fix: address audit errors and use expo dev client (#886)

* fix: address audit errors and use expo dev client

* changeset

Author: dannyhw

.changeset/hot-wings-brake.md

@@ -0,0 +1,13 @@
+---
+'@storybook/addon-ondevice-actions': patch
+'@storybook/addon-ondevice-backgrounds': patch
+'@storybook/addon-ondevice-controls': patch
+'@storybook/addon-ondevice-notes': patch
+'@storybook/react-native': patch
+'@storybook/react-native-theming': patch
+'@storybook/react-native-ui': patch
+'@storybook/react-native-ui-common': patch
+'@storybook/react-native-ui-lite': patch
+---
+
+apply npm audit fixes

.github/workflows/publish.yml

@@ -69,6 +69,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Update lockfile (next)
+        if: inputs.release_type == 'next'
+        run: pnpm install --no-frozen-lockfile
+
       - name: Publish (next)
         if: inputs.release_type == 'next'
         run: pnpm changeset publish
@@ -108,6 +112,10 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Update lockfile (latest)
+        if: inputs.release_type == 'latest'
+        run: pnpm install --no-frozen-lockfile
+
       - name: Publish (latest)
         if: inputs.release_type == 'latest'
         run: pnpm changeset publish --tag latest

.gitignore

@@ -36,5 +36,5 @@ examples/expo-example/.maestro/output/*
 
 examples/expo-example/components/PerfTesting/*.stories.tsx
 examples/expo-example/.certs/
-examples/expo-example/android
-examples/expo-example/ios
+examples/**/android
+examples/**/ios

examples/expo-new-wrapper-example/.expo/prebuild/cached-packages.json

@@ -0,0 +1,4 @@
+{
+  "dependencies": "2db65b8ae948675d3e3ad862f5e130503e69f47b",
+  "devDependencies": "f734d48b191d4a8111b07cda4e48396fbcdc84df"
+}

examples/expo-new-wrapper-example/.rnstorybook/index.tsx

@@ -4,6 +4,7 @@
 // and ../README.md for the full picture.
 import AsyncStorage from '@react-native-async-storage/async-storage';
 import { registerRootComponent } from 'expo';
+import { LiteUI } from '@storybook/react-native-ui-lite';
 
 import { view } from './storybook.requires';
 
@@ -14,6 +15,7 @@ const StorybookUIRoot = view.getStorybookUI({
     setItem: AsyncStorage.setItem,
   },
   enableWebsockets: true,
+  CustomUIComponent: LiteUI,
 });
 
 registerRootComponent(StorybookUIRoot);

examples/expo-new-wrapper-example/package.json

@@ -4,13 +4,14 @@
   "private": true,
   "main": "index.js",
   "scripts": {
-    "start": "expo start",
-    "ios": "expo start --ios",
-    "android": "expo start --android",
-    "storybook:ios": "STORYBOOK_ENABLED=true expo start --ios",
-    "storybook": "STORYBOOK_ENABLED=true expo start",
-    "storybook:android": "STORYBOOK_ENABLED=true expo start --android",
-    "check:types": "tsc --noEmit"
+    "start": "expo start --dev-client",
+    "ios": "expo run:ios",
+    "android": "expo run:android",
+    "storybook": "STORYBOOK_ENABLED=true expo start --dev-client",
+    "storybook:ios": "STORYBOOK_ENABLED=true expo run:ios",
+    "storybook:android": "STORYBOOK_ENABLED=true expo run:android",
+    "check:types": "tsc --noEmit",
+    "prebuild": "expo prebuild"
   },
   "dependencies": {
     "@expo/metro-runtime": "~56.0.5",

examples/expo-router-example/.rnstorybook/index.tsx

@@ -2,16 +2,16 @@
 // `withStorybook` swaps the resolver from the project's `index.js` to this
 // file, so it must register a root component itself. See ../metro.config.js
 // and ../README.md for the full picture.
-import AsyncStorage from '@react-native-async-storage/async-storage';
+import Storage from 'expo-sqlite/kv-store';
 import { registerRootComponent } from 'expo';
 import { LiteUI } from '@storybook/react-native-ui-lite';
 import { view } from './storybook.requires';
 
