Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-scripts from 3.3.1 to 3.4.0 #5

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented Mar 8, 2020

Snyk has created this PR to upgrade react-scripts from 3.3.1 to 3.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2020-02-14.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Pollution
SNYK-JS-DOTPROP-543489
Proof of Concept
Release notes
Package name: react-scripts from react-scripts GitHub release notes
Commit messages
Package name: react-scripts
  • 8b0dd54 Publish
  • 5ccee88 Prepare 3.4.0 release
  • e579de1 Downgrade style-loader to v0.23.1 due to CSS modules hot reload… (#8378)
  • 4784997 Correct webpack name casing (#8475)
  • 589b41a update open to v7.0.2 (#8459)
  • 865ea05 fix(typescriptFormatter): use chalk@2 constructor (#8450)
  • d45823c fix(react-scripts): do not redirect served path if request may proxy (#8442)
  • eb8e7be Downgrade chalk for ie 11 support (#8439)
  • 767aa18 Fixes unchecked access to 'deploy' script on build (#8292)
  • cd2469e Fix navbar line break in header (#8437)
  • 687c4eb Change arrow functions to function declarations (#8412)
  • 1cbc6f7 feat(react-scripts): allow PUBLIC_URL in develoment mode (#7259)
  • 3190e4f Handle service worker error in Firefox (#8272)
  • 0299c0e Add option to provide custom ssl certificates during development (#5845)
  • 822422c Enable custom sockjs pathname for hot reloading server. (#7750)
  • cc985d0 Support JetBrains Rider IDE as an editor (#7948)
  • 84d8b14 Run git init before template dependencies are installed (#8282)
  • 9233caf Update public folder usage docs to clarify globals (#8299)
  • 1959131 Fix robots.txt for TS (#8403)
  • 0db04ec setupTestFrameworkScriptFile is deprecated (#8390)
  • 325e599 fix(test): force install npm in e2e-behaviour (#8402)
  • d2de54b Wider Chromium support for openBrowser (#8367)
  • d9e05f9 Update commit message to use imperative mood (#8377)
  • fb9745e Make the PWA link point to the right place (#8379)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant