Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency react-scripts to v3.4.4 - autoclosed #27

Closed
wants to merge 1 commit into from
Closed

Update dependency react-scripts to v3.4.4 - autoclosed #27

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Aug 30, 2023 •
edited

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
react-scripts 3.0.1 -> 3.4.4 age adoption passing confidence

This PR resolves the vulnerabilities described in Issue #24

Version 3.0.1
Risk Change Critical High Medium Low
N/A 19 45 28 0
Version 3.4.4
Risk Change Critical High Medium Low
-74% 5 (-14 ) 12 (-33 ) 7 (-21 ) 0 (--)

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

This PR resolves the vulnerabilities described in Issue #24

Version 3.0.1
Risk Change Critical High Medium Low
N/A 19 45 28 0
Version 3.4.4
Risk Change Critical High Medium Low
-74% 5 (-14 ) 12 (-33 ) 7 (-21 ) 0 (--)

Mend ensures you have the greatest risk reduction ("Recommended Fix"-highlighted in green) by removing as many vulnerabilities as possible. Click to see how we calculate risk reduction.

Release Notes

facebook/create-react-app (react-scripts)

v3.4.4

Compare Source

3.4.4 (2020-10-20)

v3.4.4 release bumps resolve-url-loader to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.3 to 3.4.4

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.4

or

yarn add --exact react-scripts@3.4.4

v3.4.3

Compare Source

3.4.3 (2020-08-12)

v3.4.3 release bumps terser-webpack-plugin to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.2 to 3.4.3

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.3

or

yarn add --exact react-scripts@3.4.3

v3.4.2

Compare Source

3.4.2 (2020-08-11)

v3.4.2 release bumps webpack-dev-server to a version for which npm audit does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.

Migrating from 3.4.1 to 3.4.2

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.2

or

yarn add --exact react-scripts@3.4.2

v3.4.1

Compare Source

3.4.1 (2020-03-20)

v3.4.1 is a maintenance release that includes minor bug fixes and documentation updates including upgrading Babel to fix a bug in the 7.8 release line. This release also brings support for TypeScript 3.8.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🔨 Underlying Tools
Committers: 9
Migrating from 3.4.0 to 3.4.1

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.1

or

yarn add --exact react-scripts@3.4.1

v3.4.0

Compare Source

3.4.0 (2020-02-14)

v3.4.0 is a minor release that adds new features, including support for SSL and setting PUBLIC_URL in development. It also includes a fix for Hot Module Reloading with CSS Modules as well as other bug fixes.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🔨 Underlying Tools
Committers: 18
Migrating from 3.3.1 to 3.4.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.4.0

or

yarn add --exact react-scripts@3.4.0

v3.3.1

Compare Source

3.3.1 (2020-01-31)

v3.3.1 is a maintenance release that includes minor bug fixes and documentation updates.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 29
Migrating from 3.3.0 to 3.3.1

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.3.1

or

yarn add --exact react-scripts@3.3.1

v3.3.0

Compare Source

3.3.0 (2019-12-04)

v3.3.0 is a minor release that adds new features, including custom templates and support for the new optional chaining and nullish coalescing operators.

Custom Templates

You can now create a new app using custom templates.

We've published our existing templates as cra-template and cra-template-typescript, but we expect to see many great templates from the community over the coming weeks.

The below command shows how you can create a new app with cra-template-typescript.

npx create-react-app my-app --template typescript

Note that you can omit the prefix cra-template- when specifying which template you would like. For TypeScript users, we're deprecating --typescript in favour of --template typescript.

If you don't set a template, we'll create your new app with cra-template - which is just a new name for our base template.

Optional Chaining and Nullish Coalescing Operators

We now support the optional chaining and nullish coalescing operators!

// Optional chaining
a?.(); // undefined if `a` is null/undefined
b?.c; // undefined if `b` is null/undefined

// Nullish coalescing
undefined ?? 'some other default'; // result: 'some other default'
null ?? 'some other default'; // result: 'some other default'
'' ?? 'some other default'; // result: ''
0 ?? 300; // result: 0
false ?? true; // result: false

If you're using TypeScript, you will need to upgrade your typescript dependency to 3.7.0 or later if you wish to use the new operators.

If you're using Visual Studio Code 1.40 (the latest as of this release) or earlier, you will need to configure your editor if you want it to understand the new operators.

If you're using TypeScript in your project and have already upgrade its version as described above, then you can configure VS Code to Use Workspace Version of TypeScript. If your project isn't using TypeScript, you can use the JavaScript and TypeScript Nightly extension until VS Code releases a newer version including TypeScript 3.7.0 or newer.

Numeric Separators

We've added support for numeric separators to improve readability of numeric literals.

1000000000; // Is this a billion? a hundred millions? Ten millions?
101475938.38; // what scale is this? what power of 10?

1_000_000_000; // Ah, so a billion
101_475_938.38; // And this is hundreds of millions
no-unexpected-multiline

We've removed this rule as it is not compatible with Prettier. If you rely on this rule you can re-enable it by extending our ESLint config and adding the following:

{
  "extends": "react-app",
  "rules": {
    "no-unexpected-multiline": "warn"
  }
}
🚀 New Feature
  • babel-preset-react-app
  • babel-preset-react-app, react-dev-utils
  • cra-template-typescript, cra-template, create-react-app, react-scripts
💥 Breaking Change

  • create-react-app, react-dev-utils, react-scripts

    • #​7988 Bump webpack-dev-server (@​ianschmitz)

      NOTE: This is only a breaking change if you're using react-dev-utils outside of Create React App.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 42
Migrating from 3.2.0 to 3.3.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.3.0

or

yarn add --exact react-scripts@3.3.0

v3.2.0

Compare Source

3.2.0 (2019-10-03)

v3.2.0 is a minor release that adds support for production profiling and ignoring TypeScript type errors to make migrating JavaScript projects to TypeScript easier. It also includes other minor bug fixes and documentation updates.

🚀 New Feature
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 19

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 30, 2023
@mend-for-github-com mend-for-github-com bot changed the title Update dependency react-scripts to v3.4.4 Update dependency react-scripts to v3.4.4 - autoclosed Nov 29, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/react-scripts-3.x branch November 29, 2023 08:25
@mend-for-github-com mend-for-github-com bot changed the title Update dependency react-scripts to v3.4.4 - autoclosed Update dependency react-scripts to v3.4.4 Dec 5, 2023
@mend-for-github-com mend-for-github-com bot reopened this Dec 5, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/react-scripts-3.x branch December 5, 2023 01:20
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/react-scripts-3.x branch from 42de3d5 to 8bd4c0d Compare December 5, 2023 01:21
@mend-for-github-com mend-for-github-com bot changed the title Update dependency react-scripts to v3.4.4 Update dependency react-scripts to v3.4.4 - autoclosed Dec 7, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/react-scripts-3.x branch December 7, 2023 07:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by Mend
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants