[Snyk] Upgrade react-dom from 16.9.0 to 16.14.0#122
Conversation
Snyk has created this PR to upgrade react-dom from 16.9.0 to 16.14.0. See this package in npm: react-dom See this project in Snyk: https://app.snyk.io/org/sammytezzy/project/916e130a-514c-47db-a7c6-b9cc2e99b04a?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
Reviewer's Guide by SourceryThis PR upgrades react-dom from version 16.9.0 to 16.14.0 to address a high severity Regular Expression Denial of Service (ReDoS) vulnerability. The upgrade spans 8 versions and includes various bug fixes, deprecation warnings, and new feature support. No diagrams generated as the changes look simple and do not need a visual representation. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
2 participants
Snyk has created this PR to upgrade react-dom from 16.9.0 to 16.14.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 8 versions ahead of your current version.
The recommended version was released on 4 years ago.
Issues fixed by the recommended upgrade:
SNYK-JS-CROSSSPAWN-8303230
Release notes
Package name: react-dom
-
16.14.0 - 2020-10-14
- Add support for the new JSX transform. (@ lunaruan in #18299)
-
16.13.1 - 2020-03-19
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (
- react: https://unpkg.com/react@16.13.1/umd/
- react-art: https://unpkg.com/react-art@16.13.1/umd/
- react-dom: https://unpkg.com/react-dom@16.13.1/umd/
- react-is: https://unpkg.com/react-is@16.13.1/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.1/umd/
- scheduler: https://unpkg.com/scheduler@0.19.1/umd/
-
16.13.0 - 2020-02-26
- Warn when a string ref is used in a manner that's not amenable to a future codemod (@ lunaruan in #17864)
- Deprecate
- Warn when changes in
- Warn when a function component is updated during another component's render phase (@ acdlite in #17099)
- Deprecate
- Fix
- Call
- Add
- Don't call
- Show component stacks in more warnings (@ gaearon in #17922, #17586)
- Warn for problematic usages of
- Remove
- Don't group Idle/Offscreen work with other work (@ sebmarkbage in #17456)
- Adjust
- Add missing event plugin priorities (@ trueadm in #17914)
- Fix
- Fix
- Don't warn when suspending at the wrong priority (@ gaearon in #17971)
- Fix a bug with rebasing updates (@ acdlite and @ sebmarkbage in #17560, #17510, #17483, #17480)
- react: https://unpkg.com/react@16.13.0/umd/
- react-art: https://unpkg.com/react-art@16.13.0/umd/
- react-dom: https://unpkg.com/react-dom@16.13.0/umd/
- react-is: https://unpkg.com/react-is@16.13.0/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@16.13.0/umd/
- scheduler: https://unpkg.com/scheduler@0.19.0/umd/
-
16.12.0 - 2019-11-14
- Fix passive effects (
- Fix
-
16.11.0 - 2019-10-22
-
16.10.2 - 2019-10-03
-
16.10.1 - 2019-09-28
-
16.10.0 - 2019-09-27
-
16.9.0 - 2019-08-08
from react-dom GitHub release notesReact
React DOM
componentWillReceiveProps,shouldComponentUpdate, and so on). (@ gaearon in #18330)Artifacts
React
React.createFactory()(@ trueadm in #17878)React DOM
stylemay cause an unexpected collision (@ sophiebits in #14181, #18002)unstable_createPortal(@ trueadm in #17880)onMouseEnterbeing fired on disabled buttons (@ AlfredoGJ in #17675)shouldComponentUpdatetwice when developing inStrictMode(@ bvaughn in #17942)versionproperty to ReactDOM (@ ealush in #15780)toString()ofdangerouslySetInnerHTML(@ sebmarkbage in #17773)Concurrent Mode (Experimental)
ReactDOM.createRoot()(@ trueadm in #17937)ReactDOM.createRoot()callback params and added warnings on usage (@ bvaughn in #17916)SuspenseListCPU bound heuristic (@ sebmarkbage in #17455)isPendingonly being true when transitioning from inside an input event (@ acdlite in #17382)React.memocomponents dropping updates when interrupted by a higher priority update (@ acdlite in #18091)Artifacts
React DOM
useEffect) not being fired in a multi-root app. (@ acdlite in #17347)React Is
lazyandmemotypes considered elements instead of components (@ bvaughn in #17278)Artifacts
• react: https://unpkg.com/react@16.12.0/umd/
• react-art: https://unpkg.com/react-art@16.12.0/umd/
• react-dom: https://unpkg.com/react-dom@16.12.0/umd/
• react-is: https://unpkg.com/react-is@16.12.0/umd/
• react-test-renderer: https://unpkg.com/react-test-renderer@16.12.0/umd/
• scheduler: https://unpkg.com/scheduler@0.18.0/umd/
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by Sourcery
Upgrade react-dom from version 16.9.0 to 16.14.0 to address security vulnerabilities and improve compatibility with the new JSX transform.
Bug Fixes:
Build: