Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react from 18.1.0 to 18.2.0 #7

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

ishaileshmishra
Copy link

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react from 18.1.0 to 18.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 31 versions ahead of your current version.
  • The recommended version was released 7 months ago, on 2022-06-14.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-JSON5-3182856
427/1000
Why? Proof of Concept exploit, CVSS 6.4
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react
  • 18.2.0 - 2022-06-14

    React DOM

    React DOM Server

    • Pass information about server errors to the client. (@ salazarm and @ gnoff in #24551 and #24591)
    • Allow to provide a reason when aborting the HTML stream. (@ gnoff in #24680)
    • Eliminate extraneous text separators in the HTML where possible. (@ gnoff in #24630)
    • Disallow complex children inside <title> elements to match the browser constraints. (@ gnoff in #24679)
    • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@ jplhomer in #24641)

    Server Components (Experimental)

    • Add support for useId() inside Server Components. (@ gnoff) in #24172
  • 18.2.0-next-f7b44539c-20220610 - 2022-06-10
  • 18.2.0-next-e531a4a62-20220505 - 2022-05-06
  • 18.2.0-next-d89657bc8-20220519 - 2022-05-19
  • 18.2.0-next-d4acbe85d-20220505 - 2022-05-05
  • 18.2.0-next-d300cebde-20220601 - 2022-06-03
  • 18.2.0-next-d2c9e834a-20220601 - 2022-06-01
  • 18.2.0-next-d20c3af9d-20220506 - 2022-05-09
  • 18.2.0-next-ce1386028-20220428 - 2022-04-29
  • 18.2.0-next-c7e494b55-20220503 - 2022-05-04
  • 18.2.0-next-c5e039d9b-20220516 - 2022-05-16
  • 18.2.0-next-be229c565-20220613 - 2022-06-14
  • 18.2.0-next-aec575914-20220529 - 2022-05-31
  • 18.2.0-next-a412d787e-20220518 - 2022-05-18
  • 18.2.0-next-a2505792e-20220524 - 2022-05-24
  • 18.2.0-next-9f80a48ad-20220427 - 2022-04-27
  • 18.2.0-next-99eef9e2d-20220503 - 2022-05-03
  • 18.2.0-next-82c64e1a4-20220520 - 2022-05-23
  • 18.2.0-next-8186b1937-20220608 - 2022-06-09
  • 18.2.0-next-7d9e17a98-20220511 - 2022-05-11
  • 18.2.0-next-7a5b8227c-20220602 - 2022-06-03
  • 18.2.0-next-6e2f38f3a-20220519 - 2022-05-20
  • 18.2.0-next-52c434be1-20220512 - 2022-05-12
  • 18.2.0-next-4ddd8b455-20220606 - 2022-06-06
  • 18.2.0-next-47944142f-20220608 - 2022-06-08
  • 18.2.0-next-357a61324-20220516 - 2022-05-17
  • 18.2.0-next-340060ccc-20220428 - 2022-04-28
  • 18.2.0-next-327e4a1f9-20220613 - 2022-06-13
  • 18.2.0-next-3133dfa6e-20220526 - 2022-05-26
  • 18.2.0-next-2c8a1452b-20220512 - 2022-05-13
  • 18.2.0-next-2c68776ab-20220525 - 2022-05-25
  • 18.1.0 - 2022-04-26

    React DOM

    React DOM Server

    • Fix escaping for the bootstrapScriptContent contents. (@ gnoff in #24385)
    • Significantly improve performance of renderToPipeableStream. (@ gnoff in #24291)

    ESLint Plugin: React Hooks

    • Fix false positive errors with a large number of branches. (@ scyron6 in #24287)
    • Don't consider a known dependency stable when the variable is reassigned. (@ afzalsayed96 in #24343)

    Use Subscription

    • Replace the implementation with the use-sync-external-store shim. (@ gaearon in #24289)
from react GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@ishaileshmishra ishaileshmishra requested a review from a team as a code owner January 25, 2023 23:27
@ishaileshmishra ishaileshmishra requested a review from a team January 25, 2023 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants