Ant Design (antd) underwent a significant evolution between versions 2.13.14 and 3.0.0. The later major release reflects advancement in its underlying architecture and dependencies. A fundamental shift is visible in the React peer dependency, upgraded from "~0.14.0 || >=15.0.0" to ">=16.0.0", signalling a move to React 16 and its associated performance improvements and features. A notable addition in version 3.0 is the inclusion of rc-editor-mention, which means new capabilities for mention functionalities within the UI components and React-lazy-load which enables lazy loading of react components, improving initial page load times.
Several dependency versions were also bumped, for instance, rc-form, rc-menu, rc-rate, rc-steps, rc-table and many others, often indicating bug fixes, performance enhancements, or new features within those individual components. Developers moving from 2.x to 3.x should carefully review component-specific changes detailed in the antd changelog to ensure compatibility and to utilize the latest APIs. The peer dependency change to React 16 warrants a thorough update of the entire React ecosystem, ensuring all related libraries are compatible with React's breaking changes while taking advantage of the new features and performance optimizations for modern React applications. Overall, version 3.0 offers a more streamlined, performant, and feature-rich experience for developers building enterprise-grade React applications.
All the vulnerabilities related to the version 3.0.0 of the package
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as authorization, www-authenticate, cookie, & cookie2 when redirecting to a untrusted site.
