surajondev / awesome-web3.0

A collection of awesome resources to learn Web 3.0🚀
https://web3-roadmap.netlify.app/
MIT License
179 stars 50 forks source link

[Snyk] Upgrade: react, react-dom #47

Closed snyk-bot closed 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
react
from 18.1.0 to 18.2.0
31 versions ahead of your current version 8 months ago
on 2022-06-14
react-dom
from 18.1.0 to 18.2.0
31 versions ahead of your current version 8 months ago
on 2022-06-14

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366
265/1000
Why? CVSS 5.3
No Known Exploit
Improper Input Validation
SNYK-JS-SOCKETIOPARSER-3091012
265/1000
Why? CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
265/1000
Why? CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
265/1000
Why? CVSS 5.3
No Known Exploit
Prototype Pollution
SNYK-JS-LOADERUTILS-3043105
265/1000
Why? CVSS 5.3
No Known Exploit
Denial of Service (DoS)
SNYK-JS-FILETYPE-2958042
265/1000
Why? CVSS 5.3
No Known Exploit
Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
265/1000
Why? CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
265/1000
Why? CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
265/1000
Why? CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3105943
265/1000
Why? CVSS 5.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LOADERUTILS-3042992
265/1000
Why? CVSS 5.3
No Known Exploit
Prototype Pollution
SNYK-JS-JSON5-3182856
265/1000
Why? CVSS 5.3
Proof of Concept
Prototype Pollution
SNYK-JS-JSON5-3182856
265/1000
Why? CVSS 5.3
Proof of Concept
Undesired Behavior
SNYK-JS-EVENTSOURCEPOLYFILL-2429580
265/1000
Why? CVSS 5.3
Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react
  • 18.2.0 - 2022-06-14

    React DOM

    React DOM Server

    • Pass information about server errors to the client. (@ salazarm and @ gnoff in #24551 and #24591)
    • Allow to provide a reason when aborting the HTML stream. (@ gnoff in #24680)
    • Eliminate extraneous text separators in the HTML where possible. (@ gnoff in #24630)
    • Disallow complex children inside <title> elements to match the browser constraints. (@ gnoff in #24679)
    • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@ jplhomer in #24641)

    Server Components (Experimental)

    • Add support for useId() inside Server Components. (@ gnoff) in #24172
  • 18.2.0-next-f7b44539c-20220610 - 2022-06-10
  • 18.2.0-next-e531a4a62-20220505 - 2022-05-06
  • 18.2.0-next-d89657bc8-20220519 - 2022-05-19
  • 18.2.0-next-d4acbe85d-20220505 - 2022-05-05
  • 18.2.0-next-d300cebde-20220601 - 2022-06-03
  • 18.2.0-next-d2c9e834a-20220601 - 2022-06-01
  • 18.2.0-next-d20c3af9d-20220506 - 2022-05-09
  • 18.2.0-next-ce1386028-20220428 - 2022-04-29
  • 18.2.0-next-c7e494b55-20220503 - 2022-05-04
  • 18.2.0-next-c5e039d9b-20220516 - 2022-05-16
  • 18.2.0-next-be229c565-20220613 - 2022-06-14
  • 18.2.0-next-aec575914-20220529 - 2022-05-31
  • 18.2.0-next-a412d787e-20220518 - 2022-05-18
  • 18.2.0-next-a2505792e-20220524 - 2022-05-24
  • 18.2.0-next-9f80a48ad-20220427 - 2022-04-27
  • 18.2.0-next-99eef9e2d-20220503 - 2022-05-03
  • 18.2.0-next-82c64e1a4-20220520 - 2022-05-23
  • 18.2.0-next-8186b1937-20220608 - 2022-06-09
  • 18.2.0-next-7d9e17a98-20220511 - 2022-05-11
  • 18.2.0-next-7a5b8227c-20220602 - 2022-06-03
  • 18.2.0-next-6e2f38f3a-20220519 - 2022-05-20
  • 18.2.0-next-52c434be1-20220512 - 2022-05-12
  • 18.2.0-next-4ddd8b455-20220606 - 2022-06-06
  • 18.2.0-next-47944142f-20220608 - 2022-06-08
  • 18.2.0-next-357a61324-20220516 - 2022-05-17
  • 18.2.0-next-340060ccc-20220428 - 2022-04-28
  • 18.2.0-next-327e4a1f9-20220613 - 2022-06-13
  • 18.2.0-next-3133dfa6e-20220526 - 2022-05-26
  • 18.2.0-next-2c8a1452b-20220512 - 2022-05-13
  • 18.2.0-next-2c68776ab-20220525 - 2022-05-25
  • 18.1.0 - 2022-04-26

    React DOM

    React DOM Server

    • Fix escaping for the bootstrapScriptContent contents. (@ gnoff in #24385)
    • Significantly improve performance of renderToPipeableStream. (@ gnoff in #24291)

    ESLint Plugin: React Hooks

    • Fix false positive errors with a large number of branches. (@ scyron6 in #24287)
    • Don't consider a known dependency stable when the variable is reassigned. (@ afzalsayed96 in #24343)

    Use Subscription

    • Replace the implementation with the use-sync-external-store shim. (@ gaearon in #24289)
from react GitHub release notes
Package name: react-dom
  • 18.2.0 - 2022-06-14

    React DOM

    React DOM Server

    • Pass information about server errors to the client. (@ salazarm and @ gnoff in #24551 and #24591)
    • Allow to provide a reason when aborting the HTML stream. (@ gnoff in #24680)
    • Eliminate extraneous text separators in the HTML where possible. (@ gnoff in #24630)
    • Disallow complex children inside <title> elements to match the browser constraints. (@ gnoff in #24679)
    • Fix buffering in some worker environments by explicitly setting highWaterMark to 0. (@ jplhomer in #24641)

    Server Components (Experimental)

    • Add support for useId() inside Server Components. (@ gnoff) in #24172
  • 18.2.0-next-f7b44539c-20220610 - 2022-06-10
  • 18.2.0-next-e531a4a62-20220505 - 2022-05-06
  • 18.2.0-next-d89657bc8-20220519 - 2022-05-19
  • 18.2.0-next-d4acbe85d-20220505 - 2022-05-05
  • 18.2.0-next-d300cebde-20220601 - 2022-06-03
  • 18.2.0-next-d2c9e834a-20220601 - 2022-06-01
  • 18.2.0-next-d20c3af9d-20220506 - 2022-05-09
  • 18.2.0-next-ce1386028-20220428 - 2022-04-29
  • 18.2.0-next-c7e494b55-20220503 - 2022-05-04
  • 18.2.0-next-c5e039d9b-20220516 - 2022-05-16
  • 18.2.0-next-be229c565-20220613 - 2022-06-14
  • 18.2.0-next-aec575914-20220529 - 2022-05-31
  • 18.2.0-next-a412d787e-20220518 - 2022-05-18
  • 18.2.0-next-a2505792e-20220524 - 2022-05-24
  • 18.2.0-next-9f80a48ad-20220427 - 2022-04-27
  • 18.2.0-next-99eef9e2d-20220503 - 2022-05-03
  • 18.2.0-next-82c64e1a4-20220520 - 2022-05-23
  • 18.2.0-next-8186b1937-20220608 - 2022-06-09
  • 18.2.0-next-7d9e17a98-20220511 - 2022-05-11
  • 18.2.0-next-7a5b8227c-20220602 - 2022-06-03
  • 18.2.0-next-6e2f38f3a-20220519 - 2022-05-20
  • 18.2.0-next-52c434be1-20220512 - 2022-05-12
  • 18.2.0-next-4ddd8b455-20220606 - 2022-06-06
  • 18.2.0-next-47944142f-20220608 - 2022-06-08
  • 18.2.0-next-357a61324-20220516 - 2022-05-17
  • 18.2.0-next-340060ccc-20220428 - 2022-04-28
  • 18.2.0-next-327e4a1f9-20220613 - 2022-06-13
  • 18.2.0-next-3133dfa6e-20220526 - 2022-05-26
  • 18.2.0-next-2c8a1452b-20220512 - 2022-05-13
  • 18.2.0-next-2c68776ab-20220525 - 2022-05-25
  • 18.1.0 - 2022-04-26

    React DOM

    React DOM Server

    • Fix escaping for the bootstrapScriptContent contents. (@ gnoff in #24385)
    • Significantly improve performance of renderToPipeableStream. (@ gnoff in #24291)

    ESLint Plugin: React Hooks

    • Fix false positive errors with a large number of branches. (@ scyron6 in #24287)
    • Don't consider a known dependency stable when the variable is reassigned. (@ afzalsayed96 in #24343)

    Use Subscription

    • Replace the implementation with the use-sync-external-store shim. (@ gaearon in #24289)
from react-dom GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

netlify[bot] commented 1 year ago

Deploy Preview for web3-roadmap failed.

Name Link
Latest commit b4e039543d00aa3c51e682e1fb4650135569f38b
Latest deploy log https://app.netlify.com/sites/web3-roadmap/deploys/63dc5a9a626d9a0008b3ee39