Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.1 #110

Merged
merged 1 commit into from May 15, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 2 days ago, on 2020-03-21.

The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Release notes
Package name: react-scripts
  • 3.4.1 - 2020-03-21

    3.4.1 (2020-03-20)

    v3.4.1 is a maintenance release that includes minor bug fixes and documentation updates including upgrading Babel to fix a bug in the 7.8 release line. This release also brings support for TypeScript 3.8.

    🐛 Bug Fix

    • react-scripts
    • babel-preset-react-app
    • cra-template, eslint-config-react-app, react-scripts
      • #7790 Widen eslint-config-react-app peer dependency versions (@lukyth)

    💅 Enhancement

    • cra-template-typescript, cra-template
    • react-scripts

    📝 Documentation

    • Other
      • #8515 Fix proxying API request docs (@hjr3)
      • #8561 Indicate that the file structure is the template's (@Vinnl)
    • react-scripts

    🔨 Underlying Tools

    • babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
    • react-scripts

    Committers: 9

    Migrating from 3.4.0 to 3.4.1

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact react-scripts@3.4.1

    or

    yarn add --exact react-scripts@3.4.1
  • 3.4.0 - 2020-02-14

    3.4.0 (2020-02-14)

    v3.4.0 is a minor release that adds new features, including support for SSL and setting PUBLIC_URL in development. It also includes a fix for Hot Module Reloading with CSS Modules as well as other bug fixes.

    🐛 Bug Fix

    • react-scripts
      • #8378 Downgrade style-loader to v0.23.1 due to CSS modules hot reload not working with v1.0.0 and above (@chybisov)
    • create-react-app, react-dev-utils, react-error-overlay
    • react-dev-utils
    • cra-template-typescript, cra-template
    • cra-template-typescript

    💅 Enhancement

    • react-dev-utils, react-scripts
    • cra-template-typescript
    • cra-template-typescript, cra-template
    • react-scripts
      • #5845 Add option to provide custom ssl certificates during development (@alexbrazier)

    📝 Documentation

    • cra-template-typescript, cra-template, react-dev-utils, react-error-overlay, react-scripts
    • Other

    🔨 Underlying Tools

    Committers: 18

    Migrating from 3.3.1 to 3.4.0

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact react-scripts@3.4.0

    or

    yarn add --exact react-scripts@3.4.0
from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • d2f813f Publish
  • 7641a3c Prepare 3.4.1 release
  • d5b527f Update to Babel 7.9 (#8681)
  • 6adb82a Add React.StrictMode to default templates (#8558)
  • a452ddc Bump dependencies (#8620)
  • 3f699fd Fix proxying API request docs (#8515)
  • 4d26208 Use native ESLint behaviour when extending (#8276)
  • 8ba0ccb Whitelist main in template.json (#8539)
  • 7d3b72c Update template example in docs (#8561)
  • 2030ee1 Fix optional chaining and nullish coalescing support (#8526)
  • 038e6fa Widen eslint-config-react-app peer dependency versions (#7790)
  • 7e6d6cd Closes webpack dev server and exits process on "end" stdin (#7203)
  • af926d5 Bump pnp-webpack-plugin (#8509)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@ryanhefner ryanhefner added this to To Do in Open Sourcery 🔮 Mar 24, 2020
@ryanhefner ryanhefner merged commit b35a8ea into master May 15, 2020
Open Sourcery 🔮 automation moved this from To Do to Done May 15, 2020
@ryanhefner ryanhefner deleted the snyk-upgrade-f04ad358e0e287a3ec0efc1765c65f5e branch May 15, 2020 20:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Development

Successfully merging this pull request may close these issues.

None yet

2 participants