[Samples] Move react-scripts
to devDependencies
#4023
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Changelog Entry
react-scripts
todevDependencies
, in PR #4023@azure/storage-blob@12.7.0
base64-arraybuffer@1.0.1
http-proxy-middleware@1.3.1
restify@8.5.1
Description
In our sample and playground, move
react-scripts
todevDependencies
to reduce omissions on vulnerabilities, as suggested by React team.As long as we don't
npm run eject
, it should be good.Also bumping other dependencies in samples.
Design
As mentioned by React team, move
react-scripts
todevDependencies
will reduce some omissions.Specific Changes
npm install --dev react-scripts@latest
on all playground and samples which based oncreate-react-app
I have added tests and executed them locally(relies on CI)CHANGELOG.md
I have updated documentationReview Checklist
Accessibility reviewed (tab order, content readability, alt text, color contrast)Browser and platform compatibilities reviewedCSS styles reviewed (minimal rules, noz-index
)Documents reviewed (docs, samples, live demo)Internationalization reviewed (strings, unit formatting)package.json
andpackage-lock.json
reviewedSecurity reviewed (no data URIs, check for nonce leak)Tests reviewed (coverage, legitimacy)