Current CRA version

[olliecurtis]

Hello CRA maintainers and community,

I wanted to confirm the correct current version and double check if its ok to upgrade.

I see on the main repo page the current version that is released and tagged is 3.4.1

However checking the latest changelog and npm repo for react-scripts I see there is version 3.4.3 is marked as the latest version which doesn't line up with the repo.

I just wanted to check and ensure this was correct as I have been following for the release of CRA v4 and have noticed that PRs that make up the v4 release have been making their way in master already? (as seen in this comment for PRs needed for v4 #9131 (comment)). So didn't want to make this upgrade incase the release on NPM includes breaking changes for v4 and could cause more issues if upgrading.

Can you help confirm and assist in my confusion?

Thanks

[bennettdams]

I'm not sure why there is an NPM release and no GitHub release, but the difference between v3.4.1 and v3.4.3 does not bring any functional changes, it'll just satisfy some auditing tools.

[olliecurtis]

Thanks @bennettdams - I guess the thing that I want to confirm also is the commit this version is based from as I see no Publish commit in the commit history and if this release is based off the latest master then it means it could contain potential v4 changes, it could be helpful if the GitHub release could be updated to reflect the commit its based off.

Currently when pulling the package from npm the gitHead field in the package.json points to commit d2f813f8897ffcd2f0b0d2da75d0c44924c92f4d which checking in the history is for the 3.4.1 release which is where my confusion lies 🤔

Hope this is something the team could help with

[gaearon]

There were no commits for those changes, I literally pulled the packages from npm, bumped the versions manually, and published them to satisfy the auditing tools. We can certainly recreate "commits" retroactively but hope this explains it.

[olliecurtis]

Thanks @gaearon for confirmation, so the only changes that were made for this were the package.json versions?

[gaearon]

Yes.

[olliecurtis]

Amazing thanks for confirming! 🎉 I will mark this query as answered!

[AmyShackles]

@gaearon

I was initializing a new project the other day and noticed left-pad among the dependencies. After a bunch of dependency chain tracking, I discovered that it was coming from a jsdom@11.12.0 dependency. jsdom@11.12.0 is the version that resolves from the "^11.5.1" directive for jest-environment-jsdom@^24.9.0.

Below, I've included a table of all the dependency changes from react-scripts@3.4.1 to react-scripts@3.4.3. I've bolded all of the dependencies where the version in 3.4.1 is higher than the version in 3.4.3.

Was this intentional? If so, why?

Dependency	React Scripts @3.4.1	React Scripts @3.4.3
@babel/core	7.11.6	7.9.0
@pmmmwh/react-refresh-webpack-plugin	0.4.2	-
@svgr/webpack	5.4.0	4.3.3
@typescript-eslint/eslint-plugin	^4.1.0	^2.10.0
@typescript-eslint/parser	^4.1.0	^2.10.0
babel-eslint	^10.1.0	10.1.0
babel-jest	^26.3.0	^24.9.0
babel-loader	8.1.0	8.1.0
babel-plugin-named-asset-import	^0.3.6	^0.3.6
babel-preset-react-app	^9.1.2	^9.1.2
bfj	^7.0.2	-
camelcase	^6.0.0	^5.3.1
case-sensitive-paths-webpack-plugin	2.3.0	2.3.0
css-loader	4.3.0	3.4.2
dotenv	8.2.0	8.2.0
dotenv-expand	5.1.0	5.1.0
eslint	^7.9.0	^6.6.0
eslint-config-react-app	^5.2.1	^5.2.1
eslint-loader	^4.0.2	3.0.3
eslint-plugin-flowtype	^5.2.0	4.6.0
eslint-plugin-import	^2.22.0	2.20.1
eslint-plugin-jest	^24.0.1	-
eslint-plugin-jsx-a11y	^6.3.1	6.2.3
eslint-plugin-react	^7.20.6	7.19.0
eslint-plugin-react-hooks	^4.1.2	^1.6.1
file-loader	6.1.0	4.3.0
fs-extra	^9.0.0	^8.1.0
html-webpack-plugin	4.4.1	4.0.0-beta.11
identity-obj-proxy	3.0.0	3.0.0
jest	26.4.2	24.9.0
jest-circus	26.4.2	-
jest-resolve	26.4.0	24.9.0
jest-watch-typeahead	0.6.1	0.4.2
mini-css-extract-plugin	0.11.2	0.9.0
optimize-css-assets-webpack-plugin	5.0.4	5.0.3
pnp-webpack-plugin	1.6.4	1.6.4
postcss-flexbugs-fixes	4.2.1	4.1.0
postcss-loader	3.0.0	3.0.0
postcss-normalize	8.0.1	8.0.1
postcss-preset-env	6.7.0	6.7.0
postcss-safe-parser	5.0.0	4.0.1
react-app-polyfill	^1.0.6	^1.0.6
react-dev-utils	^10.2.1	^10.2.1
react-refresh	^0.8.3	-
resolve	1.17.0	1.15.0
resolve-url-loader	3.1.1	3.1.1
sass-loader	8.0.2	8.0.2
semver	7.3.2	6.3.0
style-loader	1.2.1	0.23.1
terser-webpack-plugin	4.2.0	2.3.8
ts-pnp	1.2.0	1.1.6
url-loader	4.1.0	2.3.0
webpack	4.44.1	4.42.0
webpack-dev-server	3.11.0	3.11.0
webpack-manifest-plugin	2.2.0	2.2.0
workbox-webpack-plugin	5.1.4	4.3.1
fsevents	-	2.1.2
jest-environment-jsdom-fourteen	-	1.0.1