Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency react-scripts to v5 #61

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update dependency react-scripts to v5 #61

wants to merge 1 commit into from
+25,068 −14,363

Conversation

dev-mend-for-github-com[bot]
Copy link

@dev-mend-for-github-com dev-mend-for-github-com bot commented Jan 12, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
react-scripts (source) dependencies major 3.4.1 -> 5.0.0

By merging this PR, the issue #23 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2019-10747

Unreachable
Critical Critical 9.8 CVE-2019-10747

Unreachable
Critical Critical 9.8 CVE-2021-26707

Unreachable
Critical Critical 9.8 CVE-2021-44906

Unreachable
Critical Critical 9.8 CVE-2021-44906

Unreachable
Critical Critical 9.8 CVE-2021-44906

Unreachable
Critical Critical 9.8 CVE-2022-37601

Unreachable
Critical Critical 9.8 CVE-2022-37601

Unreachable
High High 8.1 CVE-2020-7660

Unreachable
High High 7.7 CVE-2020-15256

Unreachable
High High 7.7 CVE-2021-23386

Unreachable
High High 7.5 CVE-2020-28477

Unreachable
High High 7.5 CVE-2020-7662

Unreachable
High High 7.5 CVE-2021-27290

Unreachable
High High 7.5 CVE-2021-27290

Unreachable
High High 7.5 CVE-2021-28092

Unreachable
High High 7.5 CVE-2021-3807

Unreachable
High High 7.5 CVE-2021-3807

Unreachable
High High 7.5 CVE-2021-3807

Unreachable
High High 7.5 CVE-2022-24999

Reachable
High High 7.5 CVE-2022-24999

Reachable
High High 7.5 CVE-2022-37603

Unreachable
High High 7.5 CVE-2022-37603

Unreachable
High High 7.5 CVE-2022-38900

Reachable
High High 7.5 WS-2020-0091

Unreachable
High High 7.5 WS-2021-0152

Unreachable
High High 7.3 CVE-2020-7788

Unreachable
High High 7.1 CVE-2022-46175

Unreachable
High High 7.1 CVE-2022-46175

Unreachable
Medium Medium 6.8 CVE-2020-28498

Unreachable
Medium Medium 6.5 CVE-2022-0155

Unreachable
Medium Medium 5.9 WS-2019-0424

Unreachable
Medium Medium 5.6 CVE-2020-15366

Unreachable
Medium Medium 5.6 CVE-2020-7598

Unreachable
Medium Medium 5.6 CVE-2020-7789

Unreachable
Medium Medium 5.6 CVE-2021-24033

Unreachable
Medium Medium 5.3 CVE-2020-7608

Unreachable
Medium Medium 5.3 CVE-2020-7693

Unreachable
Medium Medium 5.3 CVE-2021-23343

Unreachable
Medium Medium 5.3 CVE-2021-23362

Unreachable
Medium Medium 5.3 CVE-2021-23364

Unreachable
Medium Medium 5.3 CVE-2021-23368

Unreachable
Medium Medium 5.3 CVE-2021-23368

Unreachable
Medium Medium 5.3 CVE-2021-23382

Unreachable
Medium Medium 5.3 CVE-2021-23382

Unreachable
Medium Medium 5.3 CVE-2021-32640

Unreachable
Medium Medium 5.3 CVE-2021-32640

Unreachable
Low Low 2.6 CVE-2022-0536

Unreachable

Release Notes

facebook/create-react-app (react-scripts)

v5.0.0

Compare Source

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@5.0.1

or

yarn add --exact react-scripts@5.0.1
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
Committers: 11

5.0.0 (2021-12-14)

Create React App 5.0 is a major release with several new features and the latest version of all major dependencies.

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

v4.0.3

Compare Source

4.0.3 (2021-02-22)

v4.0.3 is a maintenance release that includes minor bug fixes and dependency updates.

