[CVE] Remove storybook package to fix CVE-2021-42740 and CVE-2021-24033…

… (opensearch-project#2660) Removes the broken and unfinished storybook package and related code. Backport PR: opensearch-project#1172 Signed-off-by: Zilong Xia <[email protected]> (cherry picked from commit 1c50eee)
joshuarrrr · Nov 29, 2022 · 226dc38 · 226dc38
1 parent e3ff839
commit 226dc38
Show file tree

Hide file tree

Showing 28 changed files with 233 additions and 4,315 deletions.
diff --git a/.eslintrc.js b/.eslintrc.js
@@ -388,7 +388,6 @@ module.exports = {
      */
     {
       files: [
-        '**/*.stories.tsx',
         'test/*/config.ts',
         'test/*/config_open.ts',
         'test/*/{tests,test_suites,apis,apps}/**/*',

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,8 +8,10 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 
 ### 🛡 Security
 * [CVE-2022-0144] Bump shelljs from 0.8.4 to 0.8.5 ([#2511](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2511))
-* [CVE-2022-0155] Bump follow-redirects to 1.15.2 [#2653](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2653))
-* [CVE-2022-0536] Bump follow-redirects to 1.15.2 [#2653](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2653))
+* [CVE-2022-0155] Bump follow-redirects to 1.15.2 ([#2653](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2653))
+* [CVE-2022-0536] Bump follow-redirects to 1.15.2 ([#2653](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2653))
+* [CVE-2021-24033] Remove storybook package to fix CVE-2021-42740 and CVE-2021-24033 ([#2660](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2660))
+* [CVE-2021-42740] Remove storybook package to fix CVE-2021-42740 and CVE-2021-24033 ([#2660](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2660))
 
 ### 📈 Features/Enhancements
 
@@ -25,6 +27,7 @@ Inspired from [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### 📝 Documentation
 
 ### 🛠 Maintenance
+* Remove storybook package and related code ([#2660](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/2660))
 
 ### 🪛 Refactoring
 

diff --git a/package.json b/package.json
@@ -67,15 +67,15 @@
     "build:types": "rm -rf ./target/types && tsc --p tsconfig.types.json",
     "docs:acceptApiChanges": "node --max-old-space-size=6144 scripts/check_published_api_changes.js --accept",
     "osd:bootstrap": "node scripts/build_ts_refs && node scripts/register_git_hook",
-    "spec_to_console": "node scripts/spec_to_console",
-    "storybook": "node scripts/storybook"
+    "spec_to_console": "node scripts/spec_to_console"
   },
   "repository": {
     "type": "git",
     "url": "https://github.com/opensearch-project/opensearch-dashboards.git"
   },
   "resolutions": {
     "**/@types/node": ">=10.17.17 <10.20.0",
+    "**/@types/react": "^16.14.23",
     "**/ansi-regex": "^5.0.1",
     "**/axios": "^0.21.4",
     "**/ejs": "^3.1.6",
@@ -316,7 +316,7 @@
     "@types/podium": "^1.0.0",
     "@types/prop-types": "^15.7.3",
     "@types/reach__router": "^1.2.6",
-    "@types/react": "^16.9.36",
+    "@types/react": "^16.14.23",
     "@types/react-dom": "^16.9.8",
     "@types/react-grid-layout": "^0.16.7",
     "@types/react-redux": "^7.1.9",

diff --git a/packages/osd-storybook/README.md b/packages/osd-storybook/README.md
diff --git a/packages/osd-storybook/index.ts b/packages/osd-storybook/index.ts
diff --git a/packages/osd-storybook/lib/constants.ts b/packages/osd-storybook/lib/constants.ts
diff --git a/packages/osd-storybook/lib/default_config.ts b/packages/osd-storybook/lib/default_config.ts
diff --git a/packages/osd-storybook/lib/register.ts b/packages/osd-storybook/lib/register.ts
diff --git a/packages/osd-storybook/lib/run_storybook_cli.ts b/packages/osd-storybook/lib/run_storybook_cli.ts