Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps(reporter-web-app): Update React packages #6598

Closed

Conversation

mennaElnemr9
Copy link

React packages updates rely on antd package update so without updating antd package along with react packages some errors will pop in the terminal that are in the antd packages scripts telling that some links in the antd are not supported anymore
please refer to the screenshot:
image

keeping in mind that antd updates change in the UI .

Please ensure that your pull request adheres to our contribution guidelines. Thank you!

@mennaElnemr9 mennaElnemr9 requested a review from tsteenbe as a code owner March 2, 2023 13:42
@sschuberth
Copy link
Member

React packages updates rely on antd package update

Which means this PR should only be merged after #6552, correct?

@jens-erdmann
Copy link
Contributor

React packages updates rely on antd package update

Which means this PR should only be merged after #6552, correct?

Yes. We were hoping to have these in parallel but they depend on each other.

React related pages that are updated are "react","react-app-polyfill",
"react-dom","react-redux","react-scripts","react-syntax-highlighter" and
"@testing-library/react".

The only packages that needed changes in the code are "react",
"react-dom" and "react-scripts".

In the "react-dom" V18.2.0 the rendering of the app differs than
"react-dom" V17.0.2 so This what required to change the code in index.js
.

Also "react-dom" requires "react" package to be up to date.

Fix the commenting style of the first line in index.css as
"react-scripts" had a problem with it because of CSS minification.

Signed-off-by: Menatalla Elnemr <[email protected]>
@mennaElnemr9 mennaElnemr9 requested a review from a team as a code owner March 2, 2023 15:19
version "17.0.2"
resolved "https://registry.yarnpkg.com/react/-/react-17.0.2.tgz#d0b5cc516d29eb3eee383f75b62864cfb6800037"
integrity sha512-gnhPt75i/dq/z3/6q/0asP78D0u592D5L1pd7M8P+dck6Fu/jJeL6iVVK23fptSUZj8Vjf++7wXA8UNclGQcbA==
react@^18.2.0:
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

31% of developers fix this issue

Medium Vulnerability:

npm : -/react : 18.2.0

0 Critical, 0 High, 1 Medium, 0 Low vulnerabilities have been found across 1 dependencies.
View the Lift console for details about these vulnerabilities.


ℹ️ Expand to see all @sonatype-lift commands

You can reply with the following commands. For example, reply with @sonatype-lift ignoreall to leave out all findings.

Command Usage
@sonatype-lift ignore Leave out the above finding from this PR
@sonatype-lift ignoreall Leave out all the existing findings from this PR
@sonatype-lift exclude <file|issue|path|tool> Exclude specified file|issue|path|tool from Lift findings by updating your config.toml file

Note: When talking to LiftBot, you need to refresh the page to see its response.
Click here to add LiftBot to another repo.


Help us improve LIFT! (Sonatype LiftBot external survey)

Was this a good recommendation for you? Answering this survey will not impact your Lift settings.

[ 🙁 Not relevant ] - [ 😕 Won't fix ] - [ 😑 Not critical, will fix ] - [ 🙂 Critical, will fix ] - [ 😊 Critical, fixing now ]

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Marking this pull request as on-hold as it soon be superseded my code changes on the webapp-reporter-v0.3 branch.

@tsteenbe tsteenbe added the on hold Pull requests that cannot currently be merged label Nov 27, 2023
@tsteenbe
Copy link
Member

@mennaElnemr9 I am closing your pull request in favor of #7952.

@tsteenbe tsteenbe closed this Nov 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
on hold Pull requests that cannot currently be merged
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants