[Snyk] Upgrade react-native from 0.63.3 to 0.71.4 #1020
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.4. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SHELLQUOTE-1766506
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1309667
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1727253
Why? Has a fix available, CVSS 8.1
SNYK-JS-REACTNATIVE-1298632
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1015406
Why? Has a fix available, CVSS 8.1
SNYK-JS-WS-1296835
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-2342071
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-608850
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629268
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629748
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-674311
Why? Has a fix available, CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.71.4 - 2023-03-08
- Make FlatList permissive of ArrayLike data (c03de97fb4 by @ NickGerleman)
- Bumping RNGP to
- Update CLI to 10.2.0, Metro to 0.73.8 (20a6fbd373 by @ robhogan) - contains:
- fix: Source maps may have invalid entries when using Terser minification. (
- fix: Mitigate potential source map mismatches with concurrent transformations due to terser#1341. (
- Bump Hermes Version (291cc0af10) - contains:
- use ConsecutiveStringStorage to dedup serialized literals (62d58e)
- Remove register stack size override in hermes.cpp (6146eb)
- fix: specify currency in locale identifier when formatting currency plural (21f15c)
- Increase default max stack size (ee2588)
- Refactor HBC test helper (31fdcf)
- Expose
- Fix touchable hitSlop type (23607aea68 by @ bigcupcoffee)
- Fix TouchableOpacity componentDidUpdate causing an excessive number of pending callbacks (8b1f6e09c1 by @ gabrieldonadel)
- ENTRY_FILE should resolve relative paths from root (6dde1dc7cb by @ cortinico)
- Better Monorepo support for New Architecture (0487108461 by @ cortinico)
-
0.71.3 - 2023-02-14
- Bump package versions (4b84888a90 by @ cipolleschi), (60f0a71060 by @ cipolleschi), (a3f205a27b by @ cipolleschi):
- (codegen) Add missing C++ include for prop conversion of complex array type (92fc32aa by @ rshest)
- Fixed jscexecutor crash on Android which is caused from NDK incompatibility (a232decbb1 by @ Kudo)
- Used relative paths for gradle commands (bb02ccf13f by @ shivenmian)
- fix
-
0.71.2 - 2023-02-01
- Added AlertOptions argument to the type definition for Alert.prompt to bring it into parity with the js code. (305ca337c0 by @ paulmand3l)
- Added missing
- Added missing
- Bump
- Add
- Fix crash by conditional value of aspectRatio style value (a8166bd75b by @ mym0404)
- Fix TurboModuleRegistry TS type (c289442848 by @ janicduplessis)
- Fix invariant violation when nesting VirtualizedList inside ListEmptyComponent (1fef376812 by @ NickGerleman)
- [RNGP] Properly set the
- Do not use WindowInsetsCompat for Keyboard Events (32f54877ff by @ NickGerleman)
- Mitigation for Samsung TextInput Hangs (4650ef3 by @ NickGerleman)
- Add Back dynamic framework support for the Old Architecture with Hermes (b3040ec624 by @ cipolleschi)
- Add Back dynamic framework support for the old architecture (da270d038c by @ cipolleschi)
-
0.71.1 - 2023-01-19
- Add
- Add
- Bump CLI to 10.1.3 (b868970037 by @ kelset)
- Bump RNGP to 0.71.13 (416463c406 by @ cipolleschi)
- Fix(cli,metro,babel): bump cli and metro and babel to fix Windows+Metro issue (df7c92ff4c by @ kelset)
- Fix ReactRootView crash when root view window insets are null (4cdc2c48e8 by @ enahum)
- Fix for resources not correctly bundlded on release appbundles (60b9d8c2b9 by @ cortinico)
- RNGP - Honor the --active-arch-only when configuring the NDK (470f79b617 by @ cortinico)
- Fixed typo in template build.gradle (38e35df47c by @ Titozzz)
- Exclude
- Fix RCTAlertController not showing when using SceneDelegate on iOS 13.0+. (0c53420a7a)
- Handle Null Exception to Validate input in RCTAlertController and in RCTDevLoadingView (79e603c5ab by @ admirsaheta)
- Fixed the potential race condition when dismissing and presentating modal (e948c79bda by @ wood1986)
- Fix build errors when inheriting RCTAppDelegate in Swift modules (5eb25d2186 by @ Kudo)
- OnSelectionChange() is fired before onChange() on multiline TextInput (64475aeb3b by @ s77rt)
- Build: remove deprecated File.exists() method from Hermes podspec. (38e5fa6a96 by @ kelset)
-
0.71.0 - 2023-01-12
-
0.71.0-rc.6 - 2023-01-09
-
0.71.0-rc.5 - 2022-12-19
-
0.71.0-rc.4 - 2022-12-14
-
0.71.0-rc.3 - 2022-11-30
-
0.71.0-rc.2 - 2022-11-24
-
0.71.0-rc.1 - 2022-11-23
-
0.71.0-rc.0 - 2022-11-04
-
0.70.7 - 2023-01-31
- Mitigation for Samsung TextInput Hangs (be69c8b5a7 by @ NickGerleman)
- Fix the potential race condition when dismissing and presenting modal (279fb52e03 by @ wood1986)
- Add
-
0.70.6 - 2022-11-15
-
0.70.5 - 2022-11-06
-
0.70.4 - 2022-10-25
-
0.70.3 - 2022-10-12
-
0.70.2 - 2022-10-04
-
0.70.1 - 2022-09-15
-
0.70.0 - 2022-09-05
-
0.70.0-rc.4 - 2022-08-22
-
0.70.0-rc.3 - 2022-08-15
-
0.70.0-rc.2 - 2022-08-04
-
0.70.0-rc.1 - 2022-07-28
-
0.70.0-rc.0 - 2022-07-15
-
0.69.8 - 2023-01-30
-
0.69.7 - 2022-11-06
-
0.69.6 - 2022-09-27
-
0.69.5 - 2022-08-25
-
0.69.4 - 2022-08-08
-
0.69.3 - 2022-07-25
-
0.69.2 - 2022-07-20
-
0.69.1 - 2022-06-29
-
0.69.0 - 2022-06-22
-
0.69.0-rc.6 - 2022-06-01
-
0.69.0-rc.5 - 2022-05-31
-
0.69.0-rc.4 - 2022-05-31
-
0.69.0-rc.3 - 2022-05-24
-
0.69.0-rc.2 - 2022-05-20
-
0.69.0-rc.1 - 2022-05-11
-
0.69.0-rc.0 - 2022-04-28
-
0.68.6 - 2023-01-30
-
0.68.5 - 2022-11-06
-
0.68.4 - 2022-10-10
-
0.68.3 - 2022-08-08
-
0.68.2 - 2022-05-09
-
0.68.1 - 2022-04-13
-
0.68.0 - 2022-03-30
-
0.68.0-rc.4 - 2022-03-25
-
0.68.0-rc.3 - 2022-03-17
-
0.68.0-rc.2 - 2022-02-24
-
0.68.0-rc.1 - 2022-02-03
-
0.68.0-rc.0 - 2022-01-28
-
0.67.5 - 2022-11-06
-
0.67.4 - 2022-03-18
-
0.67.3 - 2022-02-22
-
0.67.2 - 2022-01-31
-
0.67.1 - 2022-01-20
-
0.67.0 - 2022-01-18
-
0.67.0-rc.6 - 2021-12-14
-
0.67.0-rc.5 - 2021-12-06
-
0.67.0-rc.4 - 2021-11-30
-
0.67.0-rc.3 - 2021-11-05
-
0.67.0-rc.2 - 2021-10-25
-
0.67.0-rc.1 - 2021-10-22
-
0.67.0-rc.0 - 2021-10-16
-
0.66.5 - 2022-11-06
-
0.66.4 - 2021-12-09
-
0.66.3 - 2021-11-10
-
0.66.2 - 2021-11-04
-
0.66.1 - 2021-10-15
-
0.66.0 - 2021-10-01
-
0.66.0-rc.4 - 2021-09-24
-
0.66.0-rc.3 - 2021-09-17
-
0.66.0-rc.2 - 2021-09-10
-
0.66.0-rc.1 - 2021-09-01
-
0.66.0-rc.0 - 2021-08-27
-
0.65.3 - 2022-11-06
-
0.65.2 - 2021-11-04
-
0.65.1 - 2021-08-19
-
0.65.0 - 2021-08-17
-
0.65.0-rc.4 - 2021-08-11
-
0.65.0-rc.3 - 2021-07-23
-
0.65.0-rc.2 - 2021-06-18
-
0.65.0-rc.1 - 2021-06-17
-
0.65.0-rc.0 - 2021-06-09
-
0.64.4 - 2022-11-07
-
0.64.3 - 2021-11-04
-
0.64.2 - 2021-06-03
-
0.64.1 - 2021-05-05
-
0.64.0 - 2021-03-12
-
0.64.0-rc.4 - 2021-03-01
-
0.64.0-rc.3 - 2021-02-05
-
0.64.0-rc.2 - 2020-12-18
-
0.64.0-rc.1 - 2020-11-25
-
0.64.0-rc.0 - 2020-11-23
-
0.63.5 - 2022-11-07
-
0.63.4 - 2020-11-30
-
0.63.3 - 2020-09-29
from react-native GitHub release notesChanged
^0.71.16(3df4a79c3d by @ kelset)metro/#928)metro/#929)Android specific
rrc_rootvia prefab. (3418f65d88 by @ tomekzaw)Fixed
Android specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
react-native-codegento0.71.5react-native-gradle-pluginto0.71.15Fixed
Android specific
iOS specific
pod install --project-directory=...(ad1ddc241a by @ tido64)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Added
accessibilityLabelledByTypeScript type (e162b07982 by @ DimitarNestorov)accessibilityLanguageTypeScript type (71c4f57baf by @ DimitarNestorov)Changed
react-native-gradle-pluginto^0.71.14in core,@ react-native-community/eslint-configto^3.2.0in starting template (785bc8d97b by @ kelset)Fixed
TextInput'sinputModeTypeScript types (fac7859863 by @ eps1lon)Android specific
jsRootDirdefault value (c0004092f9 by @ cortinico)iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Added
Android specific
jsinspectorto the prefab target (a80cf96fc8 by @ Kudo)iOS specific
initialPropsproperty toRCTAppDelegate(b314e6f147 by @ jblarriviere)Changed
Fixed
Android specific
iOS specific
react-native-flipperwhenNO_FLIPPER=1to prevent iOS build fail (f47b5b8b5d by @ retyui)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixes
Android Specific
iOS Specific
Added
Android
POST_NOTIFICATIONSand deprecatePOST_NOTIFICATION(b5280bbc93 by @ dcangulo)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
This version is a patch release with a mitigation solution for the Android issue on Samsung devices.
Please let us know in the issue if this new version addresses the problem for you.
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.
Hotfix
This version is a patch release with a mitigation solution for the Android issue on Samsung devices.
Please let us know in the issue if this new version addresses the problem for you.
To help you upgrade to new versions, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
rrc_rootvia prefab facebook/react-native#36166)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs