Skip to content
This repository has been archived by the owner on May 5, 2021. It is now read-only.

[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.1 #169

Merged
merged 2 commits into from
Mar 23, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 2 days ago, on 2020-03-21.

The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Release notes
Package name: react-scripts
  • 3.4.1 - 2020-03-21

    3.4.1 (2020-03-20)

    v3.4.1 is a maintenance release that includes minor bug fixes and documentation updates including upgrading Babel to fix a bug in the 7.8 release line. This release also brings support for TypeScript 3.8.

    🐛 Bug Fix

    • react-scripts
    • babel-preset-react-app
    • cra-template, eslint-config-react-app, react-scripts
      • #7790 Widen eslint-config-react-app peer dependency versions (@lukyth)

    💅 Enhancement

    • cra-template-typescript, cra-template
    • react-scripts

    📝 Documentation

    • Other
      • #8515 Fix proxying API request docs (@hjr3)
      • #8561 Indicate that the file structure is the template's (@Vinnl)
    • react-scripts

    🔨 Underlying Tools

    • babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
    • react-scripts

    Committers: 9

    Migrating from 3.4.0 to 3.4.1

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact react-scripts@3.4.1

    or

    yarn add --exact react-scripts@3.4.1
  • 3.4.0 - 2020-02-14

    3.4.0 (2020-02-14)

    v3.4.0 is a minor release that adds new features, including support for SSL and setting PUBLIC_URL in development. It also includes a fix for Hot Module Reloading with CSS Modules as well as other bug fixes.

    🐛 Bug Fix

    • react-scripts
      • #8378 Downgrade style-loader to v0.23.1 due to CSS modules hot reload not working with v1.0.0 and above (@chybisov)
    • create-react-app, react-dev-utils, react-error-overlay
    • react-dev-utils
    • cra-template-typescript, cra-template
    • cra-template-typescript

    💅 Enhancement

    • react-dev-utils, react-scripts
    • cra-template-typescript
    • cra-template-typescript, cra-template
    • react-scripts
      • #5845 Add option to provide custom ssl certificates during development (@alexbrazier)

    📝 Documentation

    • cra-template-typescript, cra-template, react-dev-utils, react-error-overlay, react-scripts
    • Other

    🔨 Underlying Tools

    Committers: 18

    Migrating from 3.3.1 to 3.4.0

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact react-scripts@3.4.0

    or

    yarn add --exact react-scripts@3.4.0
from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • d2f813f Publish
  • 7641a3c Prepare 3.4.1 release
  • d5b527f Update to Babel 7.9 (#8681)
  • 6adb82a Add React.StrictMode to default templates (#8558)
  • a452ddc Bump dependencies (#8620)
  • 3f699fd Fix proxying API request docs (#8515)
  • 4d26208 Use native ESLint behaviour when extending (#8276)
  • 8ba0ccb Whitelist main in template.json (#8539)
  • 7d3b72c Update template example in docs (#8561)
  • 2030ee1 Fix optional chaining and nullish coalescing support (#8526)
  • 038e6fa Widen eslint-config-react-app peer dependency versions (#7790)
  • 7e6d6cd Closes webpack dev server and exits process on "end" stdin (#7203)
  • af926d5 Bump pnp-webpack-plugin (#8509)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@ztoben ztoben merged commit ef972dc into master Mar 23, 2020
@ztoben ztoben deleted the snyk-upgrade-add092a34daa28b21997a689ba44a042 branch March 23, 2020 17:02
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants