Rockpack is a simple solution for creating React Application with Server Side Rendering, bundling, linting, testing within 5 minutes

Last update: Dec 5, 2022

Overview

This is beta. Official release coming soon

Rockpack is a simple solution for creating React Application with Server Side Rendering, bundling, linting, testing.

Rockpack The main goal is to reduce project setup time from weeks to 5 minutes.

Getting Started:

Rockpack will help if:

Beginners. With the help of Rockpack, any newbie to React can deploy a project of any complexity in a few minutes, with configured webpack, eslint, jest, etc. Applications can be either regular Single Page or with a project structure, Server Side Render, etc.
Large projects from scratch. Rockpack supports most of the webpack best practices configurations, eslint rules, jest, typescript and will work great even on large projects
Startup. If you need to quickly check an idea without wasting time on unfolding and setting up the project.
Library or React component. If you want to write a UMD library or React component, with support for the esm/cjs build as well as the minified version.

Fast setup

Legacy projects or modular use. Rockpack is a modular platform, you can only use what you need. Please see every modules' readme.

Also, pay attention to module iSSR. This tiny module helps you to move your React application to Server-Side Rendering. Please see articles:

Motivation

Working on many React projects, we are faced with the same type of routine tasks. We answer questions every time:

How to set up an efficient build system with support for many formats and Typescript we need
Which linter's rules should be on the project for comfortable work
How to set up Jest that it works with Babel or Typescript
How to make server-side rendering to work with existing solutions - Redux, Apollo and other
How to set up Webpack for server-side rendering and get production ready artifact and cool dev server

Every time we spend weeks on these routine tasks.

Using Rockpack you can deploy your project in minutes and start writing really useful code.

Rockpack modules overview

Rockpack consists of modules. Let's consider them in more detail:

@rockpack/starter

this is create-react-app on steroids. Supports the following types of applications:

React CSR - React Client Side Render. Application skeleton in create-react-app style.
React SSR Light Pack - React Server Side Render. Customized application for Server Side Render.
- Koa is being used for the server
- @loadable/components
React SSR Full Pack - React Server Side Render. Application skeleton using best practices for project structure and a set of libraries
- Koa is being used for the server
- React-Router
- Redux
- Redux-Saga
- React-Helmet-Async
- @loadable/components
Library - Configured webpack to create UMD library, both React Component and Vanilla JS

All types of applications support:

Import of many file formats. List of formats
Image optimization, SVG Optimization
Loading SVG files as React components
CSS/SCSS/Less modules
Babel or TS; TS support for CSS/SCSS/Less modules
PostCSS Autoprefixer
SEO Optimizations, React optimizations, Antd optimizations
Support for settings via Dotenv and Dotenv safe
Bundle Analyzer
GraphQL support

Full list of features see here

Additionally, for each type of application, you can install:

Configured ESLint with best practices rules @rockpack/codestyle
Customized Jest with additions @rockpack/tester

More details...

@rockpack/compiler

This is React bundler (based on Webpack) using a set of necessary loaders, plugins and using the best practices out of the box.

@rockpack/compiler can help you with:

Compile your React application (TS/Babel)
Compile React Component or VanillaJS UMD library (TS/Babel)
Nodejs backend (TS/Babel)
Markup html files
Compile isomorphic (Server-side rendering) application (TS/Babel)
Bundle analyze (TS/Babel)

More details...

@rockpack/tester

This is Jest with cool config, add-ons and fully compatible with TS / Babel.

More details...

@rockpack/codestyle

This is an efficiently customized Eslint with many best practical rules and additions.

More details...

In order to get more detailed info please follow each module links.

Rockpack is completely free project. We are always open to collaboration and contributors.

Alternatives

The Rockpack project was inspired by:

Why do we need Rockpack...?

...if we have create-react-app or other?

Rockpack provides a very easy way to get started with @rockpack/starter. Just one command allows you to set up your application with support for TypeScript, Jest, Eslint, SSR and more.
Rockpack is very flexible. You can design the architecture as you like, use different libraries and solutions, for example, for state management.
Rockpack doesn't add any magic. This is a set of best practices and libraries for automating the start of a project.
Rockpack has the option of modular integration into legacy project.
Rockpack has the ability to modify the webpack.config without "eject" with the ability to update Rockpack.
Rockpack uses only existing modules and approaches and don't reinventing the wheel.

The MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Comments

Bump normalize-url from 4.5.0 to 4.5.1 in /packages/tester/examples/react-screenshot-test
Bumps normalize-url from 4.5.0 to 4.5.1.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 11
Bump lodash from 4.17.20 to 4.17.21 in /packages/tester/examples/react-screenshot-test
Bumps lodash from 4.17.20 to 4.17.21.

Commits

f299b52 Bump to v4.17.21

c4847eb Improve performance of toNumber, trim and trimEnd on large input strings

3469357 Prevent command injection through _.template's variable option

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 11
PNG images are not displayed on gh-pages.
Hello again...

In the component, images are imported as:

import Slide1 from '../../assets/Slide-1.png'; import Slide2 from '../../assets/Slide-2.png'; import Slide3 from '../../assets/Slide-1.png';

And are used like:

<div style={{ backgroundImage: `url(${Slide1})` }}>

Everything is displayed locally. Pictures get into the product for gh-pages, but on the gh-pages there is an error Failed to load resource: the server responded with a status of 404 ()

The problem is only with PNG. SVG loads fine. Help me please..
opened by keyofevergreen 7

Can't set custom hash class name

Hello. I don't understand how to set up Webpack with FrontendCompiler. I want to make hash classes look more readable in browser. Please tell me what's wrong. My config:

frontendCompiler({
  styles: 'styles.css',
  vendor: ['react', 'react-dom'],
  html: {
    template: path.resolve(__dirname, './index.ejs'),
    favicon: path.resolve(__dirname, './favicon.ico')
  },
}, (finalConfig) => {
  finalConfig.loader = {
    test: /\.scss$/,
    use: [
      require.resolve('style-loader'),
      {
        loader: require.resolve('css-loader'),
        options: {
          importLoaders: 1,
          modules: true,
          localIdentName: "[name]__[local]___[hash:base64:5]"
        },
      },
    ],
  }
});

opened by keyofevergreen 6

No 'Access-Control-Allow-Origin' header is present for /socket.io/ URL

Access to XMLHttpRequest at 'http://localhost:62194/socket.io/?EIO=4&transport=polling&t=NU8nLXR' from origin 'http://localhost:3000' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

This is a CRA project where I experimented with rockpack. Is this a bug or my fault?

opened by spidgorny 5

How do I change webpack settings?

I have a fresh project using rockpack using the option with redux but without SSR. The readme says its easy to modify the webpack config, but there is no webpack config file provided in the root of the project. I tried adding a webpack.config.js to the project root with the following:

var path = require('path');

module.exports = {
  //...
  devServer: {
    static: {
      directory: path.join(__dirname, 'public'),
    },
    compress: true,
    port: 9000,
  },
};

but the devserver is still running on port 3000. I also tried modifying scripts.build.js to

const path = require('path');
const { frontendCompiler } = require('@rockpack/compiler');

frontendCompiler({
  styles: 'styles.css',
  vendor: ['react', 'react-dom'],
  html: {
    template: path.resolve(__dirname, './index.ejs'),
    favicon: path.resolve(__dirname, './favicon.ico')
  },
  webpackConfig:{
    //...
    devServer: {
      static: {
        directory: path.join(__dirname, 'public'),
      },
      compress: true,
      port: 9000,
    },
  }
});

with no more success. Is there any documentation for how it is supposed to be done?

opened by Danielv123 3

Does it support monorepo?

I'm looking for a CRA alternative, because it doesn't work with monorepos (Lerna, Yarn Workspaces), and if it does - it requires workarounds.

On the other hand I want to still have advantages of encapsulated build system.

So, does rockpack work well if I put it into one of monorepo packages?

I it does, I think it can be added to the docs as a nice feature

opened by lkostrowski 2
Bump moment-timezone from 0.5.32 to 0.5.37
Bumps moment-timezone from 0.5.32 to 0.5.37.

Release notes

Sourced from moment-timezone's releases.

Release 0.5.34

Updated data to IANA TZDB 2021e

Release 0.5.33

Updated data to IANA TZDB 2021a

Changelog

Sourced from moment-timezone's changelog.

0.5.37 2022.08-25

Re-publish npm package, because of extra folder present in 0.5.36, check moment/moment-timezone#999

0.5.36 2022.08-25

IANA TZDB 2022c

improvements/fixes to data pipeline

0.5.35 2022-08-23

Fix command injection in data pipeline https://github.com/moment/moment-timezone/security/advisories/GHSA-56x4-j7p9-fcf9

Fix cleartext transmission of sensitive information https://github.com/moment/moment-timezone/security/advisories/GHSA-v78c-4p63-2j6c

Thanks to the OpenSSF Alpha-Omega project for reporting these!

0.5.34 2020-11-10

Updated data to IANA TZDB 2021e

0.5.33 2020-11-15

Updated data to IANA TZDB 2021a

Commits

ffe6f34 Add changelog for 0.5.37

450ca63 Bump version to 0.5.37

95f1a9b Build moment-timezone 0.5.36

abba28c Add changelog for 0.5.36

ac6de03 Bump version to 0.5.36

7a5cadf tests: Fix country tests for 2022c

6754c75 data: generate 2022c data+tests

f74a364 bugfix: Wipe tests/zones before generation

e850f9f grunt: do not bundle zone and contry tests

f13e22b data: automatically create data/*/VERSION.json for latest

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump terser from 4.8.0 to 4.8.1
Bumps terser from 4.8.0 to 4.8.1.

Changelog

Sourced from terser's changelog.

v4.8.1 (backport)

Security fix for RegExps that should not be evaluated (regexp DDOS)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
fix(babel): replace outdated babel plugin
Babel plugin "babel-plugin-transform-react-pure-class-to-function" is outdated. It has not been updated for about 6 years and has crashes when using class components when directly importing the Component class from the react package. Example:

import React, { Component } from React class TestComponent extends Component {}

This code will be crashed

import React from React class TestComponent extends React.Component {}

This is only solution I found for this plugin

I replaced it by new plugin (github link). The plugin has no the issue
opened by WazZro 1
Bump eventsource from 1.0.7 to 1.1.1
Bumps eventsource from 1.0.7 to 1.1.1.

Changelog

Sourced from eventsource's changelog.

1.1.1

Do not include authorization and cookie headers on redirect to different origin (#273 Espen Hovlandsdal)

1.1.0

Improve performance for large messages across many chunks (#130 Trent Willis)

Add createConnection option for http or https requests (#120 Vasily Lavrov)

Support HTTP 302 redirects (#116 Ryan Bonte)

Prevent sequential errors from attempting multiple reconnections (#125 David Patty)

Add new to correct test (#111 Stéphane Alnet)

Fix reconnections attempts now happen more than once (#136 Icy Fish)

Commits

aa7a408 1.1.1

56d489e chore: rebuild polyfill

4a951e5 docs: update history for 1.1.1

f9f6416 fix: strip sensitive headers on redirect to different origin

9dd0687 1.1.0

49497ba Update history for 1.1.0 (#146)

3a38537 Update history for #136

46fe04e Merge pull request #136 from icy-fish/master

9a4190f Fix issue: reconnection only happends for 1 time after connection drops

61e1b19 test: destroy both proxied request and response on close

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 1
Bump jsonwebtoken from 8.5.1 to 9.0.0
Bumps jsonwebtoken from 8.5.1 to 9.0.0.

Changelog

Sourced from jsonwebtoken's changelog.

9.0.0 - 2022-12-21

Breaking changes: See Migration from v8 to v9

Breaking changes

Removed support for Node versions 11 and below.

The verify() function no longer accepts unsigned tokens by default. ([834503079514b72264fd13023a3b8d648afd6a16]https://github.com/auth0/node-jsonwebtoken/commit/834503079514b72264fd13023a3b8d648afd6a16)

RSA key size must be 2048 bits or greater. ([ecdf6cc6073ea13a7e71df5fad043550f08d0fa6]https://github.com/auth0/node-jsonwebtoken/commit/ecdf6cc6073ea13a7e71df5fad043550f08d0fa6)

Key types must be valid for the signing / verification algorithm

Security fixes

security: fixes Arbitrary File Write via verify function - CVE-2022-23529

security: fixes Insecure default algorithm in jwt.verify() could lead to signature validation bypass - CVE-2022-23540

security: fixes Insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - CVE-2022-23541

security: fixes Unrestricted key type could lead to legacy keys usage - CVE-2022-23539

Commits

e1fa9dc Merge pull request from GHSA-8cf7-32gw-wr33

5eaedbf chore(ci): remove github test actions job (#861)

cd4163e chore(ci): configure Github Actions jobs for Tests & Security Scanning (#856)

ecdf6cc fix!: Prevent accidental use of insecure key sizes & misconfiguration of secr...

8345030 fix(sign&verify)!: Remove default none support from sign and verify met...

7e6a86b Upload OpsLevel YAML (#849)

74d5719 docs: update references vercel/ms references (#770)

d71e383 docs: document "invalid token" error

3765003 docs: fix spelling in README.md: Peak -> Peek (#754)

a46097e docs: make decode impossible to discover before verify

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by julien.wollscheid, a new releaser for jsonwebtoken since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump engine.io from 6.2.0 to 6.2.1
Bumps engine.io from 6.2.0 to 6.2.1.

Release notes

Sourced from engine.io's releases.

6.2.1

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

Changelog

Sourced from engine.io's changelog.

6.2.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

3.6.0 (2022-06-06)

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469), closes socketio/socket.io-client-swift#1309

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: https://github.com/advisories/GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

Commits

24b847b chore(release): 6.2.1

425e833 fix: catch errors when destroying invalid upgrades (#658)

99adb00 chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...

d196f6a chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)

7c1270f chore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)

535a01d ci: add Node.js 18 in the test matrix

1b71a6f docs: remove "Vanilla JS" highlight from README (#656)

917d1d2 refactor: replace deprecated String.prototype.substr() (#646)

020801a chore: add changelog for version 3.6.0

ed1d6f9 test: make test script work on Windows (#643)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump deep-object-diff from 1.1.7 to 1.1.9
Bumps deep-object-diff from 1.1.7 to 1.1.9.

Release notes

Sourced from deep-object-diff's releases.

v1.1.9

Vulnerability patch

Details outlined here: #85. TLDR: The prototype of the returned diff object could be polluted but not globally on all objects.

Fix: mattphillips/deep-object-diff#87

Thanks @Retr02332 for highlighting the issue and validating the fix.

This vulnerability was introduced in https://github.com/mattphillips/deep-object-diff/releases/tag/v1.1.6

v1.1.8

Patch

Fix typings resolution when using TypeScript 4.7+ with ESM #83

improve return type for detailedDiff #72

Credits

Thanks @Nitive and @icholy for your PRs

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump moment from 2.24.0 to 2.29.4 in /packages/compiler/examples/antd
Bumps moment from 2.24.0 to 2.29.4.

Changelog

Sourced from moment's changelog.

2.29.4

Release Jul 6, 2022

#6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

Release Apr 17, 2022

#5995 [bugfix] Remove const usage

#5990 misc: fix advisory link

2.29.2 See full changelog

Release Apr 3 2022

Address https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4

2.29.1 See full changelog

Release Oct 6, 2020

Updated deprecation message, bugfix in hi locale

2.29.0 See full changelog

Release Sept 22, 2020

New locales (es-mx, bn-bd). Minor bugfixes and locale improvements. More tests. Moment is in maintenance mode. Read more at this link: https://momentjs.com/docs/#/-project-status/

2.28.0 See full changelog

Release Sept 13, 2020

Fix bug where .format() modifies original instance, and locale updates

2.27.0 See full changelog

Release June 18, 2020

Added Turkmen locale, other locale improvements, slight TypeScript fixes

2.26.0 See full changelog

Release May 19, 2020

... (truncated)

Commits

000ac18 Build 2.24.4

f2006b6 Bump version to 2.24.4

536ad0c Update changelog for 2.29.4

9a3b589 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)

6374fd8 Merge branch 'master' into develop

b4e6153 Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"

7aebb16 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)

57c9062 Build 2.29.3

aaf50b6 Fixup release complaints

26f4aef Bump version to 2.29.3

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump moment from 2.29.1 to 2.29.4
Bumps moment from 2.29.1 to 2.29.4.

Changelog

Sourced from moment's changelog.

2.29.4

Release Jul 6, 2022

#6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex

2.29.3 Full changelog

Release Apr 17, 2022

#5995 [bugfix] Remove const usage

#5990 misc: fix advisory link

2.29.2 See full changelog

Release Apr 3 2022

Address https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4

Commits

000ac18 Build 2.24.4

f2006b6 Bump version to 2.24.4

536ad0c Update changelog for 2.29.4

9a3b589 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)

6374fd8 Merge branch 'master' into develop

b4e6153 Revert "[bugfix] Fix redos in preprocessRFC2822 regex (#6015)"

7aebb16 [bugfix] Fix redos in preprocessRFC2822 regex (#6015)

57c9062 Build 2.29.3

aaf50b6 Fixup release complaints

26f4aef Bump version to 2.29.3

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0

Releases(3.0.0)

3.0.0(Nov 3, 2022)
A lot of fixes and optimizations

The new @rockpack/codestyle module with best practices

Prettier added

Stylelint added

Commitlint added

Lintstaged added

Replaced simple-git-hooks to husky

Typescript by default

All dependencies were updated

Source code(tar.gz)
Source code(zip)
2.0.0(Jan 17, 2022)
A lot of fixes and optimizations

All dependencies were updated

The new React application templates

webpack-plugin-serve -> webpack-dev-server4

the new official site

Source code(tar.gz)
Source code(zip)
1.9.0(Jan 3, 2021)
babel config extend added

Source code(tar.gz)
Source code(zip)
1.8.0(Nov 22, 2020)
webpack-dev-server -> webpack-plugin-serve

@rockpack/compiler simplification

@rockpack/webpack-plugin-ussr-development added

Source code(tar.gz)
Source code(zip)
1.6.1(Nov 8, 2020)
Babel-ussr-plugin -> babel-plugin-ussr-marker

Source code(tar.gz)
Source code(zip)
1.6.0(Nov 6, 2020)
Babel-ussr-plugin added

ts-loader, ts-jest -> @babel/preset-typescript

Source code(tar.gz)
Source code(zip)
1.5.0(Nov 1, 2020)
[1.5.0]

Simplification of USSR's api

Small fixes

added: Articles, the official site

Source code(tar.gz)
Source code(zip)
1.1.0(Oct 24, 2020)
fix(@rockpack/compiler): Side effects

Small fixes

added: Backbone for E2E tests

BREAKING CHANGES:

Simplification of USSR API

.modules.(s)css/less -> .module.(s)css/less (create-react-app compatibility)

Source code(tar.gz)
Source code(zip)
1.0.0(Oct 17, 2020)
The first stable release of

@rockpack/starter

@rockpack/compiler

@rockpack/ussr

@rockpack/tester

@rockpack/codestyle

@rockpack/logger

@rockpack/localazer

@rockpack/babel

Source code(tar.gz)
Source code(zip)

Rockpack is a simple solution for creating React Application with Server Side Rendering, bundling, linting, testing within 5 minutes

Related tags

Overview

Getting Started:

Motivation

Rockpack modules overview

@rockpack/starter

@rockpack/compiler

@rockpack/tester

@rockpack/codestyle

Alternatives

Why do we need Rockpack...?

The MIT License

Comments

Release 0.5.34

Release 0.5.33

0.5.37 2022.08-25

0.5.36 2022.08-25

0.5.35 2022-08-23

0.5.34 2020-11-10

0.5.33 2020-11-15

v4.8.1 (backport)

9.0.0 - 2022-12-21

Breaking changes

Security fixes

v0.2.2

v0.2.1

6.2.1

Bug Fixes

6.2.1 (2022-11-20)

Bug Fixes

3.6.0 (2022-06-06)

Bug Fixes

Features

v1.1.9

Vulnerability patch

v1.1.8

Patch

Credits

2.29.4

2.29.3 Full changelog

2.29.2 See full changelog

2.29.1 See full changelog

2.29.0 See full changelog

2.28.0 See full changelog

2.27.0 See full changelog

2.26.0 See full changelog

2.29.4

2.29.3 Full changelog

2.29.2 See full changelog

Releases(3.0.0)

3.0.0(Nov 3, 2022)

2.0.0(Jan 17, 2022)

1.9.0(Jan 3, 2021)

1.8.0(Nov 22, 2020)

1.6.1(Nov 8, 2020)

1.6.0(Nov 6, 2020)

1.5.0(Nov 1, 2020)

[1.5.0]

1.1.0(Oct 24, 2020)

1.0.0(Oct 17, 2020)

Owner

Sergey

A simple boilerplate that helps you make your react application with Server Side Rendering & Localization support.

Starter template for Tauri, bundling the frontend made with React using Deno with esbuild.

A universal boilerplate for building web applications w/ TypeScript, React, Redux, Server Side Rendering and more.

⚛️ Boilerplate for isomorphic web app with React server-side rendering in TypeScript

React Server Side Rendering with Express

Reactjs-server-side-table - A React module that can be used for rendering tables with dynamically paginated data

Server Side Rendering antd with ASP.NET CORE

A collection of testing recipes for React Testing Library

Gatsby-typescript-testing - A project with React GatsbyJS and TypeScript with Testing using Atomic Design

Javascript-testing-practical-approach-2021-course-v3 - Javascript Testing, a Practical Approach Course

A clean, extensible react + redux boilerplate with universal/isomorphic rendering, testing and more

🚀 Create highly scalable and universal React microservices/applications within seconds.

This project serves as a simple boilerplate to start building an isomorphic rendering application in React and Redux.

A simple & easy to use private note-taking app that encrypts everything on the client side.

Fractal rendering application written in React using the complex-js library

An out-of-box UI solution for enterprise applications as a React boilerplate.

An out-of-box UI solution for enterprise applications as a React boilerplate.

`0.5.37` 2022.08-25

`0.5.36` 2022.08-25

`0.5.35` 2022-08-23

`0.5.34` 2020-11-10

`0.5.33` 2020-11-15