[Snyk] Upgrade: , , , , , react-calendar, react-loader-spinner, redux, react-redux, react-router-dom, react-scripts, react-spinners, redux-thunk #9
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@emotion/styled
from 11.6.0 to 11.13.0 | 12 versions ahead of your current version | 2 months ago
on 2024-07-20
@emotion/react
from 11.7.1 to 11.13.3 | 17 versions ahead of your current version | a month ago
on 2024-08-21
@mui/icons-material
from 5.3.1 to 5.16.7 | 70 versions ahead of your current version | a month ago
on 2024-08-09
@mui/material
from 5.4.0 to 5.16.7 | 124 versions ahead of your current version | a month ago
on 2024-08-09
@testing-library/react
from 12.1.2 to 12.1.5 | 3 versions ahead of your current version | 2 years ago
on 2022-04-11
react-calendar
from 3.6.0 to 3.9.0 | 3 versions ahead of your current version | 2 years ago
on 2022-09-19
react-loader-spinner
from 5.1.2 to 5.4.5 | 12 versions ahead of your current version | a year ago
on 2023-08-26
redux
from 4.1.2 to 4.2.1 | 3 versions ahead of your current version | 2 years ago
on 2023-01-28
react-redux
from 7.2.6 to 7.2.9 | 3 versions ahead of your current version | 2 years ago
on 2022-09-23
react-router-dom
from 6.2.1 to 6.26.1 | 151 versions ahead of your current version | a month ago
on 2024-08-15
react-scripts
from 5.0.0 to 5.0.1 | 1 version ahead of your current version | 2 years ago
on 2022-04-12
react-spinners
from 0.11.0 to 0.14.1 | 27 versions ahead of your current version | 3 months ago
on 2024-06-26
redux-thunk
from 2.4.1 to 2.4.2 | 1 version ahead of your current version | 2 years ago
on 2022-11-04
Issues fixed by the recommended upgrade:
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-MINIMATCH-3050818
SNYK-JS-MINIMIST-2429795
Release notes
Package name: @emotion/styled
Minor Changes
#3198
d8ff8a5
Thanks @ Andarist! - Migrated away from relying onprocess.env.NODE_ENV
checks to differentiate between production and development builds.Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
Default files should continue to work in all environments.
#3215
a9f6912
Thanks @ Andarist! - Addededge-light
andworkerd
conditions topackage.json
manifest to better serve users using Vercel Edge and Cloudflare Workers.Patch Changes
d8ff8a5
,a9f6912
]:Package name: @emotion/react
Patch Changes
#3232
0ce3ed0
Thanks @ ENvironmentSet! - Distributecss
prop attachment over props that are union typesUpdated dependencies []:
Minor Changes
#3198
d8ff8a5
Thanks @ Andarist! - Migrated away from relying onprocess.env.NODE_ENV
checks to differentiate between production and development builds.Development builds (and other environment-specific builds) can be used by using proper conditions (see here). Most modern bundlers/frameworks already preconfigure those for the user so no action has to be taken.
Default files should continue to work in all environments.
#3215
a9f6912
Thanks @ Andarist! - Addededge-light
andworkerd
conditions topackage.json
manifest to better serve users using Vercel Edge and Cloudflare Workers.Patch Changes
d8ff8a5
,a9f6912
]:Package name: @mui/icons-material
Aug 9, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/[email protected]
Docs
Core
All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan
Jul 30, 2024
A big thanks to the 5 contributors who made this release possible.
@ mui/[email protected]
Docs
<ListItem button/>
withListItemButton
component in routing libraries list example (#43114) @ aliharis99reason
type in demos (#43105) @ sai6855Core
All contributors of this release in alphabetical order: @ aliharis99, @ anuujj, @ mnajdova, @ sai6855, @ shahzaibdev1
Jul 25, 2024
A big thanks to the 4 contributors who made this release possible.
@ mui/[email protected]
Docs
Hint
demo (@ ManthanGajjar) (#43039) @ ManthanGajjarAll contributors of this release in alphabetical order: @ ManthanGajjar, @ mnajdova, @ navedqb, @ oliviertassinari
Full Changelog: v5.16.4...v5.16.5
Jul 16, 2024
A big thanks to the one contributor who made this release possible.
@ mui/[email protected]
All contributors of this release in alphabetical order: @ mnajdova
Jul 16, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/[email protected]
Docs
autosuggest-highlight
dependency (#42953) @ HoFa1997All contributors of this release in alphabetical order: @ HoFa1997, @ mnajdova, @ oliviertassinari
Package name: @mui/material
Aug 9, 2024
A big thanks to the 3 contributors who made this release possible.
@ mui/[email protected]
Docs
Core
All contributors of this release in alphabetical order: @ DiegoAndai, @ oliviertassinari, @ zanivan
Package name: @testing-library/react
12.1.5 (2022-04-11)
Bug Fixes
12.1.4 (2022-03-09)
Bug Fixes
12.1.3 (2022-02-15)
Bug Fixes
@ types/react-dom
as a direct dependency (#1001) (149d9a9)Package name: react-calendar
What's new?
Navigation
to exports list (#594).formatWeekday
prop (#620).What's new?
