Skip to content

[Snyk] Security upgrade react-scripts from 1.1.5 to 5.0.0 #604

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
saurabharch wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade react-scripts from 1.1.5 to 5.0.0 #604

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion fixtures/concurrent/time-slicing/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@
"react": "0.0.0-experimental-269dd6ec5",
"react-dom": "0.0.0-experimental-269dd6ec5",
"react-markdown": "^3.2.0",
"react-scripts": "^1.1.4",
"react-scripts": "^5.0.0",
Copy link

@gemini-code-assist gemini-code-assist bot Jan 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Upgrading react-scripts from version 1 to 5 is a significant leap that spans multiple major versions. Each major version of react-scripts introduced substantial changes to its underlying dependencies like Webpack, Babel, and Jest.

Some potential issues to watch out for:

  • Breaking Changes in Tooling: Webpack 5 (in react-scripts@5) has numerous breaking changes compared to Webpack 3 (in react-scripts@1). This could affect custom build configurations if any exist. Similarly, Jest, Babel, and ESLint have been upgraded significantly.
  • Compatibility with Experimental React: This project uses an experimental version of React. react-scripts@5 is tested against stable React versions. There's a risk of incompatibility with the specific experimental features or APIs used here.
  • Node.js Version: react-scripts@5 requires Node.js 14 or later. Please ensure your development and CI/CD environments meet this requirement.

Given the high risk of breaking changes, extensive testing of the build, development server, tests, and overall application functionality is strongly recommended.

"victory": "^0.25.6"
},
"scripts": {
Expand Down
Loading