[Snyk] Upgrade: react, react-dom, react-scripts #2

blrobin2 · 2024-09-07T05:33:53Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

react
from 16.8.6 to 16.14.0 | 11 versions ahead of your current version | 4 years ago
on 2020-10-14
react-dom
from 16.8.6 to 16.14.0 | 11 versions ahead of your current version | 4 years ago
on 2020-10-14
react-scripts
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | 2 years ago
on 2022-04-12

Release notes

Package name: react

16.14.0 - 2020-10-14
React
- Add support for the new JSX transform. (@ lunaruan in #18299)
16.13.1 - 2020-03-19
React DOM
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)
Artifacts
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/
16.13.0 - 2020-02-26
React
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@ lunaruan in #17864)
- Deprecate React.createFactory() (@ trueadm in #17878)
React DOM
- Warn when changes in style may cause an unexpected collision (@ sophiebits in #14181, #18002)
- Warn when a function component is updated during another component's render phase (@ acdlite in #17099)
- Deprecate unstable_createPortal (@ trueadm in #17880)
- Fix onMouseEnter being fired on disabled buttons (@ AlfredoGJ in #17675)
- Call shouldComponentUpdate twice when developing in StrictMode (@ bvaughn in #17942)
- Add version property to ReactDOM (@ ealush in #15780)
- Don't call toString() of dangerouslySetInnerHTML (@ sebmarkbage in #17773)
- Show component stacks in more warnings (@ gaearon in #17922, #17586)
Concurrent Mode (Experimental)
- Warn for problematic usages of ReactDOM.createRoot() (@ trueadm in #17937)
- Remove ReactDOM.createRoot() callback params and added warnings on usage (@ bvaughn in #17916)
- Don't group Idle/Offscreen work with other work (@ sebmarkbage in #17456)
- Adjust SuspenseList CPU bound heuristic (@ sebmarkbage in #17455)
- Add missing event plugin priorities (@ trueadm in #17914)
- Fix isPending only being true when transitioning from inside an input event (@ acdlite in #17382)
- Fix React.memo components dropping updates when interrupted by a higher priority update (@ acdlite in #18091)
- Don't warn when suspending at the wrong priority (@ gaearon in #17971)
- Fix a bug with rebasing updates (@ acdlite and @ sebmarkbage in #17560, #17510, #17483, #17480)
Artifacts
- react: https://unpkg.com/react@16.13.0/umd/
- react-art: https://unpkg.com/react-art@16.13.0/umd/
- react-dom: https://unpkg.com/react-dom@16.13.0/umd/
- react-is: https://unpkg.com/react-is@16.13.0/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.0/umd/
- scheduler: https://unpkg.com/scheduler@0.19.0/umd/
16.12.0 - 2019-11-14
React DOM
- Fix passive effects (useEffect) not being fired in a multi-root app. (@ acdlite in #17347)
React Is
- Fix lazy and memo types considered elements instead of components (@ bvaughn in #17278)
Artifacts

• react: https://unpkg.com/react@16.12.0/umd/
• react-art: https://unpkg.com/react-art@16.12.0/umd/
• react-dom: https://unpkg.com/react-dom@16.12.0/umd/
• react-is: https://unpkg.com/react-is@16.12.0/umd/
• react-test-renderer: https://unpkg.com/react-test-renderer@16.12.0/umd/
• scheduler: https://unpkg.com/scheduler@0.18.0/umd/
16.11.0 - 2019-10-22
16.10.2 - 2019-10-03
16.10.1 - 2019-09-28
16.10.0 - 2019-09-27
16.9.0 - 2019-08-08
16.9.0-rc.0 - 2019-08-05
16.9.0-alpha.0 - 2019-04-03
16.8.6 - 2019-03-28

from react GitHub release notes

Package name: react-dom

16.14.0 - 2020-10-14
React
- Add support for the new JSX transform. (@ lunaruan in #18299)
16.13.1 - 2020-03-19
React DOM
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)
Artifacts
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/
16.13.0 - 2020-02-26
React
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@ lunaruan in #17864)
- Deprecate React.createFactory() (@ trueadm in #17878)
React DOM
- Warn when changes in style may cause an unexpected collision (@ sophiebits in #14181, #18002)
- Warn when a function component is updated during another component's render phase (@ acdlite in #17099)
- Deprecate unstable_createPortal (@ trueadm in #17880)
- Fix onMouseEnter being fired on disabled buttons (@ AlfredoGJ in #17675)
- Call shouldComponentUpdate twice when developing in StrictMode (@ bvaughn in #17942)
- Add version property to ReactDOM (@ ealush in #15780)
- Don't call toString() of dangerouslySetInnerHTML (@ sebmarkbage in #17773)
- Show component stacks in more warnings (@ gaearon in #17922, #17586)
Concurrent Mode (Experimental)
- Warn for problematic usages of ReactDOM.createRoot() (@ trueadm in #17937)
- Remove ReactDOM.createRoot() callback params and added warnings on usage (@ bvaughn in #17916)
- Don't group Idle/Offscreen work with other work (@ sebmarkbage in #17456)
- Adjust SuspenseList CPU bound heuristic (@ sebmarkbage in #17455)
- Add missing event plugin priorities (@ trueadm in #17914)
- Fix isPending only being true when transitioning from inside an input event (@ acdlite in #17382)
- Fix React.memo components dropping updates when interrupted by a higher priority update (@ acdlite in #18091)
- Don't warn when suspending at the wrong priority (@ gaearon in #17971)
- Fix a bug with rebasing updates (@ acdlite and @ sebmarkbage in #17560, #17510, #17483, #17480)
Artifacts
- react: https://unpkg.com/react@16.13.0/umd/
- react-art: https://unpkg.com/react-art@16.13.0/umd/
- react-dom: https://unpkg.com/react-dom@16.13.0/umd/
- react-is: https://unpkg.com/react-is@16.13.0/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.0/umd/
- scheduler: https://unpkg.com/scheduler@0.19.0/umd/
16.12.0 - 2019-11-14
React DOM
- Fix passive effects (useEffect) not being fired in a multi-root app. (@ acdlite in #17347)
React Is
- Fix lazy and memo types considered elements instead of components (@ bvaughn in #17278)
Artifacts

• react: https://unpkg.com/react@16.12.0/umd/
• react-art: https://unpkg.com/react-art@16.12.0/umd/
• react-dom: https://unpkg.com/react-dom@16.12.0/umd/
• react-is: https://unpkg.com/react-is@16.12.0/umd/
• react-test-renderer: https://unpkg.com/react-test-renderer@16.12.0/umd/
• scheduler: https://unpkg.com/scheduler@0.18.0/umd/
16.11.0 - 2019-10-22
16.10.2 - 2019-10-03
16.10.1 - 2019-09-28
16.10.0 - 2019-09-27
16.9.0 - 2019-08-08
16.9.0-rc.0 - 2019-08-05
16.9.0-alpha.0 - 2019-04-03
16.8.6 - 2019-03-28

from react-dom GitHub release notes

Package name: react-scripts

5.0.1 - 2022-04-12
5.0.1 (2022-04-12)

Create React App 5.0.1 is a maintenance release that improves compatibility with React 18. We've also updated our templates to use createRoot and relaxed our check for older versions of Create React App.

Migrating from 5.0.0 to 5.0.1

Inside any created project that has not been ejected, run:
```
npm install --save --save-exact react-scripts@5.0.1
```
or
```
yarn add --exact react-scripts@5.0.1
```
🐛 Bug Fix
- react-scripts
  - #12245 fix: webpack noise printed only if error or warning (@ Andrew47)
- create-react-app
  - #11915 Warn when not using the latest version of create-react-app but do not exit (@ iansu)
- react-dev-utils
  - #11640 Ensure posix compliant joins for urls in middleware (@ psiservices-justin-sullard)
💅 Enhancement
- cra-template-typescript, cra-template, react-scripts
  - #12220 Update templates to use React 18 createRoot (@ kyletsang)
- cra-template-typescript, cra-template
  - #12223 chore: upgrade rtl version to support react 18 (@ MatanBobi)
- eslint-config-react-app
  - #11622 updated deprecated rules (@ wisammechano)
📝 Documentation
- #11594 Fix a typo in deployment.md (@ fishmandev)
- #11805 docs: Changelog 5.0.0 (@ jafin)
- #11757 prevent both npm and yarn commands from being copied (@ mubarakn)
🏠 Internal
- #11985 Ignore docs when publishing (@ iansu)
Committers: 11
- Andrew Burnie (@ Andrew47)
- Clément Vannicatte (@ shortcuts)
- Dmitriy Fishman (@ fishmandev)
- Dmitry Vinnik (@ dmitryvinn)
- Ian Sutherland (@ iansu)
- Jason Finch (@ jafin)
- Kyle Tsang (@ kyletsang)
- Matan Borenkraout (@ MatanBobi)
- Wisam Naji (@ wisammechano)
- @ mubarakn
- @ psiservices-justin-sullard
5.0.0 - 2021-12-14
v5.0.0 (2021-12-14)

Create React App 5.0 is a major release with several new features and the latest version of all major dependencies.