🐛 Bug Fix
🏠 Internal
Committers: 4

Migrating from 4.0.2 to 4.0.3

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@4.0.3

or

yarn add --exact react-scripts@4.0.3

v4.0.2

Compare Source

4.0.2 (2021-02-03)

v4.0.2 is a maintenance release that includes minor bug fixes and documentation updates.

🚀 New Feature
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 15

v4.0.1

Compare Source

v4.0.1 is a maintenance release that includes minor bug fixes and documentation updates.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
Committers: 9

Migrating from 4.0.0 to 4.0.1

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@4.0.1

or

yarn add --exact react-scripts@4.0.1

v4.0.0

Compare Source

4.0.0 (2020-10-23)

Create React App 4.0 is a major release with several new features, including support for Fast Refresh!

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

Highlights

  • Fast Refresh #​8582
  • React 17 support
  • TypeScript 4 support #​9734
  • ESLint 7 #​8978
    • New Jest and React Testing Library rules #​8963
  • Jest 26 #​8955
  • PWA/workbox improvements
    • Switch to the Workbox InjectManifest plugin #​9205
    • Now its own template so it can be released independently
  • Web Vitals support #​9116

Migrating from 3.4.x to 4.0.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@4.0.0

or

yarn add --exact react-scripts@4.0.0

NOTE: You may need to delete your node_modules folder and reinstall your dependencies by running yarn (or npm install) if you encounter errors after upgrading.

If you previously ejected but now want to upgrade, one common solution is to find the commits where you ejected (and any subsequent commits changing the configuration), revert them, upgrade, and later optionally eject again. It’s also possible that the feature you ejected for is now supported out of the box.

Breaking Changes

Like any major release, react-scripts@4.0.0 contains a number of breaking changes. We expect that they won't affect every user, but we recommend you look over this section to see if something is relevant to you. If we missed something, please file a new issue.

ESLint

We've upgraded to ESLint 7 and added many new rules including some for Jest and React Testing Library as well as the import/no-anonymous-default-export rule. We've also upgraded eslint-plugin-hooks to version 4.0.0 and removed the EXTEND_ESLINT flag as it is no longer required to customize the ESLint config.

Jest

We've upgraded to Jest 26 and now set resetMocks to true by default in the Jest config.

Service workers

We've switched to the Workbox InjectManifest plugin and moved the PWA templates into their own repository.

Removed typescript flag and NODE_PATH support

We've removed the deprecated typescript flag when creating a new app. Use --template typescript instead. We've also dropped deprecated NODE_PATH flag as this has been replaced by setting the base path in jsconfig.json.

Fix dotenv file loading order

We've changed the loading order of env files to match the dotenv specification. See #​9037 for more details.

Dropped Node 8 support

Node 8 reached End-of-Life at the end of 2019 and is no longer supported.

Detailed Changelog

🚀 New Feature
💥 Breaking Change
  • eslint-config-react-app, react-error-overlay, react-scripts
  • cra-template-typescript, cra-template, eslint-config-react-app, react-error-overlay, react-scripts
  • eslint-config-react-app
  • create-react-app
  • cra-template-typescript, cra-template, react-scripts
  • babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • create-react-app, react-scripts
  • react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, create-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  • eslint-config-react-app, react-scripts
  • cra-template-typescript, cra-template, create-react-app, react-app-polyfill, react-dev-utils, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, react-dev-utils, react-error-overlay, react-scripts
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
  • react-scripts
  • react-error-overlay, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-app-polyfill, react-error-overlay, react-scripts
  • eslint-config-react-app, react-dev-utils, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-dev-utils, react-error-overlay, react-scripts
  • eslint-config-react-app, react-error-overlay, react-scripts
  • cra-template-typescript, cra-template
  • react-app-polyfill
  • react-dev-utils
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-preset-react-app, cra-template-typescript, cra-template, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
    • #​9081 Update packages ([@​ianschmitz](https:

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Jan 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
security fix Security fix generated by Mend
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants