[Snyk] Upgrade react from 0.13.3 to 17.0.1 #53

snyk-bot · 2020-12-19T01:15:26Z

Snyk has created this PR to upgrade react from 0.13.3 to 17.0.1.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 148 versions ahead of your current version.
The recommended version was released 2 months ago, on 2020-10-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Cross-site Scripting (XSS) npm:react:20150318	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react

17.0.1 - 2020-10-22
v17.0.1
17.0.0 - 2020-10-20
Today, we are releasing React 17!

Learn more about React 17 and how to update to it on the official React blog.

React
- Add react/jsx-runtime and react/jsx-dev-runtime for the new JSX transform. (@ lunaruan in #18299)
- Build component stacks from native error frames. (@ sebmarkbage in #18561)
- Allow to specify displayName on context for improved stacks. (@ eps1lon in #18224)
- Prevent 'use strict' from leaking in the UMD bundles. (@ koba04 in #19614)
- Stop using fb.me for redirects. (@ cylim in #19598)
React DOM
- Delegate events to roots instead of document. (@ trueadm in #18195 and others)
- Clean up all effects before running any next effects. (@ bvaughn in #17947)
- Run useEffect cleanup functions asynchronously. (@ bvaughn in #17925)
- Use browser focusin and focusout for onFocus and onBlur. (@ trueadm in #19186)
- Make all Capture events use the browser capture phase. (@ trueadm in #19221)
- Don't emulate bubbling of the onScroll event. (@ gaearon in #19464)
- Throw if forwardRef or memo component returns undefined. (@ gaearon in #19550)
- Remove event pooling. (@ trueadm in #18969)
- Stop exposing internals that won’t be needed by React Native Web. (@ necolas in #18483)
- Attach all known event listeners when the root mounts. (@ gaearon in #19659)
- Disable console in the second render pass of DEV mode double render. (@ sebmarkbage in #18547)
- Deprecate the undocumented and misleading ReactTestUtils.SimulateNative API. (@ gaearon in #13407)
- Rename private field names used in the internals. (@ gaearon in #18377)
- Don't call User Timing API in development. (@ gaearon in #18417)
- Disable console during the repeated render in Strict Mode. (@ sebmarkbage in #18547)
- In Strict Mode, double-render components without Hooks too. (@ eps1lon in #18430)
- Allow calling ReactDOM.flushSync during lifecycle methods (but warn). (@ sebmarkbage in #18759)
- Add the code property to the keyboard event objects. (@ bl00mber in #18287)
- Add the disableRemotePlayback property for video elements. (@ tombrowndev in #18619)
- Add the enterKeyHint property for input elements. (@ eps1lon in #18634)
- Warn when no value is provided to <Context.Provider>. (@ charlie1404 in #19054)
- Warn when memo or forwardRef components return undefined. (@ bvaughn in #19550)
- Improve the error message for invalid updates. (@ JoviDeCroock in #18316)
- Exclude forwardRef and memo from stack frames. (@ sebmarkbage in #18559)
- Improve the error message when switching between controlled and uncontrolled inputs. (@ vcarl in #17070)
- Keep onTouchStart, onTouchMove, and onWheel passive. (@ gaearon in #19654)
- Fix setState hanging in development inside a closed iframe. (@ gaearon in #19220)
- Fix rendering bailout for lazy components with defaultProps. (@ jddxf in #18539)
- Fix a false positive warning when dangerouslySetInnerHTML is undefined. (@ eps1lon in #18676)
- Fix Test Utils with non-standard require implementation. (@ just-boris in #18632)
- Fix onBeforeInput reporting an incorrect event.type. (@ eps1lon in #19561)
- Fix event.relatedTarget reported as undefined in Firefox. (@ claytercek in #19607)
- Fix "unspecified error" in IE11. (@ hemakshis in #19664)
- Fix rendering into a shadow root. (@ Jack-Works in #15894)
- Fix movementX/Y polyfill with capture events. (@ gaearon in #19672)
- Use delegation for onSubmit and onReset events. (@ gaearon in #19333)
- Improve memory usage. (@ trueadm in #18970)
React DOM Server
- Make useCallback behavior consistent with useMemo for the server renderer. (@ alexmckenley in #18783)
- Fix state leaking when a function component throws. (@ pmaccart in #19212)
React Test Renderer
- Improve findByType error message. (@ henryqdineen in #17439)
Concurrent Mode (Experimental)
- Revamp the priority batching heuristics. (@ acdlite in #18796)
- Add the unstable_ prefix before the experimental APIs. (@ acdlite in #18825)
- Remove unstable_discreteUpdates and unstable_flushDiscreteUpdates. (@ trueadm in #18825)
- Remove the timeoutMs argument. (@ acdlite in #19703)
- Disable <div hidden /> prerendering in favor of a different future API. (@ acdlite in #18917)
- Add unstable_expectedLoadTime to Suspense for CPU-bound trees. (@ acdlite in #19936)
- Add an experimental unstable_useOpaqueIdentifier Hook. (@ lunaruan in #17322)
- Add an experimental unstable_startTransition API. (@ rickhanlonii in #19696)
- Using act in the test renderer no longer flushes Suspense fallbacks. (@ acdlite in #18596)
- Use global render timeout for CPU Suspense. (@ sebmarkbage in #19643)
- Clear the existing root content before mounting. (@ bvaughn in #18730)
- Fix a bug with error boundaries. (@ acdlite in #18265)
- Fix a bug causing dropped updates in a suspended tree. (@ acdlite in #18384 and #18457)
- Fix a bug causing dropped render phase updates. (@ acdlite in #18537)
- Fix a bug in SuspenseList. (@ sebmarkbage in #18412)
- Fix a bug causing Suspense fallback to show too early. (@ acdlite in #18411)
- Fix a bug with class components inside SuspenseList. (@ sebmarkbage in #18448)
- Fix a bug with inputs that may cause updates to be dropped. (@ jddxf in #18515 and @ acdlite in #18535)
- Fix a bug causing Suspense fallback to get stuck. (@ acdlite in #18663)
- Don't cut off the tail of a SuspenseList if hydrating. (@ sebmarkbage in #18854)
- Fix a bug in useMutableSource that may happen when getSnapshot changes. (@ bvaughn in #18297)
- Fix a tearing bug in useMutableSource. (@ bvaughn in #18912)
- Warn if calling setState outside of render but before commit. (@ sebmarkbage in #18838)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
17.0.0-rc.3 - 2020-10-07
17.0.0-rc.2 - 2020-09-22
17.0.0-rc.1 - 2020-08-28
17.0.0-rc.0 - 2020-08-10
16.14.0 - 2020-10-14
React
- Add support for the new JSX transform. (@ lunaruan in #18299)
16.13.1 - 2020-03-19
React DOM
- Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@ acdlite in #18238)
- Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@ gaearon in #18330)
Artifacts
- react: https://unpkg.com/[email protected]/umd/
- react-art: https://unpkg.com/[email protected]/umd/
- react-dom: https://unpkg.com/[email protected]/umd/
- react-is: https://unpkg.com/[email protected]/umd/
- react-test-renderer: https://unpkg.com/[email protected]/umd/
- scheduler: https://unpkg.com/[email protected]/umd/
16.13.0 - 2020-02-26
16.12.0 - 2019-11-14
16.11.0 - 2019-10-22
16.10.2 - 2019-10-03
16.10.1 - 2019-09-28
16.10.0 - 2019-09-27
16.9.0 - 2019-08-08
16.9.0-rc.0 - 2019-08-05
16.9.0-alpha.0 - 2019-04-03
16.8.6 - 2019-03-28
16.8.5 - 2019-03-22
16.8.4 - 2019-03-05
16.8.3 - 2019-02-21
16.8.2 - 2019-02-14
16.8.1 - 2019-02-06
16.8.0 - 2019-02-06
16.8.0-alpha.1 - 2019-01-15
16.8.0-alpha.0 - 2019-01-09
16.7.0 - 2018-12-20
16.7.0-alpha.2 - 2018-11-13
16.7.0-alpha.1 - 2018-11-13
16.7.0-alpha.0 - 2018-10-25
16.6.3 - 2018-11-13
16.6.2 - 2018-11-13
16.6.1 - 2018-11-07
16.6.0 - 2018-10-23
16.6.0-alpha.f47a958 - 2018-10-10
16.6.0-alpha.8af6728 - 2018-10-10
16.6.0-alpha.400d197 - 2018-10-05
16.6.0-alpha.0 - 2018-09-17
16.5.2 - 2018-09-18
16.5.1 - 2018-09-13
16.5.0 - 2018-09-06
16.4.2 - 2018-08-01
16.4.1 - 2018-06-13
16.4.0 - 2018-05-24
16.4.0-alpha.0911da3 - 2018-02-27
16.4.0-alpha.7926752 - 2018-02-13
16.4.0-alpha.3174632 - 2018-02-24
16.3.2 - 2018-04-16
16.3.1 - 2018-04-04
16.3.0 - 2018-03-29
16.3.0-rc.0 - 2018-03-28
16.3.0-alpha.3 - 2018-03-22
16.3.0-alpha.2 - 2018-03-14
16.3.0-alpha.1 - 2018-02-12
16.3.0-alpha.0 - 2018-02-02
16.2.0 - 2017-11-28
16.1.1 - 2017-11-13
16.1.0 - 2017-11-09
16.1.0-rc - 2017-11-09
16.1.0-beta.1 - 2017-11-07
16.1.0-beta - 2017-11-02
16.0.0 - 2017-09-26
16.0.0-rc.3 - 2017-09-14
16.0.0-rc.2 - 2017-09-07
16.0.0-rc.1 - 2017-09-06
16.0.0-beta.5 - 2017-08-08
16.0.0-beta.4 - 2017-08-08
16.0.0-beta.3 - 2017-08-03
16.0.0-beta.2 - 2017-07-27
16.0.0-beta.1 - 2017-07-26
16.0.0-alpha.13 - 2017-06-09
16.0.0-alpha.12 - 2017-05-02
16.0.0-alpha.11 - 2017-04-25
16.0.0-alpha.10 - 2017-04-20
16.0.0-alpha.9 - 2017-04-11
16.0.0-alpha.8 - 2017-04-07
16.0.0-alpha.7 - 2017-04-06
16.0.0-alpha.6 - 2017-03-24
16.0.0-alpha.5 - 2017-03-21
16.0.0-alpha.4 - 2017-03-13
16.0.0-alpha.3 - 2017-02-24
16.0.0-alpha.2 - 2017-02-09
16.0.0-alpha.0 - 2017-01-25
16.0.0-alpha - 2017-01-10
15.7.0 - 2020-10-14
React
- Backport support for the new JSX transform to 15.x. (@ lunaruan in #18299 and @ gaearon in #20024)
15.6.2 - 2017-09-26
15.6.1 - 2017-06-15
15.6.0 - 2017-06-13
15.6.0-rc.1 - 2017-06-01
15.5.4 - 2017-04-11
15.5.3 - 2017-04-08
15.5.2 - 2017-04-08
15.5.1 - 2017-04-07
15.5.0 - 2017-04-07
15.5.0-rc.2 - 2017-04-06
15.5.0-rc.1 - 2017-04-05
15.4.2 - 2017-01-06
15.4.1 - 2016-11-23
15.4.0 - 2016-11-16
15.4.0-rc.4 - 2016-10-14
15.4.0-rc.3 - 2016-10-14
15.4.0-rc.2 - 2016-10-05
15.4.0-rc.1 - 2016-10-04
15.3.2 - 2016-09-19
15.3.2-rc.1 - 2016-09-15
15.3.1 - 2016-08-19
15.3.1-rc.2 - 2016-08-15
15.3.1-rc.1 - 2016-08-12
15.3.0 - 2016-07-29
15.3.0-rc.3 - 2016-07-21
15.3.0-rc.2 - 2016-07-13
15.3.0-rc.1 - 2016-07-13
15.2.1 - 2016-07-08
15.2.0 - 2016-07-01
15.2.0-rc.2 - 2016-07-01
15.2.0-rc.1 - 2016-06-15
15.1.0 - 2016-05-20
15.1.0-alpha.1 - 2016-05-10
15.0.3-alpha.2 - 2016-05-10
15.0.3-alpha.1 - 2016-05-03
15.0.2 - 2016-04-30
15.0.2-alpha.4 - 2016-04-28
15.0.2-alpha.3 - 2016-04-25
15.0.2-alpha.2 - 2016-04-21
15.0.2-alpha.1 - 2016-04-20
15.0.1 - 2016-04-08
15.0.0 - 2016-04-07
15.0.0-rc.2 - 2016-03-16
15.0.0-rc.1 - 2016-03-08
0.15.0-alpha.1 - 2016-01-21
0.14.10 - 2020-10-14
React
- Backport support for the new JSX transform to 0.14.x. (@ lunaruan in #18299 and @ gaearon in #20024)
0.14.9 - 2017-04-12
0.14.8 - 2016-03-29
0.14.7 - 2016-01-28
0.14.6 - 2016-01-06
0.14.5 - 2015-12-29
0.14.4 - 2015-12-29
0.14.3 - 2015-11-19
0.14.2 - 2015-11-02
0.14.1 - 2015-10-28
0.14.0 - 2015-10-07
0.14.0-rc1 - 2015-09-10
0.14.0-beta3 - 2015-08-03
0.14.0-beta2 - 2015-07-31
0.14.0-beta1 - 2015-07-03
0.14.0-alpha3 - 2015-05-27
0.14.0-alpha2 - 2015-05-20
0.14.0-alpha1 - 2015-05-11
0.13.3 - 2015-05-08

from react GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react from 0.13.3 to 17.0.1. See this package in npm: https://www.npmjs.com/package/react See this project in Snyk: https://app.snyk.io/org/sonder/project/d05211fc-ad8f-4d1d-8fed-0f1c0fcca33b?utm_source=github&utm_medium=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react from 0.13.3 to 17.0.1 #53

[Snyk] Upgrade react from 0.13.3 to 17.0.1 #53

snyk-bot commented Dec 19, 2020

React

React DOM

React DOM Server

React Test Renderer

Concurrent Mode (Experimental)

Artifacts

React

React DOM

Artifacts

React

React

[Snyk] Upgrade react from 0.13.3 to 17.0.1 #53

Are you sure you want to change the base?

[Snyk] Upgrade react from 0.13.3 to 17.0.1 #53

Conversation

snyk-bot commented Dec 19, 2020

Snyk has created this PR to upgrade react from 0.13.3 to 17.0.1.

React

React DOM

React DOM Server

React Test Renderer

Concurrent Mode (Experimental)

Artifacts

React

React DOM

Artifacts

React

React