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

Highlights
- webpack 5 (#11201)
- Jest 27 (#11338)
- ESLint 8 (#11375)
- PostCSS 8 (#11121)
- Fast Refresh improvements and bug fixes (#11105)
- Support for Tailwind (#11717)
- Improved package manager detection (#11322)
- Unpinned all dependencies for better compatibility with other tools (#11474)
- Dropped support for Node 10 and 12
Migrating from 4.0.x to 5.0.0

Inside any created project that has not been ejected, run:
```
npm install --save --save-exact react-scripts@5.0.0
```
or
```
yarn add --exact react-scripts@5.0.0
```
NOTE: You may need to delete your node_modules folder and reinstall your dependencies by running npm install (or yarn) if you encounter errors after upgrading.

If you previously ejected but now want to upgrade, one common solution is to find the commits where you ejected (and any subsequent commits changing the configuration), revert them, upgrade, and later optionally eject again. It’s also possible that the feature you ejected for is now supported out of the box.

Breaking Changes

Like any major release, react-scripts@5.0.0 contains a number of breaking changes. We expect that they won't affect every user, but we recommend you look over this section to see if something is relevant to you. If we missed something, please file a new issue.

Dropped support for Node 10 and 12

Node 10 reached End-of-Life in April 2021 and Node 12 will be End-of-Life in April 2022. Going forward we will only support the latest LTS release of Node.js.

Full Changelog

💥 Breaking Change
- create-react-app
  - #11322 Use env var to detect yarn or npm as the package manager (@ lukekarrys)
- babel-preset-react-app, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  - #11201 Webpack 5 (@ raix)
- eslint-config-react-app, react-error-overlay, react-scripts
  - #10761 chore: migrate to @ babel/eslint-parser (@ JLHwung)
- react-scripts
  - #11188 Deprecate root level template.json keys (@ mrmckeb)
🐛 Bug Fix
- react-scripts
  - #11413 fix(webpackDevServer): disable overlay for warnings (@ jawadsh123)
  - #10511 Fix ICSS syntax in stylesheets (@ thabemmz)
💅 Enhancement
- react-scripts
  - #11717 Add support for Tailwind (@ iansu)
  - #8227 Add source-map-loader for debugging into original source of node_modules libraries that contain sourcemaps (@ justingrant)
  - #10499 Remove ESLint verification when opting-out (@ mrmckeb)
- eslint-config-react-app, react-error-overlay, react-scripts
  - #11375 feat(eslint-config-react-app): support ESLint 8.x (@ MichaelDeBoey)
- create-react-app
  - #11322 Use env var to detect yarn or npm as the package manager (@ lukekarrys)
  - #11057 Coerce Node versions with metadata (@ mrmckeb)
- react-dev-utils
  - #11105 fix: fast refresh stops on needed bail outs (@ pmmmwh)
  - #10205 Update ModuleNotFoundPlugin to support Webpack 5 (@ raix)
- create-react-app, react-scripts
  - #11176 Run npm with --no-audit (@ gaearon)
📝 Documentation
- Other
  - #11619 The default port used by serve has changed (@ leo)
  - #10907 Fix link address (@ e-w-h)
  - #10805 Update PWA docs to point at the cra-template-pwa package (@ slieschke)
  - #10631 Update IMAGE_INLINE_SIZE_LIMIT docs (@ ianschmitz)
- eslint-config-react-app
  - #10317 eslint-config-react-app typo fix (@ Spacerat)
- react-dev-utils
  - #10779 Suggest sass instead of node-sass package (@ andrewywong)
- babel-preset-react-app, eslint-config-react-app
  - #10288 Upgrade docs http links to https (@ xom9ikk)
- cra-template
  - #10763 Trivial English fixes (@ ujihisa)
🏠 Internal
- Other
  - #11723 chore(test): make all tests install with npm ci (@ lukekarrys)
  - #11686 [WIP] Fix integration test teardown / cleanup and missing yarn installation (@ raix)
  - #11252 Remove package-lock.json (@ Methuselah96)
- create-react-app
  - #11706 Remove cached lockfile (@ lukekarrys)
- babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, create-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  - #11624 Update all dependencies (@ jd1048576)
- react-scripts
  - #11597 Update package.json (@ HADMARINE)
  - #11292 fix: dependency issue after workbox-webpack-plugin 6.2 release (@ fguitton)
  - #11188 Deprecate root level template.json keys (@ mrmckeb)
  - #10784 Remove outdated comments on react-refresh (@ luk3kang)
- babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, eslint-config-react-app, react-dev-utils, react-error-overlay, react-scripts
  - #11474 Remove dependency pinning (@ mrmckeb)
- confusing-browser-globals, cra-template-typescript, cra-template, create-react-app
  - #11415 Bump template dependency version (@ shfshanyue)
- react-error-overlay, react-scripts
  - #11304 Use npm v7 with workspaces for local development and testing (@ lukekarrys)
- babel-preset-react-app, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  - #11201 Webpack 5 (@ raix)
🔨 Underlying Tools
- react-dev-utils, react-scripts
  - #11476 Bump browserslist from 4.14.2 to 4.16.5 (@ dependabot[bot])
- react-scripts
  - #11325 allow CORS on webpack-dev-server (@ hasanayan)
  - #11121 Update PostCSS version (@ mrmckeb)
  - #10204 Update WebpackManifestPlugin (@ raix)
  - #10456 Update PostCSS packages (@ raix)
- babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  - #11338 Upgrade jest and related packages from 26.6.0 to 27.1.0 (@ krreet)
- eslint-config-react-app, react-error-overlay, react-scripts
  - #10761 chore: migrate to @ babel/eslint-parser (@ JLHwung)
- babel-preset-react-app, react-dev-utils, react-error-overlay, react-scripts
  - #10797 Unpin babel dependencies (@ mohd-akram)
- react-dev-utils
  - #10791 Bump immer version for fixing security issue (@ shamprasadrh)
Committers: 34
- Andrew Wong (@ andrewywong)
- Brody McKee (@ mrmckeb)
- Christiaan van Bemmel (@ thabemmz)
- Dan Abramov (@ gaearon)
- Florian Guitton (@ fguitton)
- Hasan Ayan (@ hasanayan)
- Huáng Jùnliàng (@ JLHwung)
- Ian Schmitz (@ ianschmitz)
- Ian Sutherland (@ iansu)
- James George (@ jamesgeorge007)
- Jason Williams (@ jasonwilliams)
- Jawad (@ jawadsh123)
- Joseph Atkins-Turkish (@ Spacerat)
- Justin Grant (@ justingrant)
- Konrad Stępniak (@ th7nder)
- Kristoffer K. (@ merceyz)
- Leo Lamprecht (@ leo)
- Luke Karrys (@ lukekarrys)
- Max Romanyuta (@ xom9ikk)
- Michael Mok (@ pmmmwh)
- Michaël De Boey (@ MichaelDeBoey)
- Mohamed Akram (@ mohd-akram)
- Morten N.O. Nørgaard Henriksen (@ raix)
- Nathan Bierema (@ Methuselah96)
- Reetesh Kumar (@ krreet)
- Shamprasad RH (@ shamprasadrh)
- Simon Lieschke (@ slieschke)
- @ e-w-h
- @ jd1048576
- @ luk3kang
- @ ujihisa
- hadmarine (@ HADMARINE)
- huntr.dev | the place to protect open source (@ huntr-helper)

