-
Notifications
You must be signed in to change notification settings - Fork 0
[Snyk] Upgrade react-intl from 2.9.0 to 7.1.0 #18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
[Snyk] Upgrade react-intl from 2.9.0 to 7.1.0 #18
Conversation
Snyk has created this PR to upgrade react-intl from 2.9.0 to 7.1.0. See this package in npm: react-intl See this project in Snyk: https://app.snyk.io/org/nerds-github/project/31417d5e-2e41-49ef-b06d-f8bf03744022?utm_source=github&utm_medium=referral&page=upgrade-pr
Reviewer's Guide by SourceryThis pull request upgrades the react-intl package from version 2.9.0 to 7.1.0 in the package.json file. This is a major version upgrade and may introduce breaking changes. The upgrade addresses a Cross-site Scripting (XSS) vulnerability and is 307 versions ahead of the current version. State diagram of react-intl package upgrade processstateDiagram-v2
[*] --> CurrentVersion
CurrentVersion: react-intl v2.9.0
CurrentVersion --> UpgradeProcess
UpgradeProcess: Major Version Upgrade
UpgradeProcess --> SecurityCheck
SecurityCheck: Fix XSS Vulnerability
SecurityCheck --> NewVersion
NewVersion: react-intl v7.1.0
NewVersion --> [*]
note right of UpgradeProcess
307 versions ahead
Breaking changes possible
end note
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
|
Snyk has created this PR to upgrade react-intl from 2.9.0 to 7.1.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 307 versions ahead of your current version.
The recommended version was released 23 days ago.
Issues fixed by the recommended upgrade:
SNYK-JS-RAILROADDIAGRAMS-6282875
Release notes
Package name: react-intl
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
Summary by Sourcery
Enhancements: