Skip to content
This repository has been archived by the owner on Dec 20, 2023. It is now read-only.

Update dependency react-scripts to v5 (master) #45

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

appcues-wss[bot]
Copy link

@appcues-wss appcues-wss bot commented Oct 31, 2023

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
react-scripts 2.1.1 -> 5.0.0 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2019-15657
Critical Critical 9.8 CVE-2019-19919
Critical Critical 9.8 CVE-2020-28499
Critical Critical 9.8 CVE-2020-7774
Critical Critical 9.8 CVE-2020-7774
Critical Critical 9.8 CVE-2020-7788
Critical Critical 9.8 CVE-2021-23369
Critical Critical 9.8 CVE-2021-23383
Critical Critical 9.8 CVE-2021-23436
Critical Critical 9.8 CVE-2021-26707
Critical Critical 9.8 CVE-2021-3757
Critical Critical 9.8 CVE-2021-3918
Critical Critical 9.8 CVE-2021-42740
Critical Critical 9.8 CVE-2021-44906
Critical Critical 9.8 CVE-2021-44906
Critical Critical 9.8 CVE-2021-44906
Critical Critical 9.8 CVE-2022-0691
Critical Critical 9.8 CVE-2022-37598
Critical Critical 9.8 CVE-2022-37601
Critical Critical 9.8 CVE-2023-26136
Critical Critical 9.8 CVE-2023-45311
Critical Critical 9.3 CVE-2022-1650
Critical Critical 9.1 CVE-2019-10744
Critical Critical 9.1 CVE-2019-10744
Critical Critical 9.1 CVE-2022-0686
High High 8.8 CVE-2022-46175
High High 8.6 CVE-2021-37701
High High 8.6 CVE-2021-37712
High High 8.6 CVE-2021-37713
High High 8.1 CVE-2019-20920
High High 8.1 CVE-2020-7660
High High 8.1 CVE-2021-32803
High High 8.1 CVE-2021-32804
High High 8.1 WS-2019-0063
High High 7.8 CVE-2021-43138
High High 7.7 CVE-2020-13822
High High 7.5 CVE-2019-20149
High High 7.5 CVE-2019-20922
High High 7.5 CVE-2020-28469
High High 7.5 CVE-2020-28477
High High 7.5 CVE-2020-7662
High High 7.5 CVE-2021-23343
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23424
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-27290
High High 7.5 CVE-2021-28092
High High 7.5 CVE-2021-29059
High High 7.5 CVE-2021-3777
High High 7.5 CVE-2021-3807
High High 7.5 CVE-2022-21222
High High 7.5 CVE-2022-24771
High High 7.5 CVE-2022-24772
High High 7.5 CVE-2022-24999
High High 7.5 CVE-2022-25858
High High 7.5 CVE-2022-25883
High High 7.5 CVE-2022-37603
High High 7.5 WS-2019-0032
High High 7.5 WS-2020-0042
High High 7.5 WS-2020-0042
High High 7.5 WS-2020-0091
High High 7.5 WS-2020-0450
High High 7.5 WS-2021-0152
High High 7.4 CVE-2020-8203
High High 7.3 CVE-2020-7720
High High 7.3 WS-2019-0064
High High 7.2 CVE-2021-23337
Medium Medium 6.8 CVE-2020-28498
Medium Medium 6.6 WS-2022-0008
Medium Medium 6.5 CVE-2021-23386
Medium Medium 6.5 CVE-2022-0155
Medium Medium 6.1 CVE-2022-0122
Medium Medium 5.9 CVE-2022-0536
Medium Medium 5.9 WS-2019-0424
Medium Medium 5.9 WS-2019-0427
Medium Medium 5.6 CVE-2020-15366
Medium Medium 5.6 CVE-2020-15366
Medium Medium 5.6 CVE-2020-7598
Medium Medium 5.6 CVE-2020-7598
Medium Medium 5.6 CVE-2020-7598
Medium Medium 5.6 CVE-2020-7789
Medium Medium 5.6 CVE-2021-24033
Medium Medium 5.6 WS-2019-0103
Medium Medium 5.4 CVE-2019-16769
Medium Medium 5.3 CVE-2020-28500
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.3 CVE-2020-7608
Medium Medium 5.3 CVE-2020-7693
Medium Medium 5.3 CVE-2020-8124
Medium Medium 5.3 CVE-2021-23364
Medium Medium 5.3 CVE-2021-23364
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-27515
Medium Medium 5.3 CVE-2021-29060
Medium Medium 5.3 CVE-2021-32640
Medium Medium 5.3 CVE-2021-32640
Medium Medium 5.3 CVE-2021-3664
Medium Medium 5.3 CVE-2022-0512
Medium Medium 5.3 CVE-2022-0639
Medium Medium 5.3 CVE-2022-24773
Medium Medium 5.1 WS-2019-0307

Release Notes

facebook/create-react-app (react-scripts)

v5.0.0

Compare Source

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
Committers: 11

5.0.0 (2021-12-14)

Create React App 5.0 is a major release with several new features and the latest version of all major dependencies.

