Fix: Make sure that expect matches the runtime type when instrumented

[kasperpeulen]

Closes #32

Change Type

Indicate the type of change your pull request is:

• maintenance
• documentation
• patch
• minor
• major

This is a fix, but also in some sense a breaking change...

📦 Published PR as canary version: 0.2.0--canary.34.b637a39.0

✨ Test out this PR locally via:

npm install @storybook/[email protected]
# or 
yarn add @storybook/[email protected]

Version

Published prerelease version: v0.2.0-next.0

Changelog

🎉 This release contains work from new contributors! 🎉

Thanks for all your work!

❤️ Kasper Peulen (@kasperpeulen)

❤️ Homa Wong (@unional)

❤️ Valentin Palkovic (@valentinpalkovic)

❤️ Michael Shilman (@shilman)

❤️ Norbert de Langen (@ndelangen)

❤️ Vanessa Yuen (@vanessayuenn)

Release Notes

Prebundle @storybook/instrumenter package (#27)

This change bundles the @storybook/instrumenter package which fixes dependency conflicts in certain scenarios. It shouldn't impact the functionality of the package itself, but let us know if you experience any issues!

---

🚀 Enhancement

• Fix: Make sure that expect matches the runtime type when instrumented #34 (@kasperpeulen)
• Prebundle @storybook/instrumenter package #27 (@ndelangen @yannbf)

🐛 Bug Fix

• bump version #31 (@yannbf)
• Retrigger release #30 (@yannbf)
• Change Storybook dependencies from future npm tag to next #28 (@yannbf)
• Change build scripts to use tsup instead of tsc #26 (@ndelangen @yannbf)

⚠️ Pushed to next

• Create CODEOWNERS (@valentinpalkovic)

📝 Documentation

• docs: update link #33 (@unional)
• Add more explanation to the types FAQ #25 (@yannbf)

Authors: 8

• Homa Wong (@unional)
• Kasper Peulen (@kasperpeulen)
• Michael Shilman (@shilman)
• Norbert de Langen (@ndelangen)
• Valentin Palkovic (@valentinpalkovic)
• Vanessa Yuen (@vanessayuenn)
• Yann Braga (@yannbf)
• [email protected] (runner@fv-az180-857.oqwrao4tgo5u1osypft1dvkhhh.cx.internal.cloudapp.net)

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
@types/jest	28.1.3	eval	+7	606 kB	types
prettier	2.8.8	filesystem, environment	+0	11.2 MB	prettier-bot

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue	Package	Version	Note	Source
Uses eval	@sinclair/typebox	0.24.51	Eval Type: Function Location: compiler/compiler.js +5 more instances...	@storybook/[email protected], @types/[email protected] via package.json

Next steps

What is eval?

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore @sinclair/[email protected]

[yannbf]

This is amazing! ❤️

[IanVS]

This seems unrelated to the other changes here, was it intentional?

[kasperpeulen]

Ah, yeah, I couldn't format my changes! I guess it is okay, to add it.

[github-actions]

🚀 PR was released in v0.2.0 🚀