Skip to content
This repository has been archived by the owner on Jun 19, 2020. It is now read-only.

[Snyk] Upgrade react-scripts from 3.4.0 to 3.4.1 #12

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade react-scripts from 3.4.0 to 3.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2020-03-21.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
Proof of Concept
Release notes
Package name: react-scripts
  • 3.4.1 - 2020-03-21

    3.4.1 (2020-03-20)

    v3.4.1 is a maintenance release that includes minor bug fixes and documentation updates including upgrading Babel to fix a bug in the 7.8 release line. This release also brings support for TypeScript 3.8.

    🐛 Bug Fix

    • react-scripts
    • babel-preset-react-app
    • cra-template, eslint-config-react-app, react-scripts
      • #7790 Widen eslint-config-react-app peer dependency versions (@lukyth)

    💅 Enhancement

    • cra-template-typescript, cra-template
    • react-scripts

    📝 Documentation

    • Other
      • #8515 Fix proxying API request docs (@hjr3)
      • #8561 Indicate that the file structure is the template's (@Vinnl)
    • react-scripts

    🔨 Underlying Tools

    • babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
    • react-scripts

    Committers: 9

    Migrating from 3.4.0 to 3.4.1

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact [email protected]

    or

    yarn add --exact [email protected]
  • 3.4.0 - 2020-02-14

    3.4.0 (2020-02-14)

    v3.4.0 is a minor release that adds new features, including support for SSL and setting PUBLIC_URL in development. It also includes a fix for Hot Module Reloading with CSS Modules as well as other bug fixes.

    🐛 Bug Fix

    • react-scripts
      • #8378 Downgrade style-loader to v0.23.1 due to CSS modules hot reload not working with v1.0.0 and above (@chybisov)
    • create-react-app, react-dev-utils, react-error-overlay
    • react-dev-utils
    • cra-template-typescript, cra-template
    • cra-template-typescript

    💅 Enhancement

    • react-dev-utils, react-scripts
    • cra-template-typescript
    • cra-template-typescript, cra-template
    • react-scripts
      • #5845 Add option to provide custom ssl certificates during development (@alexbrazier)

    📝 Documentation

    • cra-template-typescript, cra-template, react-dev-utils, react-error-overlay, react-scripts
    • Other

    🔨 Underlying Tools

    Committers: 18

    Migrating from 3.3.1 to 3.4.0

    Inside any created project that has not been ejected, run:

    npm install --save --save-exact [email protected]

    or

    yarn add --exact [email protected]
from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • d2f813f Publish
  • 7641a3c Prepare 3.4.1 release
  • d5b527f Update to Babel 7.9 (#8681)
  • 6adb82a Add React.StrictMode to default templates (#8558)
  • a452ddc Bump dependencies (#8620)
  • 3f699fd Fix proxying API request docs (#8515)
  • 4d26208 Use native ESLint behaviour when extending (#8276)
  • 8ba0ccb Whitelist main in template.json (#8539)
  • 7d3b72c Update template example in docs (#8561)
  • 2030ee1 Fix optional chaining and nullish coalescing support (#8526)
  • 038e6fa Widen eslint-config-react-app peer dependency versions (#7790)
  • 7e6d6cd Closes webpack dev server and exits process on "end" stdin (#7203)
  • af926d5 Bump pnp-webpack-plugin (#8509)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant