chore[react-devtools]: ip => internal-ip (#29772)

## Summary

There was an attempt to upgrade `ip` to 2.0.1 to mitigate CVE in
https://github.com/facebook/react/pull/29725#issuecomment-2150389616,
but there actually another one CVE in version `2.0.1`. Instead, migrate
to `internal-ip`, which similarly small package that we can use

Note: not upgrading to version 7+, because they are pure ESM.

## How did you test this change?

Validated that standalone version of RDT works and connects to the app.
This commit is contained in:
Ruslan Lesiutin
2024-06-05 19:58:12 +01:00
committed by GitHub
parent eb259b5d3b
commit 3730b40e9b
3 changed files with 46 additions and 81 deletions

View File

@@ -25,7 +25,7 @@
"dependencies": {
"cross-spawn": "^5.0.1",
"electron": "^23.1.2",
"ip": "^2.0.1",
"internal-ip": "^6.2.0",
"minimist": "^1.2.3",
"react-devtools-core": "5.2.0",
"update-notifier": "^2.1.0"