Skip to content

Upgrading react 0.13 to 0.14

Breaking0.13.3 → 0.14.10Security1Platform1New7Changed5Fixed15Other1

Full comparisonBack to react
BreakingUpgrade verdict

A platform requirement change and a security fix.

In plain terms
  • React is no longer installed automatically as a dependency of react-dom; you must install it yourself, as with the react-addons-* packages.
  • Cross-Site Scripting in react
Must act 2 items need code or config changes

Adds fbjs ^0.6.1.

Installs 42 packages in all (was 34).

What you must change

Security1
Cross-Site Scripting in react
High
0.14.0GitHub AdvisoryOriginalView source
Platform1
Moves react from dependencies to peerDependencies to match expectations and align with react-addons-* packages.
reactdependenciespeerDependenciesreact-addons-*
0.14.2GitHub ReleaseSummarizedView source