mirror of
https://github.com/zebrajr/react.git
synced 2026-01-15 12:15:22 +00:00
chore[react-devtools]: ip => internal-ip (#29772)
## Summary There was an attempt to upgrade `ip` to 2.0.1 to mitigate CVE in https://github.com/facebook/react/pull/29725#issuecomment-2150389616, but there actually another one CVE in version `2.0.1`. Instead, migrate to `internal-ip`, which similarly small package that we can use Note: not upgrading to version 7+, because they are pure ESM. ## How did you test this change? Validated that standalone version of RDT works and connects to the app.
This commit is contained in:
@@ -25,7 +25,7 @@
|
||||
"dependencies": {
|
||||
"cross-spawn": "^5.0.1",
|
||||
"electron": "^23.1.2",
|
||||
"ip": "^2.0.1",
|
||||
"internal-ip": "^6.2.0",
|
||||
"minimist": "^1.2.3",
|
||||
"react-devtools-core": "5.2.0",
|
||||
"update-notifier": "^2.1.0"
|
||||
|
||||
Reference in New Issue
Block a user