[Snyk] Upgrade: , , lodash, react, react-dom, , , , firebase, formik, react-router-dom, react-scripts, yup #197
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @material-ui/core from 4.11.2 to 4.12.4.
See this package in npm: https://www.npmjs.com/package/@material-ui/core
- @material-ui/icons from 4.11.2 to 4.11.3.
See this package in npm: https://www.npmjs.com/package/@material-ui/icons
- lodash from 4.17.20 to 4.17.21.
See this package in npm: https://www.npmjs.com/package/lodash
- react from 17.0.1 to 17.0.2.
See this package in npm: https://www.npmjs.com/package/react
- react-dom from 17.0.1 to 17.0.2.
See this package in npm: https://www.npmjs.com/package/react-dom
- @testing-library/jest-dom from 5.11.6 to 5.17.0.
See this package in npm: https://www.npmjs.com/package/@testing-library/jest-dom
- @testing-library/react from 11.2.2 to 11.2.7.
See this package in npm: https://www.npmjs.com/package/@testing-library/react
- @testing-library/user-event from 12.6.0 to 12.8.3.
See this package in npm: https://www.npmjs.com/package/@testing-library/user-event
- firebase from 8.2.0 to 8.10.1.
See this package in npm: https://www.npmjs.com/package/firebase
- formik from 2.2.6 to 2.4.6.
See this package in npm: https://www.npmjs.com/package/formik
- react-router-dom from 5.2.0 to 5.3.4.
See this package in npm: https://www.npmjs.com/package/react-router-dom
- react-scripts from 4.0.1 to 4.0.3.
See this package in npm: https://www.npmjs.com/package/react-scripts
- yup from 0.32.8 to 0.32.11.
See this package in npm: https://www.npmjs.com/package/yup
See this project in Snyk:
https://app.snyk.io/org/hotsnow199/project/e9bcbb03-4530-40e5-af1b-9298b5b02d36?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@material-ui/core
from 4.11.2 to 4.12.4 | 9 versions ahead of your current version | 2 years ago
on 2022-04-03
@material-ui/icons
from 4.11.2 to 4.11.3 | 1 version ahead of your current version | 2 years ago
on 2022-04-03
lodash
from 4.17.20 to 4.17.21 | 1 version ahead of your current version | 4 years ago
on 2021-02-20
react
from 17.0.1 to 17.0.2 | 1 version ahead of your current version | 3 years ago
on 2021-03-22
react-dom
from 17.0.1 to 17.0.2 | 1 version ahead of your current version | 3 years ago
on 2021-03-22
@testing-library/jest-dom
from 5.11.6 to 5.17.0 | 17 versions ahead of your current version | a year ago
on 2023-07-18
@testing-library/react
from 11.2.2 to 11.2.7 | 5 versions ahead of your current version | 3 years ago
on 2021-05-14
@testing-library/user-event
from 12.6.0 to 12.8.3 | 12 versions ahead of your current version | 4 years ago
on 2021-03-09
firebase
from 8.2.0 to 8.10.1 | 506 versions ahead of your current version | 3 years ago
on 2022-01-28
formik
from 2.2.6 to 2.4.6 | 14 versions ahead of your current version | 5 months ago
on 2024-04-24
react-router-dom
from 5.2.0 to 5.3.4 | 6 versions ahead of your current version | 2 years ago
on 2022-10-02
react-scripts
from 4.0.1 to 4.0.3 | 2 versions ahead of your current version | 4 years ago
on 2021-02-22
yup
from 0.32.8 to 0.32.11 | 3 versions ahead of your current version | 3 years ago
