cypress-example-todomvc icon indicating copy to clipboard operation
cypress-example-todomvc copied to clipboard

Published 20 hours ago • verified publisher icon cypress-io

chore(deps): update dependency react to version 0.14.0 🌟

Open renovate[bot] opened this issue 3 years ago • 0 comments

Mend Renovate

This PR contains the following updates:

Package Change
react 0.13.3 -> 0.14.0

GitHub Vulnerability Alerts

GHSA-hg79-j56m-fxgv

Versions of react prior to 0.14.0 are vulnerable to Cross-Site Scripting (XSS). The package's createElement function fails to properly validate its input object, allowing attackers to execute arbitrary JavaScript in a victim's browser.

Recommendation

Upgrade to version 0.14.0 or later.

Configuration

📅 Schedule: Branch creation - "" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled due to failing status checks.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • [ ] If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] avatar Mar 15 '22 18:03 renovate[bot]