[Snyk] Upgrade: react, react-dom, , , , , , , , , , , postcss, autoprefixer, react-scripts, swr, typescript, web-vitals #66
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- react from 17.0.2 to 18.3.1.
See this package in npm: https://www.npmjs.com/package/react
- react-dom from 17.0.2 to 18.3.1.
See this package in npm: https://www.npmjs.com/package/react-dom
- @craco/craco from 6.4.5 to 7.1.0.
See this package in npm: https://www.npmjs.com/package/@craco/craco
- @tailwindcss/aspect-ratio from 0.3.0 to 0.4.2.
See this package in npm: https://www.npmjs.com/package/@tailwindcss/aspect-ratio
- @tailwindcss/forms from 0.3.4 to 0.5.7.
See this package in npm: https://www.npmjs.com/package/@tailwindcss/forms
- @testing-library/jest-dom from 5.17.0 to 6.5.0.
See this package in npm: https://www.npmjs.com/package/@testing-library/jest-dom
- @testing-library/react from 11.2.7 to 16.0.0.
See this package in npm: https://www.npmjs.com/package/@testing-library/react
- @testing-library/user-event from 12.8.3 to 14.5.2.
See this package in npm: https://www.npmjs.com/package/@testing-library/user-event
- @types/jest from 26.0.24 to 29.5.12.
See this package in npm: https://www.npmjs.com/package/@types/jest
- @types/node from 12.20.55 to 22.5.1.
See this package in npm: https://www.npmjs.com/package/@types/node
- @types/react from 17.0.82 to 18.3.4.
See this package in npm: https://www.npmjs.com/package/@types/react
- @types/react-dom from 17.0.25 to 18.3.0.
See this package in npm: https://www.npmjs.com/package/@types/react-dom
- postcss from 7.0.39 to 8.4.41.
See this package in npm: https://www.npmjs.com/package/postcss
- autoprefixer from 9.8.8 to 10.4.20.
See this package in npm: https://www.npmjs.com/package/autoprefixer
- react-scripts from 4.0.3 to 5.0.1.
See this package in npm: https://www.npmjs.com/package/react-scripts
- swr from 1.3.0 to 2.2.5.
See this package in npm: https://www.npmjs.com/package/swr
- typescript from 4.9.5 to 5.5.4.
See this package in npm: https://www.npmjs.com/package/typescript
- web-vitals from 1.1.2 to 4.2.3.
See this package in npm: https://www.npmjs.com/package/web-vitals
See this project in Snyk:
https://app.snyk.io/org/laurry-gee/project/e2ea3925-0541-494a-bf21-b7f68d640d15?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
react
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 years ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 9 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 8 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 21 days ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 years ago
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
from 17.0.2 to 18.3.1 | 626 versions ahead of your current version
on 2024-04-26
react-dom
from 17.0.2 to 18.3.1 | 626 versions ahead of your current version
on 2024-04-26
@craco/craco
from 6.4.5 to 7.1.0 | 12 versions ahead of your current version
on 2023-03-11
@tailwindcss/aspect-ratio
from 0.3.0 to 0.4.2 | 3 versions ahead of your current version | 2 years ago
on 2022-09-02
@tailwindcss/forms
from 0.3.4 to 0.5.7 | 12 versions ahead of your current version | 10 months ago
on 2023-11-10
@testing-library/jest-dom
from 5.17.0 to 6.5.0 | 22 versions ahead of your current version
on 2024-08-23
@testing-library/react
from 11.2.7 to 16.0.0 | 45 versions ahead of your current version
on 2024-06-03
@testing-library/user-event
from 12.8.3 to 14.5.2 | 88 versions ahead of your current version
on 2023-12-29
@types/jest
from 26.0.24 to 29.5.12 | 50 versions ahead of your current version
on 2024-02-01
@types/node
from 12.20.55 to 22.5.1 | 936 versions ahead of your current version
on 2024-08-28
@types/react
from 17.0.82 to 18.3.4 | 124 versions ahead of your current version
on 2024-08-20
@types/react-dom
from 17.0.25 to 18.3.0 | 39 versions ahead of your current version
on 2024-04-25
postcss
from 7.0.39 to 8.4.41 | 95 versions ahead of your current version
on 2024-08-05
autoprefixer
from 9.8.8 to 10.4.20 | 42 versions ahead of your current version
on 2024-08-02
react-scripts
from 4.0.3 to 5.0.1 | 7 versions ahead of your current version
on 2022-04-12
swr
from 1.3.0 to 2.2.5 | 39 versions ahead of your current version
on 2024-02-15
typescript
from 4.9.5 to 5.5.4 | 595 versions ahead of your current version
on 2024-07-22
web-vitals
from 1.1.2 to 4.2.3 | 64 versions ahead of your current version
on 2024-08-07
Issues fixed by the recommended upgrade:
SNYK-JS-SHELLQUOTE-1766506
SNYK-JS-UNSETVALUE-2400660
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
SNYK-JS-LOADERUTILS-3043105
SNYK-JS-ANSIHTML-1296849
SNYK-JS-NODEFORGE-2430339
SNYK-JS-SEMVER-3247795
SNYK-JS-LODASHTEMPLATE-1088054
SNYK-JS-MICROMATCH-6838728
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-BRACES-6838727
SNYK-JS-EJS-2803307
SNYK-JS-WEBPACK-7840298
SNYK-JS-IP-7148531
SNYK-JS-LOADERUTILS-3042992
SNYK-JS-LOADERUTILS-3105943
SNYK-JS-NODEFORGE-2430341
SNYK-JS-PATHTOREGEXP-7925106
SNYK-JS-PATHTOREGEXP-7925106
SNYK-JS-PROMPTS-1729737
SNYK-JS-MINIMATCH-3050818
SNYK-JS-NODEFORGE-2330875
SNYK-JS-NODEFORGE-2331908
SNYK-JS-NODEFORGE-2430337
SNYK-JS-BROWSERSLIST-1090194
SNYK-JS-EJS-1049328
SNYK-JS-EJS-6689533
SNYK-JS-GLOBPARENT-1016905
SNYK-JS-IMMER-1540542
Release notes
Package name: react
actfromreactf1338fThis release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.
Read the React 19 Upgrade Guide for more info.
React
this.refsto support string ref codemod 909071findDOMNodeoutside StrictMode c3b283test-utilsmethods d4ea75defaultPropsfor function components #25699key#25697actfromtest-utilsd4ea75React DOM
unmountComponentAtNode8a015brenderToStaticNodeStream#28874React DOM
onRecoverableError. (@ gnoff in #24591)documentcausing a blank page on mismatch. (@ gnoff in #24523)setStatein Safari when adding an iframe. (@ gaearon in #24459)React DOM Server
<title>elements to match the browser constraints. (@ gnoff in #24679)highWaterMarkto0. (@ jplhomer in #24641)Server Components (Experimental)
useId()inside Server Components. (@ gnoff) in #24172React DOM
react-dom/clientwhen using UMD bundle. (@ alireza-molaee in #24274)suppressHydrationWarningto work in production too. (@ gaearon in #24271)componentWillUnmountfiring twice inside of Suspense. (@ acdlite in #24308)useDeferredValuecausing an infinite loop when passed an unmemoized value. (@ acdlite in #24247)setStateloop inuseEffect. (@ gaearon in #24298)setStateinuseInsertionEffect. (@ gaearon in #24295)React DOM Server
bootstrapScriptContentcontents. (@ gnoff in #24385)renderToPipeableStream. (@ gnoff in #24291)ESLint Plugin: React Hooks
Use Subscription
use-sync-external-storeshim. (@ gaearon in #24289)Below is a list of all new features, APIs, deprecations, and breaking changes.
Read React 18 release post and React 18 upgrade guide for more information.
New Features
React
useIdis a new hook for generating unique IDs on both the client and server, while avoiding hydration mismatches. It is primarily useful for component libraries integrating with accessibility APIs that require unique IDs. This solves an issue that already exists in React 17 and below, but it’s even more important in React 18 because of how the new streaming server renderer delivers HTML out-of-order.startTransitionanduseTransitionlet you mark some state updates as not urgent. Other state updates are considered urgent by default. React will allow urgent state updates (for example, updating a text input) to interrupt non-urgent state updates (for example, rendering a list of search results).useDeferredValuelets you defer re-rendering a non-urgent part of the tree. It is similar to debouncing, but has a few advantages compared to it. There is no fixed time delay, so React will attempt the deferred render right after the first render is reflected on the screen. The deferred render is interruptible and doesn't block user input.useSyncExternalStoreis a new hook that allows external stores to support concurrent reads by forcing updates to the store to be synchronous. It removes the need foruseEffectwhen implementing subscriptions to external data sources, and is recommended for any library that integrates with state external to React.useInsertionEffectis a new hook that allows CSS-in-JS libraries to address performance issues of injecting styles in render. Unless you’ve already built a CSS-in-JS library we don’t expect you to ever use this. This hook will run after the DOM is mutated, but before layout effects read the new layout. This solves an issue that already exists in React 17 and below, but is even more important in React 18 because React yields to the browser during concurrent rendering, giving it a chance to recalculate layout.React DOM Client
These new APIs are now exported from
react-dom/client:createRoot: New method to create a root torenderorunmount. Use it instead ofReactDOM.render. New features in React 18 don't work without it.hydrateRoot: New method to hydrate a server rendered application. Use it instead ofReactDOM.hydratein conjunction with the new React DOM Server APIs. New features in React 18 don't work without it.Both
createRootandhydrateRootaccept a new option calledonRecoverableErrorin case you want to be notified when React recovers from errors during rendering or hydration for logging. By default, React will usereportError, orconsole.errorin the older browsers.React DOM Server
These new APIs are now exported from
react-dom/serverand have full support for streaming Suspense on the server:renderToPipeableStream: for streaming in Node environments.renderToReadableStream: for modern edge runtime environments, such as Deno and Cloudflare workers.The existing
renderToStringmethod keeps working but is discouraged.Deprecations
react-dom:ReactDOM.renderhas been deprecated. Using it will warn and run your app in React 17 mode.react-dom:ReactDOM.hydratehas been deprecated. Using it will warn and run your app in React 17 mode.react-dom:ReactDOM.unmountComponentAtNodehas been deprecated.react-dom:ReactDOM.renderSubtreeIntoContainerhas been deprecated.react-dom/server:ReactDOMServer.renderToNodeStreamhas been deprecated.Breaking Changes
React
flushSync.<Suspense>boundary in the tree. This ensures the hydrated tree is consistent and avoids potential privacy and security holes that can be ...