on 2021-10-12
Issues fixed by the recommended upgrade:
SNYK-JS-URLPARSE-2407770
SNYK-JS-IMMER-1019369
SNYK-JS-IP-6240864
SNYK-JS-FOLLOWREDIRECTS-6141137
SNYK-JS-ASYNC-2441827
SNYK-JS-BODYPARSER-7926860
SNYK-JS-PROTOBUFJS-2441248
SNYK-JS-PROTOBUFJS-5756498
SNYK-JS-LODASH-1040724
SNYK-JS-LODASHES-2434283
SNYK-JS-LODASHES-2434284
SNYK-JS-LODASHES-2434285
SNYK-JS-DNSPACKET-1293563
SNYK-JS-EVENTSOURCE-2823375
SNYK-JS-EXPRESS-6474509
SNYK-JS-URLPARSE-2401205
SNYK-JS-URLPARSE-2407759
SNYK-JS-URLPARSE-2412697
SNYK-JS-REACTDEVUTILS-1083268
SNYK-JS-GRPCGRPCJS-7242922
SNYK-JS-EXPRESS-7926867
SNYK-JS-FOLLOWREDIRECTS-2332181
SNYK-JS-FOLLOWREDIRECTS-6444610
SNYK-JS-NODEFETCH-2342118
SNYK-JS-URLPARSE-1078283
SNYK-JS-URLPARSE-1533425
SNYK-JS-LODASH-1018905
SNYK-JS-LODASHES-2434289
SNYK-JS-MINIMIST-2429795
SNYK-JS-FOLLOWREDIRECTS-2396346
SNYK-JS-SEND-7926862
SNYK-JS-BABELTRAVERSE-5962462
SNYK-JS-SERVESTATIC-7926865
Release notes
Package name: @material-ui/core
-
4.12.4 - 2022-04-03
-
4.12.3 - 2021-07-30
-
4.12.2 - 2021-07-19
-
4.12.1 - 2021-07-07
-
4.12.0 - 2021-07-06
-
4.11.4 - 2021-04-27
-
4.11.3 - 2021-01-24
-
4.11.3-deprecations.1 - 2021-01-25
-
4.11.3-deprecations.0 - 2021-01-24
-
4.11.2 - 2020-12-02
from @material-ui/core GitHub release notesPackage name: @material-ui/icons
-
4.11.3 - 2022-04-03
-
4.11.2 - 2020-12-02
from @material-ui/icons GitHub release notesPackage name: lodash
-
4.17.21 - 2021-02-20
-
4.17.20 - 2020-08-13
from lodash GitHub release notesBump to v4.17.21
Bump to v4.17.20.
Package name: react
-
17.0.2 - 2021-03-22
- Remove an unused dependency to address the
- react: https://unpkg.com/react@17.0.2/umd/
- react-art: https://unpkg.com/react-art@17.0.2/umd/
- react-dom: https://unpkg.com/react-dom@17.0.2/umd/
- react-is: https://unpkg.com/react-is@17.0.2/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@17.0.2/umd/
- scheduler: https://unpkg.com/scheduler@0.20.2/umd/
-
17.0.1 - 2020-10-22
- Fix a crash in IE11. (@ gaearon in #20071)
from react GitHub release notesReact DOM
SharedArrayBuffercross-origin isolation warning. (@ koba04 and @ bvaughn in #20831, #20832, and #20840)Artifacts
React DOM
Package name: react-dom
-
17.0.2 - 2021-03-22
- Remove an unused dependency to address the
- react: https://unpkg.com/react@17.0.2/umd/
- react-art: https://unpkg.com/react-art@17.0.2/umd/
- react-dom: https://unpkg.com/react-dom@17.0.2/umd/
- react-is: https://unpkg.com/react-is@17.0.2/umd/
- react-test-renderer: https://unpkg.com/react-test-renderer@17.0.2/umd/
- scheduler: https://unpkg.com/scheduler@0.20.2/umd/
-
17.0.1 - 2020-10-22
- Fix a crash in IE11. (@ gaearon in #20071)
from react-dom GitHub release notesReact DOM
SharedArrayBuffercross-origin isolation warning. (@ koba04 and @ bvaughn in #20831, #20832, and #20840)Artifacts
React DOM
Package name: @testing-library/jest-dom
-
5.17.0 - 2023-07-18
- New
-
5.16.5 - 2022-08-04
- migrate ccs v3 to @ adobe/css-tools v4 (#470) (948d90f)
-
5.16.4 - 2022-04-05
- Support unenclosed inner text for details elements in to be visible (#396) (af18453)
-
5.16.3 - 2022-03-24
- clarify toHaveFocus message when using
-
5.16.2 - 2022-02-03
- add custom element support to
-
5.16.1 - 2021-12-06
- Improve
-
5.16.0 - 2021-12-03
- Update aria-query to 5.0.0 (#414) (de26c7a)
-
5.15.1 - 2021-11-23
- wrong deprecate error message (#422) (dfcefa2)
-
5.15.0 - 2021-11-02
- import parse directly from css (#415) (4cb606c)
-
5.14.1 - 2021-06-11
- Updates deprecated matchers info (#378) (fc9ce6d)
-
5.14.0 - 2021-06-11
-
5.13.0 - 2021-06-03
-
5.12.0 - 2021-04-22
-
5.11.10 - 2021-03-25
-
5.11.9 - 2021-01-12
-
5.11.8 - 2020-12-30
-
5.11.7 - 2020-12-30
-
5.11.6 - 2020-11-13
from @testing-library/jest-dom GitHub release notes5.17.0 (2023-07-18)
Features
toHaveAccessibleErrorMessagebetter implementing the spec, deprecatetoHaveErrorMessage(#503) (d717c66)5.16.5 (2022-08-04)
Bug Fixes
5.16.4 (2022-04-05)
Bug Fixes
5.16.3 (2022-03-24)
Bug Fixes
.not(#447) (6988a67)5.16.2 (2022-02-03)
Bug Fixes
toBeDisabled(#368) (8162115)5.16.1 (2021-12-06)
Bug Fixes
toHaveClasserror message format (#405) (a9beb47)5.16.0 (2021-12-03)
Features
5.15.1 (2021-11-23)
Bug Fixes
5.15.0 (2021-11-02)
Features
5.14.1 (2021-06-11)
Bug Fixes
Package name: @testing-library/react
-
11.2.7 - 2021-05-14
- Guard against
-
11.2.6 - 2021-03-30
- types: exclude tsconfig from types folder in publish flow (#893) (58150b9)
-
11.2.5 - 2021-02-02
- render: add default type for Queries parameter (#871) (5576e6f)
-
11.2.4 - 2021-02-02
- render: Default to HTMLElement in returned container (#868) (81c2de9)
-
11.2.3 - 2021-01-07
- Return type of unmount is
-
11.2.2 - 2020-11-20
- dependencies: bump dom testing library (#836) (7fcb0f2)
from @testing-library/react GitHub release notes11.2.7 (2021-05-14)
Bug Fixes
processnot being defined (#911) (8a1c8e9)11.2.6 (2021-03-30)
Bug Fixes
11.2.5 (2021-02-02)
Bug Fixes
11.2.4 (2021-02-02)
Bug Fixes
11.2.3 (2021-01-07)
Bug Fixes
void(#857) (1389f09)11.2.2 (2020-11-20)
Bug Fixes
Package name: @testing-library/user-event
-
12.8.3 - 2021-03-09
- tab: exclude hidden descendants (#579) (e83d949)
-
12.8.2 - 2021-03-09
- upload: fire input event when files change (#575) (4e48750)
-
12.8.1 - 2021-03-02
- typings: add home and end to specialChars enum (#569) (481e764)
-
12.8.0 - 2021-02-28
- upload: accept filter option (#562) (ede2df1), closes #558
-
12.7.4 - 2021-02-28
- click: focus closest focusable (#566) (#567) (73c2323)
-
12.7.3 - 2021-02-23
- "fix(upload): apply accept attribute" (#563) (7a5c51e)
-
12.7.2 - 2021-02-22
- upload: apply accept attribute (#558) (d513d6e)
-
12.7.1 - 2021-02-13
- click links on 'enter' key press (#534) (8a34d0b)
-
12.7.0 - 2021-02-11
- add type support for {home} and {end} (#536) (808c550)
-
12.6.3 - 2021-02-01
- add isInstanceOfElement helper (#552) (b4330c4)
-
12.6.2 - 2021-01-21
-
12.6.1 - 2021-01-21
-
12.6.0 - 2020-12-14
from @testing-library/user-event GitHub release notes12.8.3 (2021-03-09)
Bug Fixes
12.8.2 (2021-03-09)
Bug Fixes
12.8.1 (2021-03-02)
Bug Fixes
12.8.0 (2021-02-28)
Features
12.7.4 (2021-02-28)
Bug Fixes
12.7.3 (2021-02-23)
Reverts
12.7.2 (2021-02-22)
Bug Fixes
12.7.1 (2021-02-13)
Bug Fixes
12.7.0 (2021-02-11)
Features
12.6.3 (2021-02-01)
Bug Fixes
Package name: firebase