Ant Design (antd) has released version 3.5.4, a minor update following version 3.5.3. Both versions cater to developers seeking an enterprise-class UI solution based on React. Key differences lie in updated dependencies and development tools, reflecting an ongoing effort to refine and enhance the library.
In the dependency section, the update sees raf added as a new dependency in the newer version, updated from version ~3.0.0 to ~4.0.0 in the version warning.
Significant changes appear in devDependencies. Version 3.5.4 upgrades jest from 22.4.2 to 23.0.0 and several packages were altered, removed or added like react-router-dom, @types/react-dom, enzyme-adapter-react-16 and intersection-observer and introducing a new enzyme-adapter-react-16 dependency and removing the older version's react-virtualized version constraints. Also worth is the addition in the new version of react-virtualized version is "~9.19.0", whereas in the olders it's "~9.18.5". These changes impact the testing and development environment, potentially affecting build processes and component rendering. The stylelint moved from 9.2.0 to 9.2.1. For React developers, these updates mean potentially better testing capabilities and refined component rendering behavior, ensuring a smoother development experience when leveraging Ant Design for building complex UIs. While both versions offer robust UI components, version 3.5.4 incorporates the latest enhancements and bug fixes, making it a preferred choice for new projects and existing applications seeking to stay current with the antd ecosystem.
All the vulnerabilities related to the version 3.5.4 of the package
node-fetch forwards secure headers to untrusted sites
node-fetch forwards secure headers such as authorization
, www-authenticate
, cookie
, & cookie2
when redirecting to a untrusted site.