fix(deps): update dependency react-scripts to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
react-scripts (source)	4.0.3 -> 5.0.1

---

Release Notes

facebook/create-react-app (react-scripts)

v5.0.1

Compare Source

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@5.0.1

or

yarn add --exact react-scripts@5.0.1

🐛 Bug Fix

• react-scripts
  • #​12245 fix: webpack noise printed only if error or warning (@​Andrew47)
• create-react-app
  • #​11915 Warn when not using the latest version of create-react-app but do not exit (@​iansu)
• react-dev-utils
  • #​11640 Ensure posix compliant joins for urls in middleware (@​psiservices-justin-sullard)

💅 Enhancement

• cra-template-typescript, cra-template, react-scripts
  • #​12220 Update templates to use React 18 createRoot (@​kyletsang)
• cra-template-typescript, cra-template
  • #​12223 chore: upgrade rtl version to support react 18 (@​MatanBobi)
• eslint-config-react-app
  • #​11622 updated deprecated rules (@​wisammechano)

📝 Documentation

• #​11594 Fix a typo in deployment.md (@​fishmandev)
• #​11805 docs: Changelog 5.0.0 (@​jafin)
• #​11757 prevent both npm and yarn commands from being copied (@​mubarakn)

🏠 Internal

• #​11985 Ignore docs when publishing (@​iansu)

Committers: 11

• Andrew Burnie (@​Andrew47)
• Clément Vannicatte (@​shortcuts)
• Dmitriy Fishman (@​fishmandev)
• Dmitry Vinnik (@​dmitryvinn)
• Ian Sutherland (@​iansu)
• Jason Finch (@​jafin)
• Kyle Tsang (@​kyletsang)
• Matan Borenkraout (@​MatanBobi)
• Wisam Naji (@​wisammechano)
• @​mubarakn
• @​psiservices-justin-sullard

5.0.0 (2021-12-14)

Create React App 5.0 is a major release with several new features and the latest version of all major dependencies.

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

v5.0.0

Compare Source

Inside any created project that has not been ejected, run:

npm install --save --save-exact react-scripts@5.0.1

or

yarn add --exact react-scripts@5.0.1

🐛 Bug Fix

• react-scripts
  • #​12245 fix: webpack noise printed only if error or warning (@​Andrew47)
• create-react-app
  • #​11915 Warn when not using the latest version of create-react-app but do not exit (@​iansu)
• react-dev-utils
  • #​11640 Ensure posix compliant joins for urls in middleware (@​psiservices-justin-sullard)

💅 Enhancement

• cra-template-typescript, cra-template, react-scripts
  • #​12220 Update templates to use React 18 createRoot (@​kyletsang)
• cra-template-typescript, cra-template
  • #​12223 chore: upgrade rtl version to support react 18 (@​MatanBobi)
• eslint-config-react-app
  • #​11622 updated deprecated rules (@​wisammechano)

📝 Documentation

• #​11594 Fix a typo in deployment.md (@​fishmandev)
• #​11805 docs: Changelog 5.0.0 (@​jafin)
• #​11757 prevent both npm and yarn commands from being copied (@​mubarakn)

🏠 Internal

• #​11985 Ignore docs when publishing (@​iansu)

Committers: 11

• Andrew Burnie (@​Andrew47)
• Clément Vannicatte (@​shortcuts)
• Dmitriy Fishman (@​fishmandev)
• Dmitry Vinnik (@​dmitryvinn)
• Ian Sutherland (@​iansu)
• Jason Finch (@​jafin)
• Kyle Tsang (@​kyletsang)
• Matan Borenkraout (@​MatanBobi)
• Wisam Naji (@​wisammechano)
• @​mubarakn
• @​psiservices-justin-sullard

5.0.0 (2021-12-14)

Create React App 5.0 is a major release with several new features and the latest version of all major dependencies.

Thanks to all the maintainers and contributors who worked so hard on this release! 🙌

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore core-js@3.29.1
• @SocketSecurity ignore core-js-pure@3.29.1

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
core-js@3.29.1 (upgraded)	postinstall	package.json via react-scripts@5.0.1
core-js-pure@3.29.1 (added)	postinstall	package.json via react-scripts@5.0.1

Pull request alert summary

Issue	Status
Install scripts	⚠️ 2 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Capability Access	+/- Transitive Count	Publisher
react-scripts@5.0.1	4.0.3...5.0.1	eval, network, filesystem, shell, environment	+324/-701	iansu