[Snyk] Security upgrade react-router-dom from 6.30.2 to 7.0.0#6416
[Snyk] Security upgrade react-router-dom from 6.30.2 to 7.0.0#6416caniszczyk wants to merge 2 commits into
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-REMIXRUNROUTER-14908530 Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #6416 +/- ##
==========================================
- Coverage 29.48% 29.47% -0.01%
==========================================
Files 593 593
Lines 63440 63440
==========================================
- Hits 18706 18700 -6
- Misses 43289 43295 +6
Partials 1445 1445
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
|
This PR is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days. |
|
Check this after PR #6704 be merged, due to the required NodeJS version update. |
Signed-off-by: khanhtc1202 <khanhtc1202@gmail.com>
ce8b0cd to
f53fc5b
Compare
|
Let's skip this, try update React to v18 first then wait for Snyk to trigger other react-router-dom update, since the target version v7 is incompatible with current React v17 (used in project), and lot of dependecies broken in between. |
Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.
Snyk changed the following file(s):
web/package.jsonweb/yarn.lockNote for zero-installs users
If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the
.yarn/cache/directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to runyarnto update the contents of the./yarn/cachedirectory.If you are not using zero-install you can ignore this as your flow should likely be unchanged.
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-REMIXRUNROUTER-14908530
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Cross-site Scripting (XSS)