Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Samples] Move react-scripts to devDependencies #4023

Merged
merged 6 commits into from
Aug 27, 2021

Conversation

compulim
Copy link
Contributor

@compulim compulim commented Aug 12, 2021

Fixes #4017.

Changelog Entry

Description

In our sample and playground, move react-scripts to devDependencies to reduce omissions on vulnerabilities, as suggested by React team.

As long as we don't npm run eject, it should be good.

Also bumping other dependencies in samples.

Design

As mentioned by React team, move react-scripts to devDependencies will reduce some omissions.

Specific Changes

  • Run npm install --dev react-scripts@latest on all playground and samples which based on create-react-app
  • In samples, bump deps to same major
    • We should consider adding automated tests for samples, so it's much safer to bump to new major
  • I have added tests and executed them locally (relies on CI)
  • I have updated CHANGELOG.md
  • I have updated documentation

Review Checklist

This section is for contributors to review your work.

  • Accessibility reviewed (tab order, content readability, alt text, color contrast)
  • Browser and platform compatibilities reviewed
  • CSS styles reviewed (minimal rules, no z-index)
  • Documents reviewed (docs, samples, live demo)
  • Internationalization reviewed (strings, unit formatting)
  • package.json and package-lock.json reviewed
  • Security reviewed (no data URIs, check for nonce leak)
  • Tests reviewed (coverage, legitimacy)

@compulim compulim marked this pull request as ready for review August 12, 2021 22:33
@compulim compulim merged commit 5390f5c into microsoft:main Aug 27, 2021
@compulim compulim deleted the feat-move-react-scripts branch August 27, 2021 05:12
@compulim compulim mentioned this pull request Sep 2, 2021
11 tasks
compulim added a commit to compulim/BotFramework-WebChat that referenced this pull request Sep 9, 2021
* Move react-scripts in samples to devDependencies

* Move react-scripts to devDependencies

* Bump deps on samples

* Bump http-proxy-middleware

* Add entry

* Update entry
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Move react-scripts to devDependencies
2 participants