An in-range update of react is breaking the build 🚨
Closed this issue · 1 comments
Version 16.4.2 of the react packages was just published.
| Branch | Build failing 🚨 |
|---|---|
| Monorepo release group | react |
| Current Version | 16.4.1 |
| Type | devDependency |
This version is covered by your current version range and after updating it in your project the build failed.
This monorepo update includes releases of one or more dependencies which all belong to the react group definition.
react is a devDependency of this project. It might not break your production code or affect downstream projects, but probably breaks your build or test tools, which may prevent deploying or publishing.
Status Details
- ❌ continuous-integration/travis-ci/push: The Travis CI build failed (Details).
Release Notes
v16.4.216.4.2 (August 1, 2018)
React DOM Server
-
Fix a potential XSS vulnerability when the attacker controls an attribute name (
CVE-2018-6341). This fix is available in the latestreact-dom@16.4.2, as well as in previous affected minor versions:react-dom@16.0.1,react-dom@16.1.2,react-dom@16.2.1, andreact-dom@16.3.3. (@gaearon in #13302) -
Fix a crash in the server renderer when an attribute is called
hasOwnProperty. This fix is only available inreact-dom@16.4.2. (@gaearon in #13303)
FAQ and help
There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.
Your Greenkeeper Bot 🌴
After pinning to 16.4.1 your tests are still failing. The reported issue might not affect your project. These imprecisions are caused by inconsistent test results.