 const StorybookUIRoot = view.getStorybookUI({
   shouldPersistSelection: true,
   storage: {
-    getItem: AsyncStorage.getItem,
-    setItem: AsyncStorage.setItem,
+    getItem: (s) => Storage.getItem(s),
+    setItem: (s, v) => Storage.setItem(s, v),
   },
   enableWebsockets: true,
   CustomUIComponent: LiteUI,

examples/expo-router-example/app.json

@@ -9,7 +9,8 @@
     "userInterfaceStyle": "automatic",
     "newArchEnabled": true,
     "ios": {
-      "supportsTablet": true
+      "supportsTablet": true,
+      "bundleIdentifier": "com.dannyhw.exporouterexample"
     },
     "android": {
       "adaptiveIcon": {
@@ -19,7 +20,8 @@
         "monochromeImage": "./assets/images/android-icon-monochrome.png"
       },
       "edgeToEdgeEnabled": true,
-      "predictiveBackGestureEnabled": false
+      "predictiveBackGestureEnabled": false,
+      "package": "com.dannyhw.exporouterexample"
     },
     "web": {
       "output": "static",
@@ -41,7 +43,8 @@
       ],
       "expo-image",
       "expo-web-browser",
-      "expo-font"
+      "expo-font",
+      "expo-sqlite"
     ],
     "experiments": {
       "typedRoutes": true,

examples/expo-router-example/package.json

@@ -3,13 +3,16 @@
   "main": "expo-router/entry",
   "version": "1.0.0",
   "scripts": {
-    "start": "expo start",
+    "start": "expo start --dev-client",
     "reset-project": "node ./scripts/reset-project.js",
-    "android": "expo start --android",
-    "ios": "expo start --ios",
+    "android": "expo run:android",
+    "ios": "expo run:ios",
     "web": "expo start --web",
     "lint": "expo lint",
-    "storybook": "STORYBOOK_ENABLED=true expo start"
+    "storybook": "STORYBOOK_ENABLED=true expo start --dev-client",
+    "storybook:ios": "STORYBOOK_ENABLED=true expo run:ios",
+    "storybook:android": "STORYBOOK_ENABLED=true expo run:android",
+    "prebuild": "expo prebuild"
   },
   "dependencies": {
     "@expo/vector-icons": "^15.0.3",
@@ -33,6 +36,7 @@
     "expo-linking": "~56.0.4",
     "expo-router": "~56.1.1",
     "expo-splash-screen": "~56.0.4",
+    "expo-sqlite": "~56.0.3",
     "expo-status-bar": "~56.0.4",
     "expo-symbols": "~56.0.5",
     "expo-system-ui": "~56.0.4",
@@ -44,6 +48,7 @@
     "react-native-reanimated": "~4.3.0",
     "react-native-safe-area-context": "^5.7.0",
     "react-native-screens": "4.25.0-beta.3",
+    "react-native-svg": "15.15.4",
     "react-native-web": "^0.21.2",
     "react-native-worklets": "0.8.3",
     "storybook": "^10.3.2",

package.json

@@ -60,20 +60,6 @@
   "engines": {
     "node": ">=26.0.0"
   },
-  "pnpm": {
-    "overrides": {
-      "@types/markdown-it": "^14.0.1",
-      "jest-environment-jsdom>jsdom": "26.1.0",
-      "lodash": "^4.18.1",
-      "markdown-it": "^14.0.0",
-      "minimatch@3": "~3.1.3",
-      "react-docgen-typescript": "2.2.2",
-      "serialize-javascript": ">=7.0.3",
-      "svgo": "3.3.3",
-      "webpack-dev-server": "^5.2.2",
-      "zod-validation-error": "^4.0.0"
-    }
-  },
   "collective": {
     "type": "opencollective",
     "url": "https://opencollective.com/storybook"