Open greenkeeper[bot] opened 6 years ago
Update to this version instead π
Fix a potential XSS vulnerability when the attacker controls an attribute name (CVE-2018-6341
). This fix is available in the latest react-dom@16.4.2
, as well as in previous affected minor versions: react-dom@16.0.1
, react-dom@16.1.2
, react-dom@16.2.1
, and react-dom@16.3.3
. (@gaearon in #13302)
Fix a crash in the server renderer when an attribute is called hasOwnProperty
. This fix is only available in react-dom@16.4.2
. (@gaearon in #13303)
dependency
react was updated from 16.4.1
to 16.5.1
.dependency
react-dom was updated from 16.4.1
to 16.5.1
.devDependency
react-test-renderer was updated from 16.5.0
to 16.5.1
.Update to these versions instead π
React.forwardRef
receives an unexpected number of arguments. (@andresroberto in #13636)isReactComponent
. (@gaearon in #13608)react-dom/profiling
with schedule/tracking
. (@bvaughn in #13605)ForwardRef
component defines a displayName
, use it in warnings. (@probablyup in #13615)dependency
react was updated from 16.4.1
to 16.5.2
.dependency
react-dom was updated from 16.4.1
to 16.5.2
.devDependency
react-test-renderer was updated from 16.5.1
to 16.5.2
.Update to these versions instead π
<iframe>
regression (@JSteunou in #13650)updateWrapper
so that <textarea>
s no longer re-render when data is unchanged (@joelbarbosa in #13643dependency
react was updated from 16.4.1
to 16.6.0
.dependency
react-dom was updated from 16.4.1
to 16.6.0
.devDependency
react-test-renderer was updated from 16.5.2
to 16.6.0
.dependency
react was updated from 16.4.1
to 16.6.1
.dependency
react-dom was updated from 16.4.1
to 16.6.1
.devDependency
react-test-renderer was updated from 16.6.0
to 16.6.1
.Update to these versions instead π
dependency
react was updated from 16.4.1
to 16.6.2
.dependency
react-dom was updated from 16.4.1
to 16.6.2
.devDependency
react-test-renderer was updated from 16.6.1
to 16.6.2
.dependency
react was updated from 16.4.1
to 16.6.3
.dependency
react-dom was updated from 16.4.1
to 16.6.3
.devDependency
react-test-renderer was updated from 16.6.2
to 16.6.3
.dependency
react was updated from 16.4.1
to 16.7.0
.dependency
react-dom was updated from 16.4.1
to 16.7.0
.devDependency
react-test-renderer was updated from 16.6.3
to 16.7.0
.Update to these versions instead π
React.lazy
for large numbers of lazily-loaded components. (@acdlite in #14429)react-dom/server@16.6
and react@<16.6
. (@gaearon in #14291)dependency
react was updated from 16.4.1
to 16.8.0
.dependency
react-dom was updated from 16.4.1
to 16.8.0
.devDependency
react-test-renderer was updated from 16.7.0
to 16.8.0
.dependency
react was updated from 16.4.1
to 16.8.1
.dependency
react-dom was updated from 16.4.1
to 16.8.1
.devDependency
react-test-renderer was updated from 16.8.0
to 16.8.1
.dependency
react was updated from 16.4.1
to 16.8.2
.dependency
react-dom was updated from 16.4.1
to 16.8.2
.devDependency
react-test-renderer was updated from 16.8.1
to 16.8.2
.Update to these versions instead π
ReactDOM.render
being ignored inside useEffect
. (@gaearon in #14799)useImperativeHandle
to work correctly when no deps are specified. (@gaearon in #14801)crossOrigin
attribute to work in SVG image
elements. (@aweary in #14832)act()
warning. (@threepointone in #14855)dependency
react was updated from 16.4.1
to 16.8.3
.dependency
react-dom was updated from 16.4.1
to 16.8.3
.devDependency
react-test-renderer was updated from 16.8.2
to 16.8.3
.dependency
react was updated from 16.4.1
to 16.8.4
.dependency
react-dom was updated from 16.4.1
to 16.8.4
.devDependency
react-test-renderer was updated from 16.8.3
to 16.8.4
.dependency
react was updated from 16.4.1
to 16.8.5
.dependency
react-dom was updated from 16.4.1
to 16.8.5
.devDependency
react-test-renderer was updated from 16.8.4
to 16.8.5
.dependency
react was updated from 16.4.1
to 16.8.6
.dependency
react-dom was updated from 16.4.1
to 16.8.6
.devDependency
react-test-renderer was updated from 16.8.5
to 16.8.6
.Update to these versions instead π
useReducer()
. (@acdlite in #15124)contextType
is set to Context.Consumer
instead of Context
. (@aweary in #14831)contextType
is set to invalid values. (@gaearon in #15142)dependency
react was updated from 16.4.1
to 16.9.0
.dependency
react-dom was updated from 16.4.1
to 16.9.0
.devDependency
react-test-renderer was updated from 16.8.6
to 16.9.0
.Update to these versions instead π
<React.Profiler>
API for gathering performance measurements programmatically. (@bvaughn in #15172)unstable_ConcurrentMode
in favor of unstable_createRoot
. (@acdlite in #15532)UNSAFE_*
lifecycle methods. (@bvaughn in #15186 and @threepointone in #16103)javascript:
URLs as a common attack surface. (@sebmarkbage in #15047)disablePictureInPicture
attribute on <video>
. (@eek in #15334)onLoad
event for <embed>
. (@cherniavskii in #15614)useState
state from DevTools. (@bvaughn in #14906)setState
is called from useEffect
, creating a loop. (@gaearon in #15180)findDOMNode
for components wrapped in <Suspense>
. (@acdlite in #15312)!important
style. (@acdlite in #15861 and #15882)act(async () => ...)
for testing asynchronous state updates. (@threepointone in #14853)act
from different renderers. (@threepointone in #16039 and #16042)act()
call. (@threepointone in #15763 and #16041)act
from the wrong renderer. (@threepointone in #15756)β’ react: https://unpkg.com/react@16.9.0/umd/
β’ react-art: https://unpkg.com/react-art@16.9.0/umd/
β’ react-dom: https://unpkg.com/react-dom@16.9.0/umd/
β’ react-is: https://unpkg.com/react-is@16.9.0/umd/
β’ react-test-renderer: https://unpkg.com/react-test-renderer@16.9.0/umd/
β’ scheduler: https://unpkg.com/scheduler@0.15.0/umd/
dependency
react was updated from 16.4.1
to 16.9.0
.dependency
react-dom was updated from 16.4.1
to 16.9.0
.devDependency
react-test-renderer was updated from 16.8.6
to 16.9.0
.dependency
react was updated from 16.4.1
to 16.10.0
.dependency
react-dom was updated from 16.4.1
to 16.10.0
.devDependency
react-test-renderer was updated from 16.9.0
to 16.10.0
.dependency
react was updated from 16.4.1
to 16.10.1
.dependency
react-dom was updated from 16.4.1
to 16.10.1
.devDependency
react-test-renderer was updated from 16.10.0
to 16.10.1
.dependency
react was updated from 16.4.1
to 16.10.2
.dependency
react-dom was updated from 16.4.1
to 16.10.2
.devDependency
react-test-renderer was updated from 16.10.1
to 16.10.2
.dependency
react was updated from 16.4.1
to 16.11.0
.dependency
react-dom was updated from 16.4.1
to 16.11.0
.devDependency
react-test-renderer was updated from 16.10.2
to 16.11.0
.dependency
react was updated from 16.4.1
to 16.12.0
.dependency
react-dom was updated from 16.4.1
to 16.12.0
.devDependency
react-test-renderer was updated from 16.11.0
to 16.12.0
.dependency
react was updated from 16.4.1
to 16.13.0
.dependency
react-dom was updated from 16.4.1
to 16.13.0
.devDependency
react-test-renderer was updated from 16.12.0
to 16.13.0
.dependency
react was updated from 16.4.1
to 16.13.1
.dependency
react-dom was updated from 16.4.1
to 16.13.1
.devDependency
react-test-renderer was updated from 16.13.0
to 16.13.1
.
Version 16.4.2 of the react packages was just published.
This monorepo update includes releases of one or more dependencies which all belong to the react group definition.
The version 16.4.2 is not covered by your current version range.
If you donβt accept this pull request, your project will work just like it did before. However, you might be missing out on a bunch of new features, fixes and/or performance improvements from the dependency update.
It might be worth looking into these changes and trying to get this project onto the latest version of react.
If you have a solid test suite and good coverage, a passing build is a strong indicator that you can take advantage of these changes directly by merging the proposed change into your project. If the build fails or you donβt have such unconditional trust in your tests, this branch is a great starting point for you to work on the update.
Release Notes
v16.4.216.4.2 (August 1, 2018)
React DOM Server
Fix a potential XSS vulnerability when the attacker controls an attribute name (
CVE-2018-6341
). This fix is available in the latestreact-dom@16.4.2
, as well as in previous affected minor versions:react-dom@16.0.1
,react-dom@16.1.2
,react-dom@16.2.1
, andreact-dom@16.3.3
. (@gaearon in #13302)Fix a crash in the server renderer when an attribute is called
hasOwnProperty
. This fix is only available inreact-dom@16.4.2
. (@gaearon in #13303)FAQ and help
There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those donβt help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).Your Greenkeeper bot :palm_tree: