Skip to content
This repository has been archived by the owner on Apr 6, 2020. It is now read-only.

[Snyk] Upgrade react-scripts from 3.3.0 to 3.4.0 #5

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 3, 2020

Snyk has created this PR to upgrade react-scripts from 3.3.0 to 3.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 2 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2020-02-14.

The recommended version fixes:

Severity Issue Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ACORN-559469
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-HAPIHOEK-548452
No Known Exploit
Prototype Pollution
SNYK-JS-DOTPROP-543489
Proof of Concept
Release notes
Package name: react-scripts
  • 3.4.0 - 2020-02-14

    3.4.0 (2020-02-14)

    v3.4.0 is a minor release that adds new features, including support for SSL and setting PUBLIC_URL in development. It also includes a fix for Hot Module Reloading with CSS Modules as well as other bug fixes.

    🐛 Bug Fix

    • react-scripts
      • #8378 Downgrade style-loader to v0.23.1 due to CSS modules hot reload not working with v1.0.0 and above (@chybisov)
    • create-react-app, react-dev-utils, react-error-overlay
    • react-dev-utils
    • cra-template-typescript, cra-template
    • cra-template-typescript

    💅 Enhancement

    • react-dev-utils, react-scripts
    • cra-template-typescript
    • cra-template-typescript, cra-template
    • react-scripts
      • #5845 Add option to provide custom ssl certificates during development (@alexbrazier)

    📝 Documentation

    • cra-template-typescript, cra-template, react-dev-utils, react-error-overlay, react-scripts
    • Other

    🔨 Underlying Tools

    Committers: 18

    Migrating from 3.3.1 to 3.4.0

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact [email protected]

    or

    yarn add --exact [email protected]
  • 3.3.1 - 2020-01-31
  • 3.3.0 - 2019-12-05
from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • 8b0dd54 Publish
  • 5ccee88 Prepare 3.4.0 release
  • e579de1 Downgrade style-loader to v0.23.1 due to CSS modules hot reload… (#8378)
  • 4784997 Correct webpack name casing (#8475)
  • 589b41a update open to v7.0.2 (#8459)
  • 865ea05 fix(typescriptFormatter): use chalk@2 constructor (#8450)
  • d45823c fix(react-scripts): do not redirect served path if request may proxy (#8442)
  • eb8e7be Downgrade chalk for ie 11 support (#8439)
  • 767aa18 Fixes unchecked access to 'deploy' script on build (#8292)
  • cd2469e Fix navbar line break in header (#8437)
  • 687c4eb Change arrow functions to function declarations (#8412)
  • 1cbc6f7 feat(react-scripts): allow PUBLIC_URL in develoment mode (#7259)
  • 3190e4f Handle service worker error in Firefox (#8272)
  • 0299c0e Add option to provide custom ssl certificates during development (#5845)
  • 822422c Enable custom sockjs pathname for hot reloading server. (#7750)
  • cc985d0 Support JetBrains Rider IDE as an editor (#7948)
  • 84d8b14 Run git init before template dependencies are installed (#8282)
  • 9233caf Update public folder usage docs to clarify globals (#8299)
  • 1959131 Fix robots.txt for TS (#8403)
  • 0db04ec setupTestFrameworkScriptFile is deprecated (#8390)
  • 325e599 fix(test): force install npm in e2e-behaviour (#8402)
  • d2de54b Wider Chromium support for openBrowser (#8367)
  • d9e05f9 Update commit message to use imperative mood (#8377)
  • fb9745e Make the PWA link point to the right place (#8379)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant