 7.4.0 are vulnerable to Cross-site Scripting (XSS) via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in the markdown.