…--weekend
class to Weekdays tiles (#490). Thanks, @ fffed!goToRangeStartOnSelect
prop (#639).What's new?
What's changed?
Bug fixes
tileContent
not updating onactiveStartDate
change (#576).What's new?
showFixedNumberOfWeeks
to be explicitly defined even whenshowDoubleView
is true (#413). Thanks, @ frankleng!Bug fixes
New contributors
Package name: redux
This bugfix release removes the
isMinified
internal check to fix a compat issue with Expo. That check has added in early 2016, soon after Redux 3.0 was released, at a time when it was still less common to use bundlers with proper production build settings. Today that check is irrelevant, so we've removed it.What's Changed
Full Changelog: v4.2.0...v4.2.1
This release marks the original
createStore
API as@ deprecated
to encourage users to migrate to Redux Toolkit, and adds a newlegacy_createStore
API as an alias without the deprecation warning.Goal
Redux Toolkit (the
@ reduxjs/toolkit
package) is the right way for Redux users to write Redux code today:https://redux.js.org/introduction/why-rtk-is-redux-today
Unfortunately, many tutorials are still showing legacy "hand-written" Redux patterns, which result in a much worse experience for users. New learners going through a bootcamp or an outdated Udemy course just follow the examples they're being shown, don't know that RTK is the better and recommended approach, and don't even think to look at our docs.
Given that, the goal is to provide them with a visual indicator in their editor, like
createStore. When users hover over thecreateStore
import or function call, the doc tooltip recommends usingconfigureStore
from RTK instead, and points them to that docs page. We hope that new learners will see the strikethrough, read the tooltip, read the docs page, learn about RTK, and begin using it.To be extremely clear:
WE ARE NOT GOING TO ACTUALLY REMOVE THE
createStore
API, AND ALL YOUR EXISTING CODE WILL STILL CONTINUE TO WORK AS-IS!We are just marking
createStore
as "deprecated":For additional details, see the extensive discussion in #4325 .
Rationale
redux
core package, or fully deprecate the entireredux
package and rename it to@ reduxjs/core
. Unfortunately, those bring up too many complexities:redux-starter-kit
to@ reduxjs/toolkit
, and all of our docs and tutorials have pointed to it for the last three years. I don't want to put users through another whiplash package transition for no real benefitSo, this is the minimum possible approach we can take to reach out to users who otherwise would never know that they are following outdated patterns, while avoiding breaking running user code or having to completely rewrite our package and repo structure.
Results
When a user imports
createStore
in their editor, they will see a visual strikethrough. Hovering over it will show a doc tooltip that encourages them to useconfigureStore
from RTK, and points to an explanatory docs page:Again, no broken code, and no runtime warnings.
If users do not want to see that strikethrough, they have three options:
configureStore
legacy_createStore
API that is now exported, which is the exact same function but with no@ deprecation
tag. The simplest option is to do an aliased import rename:What's Changed
createStore
as deprecated, and addlegacy_createStore
alias by @ markerikson in #4336Full Changelog: v4.1.2...v4.2.0
4.2.0-alpha.0
This release fixes a small specific TS types issue where state types that had a nested
unknown
field inside would cause compilation failures when used as thepreloadedState
argument.What's Changed
Full Changelog: v4.1.1...v4.1.2
Package name: react-redux
This patch release updates the rarely-used
areStatesEqual
option forconnect
to now pass throughownProps
for additional use in determining which pieces of state to compare if desired.The new signature is:
What's Changed
Full Changelog: v7.2.8...v7.2.9
This release fixes a bug in the 7.x branch that caused
<Provider>
to unsubscribe and stop updating completely when used inside of React 18's<StrictMode>
. The new "strict effects" behavior double-mounts components, and the subscription needed to be set up inside of auseLayoutEffect
instead of auseMemo
. This was previously fixed as part of v8 development, and we've backported it.Note: If you are now using React 18, we strongly recommend using the React-Redux v8 beta instead of v7.x!. v8 has been rewritten internally to work correctly with React 18's Concurrent Rendering capabilities. React-Redux v7 will run and generally work okay with existing code, but may have rendering issues if you start using Concurrent Rendering capabilities in your code.
Now that React 18 is out, we plan to finalize React-Redux v8 and release it live within the next couple weeks. Per an update yesterday in the "v8 roadmap" thread, React-Redux v8 will be updated in the next couple days to ensure support for React 16.8+ as part of the next beta release. We would really appreciate final feedback on using React-Redux v8 beta with React 18 before we publish the final version.
Full Changelog: v7.2.7...v7.2.8
This release updates React-Redux v7's peer dependencies to accept React 18 as a valid version, only to avoid installation errors caused by NPM's "install all the peer deps and error if they don't match" behavior.
Note: If you are now using React 18, we strongly recommend using the React-Redux v8 beta instead of v7.x!. v8 has been rewritten internally to work correctly with React 18's Concurrent Rendering capabilities. React-Redux v7 will run and generally work okay with existing code, but may have rendering issues if you start using Concurrent Rendering capabilities in your code.
Now that React 18 is out, we plan to finalize React-Redux v8 and release it live within the next couple weeks. We would really appreciate final feedback on using ...