[Snyk] Security upgrade react-dev-utils from 9.1.0 to 11.0.3

[sirinartk]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/react-scripts/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-IMMER-1019369	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-dev-utils

The new version differs by 250 commits.

• f92c37a Publish
• cce32fa Update CHANGELOG
• f710976 Prepare 4.0.3 release
• 6947896 update immer to 8.0.1 to address vulnerability (update immer to 8.0.1 to address vulnerability facebook/create-react-app#10412)
• 18b5962 Upgrade eslint-webpack-plugin to fix opt-out flag (Upgrade eslint-webpack-plugin to fix opt-out flag facebook/create-react-app#10590)
• 9722ef1 Bump webpack-dev-server 3.11.0 -> 3.11.1 (Bump webpack-dev-server 3.11.0 -> 3.11.1 facebook/create-react-app#10312)
• 3f5dea9 tests: update test case to match the description (tests: update test case to match the description facebook/create-react-app#10384)
• 9c75260 Publish
• 32c06e6 Prepare 4.0.2 release
• b9963ab Add opt-out for eslint-webpack-plugin (Add opt-out for eslint-webpack-plugin facebook/create-react-app#10170)
• 8fa0a26 Add support for new BUILD_PATH advanced configuration variable (Add support for new BUILD_PATH advanced configuration variable facebook/create-react-app#8986)
• 6a39607 appTsConfig immutability handling by immer (appTsConfig immutability handling by immer facebook/create-react-app#10027)
• d229676 Fix CI tests (Fix CI tests facebook/create-react-app#10217)
• c9a24db docs: add missing override options for Jest config (docs: add missing override options for Jest config facebook/create-react-app#9473)
• 0f6fc2b Update using-the-public-folder.md (Update using-the-public-folder.md facebook/create-react-app#10314)
• a504e9d fix(react-scripts): add missing peer dependency react and update react-refresh-webpack-plugin (fix(react-scripts): add missing peer dependency react and update react-refresh-webpack-plugin facebook/create-react-app#9872)
• 282c03f Remove references to Node 8 (Remove references to Node 8 facebook/create-react-app#10214)
• 3968923 Revert "Update postcss packages" (Revert "Update postcss packages" facebook/create-react-app#10216)
• e039ad3 Move ESLint cache file into node_modules (Move ESLint cache file into node_modules facebook/create-react-app#9977)
• 6dce3f4 Upgrade sass-loader (Upgrade sass-loader facebook/create-react-app#9988)
• 54ad467 Recovered some integration tests (Recovered some integration tests facebook/create-react-app#10091)
• 580ed5d Update postcss packages (Update postcss packages facebook/create-react-app#10003)
• 8f2413e Improve vendor chunk names in development (Improve vendor chunk names in development facebook/create-react-app#9569)
• 723224f Upgrade @ svgr/webpack to fix build error (Upgrade @svgr/webpack to fix build error facebook/create-react-app#10213)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[stale]

This pull request has been automatically marked as stale because it has not had any recent activity. It will be closed in 5 days if no further activity occurs.

[stale]

This pull request has been automatically closed because it has not had any recent activity. If you have a question or comment, please open a new issue. Thank you for your contribution!