Update dependency react-scripts to v1.1.0 (master) #35

appcues-wss · 2023-10-31T11:21:54Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
react-scripts	`1.0.17` -> `1.1.0`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
Critical	9.8	CVE-2018-1000620
Critical	9.8	CVE-2018-1000620
Critical	9.8	CVE-2018-13797
Critical	9.8	CVE-2018-16492
Critical	9.8	CVE-2018-3774
Critical	9.8	CVE-2018-3774
Critical	9.8	CVE-2018-6342
Critical	9.8	CVE-2019-19919
Critical	9.8	CVE-2020-28499
Critical	9.8	CVE-2020-7774
Critical	9.8	CVE-2020-7788
Critical	9.8	CVE-2021-23369
Critical	9.8	CVE-2021-23383
Critical	9.8	CVE-2021-3918
Critical	9.8	CVE-2021-42740
Critical	9.8	CVE-2021-44906
Critical	9.8	CVE-2022-0691
Critical	9.8	CVE-2022-0691
Critical	9.8	CVE-2022-37601
Critical	9.8	CVE-2022-37601
Critical	9.8	CVE-2023-26136
Critical	9.8	CVE-2023-26136
Critical	9.8	CVE-2023-45311
Critical	9.3	CVE-2022-1650
Critical	9.1	CVE-2019-10744
Critical	9.1	CVE-2019-10744
Critical	9.1	CVE-2022-0686
Critical	9.1	CVE-2022-0686
High	8.8	CVE-2018-3728
High	8.8	CVE-2022-46175
High	8.6	CVE-2021-37701
High	8.6	CVE-2021-37712
High	8.6	CVE-2021-37713
High	8.1	CVE-2019-20920
High	8.1	CVE-2021-32803
High	8.1	CVE-2021-32804
High	8.1	WS-2019-0063
High	8.1	WS-2019-0063
High	7.8	CVE-2021-43138
High	7.7	CVE-2020-13822
High	7.5	CVE-2017-15010
High	7.5	CVE-2017-20165
High	7.5	CVE-2018-14732
High	7.5	CVE-2018-16469
High	7.5	CVE-2018-20834
High	7.5	CVE-2018-3737
High	7.5	CVE-2018-3737
High	7.5	CVE-2019-13173
High	7.5	CVE-2019-20922
High	7.5	CVE-2020-28469
High	7.5	CVE-2020-7662
High	7.5	CVE-2021-23343
High	7.5	CVE-2021-23382
High	7.5	CVE-2021-23382
High	7.5	CVE-2021-23424
High	7.5	CVE-2021-27516
High	7.5	CVE-2021-28092
High	7.5	CVE-2021-29059
High	7.5	CVE-2021-33623
High	7.5	CVE-2021-3777
High	7.5	CVE-2021-3803
High	7.5	CVE-2021-3807
High	7.5	CVE-2022-21222
High	7.5	CVE-2022-24771
High	7.5	CVE-2022-24772
High	7.5	CVE-2022-24999
High	7.5	CVE-2022-25883
High	7.5	CVE-2022-25883
High	7.5	CVE-2022-29167
High	7.5	CVE-2022-29167
High	7.5	CVE-2022-37603
High	7.5	WS-2019-0032
High	7.5	WS-2019-0032
High	7.5	WS-2019-0541
High	7.5	WS-2020-0091
High	7.5	WS-2020-0450
High	7.5	WS-2021-0152
High	7.4	CVE-2020-8203
High	7.4	WS-2018-0588
High	7.4	WS-2018-0588
High	7.3	CVE-2020-7720
High	7.3	CVE-2020-8116
High	7.3	WS-2019-0064
High	7.2	CVE-2021-23337
High	7.1	WS-2018-0590
Medium	6.8	CVE-2020-28498
Medium	6.6	WS-2022-0008
Medium	6.5	CVE-2018-21270
Medium	6.5	CVE-2018-3721
Medium	6.5	CVE-2019-1010266
Medium	6.5	CVE-2020-26291
Medium	6.5	CVE-2021-23386
Medium	6.1	CVE-2021-3647
Medium	6.1	CVE-2022-0122
Medium	6.1	CVE-2022-0868
Medium	6.1	CVE-2022-1233
Medium	6.1	CVE-2022-1243
Medium	5.9	WS-2019-0424
Medium	5.9	WS-2019-0427
Medium	5.6	CVE-2018-16487
Medium	5.6	CVE-2020-15366
Medium	5.6	CVE-2020-15366
Medium	5.6	CVE-2020-7598
Medium	5.6	CVE-2020-7789
Medium	5.6	CVE-2021-24033
Medium	5.6	WS-2019-0103
Medium	5.3	CVE-2017-16028
Medium	5.3	CVE-2017-16137
Medium	5.3	CVE-2020-28500
Medium	5.3	CVE-2020-7608
Medium	5.3	CVE-2020-7608
Medium	5.3	CVE-2020-7608
Medium	5.3	CVE-2020-7693
Medium	5.3	CVE-2020-8124
Medium	5.3	CVE-2020-8124
Medium	5.3	CVE-2021-23362
Medium	5.3	CVE-2021-27515
Medium	5.3	CVE-2021-27515
Medium	5.3	CVE-2021-29060
Medium	5.3	CVE-2021-3664
Medium	5.3	CVE-2021-3664
Medium	5.3	CVE-2022-0512
Medium	5.3	CVE-2022-0512
Medium	5.3	CVE-2022-0639
Medium	5.3	CVE-2022-0639
Medium	5.3	CVE-2022-24723
Medium	5.3	CVE-2022-24773
Medium	5.3	CVE-2022-33987
Medium	5.3	WS-2018-0347
Medium	5.3	WS-2019-0017
Medium	5.1	WS-2019-0307
Medium	4.8	WS-2018-0103
Low	3.7	WS-2018-0589

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
Critical	9.8	CVE-2018-3750
Critical	9.8	CVE-2021-44906
Medium	5.6	CVE-2020-7598

Release Notes

facebook/create-react-app (react-scripts)

`v1.1.0`

Compare Source

1.1.0 (January 15, 2018)

🚀 New Feature

react-scripts
- #3387 Add support for variable expansion in .env files. (@moos)
react-error-overlay
- #3474 Allow the error overlay to be unregistered. (@Timer)
create-react-app
- #3408 Add --info flag to help gather bug reports. (@tabrindle)
- #3409 Add --use-npm flag to bypass Yarn even on systems that have it. (@tabrindle)
- #3725 Extend --scripts-version to include .tar.gz format. (@SaschaDens)
- #3629 Allowing "file:<path>" --scripts-version values. (@GreenGremlin)

🐛 Bug Fix

babel-preset-react-app, react-scripts
- #3788 Fix object destructuring inside an array on Node 6. (@gaearon)
react-dev-utils
- #3784 Detach browser process from the shell on Linux. (@gaearon)
- #3726 Use proxy for all request methods other than GET. (@doshisid)
- #3440 Print full directory name from lsof. (@rmccue)
- #2071 Fix broken console clearing on Windows. (@danielverejan)
- #3686 Fix starting a project in directory with ++ in the name. (@Norris1z)
create-react-app
- #3320 Fix offline installation to respect proxy from .npmrc. (@mdogadailo)
react-scripts
- #3537 Add mjs and jsx filename extensions to file-loader exclude pattern. (@iansu)
- #3511 Unmount the component in the default generated test. (@gaearon)

💅 Enhancement

react-scripts
- #3730 Print when HOST environment variable is set. (@iansu)
- #3455 Add a localhost-only log message pointing folks to the PWA docs. (@jeffposnick)
- #3416 Improve eject message. (@xjlim)
create-react-app
- #3740 Allow more non-conflicting files in initial project directory. (@GreenGremlin)
react-dev-utils
- #3104 Add link to deployment docs after build. (@viankakrisna)
- #3652 Add code-insiders to the editor list. (@shrynx)
- #3700 Add editor support for Sublime Dev & VSCode Insiders. (@yyx990803)
- #3545 Autodetect MacVim editor. (@gnapse)
react-dev-utils, react-error-overlay
- #3465 Open editor to exact column from build error overlay. (@tharakawj)
react-dev-utils, react-scripts
- #3721 Support setting none in REACT_EDITOR environment variable. (@raerpo)
eslint-config-react-app
- #3716 Relax no-cond-assign rule. (@gaearon)

📝 Documentation

User Guide
- #3659 Add info about service-worker and HTTP caching headers into Firebase section. (@bobrosoft)
- #3515 Add Powershell commands to README.md. (@Gua-naiko-che)
- #3656 Better documentation for setupTests.js when ejecting. (@dannycalleri)
- #1791 Add link for automatic deployment to azure. (@ulrikstrid)
- #3717 Update README.md. (@maecapozzi)
- #3710 Link to an explanation for forking react-scripts. (@gaearon)
- #3709 Document adding a router. (@gaearon)
- #3670 Fix typo in the User Guide. (@qbahers)
- #3645 Update README.md. (@elie222)
- #3533 Use safer/more aesthetic syntax for setting environment variables on Windows. (@cdanielsen)
- #3605 Updated Debugging Tests for VSCode. (@amadeogallardo)
- #3601 Fixed typo in webpack.config.dev.js. (@nmenglund)
- #3576 Updates comment to reflect codebase. (@rahulcs)
- #3510 Update User Guide with deploying to GitHub User pages. (@aaronlna)
- #3503 Update Prettier editor integration link. (@gaving)
- #3453 Fix dead links. (@vannio)
- #2992 Docs: How to Debug Unit Tests. (@MattMorgis)
Other
- #3729 Update README.md to note Neutrino's support of react components. (@eliperelman)
- #2841 Documentation to help windows contributors. (@Dubes)
- #3489 Add link to nvm-windows. (@davidgilbertson)
eslint-config-react-app
- #3460 Fix broken link to href-no-hash eslint rule. (@hazolsky)

🏠 Internal

Other
- #3769 Enable Yarn check files. (@Timer)
- #3756 Clean up changes to npm and yarn registry in E2E tests. (@viankakrisna)
- #3744 Use private registry in E2E tests. (@Timer)
- #3738 Always use Yarn on CI. (@gaearon)
- #2309 Port cra.sh development task to javascript. (@ianschmitz)
- #3411 Simplify waiting for app start in E2E tests. (@xjlim)
- #3755 Switch to Yarn Workspaces. (@gaearon)
- #3757 Try updating Flow. (@gaearon)
- #3414 Export dismissRuntimeErrors function. (@skidding)
- #3036 Cleaning up printHostingInstructions a bit. (@GreenGremlin)
- #3514 Fix FileSizeReporter for multi build Webpack setups. (@iiska)
- #3362 Refactor extra watch options regex to react-dev-utils. (@xjlim)

Committers: 47

Aaron Lamb (aaronlna)
Ade Viankakrisna Fadlil (viankakrisna)
Amadeo Gallardo (amadeogallardo)
Andy Kenward (andykenward)
Christian Danielsen (cdanielsen)
Clayton Ray (iamclaytonray)
Dan Abramov (gaearon)
Daniel Verejan (danielverejan)
Danny Calleri (dannycalleri)
David Boyne (boyney123)
David Gilbertson (davidgilbertson)
Eli Perelman (eliperelman)
Elie (elie222)
Ernesto García (gnapse)
Evan You (yyx990803)
Gavin Gilmour (gaving)
Ian Schmitz (ianschmitz)
Ian Sutherland (iansu)
JANG SUN HYUK (wkdtjsgur100)
Jeffrey Posnick (jeffposnick)
Joe Haddad (Timer)
Joe Lim (xjlim)
Jonathan (GreenGremlin)
Juhamatti Niemelä (iiska)
Mae Capozzi (maecapozzi)
Maksym Dogadailo (mdogadailo)
Mario Nebl (marionebl)
Matt Morgis (MattMorgis)
Misha Khokhlov (hazolsky)
Moos (moos)
Nils Magnus Englund (nmenglund)
Norris Oduro (Norris1z)
Ovidiu Cherecheș (skidding)
Quentin Bahers (qbahers)
Rafael E. Poveda (raerpo)
Rahul Chanila (rahulcs)
Ryan McCue (rmccue)
Sascha Dens (SaschaDens)
Siddharth Doshi (doshisid)
Tao Gómez Gil (Gua-naiko-che)
Tharaka Wijebandara (tharakawj)
Trevor Brindle (tabrindle)
Ulrik Strid (ulrikstrid)
Vladimir Tolstikov (bobrosoft)
Dubes
vannio
shrynx (shrynx)

Migrating from 1.0.17 to 1.1.0

Inside any created project that has not been ejected, run:

npm install --save --save-exact [email protected]

or

yarn add --exact [email protected]

If you want to rebase/retry this PR, check this box

appcues-wss bot added the security fix Security fix generated by WhiteSource label Oct 31, 2023

appcues-wss bot force-pushed the whitesource-remediate/master-react-scripts-1.x branch from 4a8b1e7 to 54e5eeb Compare December 5, 2023 07:46

appcues-wss bot changed the title ~~Update dependency react-scripts to v1.1.0 (master)~~ Update dependency react-scripts to v1.1.5 (master) Dec 5, 2023

appcues-wss bot changed the title ~~Update dependency react-scripts to v1.1.5 (master)~~ Update dependency react-scripts to v1.1.5 (master) - autoclosed Dec 7, 2023

appcues-wss bot closed this Dec 7, 2023

appcues-wss bot deleted the whitesource-remediate/master-react-scripts-1.x branch December 7, 2023 17:31

appcues-wss bot changed the title ~~Update dependency react-scripts to v1.1.5 (master) - autoclosed~~ Update dependency react-scripts to v1.1.5 (master) Dec 7, 2023

appcues-wss bot reopened this Dec 7, 2023

appcues-wss bot restored the whitesource-remediate/master-react-scripts-1.x branch December 7, 2023 20:18

Update dependency react-scripts to v1.1.0

b2caebd

appcues-wss bot changed the title ~~Update dependency react-scripts to v1.1.5 (master)~~ Update dependency react-scripts to v1.1.0 (master) Dec 7, 2023

appcues-wss bot force-pushed the whitesource-remediate/master-react-scripts-1.x branch from 54e5eeb to b2caebd Compare December 7, 2023 21:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency react-scripts to v1.1.0 (master) #35

Update dependency react-scripts to v1.1.0 (master) #35

appcues-wss bot commented Oct 31, 2023 •

edited

Loading

Update dependency react-scripts to v1.1.0 (master) #35

Are you sure you want to change the base?

Update dependency react-scripts to v1.1.0 (master) #35

Conversation

appcues-wss bot commented Oct 31, 2023 • edited Loading

Release Notes

v1.1.0

1.1.0 (January 15, 2018)

🚀 New Feature

🐛 Bug Fix

💅 Enhancement

📝 Documentation

🏠 Internal

Committers: 47

Migrating from 1.0.17 to 1.1.0

appcues-wss bot commented Oct 31, 2023 •

edited

Loading

`v1.1.0`