Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update dependency react-scripts to v3 - autoclosed #317

Closed
wants to merge 1 commit into from
Closed

chore(deps): update dependency react-scripts to v3 - autoclosed #317

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jan 26, 2023 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
react-scripts dependencies major 2.1.8 -> 3.1.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.8 CVE-2020-28499 #139
High 9.8 CVE-2021-23436 #174
High 9.8 CVE-2021-26707 #151
High 9.8 CVE-2021-3757 #177
High 9.8 CVE-2021-42740 #258
High 8.8 CVE-2022-46175 #290
High 7.5 CVE-2020-28477 #150
High 7.5 CVE-2021-23382 #144
High 7.5 CVE-2021-28092 #159
High 7.5 CVE-2021-29059 #170
High 7.5 CVE-2021-3777 #200
High 7.5 CVE-2022-25858 #265

Release Notes

facebook/create-react-app

v3.1.0

Compare Source

3.1.0 (2019-08-09)

v3.1.0 is a minor release that adds ESLint 6 support as well as experimental support for extending and customizing the ESLint config along with other minor bug fixes and documentation updates.

Highlights

  • ESLint 6: #​7415
  • Experimental ESLint config customization: #​7036
  • More Jest config options: #​6055
  • Option to configure or disable image inlining: #​6060
🚀 New Feature
💥 Breaking Change
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 46
Migrating from 3.0.1 to 3.1.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.1.0

or

yarn add --exact react-scripts@3.1.0

v3.0.1

Compare Source

3.0.1 (2019-05-08)

v3.0.1 is a maintenance release that adjusts some ESLint rules for TypeScript along with other minor bug fixes and documentation updates.

💥 Breaking Change
  • babel-preset-react-app
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
Committers: 12
Migrating from 3.0.0 to 3.0.1

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.0.1

or

yarn add --exact react-scripts@3.0.1

v3.0.0

Compare Source

3.0.0 (April 22, 2019)

Create React App 3.0 brings some exciting new features including support for Hooks!

Thanks to all the maintainers and contributors who worked so hard on this release! 🎉

Highlights

Migrating from 2.1.x to 3.0.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@3.0.0

or

yarn add --exact react-scripts@3.0.0

If you previously ejected but now want to upgrade, one common solution is to find the commits where you ejected (and any subsequent commits changing the configuration), revert them, upgrade, and later optionally eject again. It’s also possible that the feature you ejected for is now supported out of the box.

Breaking Changes

Like any major release, react-scripts@3.0.0 contains a few breaking changes. We expect that they won't affect every user, but we recommend you look over this section to see if something is relevant to you. If we missed something, please file a new issue.

Jest 24

We've updated from Jest 23 to get the latest improvements in Jest 24. We've noticed some differences in snapshot serialization in Jest 24, so you may need to adjust your tests slightly once you update. You can read more about what's changed in the Jest 24 blog post.

Hooks support

We now enforce Rules of Hooks with eslint-plugin-react-hooks. If you are breaking any of the rules of Hooks this will cause your build to fail.

TypeScript linting

We now lint TypeScript files. You can see the list of rules we enforce to check if your project is compatible. If you're using Visual Studio Code you can follow our guide to setup up your editor to display lint warnings.

browserslist support in @​babel/preset-env

The browserslist config in your package.json is now used to control the output of your JavaScript files. You can use separate configuration for development and production. See here for a good starting point which gives a good development experience, especially when using language features such as async/await, but still provides high compatibility with many browsers in production

Remove --no-watch flag

We've removed the --no-watch flag from the start script in favor of Jest's own --watchAll=false.

New structure in asset-manifest.json

All asset paths have been moved under the files key in asset-manifest.json.

New Features

using jsconfig.json/tsconfig.json

We now support setting baseUrl in jsconfig.json and tsconfig.json. To configure baseUrl to point to the src directory in your JavaScript project, create a jsconfig.json file in your project root:

```json
{
  "compilerOptions": {
    "baseUrl": "src"
  },
  "include": ["src"]
}
```

If you have a TypeScript project you can configure baseUrl the same way in your tsconfig.json.

Currently the only supported options for baseUrl are node_modules (the default) and src.

PostCSS Normalize

You can now include a version of Normalize.css in your project that will use your browserslist setting to generate the appropriate styles for your target browsers. To include it simply add @import-normalize at the top of one of your CSS files.

Detailed Changelog

🚀 New Feature
💥 Breaking Change
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 49
  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Jan 26, 2023
@mend-for-github-com mend-for-github-com bot changed the title Update dependency react-scripts to v3 chore(deps): update dependency react-scripts to v3 Jan 29, 2023
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency react-scripts to v3 chore(deps): update dependency react-scripts to v3 - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/react-scripts-3.x branch March 27, 2023 03:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants