-
Notifications
You must be signed in to change notification settings - Fork 36
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Upgrade react + related deps; upgrade react-styleguidist #394
base: master
Are you sure you want to change the base?
Conversation
Codecov Report
@@ Coverage Diff @@
## master #394 +/- ##
=======================================
Coverage 83.84% 83.84%
=======================================
Files 62 62
Lines 1300 1300
Branches 230 230
=======================================
Hits 1090 1090
Misses 159 159
Partials 51 51 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
"react-dom": "16.4.2", | ||
"react-styleguidist": "9.0.9", | ||
"react-test-renderer": "16.4.2", | ||
"react": "^16.12.0", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
we should prob make sure this is a minor version change, as react updating is not insignificant (bundle sizes and all)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
good idea 👍 , I think this would actually somehow be the first non-patch release.
* Upgrades react/react-dom from 16.4.2 => 16.12.0. * Also upgrades any deps that rely on certain versions of react like enzyme/react-test-renderer * Upgrades react-styleguidist from 9 => 10. This was the original target package to upgrade since it had the outdated serialize-javascript dependency * Sets an explicit version of node in package.json * Updates circleci config to use node 10 (required by the newer version of react-styleguidist)
5495ec5
to
f2e8400
Compare
Had to rebase due to lockfile conflicts. |
Part 2 of 2 of resolving the CVE here: https://github.com/instacart/snacks/network/alert/yarn.lock/serialize-javascript/open
react like enzyme/react-test-renderer
target package to upgrade since it had the outdated
serialize-javascript dependency