Publish new version of react-scripts

[marthall]

Is this a bug report?

No. Request for publish of new version of react-scripts

Issue

Snyk reports a vulnerability for react-scripts@2.1.8 through the dependencies react-scripts@2.1.8 › jest@23.6.0 › jest-cli@23.6.0 › istanbul-api@1.3.7 › istanbul-reports@1.5.1 › handlebars@4.0.12

The issue is this dependency of react-scripts@2.1.8: https://github.com/facebook/create-react-app/blob/v2.1.8/packages/react-scripts/package.json#L51

This dependency is bumped and fixed in #6278 but there is not a new version on https://www.npmjs.com/package/react-scripts

Could you publish a new version of react-scripts?

[iansu]

This will be fixed in the 3.0 release, which should be available soon. We are not planning any more releases of the 2.x version. In the meantime you can try an alpha release of 3.0 here: #6475

[marthall]

Thanks for the quick response 👍