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

v4.0.3

Compare Source

4.0.3 (2021-02-22)

v4.0.3 is a maintenance release that includes minor bug fixes and dependency updates.

🐛 Bug Fix
🏠 Internal
Committers: 4

Migrating from 4.0.2 to 4.0.3

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

v4.0.2

Compare Source

4.0.2 (2021-02-03)

v4.0.2 is a maintenance release that includes minor bug fixes and documentation updates.

🚀 New Feature
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
Committers: 15

v4.0.1

Compare Source

v4.0.1 is a maintenance release that includes minor bug fixes and documentation updates.

🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
Committers: 9

Migrating from 4.0.0 to 4.0.1

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

v4.0.0

Compare Source

4.0.0 (2020-10-23)

Create React App 4.0 is a major release with several new features, including support for Fast Refresh!

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

Highlights

  • Fast Refresh #​8582
  • React 17 support
  • TypeScript 4 support #​9734
  • ESLint 7 #​8978
    • New Jest and React Testing Library rules #​8963
  • Jest 26 #​8955
  • PWA/workbox improvements
    • Switch to the Workbox InjectManifest plugin #​9205
    • Now its own template so it can be released independently
  • Web Vitals support #​9116

Migrating from 3.4.x to 4.0.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

NOTE: You may need to delete your node_modules folder and reinstall your dependencies by running yarn (or npm install) if you encounter errors after upgrading.

If you previously ejected but now want to upgrade, one common solution is to find the commits where you ejected (and any subsequent commits changing the configuration), revert them, upgrade, and later optionally eject again. It’s also possible that the feature you ejected for is now supported out of the box.

Breaking Changes

Like any major release, [email protected] contains a number of breaking changes. We expect that they won't affect every user, but we recommend you look over this section to see if something is relevant to you. If we missed something, please file a new issue.

ESLint

We've upgraded to ESLint 7 and added many new rules including some for Jest and React Testing Library as well as the import/no-anonymous-default-export rule. We've also upgraded eslint-plugin-hooks to version 4.0.0 and removed the EXTEND_ESLINT flag as it is no longer required to customize the ESLint config.

Jest

We've upgraded to Jest 26 and now set resetMocks to true by default in the Jest config.

Service workers

We've switched to the Workbox InjectManifest plugin and moved the PWA templates into their own repository.

Removed typescript flag and NODE_PATH support

We've removed the deprecated typescript flag when creating a new app. Use --template typescript instead. We've also dropped deprecated NODE_PATH flag as this has been replaced by setting the base path in jsconfig.json.

Fix dotenv file loading order

We've changed the loading order of env files to match the dotenv specification. See #​9037 for more details.

Dropped Node 8 support

Node 8 reached End-of-Life at the end of 2019 and is no longer supported.

Detailed Changelog

🚀 New Feature
💥 Breaking Change
  • eslint-config-react-app, react-error-overlay, react-scripts
  • cra-template-typescript, cra-template, eslint-config-react-app, react-error-overlay, react-scripts
  • eslint-config-react-app
  • create-react-app
  • cra-template-typescript, cra-template, react-scripts
  • babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • create-react-app, react-scripts
  • react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, create-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  • eslint-config-react-app, react-scripts
  • cra-template-typescript, cra-template, create-react-app, react-app-polyfill, react-dev-utils, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, react-dev-utils, react-error-overlay, react-scripts
🐛 Bug Fix
💅 Enhancement
📝 Documentation
🏠 Internal
🔨 Underlying Tools
  • react-scripts
  • react-error-overlay, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-app-polyfill, react-error-overlay, react-scripts
  • eslint-config-react-app, react-dev-utils, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, cra-template, create-react-app, eslint-config-react-app, react-dev-utils, react-error-overlay, react-scripts
  • eslint-config-react-app, react-error-overlay, react-scripts
  • cra-template-typescript, cra-template
  • react-app-polyfill
  • react-dev-utils
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-preset-react-app, cra-template-typescript, cra-template, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-plugin-named-asset-import, confusing-browser-globals, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, create-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  • eslint-config-react-app, react-scripts
  • babel-plugin-named-asset-import, babel-preset-react-app, confusing-browser-globals, cra-template-typescript, react-dev-utils, react-error-overlay, react-scripts
Committers: 63

@appcues-wss appcues-wss bot added the security fix Security fix generated by WhiteSource label Oct 31, 2023
@appcues-wss appcues-wss bot changed the title Update dependency react-scripts to v5 (master) Update dependency react-scripts to v5 (master) - autoclosed Dec 13, 2023
@appcues-wss appcues-wss bot closed this Dec 13, 2023
@appcues-wss appcues-wss bot deleted the whitesource-remediate/master-react-scripts-5.x branch December 13, 2023 13:42
@appcues-wss appcues-wss bot restored the whitesource-remediate/master-react-scripts-5.x branch December 13, 2023 19:31
@appcues-wss appcues-wss bot changed the title Update dependency react-scripts to v5 (master) - autoclosed Update dependency react-scripts to v5 (master) Dec 13, 2023
@appcues-wss appcues-wss bot reopened this Dec 13, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants