1. 17 Sep, 2018 6 commits
  2. 22 Aug, 2018 2 commits
    • Dan Abramov's avatar
      Bump versions · 96ba7bdd
      Dan Abramov authored
      96ba7bdd
    • Andrew Clark's avatar
      Use file name whitelist to prevent RCE (#4866) · 577a274d
      Andrew Clark authored
      * Use file name whitelist to prevent RCE
      
      Use a whitelist to validate user-provided file names. This doesn't cover
      the entire range of valid filenames but should cover almost all of them
      in practice. Allows letters, numbers, periods, dashes, and underscores.
      Opting to use a whitelist instead of a blacklist because getting this
      wrong leaves us vulnerable to a RCE attack.
      
      * Allow alphabet characters from all languages
      
      Updated the whitelist to /^[\p{L}0-9/.\-_]+$/u, which matches
      alphanumeric characters, periods, dashes, and underscores. Unicode
      property support is stage 4 so I've inlined the transpiled version.
      
      * Only use file name whitelist on Windows
      
      * Log error message if file name does not pass whitelist
      577a274d
  3. 18 Jun, 2018 1 commit
  4. 24 May, 2018 1 commit
  5. 20 May, 2018 1 commit
    • Andreas Cederström's avatar
      - [x] Upgrade to webpack 4.8.X (#4077) · d72678fb
      Andreas Cederström authored
      - [x] Utilize webpack 4 development and production modes
      - [x] Upgrade webpack dev server
      - [x] Webpack 4 compatible release of thread-loader
      - [x] Webpack 4 compatible release of HtmlWebpackPlugin
      - [x] Webpack 4 compatible release of SwPrecacheWebpackPlugin
      - [x] Webpack 4 compatible release of WebpackManifestPlugin
      - [x] Update README
      - [x] Update WebpackDevServerUtils
      - [x] Update InterpolateHtmlPlugin
      - [x] Update ModuleScopePlugin
      - [x] Update WatchMissingNodeModulesPlugin
      - [x] Move UglifyJS options to webpack 4 optimize
      - [x] Move InterpolateHtmlPlugin to make it tapable on HtmlWebpackPlugin
      - [x] vendor splitting via splitChunks.splitChunks (https://twitter.com/wSokra/status/969633336732905474)
      - [x] long term caching via splitChunks.runtimeChunk (https://twitter.com/wSokra/status/969679223278505985)
      - [x] Make sure process.env.NODE_ENV is proxied correctly to `react-error-overlay`
      - [x] Implicit webpack.NamedModulesPlugin in dev config as its default in webpack 4
      - [x] Disable webpack performance hints as we have our own filesize reporter
      - [x] Replace ExtractTextPlugin with MiniCssExtractPlugin
      - [x] Switch to css whole file minification via OptimizeCSSAssetsPlugin rather than per module css minification to gain performance
      d72678fb
  6. 09 May, 2018 1 commit
  7. 08 May, 2018 1 commit
  8. 27 Apr, 2018 2 commits
  9. 13 Apr, 2018 1 commit
  10. 05 Apr, 2018 1 commit
  11. 03 Apr, 2018 1 commit
  12. 23 Mar, 2018 1 commit
  13. 18 Mar, 2018 1 commit
    • Brian Ng's avatar
      Bump babel-related deps (#4159) · cb3f8355
      Brian Ng authored
      * Add explicit dep on plugin-proposal-object-rest-spread to babel-preset-react-app
      
      * Bump babel-related deps to beta.42
      
      * Pass useBuiltIns directly to react-preset
      cb3f8355
  14. 12 Feb, 2018 1 commit
  15. 11 Feb, 2018 1 commit
  16. 10 Feb, 2018 1 commit
    • bradfordlemley's avatar
      Use yarn when running inside yarn workspace. (#3997) · 2c34d5b6
      bradfordlemley authored
      * Run yarn after ejecting.
      
      * On eject, choose to run yarn instead of npm if yarn is available.
      
      * Move monorepo to react-dev-utils.
      
      * Fix lint.
      
      * Rename monorepo to workspaceUtils.
      
      * Add react-dev-utils dep for create-react-app.
      
      * getMonorepo -> findMonorepo
      2c34d5b6
  17. 05 Feb, 2018 1 commit
  18. 23 Jan, 2018 1 commit
  19. 22 Jan, 2018 1 commit
  20. 18 Jan, 2018 3 commits
  21. 17 Jan, 2018 3 commits
  22. 16 Jan, 2018 1 commit
    • Dan Abramov's avatar
      Try to fix CI (#3806) · 72c3d4eb
      Dan Abramov authored
      * Try to fix CI
      
      * Bump Jest elsewhere
      
      * Bump Babel elsewhere
      
      * Fix CI on Windows by writing .cmd file back
      72c3d4eb
  23. 15 Jan, 2018 7 commits
    • Joe Haddad's avatar
      Offer to set default browsers (#3792) · 2e59c541
      Joe Haddad authored
      * Offer to set browser defaults
      
      * Catch error on no
      
      * Add ending newlines
      
      * Ensure we re-check to prevent defaults from leaking
      
      * Reduce nesting
      
      * Add defaults message
      
      * More explicit
      2e59c541
    • Joe Haddad's avatar
      Tell user what browser support their application was built with (#3782) · 5d1710ae
      Joe Haddad authored
      * Warn about browsers during build
      
      * Better message
      5d1710ae
    • Dan Abramov's avatar
      Bump dependencies (#3785) · ea46cf4f
      Dan Abramov authored
      * Bump dependencies
      
      * Use a more sensible way to compile error overlay
      
      * Keep old chalk for global CLI
      ea46cf4f
    • Clement Hoang's avatar
      Switch to Babel 7 (#3522) · 1552949a
      Clement Hoang authored
      * Update dependencies in react-scripts
      
      * Add first pass of working dependencies for babel-preset-react-app and react-scripts
      
      * Bump more dependency versions
      
      * Adjust more versions and edit fix options
      
      * Restore functionality of old preset
      
      * Disable Uglify in iframe webpack
      
      * Apply prettier
      
      * Re-enable cache in dev and clean deps
      
      * Lock packages and move babel/core to dep in preset
      
      * Bump babel-jest
      
      * Re-enable uglify
      
      * Nest forceAllTransforms correctly in webpack config
      
      * Install babel-core bridge for jest
      
      * Add jest-cli and babel-core bridge to make tests in react-error-overlay pass
      
      * Re-enable transform-dynamic-import
      
      * Add dynamic import syntax support back
      
      * Use new babel in kitchensink
      
      * Transform modules in test
      
      * Revert "Transform modules in test"
      
      This reverts commit 539e46a1.
      
      * Attempt fix for ejected tests
      
      * try this
      
      * Add regenerator back
      
      * Bump babel deps to beta.34
      
      * Remove bad files
      
      * Use default when requiring babel transform plugin
      
      * Bump deps
      
      * Try the fix?
      
      * Oopsie
      
      * Remove some weird things
      
      * Run Babel on react-error-overlay tests
      
      * Try fixing kitchensink
      
      * Use new API for codeFrame
      
      * Add missing (?) babelrc
      
      * Maybe this helps?
      
      * Maybe fix mocha
      
      * I shouldn't have deleted this :face_palm:
      1552949a
    • Dan Abramov's avatar
      Bump Jest to 22.0.6 (#3751) · 590df7ee
      Dan Abramov authored
      590df7ee
    • aisensiy's avatar
      Update jest to 22 and support watchPathIgnorePatterns configuration (#3124) · 776d2d60
      aisensiy authored
      * update jest to 21.0.2 to support watchPathIgnorePatterns configuration
      
      * update jest to 21.1.0
      
      * Try bumping Jest
      
      * Bump babel-jest
      
      * Try to debug weird CI failure
      
      * Remove debug code
      
      * Bump other Jest packages
      
      * ffs
      
      * temp
      
      * Revert "temp"
      
      This reverts commit 62aec9ac.
      776d2d60
    • Dan's avatar
      Publish · e73a783e
      Dan authored
       - babel-preset-react-app@3.1.1
       - create-react-app@1.5.0
       - eslint-config-react-app@2.1.0
       - react-dev-utils@5.0.0
       - react-error-overlay@4.0.0
       - react-scripts@1.1.0
      e73a783e