[Snyk] Upgrade: lodash, react, react-dom, classnames, moment, antd, babel-plugin-import, cross-fetch, customize-cra, firebase, hls.js, less, node-sass, react-app-rewired, react-redux, react-router, react-router-dom, react-scripts, react-spinners, redux, redux-saga, socket.io-client #206
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
lodash
from 4.17.15 to 4.17.21 | 6 versions ahead of your current version | 4 years ago
on 2021-02-20
react
from 16.10.2 to 16.14.0 | 5 versions ahead of your current version | 4 years ago
on 2020-10-14
react-dom
from 16.10.2 to 16.14.0 | 5 versions ahead of your current version | 4 years ago
on 2020-10-14
classnames
from 2.2.6 to 2.5.1 | 7 versions ahead of your current version | 8 months ago
on 2023-12-29
moment
from 2.24.0 to 2.30.1 | 14 versions ahead of your current version | 9 months ago
on 2023-12-27
antd
from 3.23.6 to 3.26.20 | 29 versions ahead of your current version | 4 years ago
on 2020-10-27
babel-plugin-import
from 1.12.2 to 1.13.8 | 10 versions ahead of your current version | a year ago
on 2023-07-26
cross-fetch
from 3.0.4 to 3.1.8 | 16 versions ahead of your current version | a year ago
on 2023-07-02
customize-cra
from 0.8.0 to 0.9.1 | 2 versions ahead of your current version | 5 years ago
on 2019-11-16
firebase
from 7.2.2 to 7.24.0 | 681 versions ahead of your current version | 4 years ago
on 2020-10-15
hls.js
from 0.12.4 to 0.14.17 | 329 versions ahead of your current version | 4 years ago
on 2020-12-09
less
from 3.10.3 to 3.13.1 | 17 versions ahead of your current version | 4 years ago
on 2020-12-18
node-sass
from 4.12.0 to 4.14.1 | 4 versions ahead of your current version | 4 years ago
on 2020-05-04
react-app-rewired
from 2.1.3 to 2.2.1 | 11 versions ahead of your current version | 3 years ago
on 2022-02-15
react-redux
from 7.1.1 to 7.2.9 | 13 versions ahead of your current version | 2 years ago
on 2022-09-23
react-router
from 5.1.2 to 5.3.4 | 6 versions ahead of your current version | 2 years ago
on 2022-10-02
react-router-dom
from 5.1.2 to 5.3.4 | 7 versions ahead of your current version | 2 years ago
on 2022-10-02
react-scripts
from 3.2.0 to 3.4.4 | 11 versions ahead of your current version | 4 years ago
on 2020-10-20
react-spinners
from 0.6.1 to 0.14.1 | 63 versions ahead of your current version | 3 months ago
on 2024-06-26
redux
from 4.0.4 to 4.2.1 | 8 versions ahead of your current version | 2 years ago
on 2023-01-28
redux-saga
from 1.1.1 to 1.3.0 | 7 versions ahead of your current version | 8 months ago
on 2024-01-02
socket.io-client
from 2.3.0 to 2.5.0 | 3 versions ahead of your current version | 2 years ago
on 2022-06-26
Issues fixed by the recommended upgrade:
SNYK-JS-AJV-584908
SNYK-JS-ELLIPTIC-7577917
SNYK-JS-ELLIPTIC-7577918
SNYK-JS-ES5EXT-6095076
SNYK-JS-IP-6240864
SNYK-JS-MOMENT-2440688
SNYK-JS-MOMENT-2944238
SNYK-JS-FOLLOWREDIRECTS-6141137
SNYK-JS-ELLIPTIC-571484
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-567746
SNYK-JS-GRPC-598671
SNYK-JS-LODASH-608086
SNYK-JS-LODASH-6139239
SNYK-JS-NODEFORGE-598677
SNYK-JS-MERGEDEEP-1070277
SNYK-JS-OBJECTPATH-1017036
SNYK-JS-OBJECTPATH-1585658
SNYK-JS-SERIALIZEJAVASCRIPT-536840
SNYK-JS-SERIALIZEJAVASCRIPT-570062
SNYK-JS-SERIALIZEJAVASCRIPT-6056521
SNYK-JS-SSRI-1246392
SNYK-JS-WEBSOCKETEXTENSIONS-570623
SNYK-JS-URLPARSE-2407770
SNYK-JS-XMLHTTPREQUESTSSL-1082936
SNYK-JS-XMLHTTPREQUESTSSL-1255647
SNYK-JS-ASYNC-2441827
SNYK-JS-BROWSERIFYSIGN-6037026
SNYK-JS-DNSPACKET-1293563
SNYK-JS-EVENTSOURCE-2823375
SNYK-JS-EXPRESS-6474509
SNYK-JS-FOLLOWREDIRECTS-2332181
SNYK-JS-NODESASS-542662
SNYK-JS-ELLIPTIC-511941
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-LODASH-1018905
SNYK-JS-HTMLMINIFIER-3091181
SNYK-JS-HTTPPROXY-569139
SNYK-JS-OBJECTPATH-1569453
SNYK-JS-SOCKJS-575261
SNYK-JS-URLPARSE-1078283
SNYK-JS-URLPARSE-1533425
SNYK-JS-URLPARSE-2407759
SNYK-JS-URLPARSE-2412697
SNYK-JS-TERSER-2806366
SNYK-JS-YARGSPARSER-560381
SNYK-JS-YARGSPARSER-560381
SNYK-JS-FOLLOWREDIRECTS-2396346
SNYK-JS-NODESASS-535497
SNYK-JS-ELLIPTIC-7577916
SNYK-JS-PATHPARSE-1077067
SNYK-JS-URLPARSE-2401205
SNYK-JS-YARGSPARSER-560381
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-ELLIPTIC-1064899
Release notes
Package name: lodash
Bump to v4.17.21
Bump to v4.17.20.
Bump to v4.17.19
Rebuild lodash and docs
4.17.15
Package name: react
React
React DOM
componentWillReceiveProps
,shouldComponentUpdate
, and so on). (@ gaearon in #18330)Artifacts
React
React.createFactory()
(@ trueadm in #17878)React DOM
style
may cause an unexpected collision (@ sophiebits in #14181, #18002)unstable_createPortal
(@ trueadm in #17880)onMouseEnter
being fired on disabled buttons (@ AlfredoGJ in #17675)shouldComponentUpdate
twice when developing inStrictMode
(@ bvaughn in #17942)version
property to ReactDOM (@ ealush in #15780)toString()
ofdangerouslySetInnerHTML
(@ sebmarkbage in #17773)Concurrent Mode (Experimental)
ReactDOM.createRoot()
(@ trueadm in #17937)ReactDOM.createRoot()
callback params and added warnings on usage (@ bvaughn in #17916)SuspenseList
CPU bound heuristic (@ sebmarkbage in #17455)isPending
only being true when transitioning from inside an input event (@ acdlite in #17382)React.memo
components dropping updates when interrupted by a higher priority update (@ acdlite in #18091)Artifacts
React DOM
useEffect
) not being fired in a multi-root app. (@ acdlite in #17347)React Is
lazy
andmemo
types considered elements instead of components (@ bvaughn in #17278)Artifacts
• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
Package name: react-dom
React
React DOM
componentWillReceiveProps
,shouldComponentUpdate
, and so on). (@ gaearon in #18330)Artifacts
React
React.createFactory()
(@ trueadm in #17878)React DOM
style
may cause an unexpected collision (@ sophiebits in #14181, #18002)unstable_createPortal
(@ trueadm in #17880)onMouseEnter
being fired on disabled buttons (@ AlfredoGJ in #17675)shouldComponentUpdate
twice when developing inStrictMode
(@ bvaughn in #17942)version
property to ReactDOM (@ ealush in #15780)toString()
ofdangerouslySetInnerHTML
(@ sebmarkbage in #17773)Concurrent Mode (Experimental)
ReactDOM.createRoot()
(@ trueadm in #17937)ReactDOM.createRoot()
callback params and added warnings on usage (@ bvaughn in #17916)SuspenseList
CPU bound heuristic (@ sebmarkbage in #17455)isPending
only being true when transitioning from inside an input event (@ acdlite in #17382)React.memo
components dropping updates when interrupted by a higher priority update (@ acdlite in #18091)Artifacts
React DOM
useEffect
) not being fired in a multi-root app. (@ acdlite in #17347)React Is
lazy
andmemo
types considered elements instead of components (@ bvaughn in #17278)Artifacts
• react: https://unpkg.com/[email protected]/umd/
• react-art: https://unpkg.com/[email protected]/umd/
• react-dom: https://unpkg.com/[email protected]/umd/
• react-is: https://unpkg.com/[email protected]/umd/
• react-test-renderer: https://unpkg.com/[email protected]/umd/
• scheduler: https://unpkg.com/[email protected]/umd/
Package name: classnames
Prepare for release of version 2.5.1 (#351)
Prepare for release of version 2.5.0 (#344)
Prepare for release of version 2.4.0 (#338)
Prepare for release of version 2.3.3 (#308)
add missing registry for npm publish (#283)
2.3.1
v2.3.0
v2.2.6
Package name: moment
2.30.1
2.30.0
2.29.4
2.29.3
2.29.2
2.29.1
2.29.0
2.28.0
2.27.0
2.26.0
Package name: antd
Package name: babel-plugin-import
v1.13.7...v1.13.8
1.13.7
v1.13.5...v1.13.6
v1.13.4...v1.13.5
v1.13.3...v1.13.4
v1.13.2...v1.13.3
v1.13.2...v1.13.3-beta.1
v1.13.1...v1.13.2