Commit 9a7cce5
Install safe tar version and do not update storybook in /docs (#3001)
* Bump tar and storybook in /docs
Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core). These dependencies need to be updated together.
Removes `tar`
Updates `storybook` from 7.6.21 to 10.2.17
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v10.2.17/code/core)
---
updated-dependencies:
- dependency-name: tar
dependency-version:
dependency-type: indirect
- dependency-name: storybook
dependency-version: 10.2.17
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* [WIP] Update tar and storybook dependencies in /docs (#3015)
* Initial plan
* Patch tar vulnerability (6.2.1→7.5.11) without updating storybook
Co-authored-by: llastflowers <55068883+llastflowers@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: llastflowers <55068883+llastflowers@users.noreply.github.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: llastflowers <55068883+llastflowers@users.noreply.github.com>1 parent 358707b commit 9a7cce5
2 files changed
Lines changed: 796 additions & 204 deletions
0 commit comments