[Snyk] Upgrade react-redux from 5.0.7 to 5.1.1 #3

snyk-bot · 2019-08-30T02:26:22Z

Snyk have raised this PR to upgrade react-redux from 5.0.7 to 5.1.1.

The recommended version is 9 versions ahead of your current version.
The recommended version was released 10 months ago, on 2018-11-10.

The recommended version fixes:

Severity	Title	Issue ID
	Prototype Pollution	SNYK-JS-LODASH-450202
	Prototype Pollution	SNYK-JS-LODASH-73638
	Regular Expression Denial of Service (ReDoS)	SNYK-JS-LODASH-73639

Release notes

5.1.1 - 2018-11-10
Changes
- Upgrade hoist-non-react-statics to deal with contextType (by @timdorr)
- Treat null as a valid plain object prototype in isPlainObject() (#1075 by @rgrove)
5.1.0 - 2018-10-25
The biggest fix is for connect() being used with React's newer forwardRef, memo, and lazy APIs.

We also have begun a complete rewrite of our docs for React Redux. Check them out! Many thanks to those who contributed: @markerikson, @sveinpg, @wgao19, @BTMPL, @pyliaorachel, @dagstuan, @Kerumen, and @carloluis (sorry if I forgot someone!). Docs are a great way to get started contributing to open source, so open a PR today! Check #1001 to see what else needs to be done.

We're also looking at overhauling Redux's documentation. Check out reduxjs/redux#2590 for the latest there.

Changes
- Simplify object check and eliminate lodash dependency (#936 by @matthargett)
- Remove subkey arg (#945 by @theJian)
- Switch our test suite to Jest (@timdorr)
- Implement testing in React 0.14, 15, and 16.x (#984 by @cellog)
- Convert tests to use react-testing-library instead of Enzyme (#998 by @cellog and @markerikson)
- Add unpkg field to package.json (#1003 by @nickmccurdy)
- Set up basic docusaurus structure (#1032 by @sveinpg)
- Add nodejs version 10 for ci (#1058 by @noelyoo)
- Upgrade to babel@7 (#1043 @Andarist)
5.1.0-test.1 - 2018-06-21
This release is broken - DO NOT USE IT!

This is a test release to try out some changes in relation with React 16.3's new StrictMode. ~~Please try it out in your projects and see if it breaks anything!~~

Narrator: It did.

It turned out to be very broken, and should not be used.

We are currently working on React-Redux version 6.0, which will switch to using createContext internally. See #950 for our development roadmap, and #995 and #1000 for the two "competing" work-in-progress PRs (available on NPM as tags next-995 and next-1000). Please try those out instead, and give us feedback in the PR threads.

Changelog for historical reference
Changes
- Remove subkey arg (#945 by @theJian)
- Simplify object check and eliminate lodash dependency (#936 by @matthargett)
- Remove usages of async-unsafe lifecycle methods (#919 by @Hypnosphi)
5.0.7 - 2018-02-16
Changes
- Allow Redux 4.0
- Update hoist-non-react-statics to support getDerivedStateFromProps
- Fix test code coverage reporting (#850 by @jacobdfriedmann)
- Use methodName in error message (#852 by @pwNN)