[Snyk] Upgrade react-scripts from 3.3.0 to 3.3.1 #23

snyk-bot · 2020-02-22T05:38:22Z

Snyk has created this PR to upgrade react-scripts from 3.3.0 to 3.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago, on 2020-01-31.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-HAPIHOEK-548452	No Known Exploit
	Prototype Pollution SNYK-JS-DOTPROP-543489	Proof of Concept

Release notes

Package name: react-scripts

3.3.1 - 2020-01-31
3.3.1 (2020-01-31)

v3.3.1 is a maintenance release that includes minor bug fixes and documentation updates.

🐛 Bug Fix
- cra-template
  - #8255 Add "Disallow:" to robots.txt (@tomoyaf)
- react-scripts
  - #8281 Fix sass importLoaders (@mariusc23)
  - #8099 Add titleProp to SVGR ReactComponent type definition (@rhnorskov)
  - #8028 fix(react-scripts): proactively append to .gitignore during generation (@bmuenzenmeyer)
  - #8106 Fix CSS font-face minification (@sidonaldson)
- babel-preset-react-app
  - #8120 Sync dependencies babel config (@ianschmitz)
- react-dev-utils
  - #8116 Add slashes to WebSocket protocol URL (@Baael)
  - #8079 webpackHotDevClient now uses wss when https is used (@mikecaulley)
💅 Enhancement
- react-error-overlay
  - #6548 Add helpful message to the footer (@pyrogenic)
- cra-template-typescript
  - #8177 Remove React.FC from Typescript template (@Retsam)
- cra-template-typescript, cra-template, react-scripts
  - #8219 Add template support for any package.json keys (#8082) (@tomvalorsa)
- create-react-app
  - #8298 Support shorthand scoped templates (@kevin940726)
  - #8168 Add current version and bin location to --info output (@heyimalex)
- cra-template-typescript, cra-template
  - #8194 Replace favicon in templates (@heyimalex)
- eslint-config-react-app
  - #7803 Remove error for @typescript-eslint/no-namespace (@szhu)
📝 Documentation
- Other
  - #8380 docs: Add troubleshooting documentation on ENOSPC (@huchenme)
  - #8394 Update docs according to lint-staged v10 (@lukyth)
  - #8307 Remove outdated docs regarding vscode eslint extension and typescript autofix (@alex-vukovity-cko)
  - #8247 Update setting-up-your-editor.md (@dev-xu)
  - #8092 Update custom template docs with instructions for testing custom template locally (@kevinold)
  - #8293 Minor grammatical edit (@egrim)
  - #8212 Little typo (@sonyarianto)
  - #8147 update PWA docs links to point to template package (@peet)
  - #8132 Add package-runner note to readme (@JeromeDeLeon)
  - #8111 chore: update docusaurus & tweak site (@endiliey)
  - #8080 Fix typo in CHANGELOG.md (@Trontor)
  - #8077 Add custom-templates to docs sidebar (@ianschmitz)
- babel-preset-react-app
  - #8124 Fix typo in comment: ?. is right, .? is not (@vadzim)
🏠 Internal
- create-react-app
  - #8178 Minor refactors in create-react-app (@heyimalex)
🔨 Underlying Tools
- babel-preset-react-app, create-react-app, react-dev-utils, react-error-overlay, react-scripts
  - #8353 Remove outdated babel plugins (@ianschmitz)
  - #8324 Update Dependencies (@RDIL)
  - #8122 Fix CI build (@ianschmitz)
- react-dev-utils
  - #8364 Downgrade open from 7.0.0 to 6.4.0 (@vince1995)
  - #8163 Bump pkgUp (@andriijas)
- babel-plugin-named-asset-import
  - #8171 Bump babel-plugin-tester and fix breaking changes (@andriijas)
- create-react-app, react-app-polyfill, react-dev-utils, react-error-overlay, react-scripts
  - #8176 Bump internal dependencies (@andriijas)
- create-react-app, react-dev-utils, react-error-overlay
  - #8164 Bump chalk (@andriijas)
- react-error-overlay, react-scripts
  - #8102 [Security] Update terser webpack plugin (@RDIL)
Committers: 29
- Alex Guerra (@heyimalex)
- Alex James Vukovity (@alex-vukovity-cko)
- Andreas Cederström (@andriijas)
- Boyuan Xu (@dev-xu)
- Brian Muenzenmeyer (@bmuenzenmeyer)
- Endi (@endiliey)
- Evan Grim (@egrim)
- Hu Chen (@huchenme)
- Ian Schmitz (@ianschmitz)
- Jerome De Leon (@JeromeDeLeon)
- Joshua Pollak (@pyrogenic)
- Kai Hao (@kevin940726)
- Kanitkorn Sujautra (@lukyth)
- Kevin Old (@kevinold)
- Marius Craciunoiu (@mariusc23)
- Mike Caulley (@mikecaulley)
- Peet Goddard (@peet)
- Rasmus Nørskov (@rhnorskov)
- Reece Dunham (@RDIL)
- Sean Zhu (@szhu)
- Simon Donaldson (@sidonaldson)
- Sony AK (@sonyarianto)
- Tom Valorsa (@tomvalorsa)
- Tomoya Fujita (@tomoyaf)
- Vadzim (@vadzim)
- Vincent Semrau (@vince1995)
- Wojciech Zieliński (@Baael)
- @Retsam
- @Trontor
Migrating from 3.3.0 to 3.3.1

Inside any created project that has not been ejected, run:
```
npm install --save --save-exact react-scripts@3.3.1
```
or
```
yarn add --exact react-scripts@3.3.1
```
3.3.0 - 2019-12-05