django-react-boilerplate
django-react-boilerplate copied to clipboard
Boilerplate code to create a site with Django in the Back-end and React.js in the Front-end
Bumps [tar](https://github.com/npm/node-tar) from 4.4.8 to 4.4.15. **This update includes security fixes.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization Impact...
Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 26.0.14 to 26.0.24. Commits See full diff in compare view [](https://dependabot.com/compatibility-score/?dependency-name=@types/jest&package-manager=npm_and_yarn&previous-version=26.0.14&new-version=26.0.24) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 16.9.50 to 17.0.15. Commits See full diff in compare view [](https://dependabot.com/compatibility-score/?dependency-name=@types/react&package-manager=npm_and_yarn&previous-version=16.9.50&new-version=17.0.15) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) from 16.9.8 to 17.0.9. Commits See full diff in compare view [](https://dependabot.com/compatibility-score/?dependency-name=@types/react-dom&package-manager=npm_and_yarn&previous-version=16.9.8&new-version=17.0.9) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.7 to 1.5.3. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Path reaversal in url-parse url-parse before 1.5.0 mishandles certain...
Bumps [whitenoise](https://github.com/evansd/whitenoise) from 5.2.0 to 5.3.0. Changelog Sourced from whitenoise's changelog. v5.3.0 Gracefully handle unparsable If-Modified-Since headers (thanks @danielegozzi). Test against Django 3.2 (thanks @jhnbkr). Add mimetype for Markdown (.md)...
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 3.9.7 to 4.3.5. Release notes Sourced from typescript's releases. TypeScript 4.3.5 This release contains a bug fix for auto-imports on JSX components in the TypeScript language service....
Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3. **This update includes a security fix.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. ReDoS in Sec-Websocket-Protocol header Impact A specially crafted value...
Bumps [django](https://github.com/django/django) from 3.1.2 to 3.1.12. **This update includes security fixes.** Vulnerabilities fixed Sourced from The GitHub Security Advisory Database. Improper Limitation of a Pathname to a Restricted Directory In...
_Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then._ Dependabot has...