from react-scripts GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - react from 16.8.6 to 16.14.0. See this package in npm: https://www.npmjs.com/package/react - react-dom from 16.8.6 to 16.14.0. See this package in npm: https://www.npmjs.com/package/react-dom - react-scripts from 5.0.0 to 5.0.1. See this package in npm: https://www.npmjs.com/package/react-scripts See this project in Snyk: https://app.snyk.io/org/blrobin2/project/baf44f61-35b7-413d-aaa9-c80707f46032?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade: react, react-dom, react-scripts #2

Are you sure you want to change the base?

[Snyk] Upgrade: react, react-dom, react-scripts #2

Conversation

blrobin2 commented Sep 7, 2024

Snyk has created this PR to upgrade multiple dependencies.

React

React DOM

Artifacts

React

React DOM

Concurrent Mode (Experimental)

Artifacts

React DOM

React Is

Artifacts

React

React DOM

Artifacts

React

React DOM

Concurrent Mode (Experimental)

Artifacts

React DOM

React Is

Artifacts

5.0.1 (2022-04-12)

Migrating from 5.0.0 to 5.0.1

🐛 Bug Fix

💅 Enhancement

📝 Documentation

🏠 Internal

Committers: 11

v5.0.0 (2021-12-14)

Highlights

Migrating from 4.0.x to 5.0.0

Breaking Changes

Dropped support for Node 10 and 12

Full Changelog

💥 Breaking Change

🐛 Bug Fix

💅 Enhancement

📝 Documentation

🏠 Internal

🔨 Underlying Tools

Committers: 34