Dan Abramov
dc74990b89
Add 1.1.5 release notes
2018-08-24 15:40:13 +01:00
Dan Abramov
550fccb693
Bump release
2018-08-22 19:58:43 +01:00
Dan Abramov
ca88a69b77
Bump versions
2018-08-22 19:44:57 +01:00
Andrew Clark
24b101d233
Use file name whitelist to prevent RCE ( #4866 )
...
* Use file name whitelist to prevent RCE
Use a whitelist to validate user-provided file names. This doesn't cover
the entire range of valid filenames but should cover almost all of them
in practice. Allows letters, numbers, periods, dashes, and underscores.
Opting to use a whitelist instead of a blacklist because getting this
wrong leaves us vulnerable to a RCE attack.
* Allow alphabet characters from all languages
Updated the whitelist to /^[\p{L}0-9/.\-_]+$/u, which matches
alphanumeric characters, periods, dashes, and underscores. Unicode
property support is stage 4 so I've inlined the transpiled version.
* Only use file name whitelist on Windows
* Log error message if file name does not pass whitelist
2018-08-22 19:43:38 +01:00
Terbiy
ca5998326d
Fix link to the article about BEM ( #4858 )
2018-08-07 10:57:03 -04:00
Kent C. Dodds
ea7b37414a
add react-testing-library documentation/examples ( #4679 )
...
* add react-testing-library documentation/examples
* make react-testing-library a heading
* fix typo
2018-06-26 12:45:00 -04:00
Dan
8de0412c54
babel-preset-react-app@3.1.2
2018-06-23 13:38:59 +01:00
Dan Abramov
805ab399e1
Add modes to our Babel preset (1.x) ( #4668 )
2018-06-23 13:37:23 +01:00
Joe Haddad
dfbc71ce2a
Publish
...
- react-dev-utils@5.0.1
- react-scripts@1.1.4
2018-04-03 20:27:48 -04:00
Joe Haddad
305bd7015f
Changelog for 1.1.4
2018-04-03 20:27:05 -04:00
Joe Haddad
110fdedef0
Update detect-port-alt ( #4250 )
2018-04-03 20:07:35 -04:00
Dan Abramov
408db51973
Publish
...
- react-scripts@1.1.3
2018-04-03 18:30:53 +01:00
Dan Abramov
f040d85a76
Changelog for 1.1.3
2018-04-03 18:30:23 +01:00
Dan Abramov
d639e90bfa
Work around Jest environment resolving bug ( #4247 )
2018-04-03 18:03:08 +01:00
Dan Abramov
609aeea67b
Publish
...
- react-scripts@1.1.2
2018-04-03 00:48:34 +01:00
Dan Abramov
780a4573e7
Add 1.1.2 changelog ( #4242 )
2018-04-03 00:48:07 +01:00
Vicente Plata
cb1608b3e0
Add troubleshooting for Github Pages ( #4197 )
...
Add troubleshooting for an issue that has to do with either 2FA, or using Windows, or both, when trying to deploy an app via gh-pages
2018-03-23 11:07:25 +01:00
Lee Byron
c6375edc07
.mjs should not resolve before .js files (#4085 )
...
Support for .mjs files added in #3239 did not account for npm libraries which ship native mjs files alongside js files. This accounts for this by ensuring .js files resolve before their accompanying .mjs file. Note that this is not an ideal end state since selecting a .mjs over a .js extension should be the result of whether `import` was used instead of `require()` in a node environment with native ESM support (currently via `--experimental-modules`). Instead, this change just *always* selects a .js extension before the .mjs extension if it exists.
This unbreaks support for using GraphQL (relay, apollo, etc) within create-react-app projects.
2018-03-22 10:27:23 -04:00
Dan Abramov
0b1d636576
Publish
...
- create-react-app@1.5.2
- react-scripts@1.1.1
2018-02-09 13:20:59 +00:00
Dan Abramov
1a9722f50a
Revert "Set the public path to the asset manifest entries ( #2544 )"
...
This reverts commit bab2c29522
2018-02-09 13:20:21 +00:00
Dan Abramov
984d661811
Add 1.1.1 changelog
2018-02-09 13:19:49 +00:00
Dan Abramov
09d216ecce
Unpin and bump fsevents (for 1.x branch) ( #4006 )
2018-02-09 13:10:41 +00:00
Ian Sutherland
32ea0c0e6d
Update dotenv-expand to fix bug with environment variables that contain a $. ( #4000 )
2018-02-09 13:08:30 +00:00
Alf Eaton
815853db7f
Update instructions for continuous delivery with Netlify ( #3971 )
2018-02-04 15:54:14 +00:00
Ronald Rey
eee29075d6
Include {json,css} files in prettier command ( #3894 )
...
Update User Guide's README.md to include `json` and `css`
files in the command to format the entire project for the first time
with prettier, that it's consistent with the `lint-staged` command.
2018-01-22 13:51:38 +00:00
Robin van der Vleuten
bab2c29522
Set the public path to the asset manifest entries ( #2544 )
2018-01-20 19:31:27 +00:00
Dan Abramov
034c6ad348
1.5.1
2018-01-18 12:08:58 +00:00
Bond
2bf092967f
pin envinfo version to 3.4.2 ( #3853 )
...
See #3837
2018-01-18 11:55:02 +00:00
Dan Abramov
d979964126
Tweak publishing note
2018-01-15 00:55:15 +00:00
Dan
e73a783ef1
Publish
...
- babel-preset-react-app@3.1.1
- create-react-app@1.5.0
- eslint-config-react-app@2.1.0
- react-dev-utils@5.0.0
- react-error-overlay@4.0.0
- react-scripts@1.1.0
2018-01-15 00:53:37 +00:00
Dan Abramov
aa5bdcd05f
Changelog for 1.1.0 ( #3795 )
2018-01-15 00:37:46 +00:00
Dan Abramov
95b26012a4
Tweak section on expanding env variables
2018-01-15 00:36:53 +00:00
Dan Abramov
12d05447b9
Test Node 9 on CI ( #3793 )
...
* Test Node 9 on CI
* Oops
2018-01-14 23:57:49 +00:00
Ian Sutherland
b86fe056a3
Add warning when HOST environment variable is set ( #3730 )
...
* Add warning when HOST environment variable is set (#3719 )
* Improve HOST environment variable warning message
* Adjust text and message
Closes #3719
2018-01-14 14:14:37 -05:00
Dan Abramov
22f9fe0d33
Always include destructuring transform ( #3788 )
...
* Always include destructuring transform
* Fix lint
2018-01-14 15:37:00 +00:00
Dan Abramov
1e9eaf3630
Bump detect-port-alt ( #3787 )
...
* Bump detect-port-alt
* Bump again
2018-01-14 15:05:38 +00:00
Dan Abramov
77148107d9
Add npx note to quick overview
2018-01-14 11:52:10 +00:00
Dan Abramov
585608e3d6
Update opn ( #3784 )
2018-01-14 10:24:00 +00:00
Dan Abramov
a3d33c4608
Add an explicit link to Code of Conduct ( #3781 )
...
All FB open source projects including this one enforce [our code of conduct](https://code.facebook.com/pages/876921332402685/open-source-code-of-conduct ), but I just realized we haven't explicitly linked to it from a Markdown file. So I'm doing just that.
2018-01-14 02:48:15 +00:00
Joe Haddad
238af4b1da
Enable Yarn check files ( #3769 )
...
* This is a good default.
Adds approx 4 seconds to install time, but can save some headaches.
* Add no lockfile for add, too
2018-01-12 22:14:27 -05:00
Dan Abramov
3f0994775f
Pin Lerna
2018-01-12 13:50:42 +00:00
Dan Abramov
0aeffe62ef
Switch to Yarn Workspaces ( #3755 )
...
* Switch to Yarn Workspaces
* Feedback
* Move flowconfig
* Use publish script
* Keep git status check
* Fix Flow without perf penalty
* Remove Flow from package.json "test"
* Try running it from script directly (?)
* Try magic incantations
* lol flow COME ON
* Try to skip Flow on AppVeyor
* -df
* -df
* -df
* Try to fix CI
* Revert unrelated changes
* Update CONTRIBUTING.md
2018-01-12 01:54:53 +00:00
Dan Abramov
3f7851deab
Try updating Flow ( #3757 )
2018-01-12 00:01:30 +00:00
Ade Viankakrisna Fadlil
b02fe66732
clean up changes to npm and yarn registry ( #3756 )
2018-01-11 23:25:27 +00:00
Dan Abramov
4c0bf037d1
Delete old file
...
It's been here long enough.
2018-01-11 12:35:51 +00:00
Jonathan
89bf2fcc55
Adding some more non-conflicting files to validFiles ( #3740 )
2018-01-11 12:29:35 +00:00
Joe Haddad
1098a4a177
Oops
2018-01-11 02:21:25 -05:00
Joe Haddad
ebddb83dd6
Remove redundant steps in e2e tests ( #3747 )
...
* This doesn't look needed anymore
* Remove unnecessary rebuilds
2018-01-11 01:40:03 -05:00
Joe Haddad
29e06fc91a
Follow-up: use private registry ( #3746 )
...
* Convert e2e-installs
* Convert kitchensink tests
* Upgrade npm for kitchensink
2018-01-11 01:38:10 -05:00
Joe Haddad
75d71e1541
Use private registry ( #3744 )
...
* Run e2e-simple in a realistic scenario
* Use npx for everything
* oops
2018-01-11 00:49:39 -05:00
