v4.0.3

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+### 4.0.3
+
+- Upgraded `fbjs` to 3.0.1 which fixes [CVE-2021-27292](https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-27292)
+
 ### 4.0.2
 
 - Added support for `UNSAFE_componentWillReceiveProps` lifecycle method

dist/Flux.js

@@ -1,5 +1,5 @@
 /**
- * Flux v4.0.2
+ * Flux v4.0.3
  */
 (function webpackUniversalModuleDefinition(root, factory) {
 	if(typeof exports === 'object' && typeof module === 'object')

dist/FluxUtils.js

@@ -1,5 +1,5 @@
 /**
- * Flux v4.0.2
+ * Flux v4.0.3
  */
 (function webpackUniversalModuleDefinition(root, factory) {
 	if(typeof exports === 'object' && typeof module === 'object')
@@ -3554,7 +3554,7 @@ return /******/ (function(modules) { // webpackBootstrap
 
 	var FluxStore = __webpack_require__(11);
 
-	var abstractMethod = __webpack_require__(18);
+	var abstractMethod = __webpack_require__(19);
 
 	var invariant = __webpack_require__(4);
 	/**
@@ -3832,9 +3832,9 @@ return /******/ (function(modules) { // webpackBootstrap
 
 	var EventSubscriptionVendor = __webpack_require__(16);
 
-	var invariant = __webpack_require__(4);
+	var invariant = __webpack_require__(17);
 
-	var emptyFunction = __webpack_require__(17);
+	var emptyFunction = __webpack_require__(18);
 	/**
 	 * @class BaseEventEmitter
 	 * @description
@@ -4133,7 +4133,7 @@ return /******/ (function(modules) { // webpackBootstrap
 	 */
 	'use strict';
 
-	var invariant = __webpack_require__(4);
+	var invariant = __webpack_require__(17);
 	/**
 	 * EventSubscriptionVendor stores a set of EventSubscriptions that are
 	 * subscribed to a particular event type.
@@ -4227,6 +4227,63 @@ return /******/ (function(modules) { // webpackBootstrap
 
 /***/ }),
 /* 17 */
+/***/ (function(module, exports, __webpack_require__) {
+
+	/**
+	 * Copyright (c) 2013-present, Facebook, Inc.
+	 *
+	 * This source code is licensed under the MIT license found in the
+	 * LICENSE file in the root directory of this source tree.
+	 *
+	 * 
+	 */
+	'use strict';
+
+	var validateFormat =  true ? function (format) {
+	  if (format === undefined) {
+	    throw new Error('invariant(...): Second argument must be a string.');
+	  }
+	} : function (format) {};
+	/**
+	 * Use invariant() to assert state which your program assumes to be true.
+	 *
+	 * Provide sprintf-style format (only %s is supported) and arguments to provide
+	 * information about what broke and what you were expecting.
+	 *
+	 * The invariant message will be stripped in production, but the invariant will
+	 * remain to ensure logic does not differ in production.
+	 */
+
+	function invariant(condition, format) {
+	  for (var _len = arguments.length, args = new Array(_len > 2 ? _len - 2 : 0), _key = 2; _key < _len; _key++) {
+	    args[_key - 2] = arguments[_key];
+	  }
+
+	  validateFormat(format);
+
+	  if (!condition) {
+	    var error;
+
+	    if (format === undefined) {
+	      error = new Error('Minified exception occurred; use the non-minified dev environment ' + 'for the full error message and additional helpful warnings.');
+	    } else {
+	      var argIndex = 0;
+	      error = new Error(format.replace(/%s/g, function () {
+	        return String(args[argIndex++]);
+	      }));
+	      error.name = 'Invariant Violation';
+	    }
+
+	    error.framesToPop = 1; // Skip invariant's own stack frame.
+
+	    throw error;
+	  }
+	}
+
+	module.exports = invariant;
+
+/***/ }),
+/* 18 */
 /***/ (function(module, exports) {
 
 	"use strict";
@@ -4269,7 +4326,7 @@ return /******/ (function(modules) { // webpackBootstrap
 	module.exports = emptyFunction;
 
 /***/ }),
-/* 18 */
+/* 19 */
 /***/ (function(module, exports, __webpack_require__) {
 
 	/**

package.json

@@ -1,6 +1,6 @@
 {
   "name": "flux",
-  "version": "4.0.2",
+  "version": "4.0.3",
   "description": "An application architecture based on a unidirectional data flow",
   "keywords": [
     "flux",

yarn.lock

@@ -2034,6 +2034,19 @@ fbjs@^3.0.0:
     setimmediate "^1.0.5"
     ua-parser-js "^0.7.18"
 
+fbjs@^3.0.1:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/fbjs/-/fbjs-3.0.1.tgz#70a053d34a96c2b513b559eaea124daed49ace64"
+  integrity sha512-8+vkGyT4lNDRKHQNPp0yh/6E7FfkLg89XqQbOYnvntRh+8RiSD43yrh9E5ejp1muCizTL4nDVG+y8W4e+LROHg==
+  dependencies:
+    cross-fetch "^3.0.4"
+    fbjs-css-vars "^1.0.0"
+    loose-envify "^1.0.0"
+    object-assign "^4.1.0"
+    promise "^7.1.1"
+    setimmediate "^1.0.5"
+    ua-parser-js "^0.7.30"
+
 file-uri-to-path@1.0.0:
   version "1.0.0"
   resolved "https://registry.yarnpkg.com/file-uri-to-path/-/file-uri-to-path-1.0.0.tgz#553a7b8446ff6f684359c445f1e37a05dacc33dd"
@@ -5255,6 +5268,11 @@ ua-parser-js@^0.7.18:
   resolved "https://registry.yarnpkg.com/ua-parser-js/-/ua-parser-js-0.7.28.tgz#8ba04e653f35ce210239c64661685bf9121dec31"
   integrity sha512-6Gurc1n//gjp9eQNXjD9O3M/sMwVtN5S8Lv9bvOYBfKfDNiIIhqiyi01vMBO45u4zkDE420w/e0se7Vs+sIg+g==
 
+ua-parser-js@^0.7.30:
+  version "0.7.31"
+  resolved "https://registry.yarnpkg.com/ua-parser-js/-/ua-parser-js-0.7.31.tgz#649a656b191dffab4f21d5e053e27ca17cbff5c6"
+  integrity sha512-qLK/Xe9E2uzmYI3qLeOmI0tEOt+TBBQyUIAh4aAgU05FVYzeZrKUdkAZfBNVGRaHVgV0TDkdEngJSw/SyQchkQ==
+
 uglify-js@^3.1.4:
   version "3.13.5"
   resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.13.5.tgz#5d71d6dbba64cf441f32929b1efce7365bb4f113"