An in-range update of react is breaking the build 🚨

## Version **16.4.2** of the **react** packages was just published.

Branch


Build failing 🚨




Monorepo release group


react




Current Version


16.4.1




Type


devDependency

This version is **covered** by your **current version range** and after updating it in your project **the build failed**.

This monorepo update includes releases of one or more dependencies which all belong to the [react group definition](https://github.com/greenkeeperio/monorepo-definitions).

react is a devDependency of this project. It **might not break your production code or affect downstream projects**, but probably breaks your build or test tools, which may **prevent deploying or publishing**.

Status Details

- ❌ **continuous-integration/travis-ci/push:** The Travis CI build failed ([Details](https://travis-ci.org/frintjs/frint-props/builds/410992284?utm_source=github_status&utm_medium=notification)).

---

Release Notes
v16.4.2

16.4.2 (August 1, 2018)

React DOM Server

• 
  

  Fix a potential XSS vulnerability when the attacker controls an attribute name (CVE-2018-6341). This fix is available in the latest react-dom@16.4.2, as well as in previous affected minor versions: react-dom@16.0.1, react-dom@16.1.2, react-dom@16.2.1, and react-dom@16.3.3. (@gaearon in #13302)

  
  


• 
  

  Fix a crash in the server renderer when an attribute is called hasOwnProperty. This fix is only available in react-dom@16.4.2. (@gaearon in #13303)

  
  

FAQ and help

There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html). If those don’t help, you can always [ask the humans behind Greenkeeper](https://github.com/greenkeeperio/greenkeeper/issues/new).

---

Your [Greenkeeper](https://greenkeeper.io) Bot :palm_tree:

Start with the master-to-greenkeeper/monorepo.react-16.4.2 comparison and the linked Travis CI build details to identify the failing build step. Done means the React 16.4.2 update is applied and the Travis CI build passes.

Written by the indexing model from the issue text.