Skip to content
This repository has been archived by the owner on May 7, 2021. It is now read-only.

[Snyk] Upgrade react-scripts from 3.3.1 to 3.4.0 #1642

Merged
merged 2 commits into from Mar 9, 2020
Merged

[Snyk] Upgrade react-scripts from 3.3.1 to 3.4.0 #1642

merged 2 commits into from Mar 9, 2020

Conversation

snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented Mar 8, 2020

Snyk has created this PR to upgrade react-scripts from 3.3.1 to 3.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2020-02-14.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-DOTPROP-543489		 Proof of Concept
Release notes
Package name: react-scripts from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • 8b0dd54 Publish
  • 5ccee88 Prepare 3.4.0 release
  • e579de1 Downgrade style-loader to v0.23.1 due to CSS modules hot reload… (#8378)
  • 4784997 Correct webpack name casing (#8475)
  • 589b41a update open to v7.0.2 (#8459)
  • 865ea05 fix(typescriptFormatter): use chalk@2 constructor (#8450)
  • d45823c fix(react-scripts): do not redirect served path if request may proxy (#8442)
  • eb8e7be Downgrade chalk for ie 11 support (#8439)
  • 767aa18 Fixes unchecked access to 'deploy' script on build (#8292)
  • cd2469e Fix navbar line break in header (#8437)
  • 687c4eb Change arrow functions to function declarations (#8412)
  • 1cbc6f7 feat(react-scripts): allow PUBLIC_URL in develoment mode (#7259)
  • 3190e4f Handle service worker error in Firefox (#8272)
  • 0299c0e Add option to provide custom ssl certificates during development (#5845)
  • 822422c Enable custom sockjs pathname for hot reloading server. (#7750)
  • cc985d0 Support JetBrains Rider IDE as an editor (#7948)
  • 84d8b14 Run git init before template dependencies are installed (#8282)
  • 9233caf Update public folder usage docs to clarify globals (#8299)
  • 1959131 Fix robots.txt for TS (#8403)
  • 0db04ec setupTestFrameworkScriptFile is deprecated (#8390)
  • 325e599 fix(test): force install npm in e2e-behaviour (#8402)
  • d2de54b Wider Chromium support for openBrowser (#8367)
  • d9e05f9 Update commit message to use imperative mood (#8377)
  • fb9745e Make the PWA link point to the right place (#8379)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@sastels sastels temporarily deployed to rac-prototyp-snyk-upgra-fw26rn March 8, 2020 05:55 Inactive
@sastels sastels temporarily deployed to rac-prototyp-snyk-upgra-fw26rn March 9, 2020 23:28 Inactive
@sastels sastels merged commit 247b48d into master Mar 9, 2020
@sastels sastels deleted the snyk-upgrade-ec8b256029e1fa6b7175393fe9ad2866 branch March 9, 2020 23:36
sastels added a commit that referenced this pull request Mar 19, 2020
@sastels
Merge pull request #1699 from cds-snc/master
8063d3a 
* Minor copy change (typo) (#1639)

* extract data from formidable manually (#1641)

* fix: upgrade mongodb from 3.5.2 to 3.5.3 (#1632)

* fix: upgrade react-scripts from 3.3.1 to 3.4.0 (#1642)

* Fix for Logs in another Azure Subscription (#1619)

* Updating IMAGE_NAME reference (#1597)

* change GNCC to GNC3 (#1655)

* use redirect for equifax links (#1651)

* clear file input after alert (#1662)

* fix keyboard nav (#1660)

* add moneyLost.methodOther field to analyst report (#1647)

* more detailed p and text stories (#1643)

* added stuff to sb docs (#1671)

* added getting started page to storybook (#1661)

* FIX CORS for HTTPS (#1665) (#1669)

* clean up logging a bit (#1663)

* tweak skiplink style (#1658)

* fix target area for upload button (#1653)

* change "go back" button's height to the same height as "cancel report" button (#1666)

* added Messages component.  (#1644)

* fix: upgrade async from 3.1.1 to 3.2.0 (#1680)

* Reports a day counter (#1664)

* Form validation - bump (#1510)

* added helmet in server.js (#1674)

* Combine analyst emails (#1628)

* Prod version number (#1656)

* Fixed Field, added container and layout to sb (#1675)

* Get email addresses from ldap query (#1682)

* restrict file number and size on server (#1648)

* remove submit button if already submitted (#1683)

* Fix for Continuous Deployment (#1690)

* Validation for location fields (#1689)

* cypress pack initial commit (#1247)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Reviewers

@sastels sastels sastels approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@snyk-bot @sastels