[Snyk] Upgrade react-native from 0.63.3 to 0.72.1 #1107

NOUIY · 2023-07-21T02:44:30Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 125 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-06-29.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.72.1 - 2023-06-29
Added

iOS specific
- Add warning to help users migrate away from the interop layer. (a702d0515f by @ cipolleschi)
- Allow to lookup for ViewManager without the RCT prefix in the Interop Layer (a28881a3d7 by @ cipolleschi)
Changed
- react-native/metro-config now includes all base config values from metro-config (bbcedd385b by @ huntie)
- Bump CLI to 11.3.3 (da84901f78 by @ kelset)
- Bumped @ react-native/metro-config to 0.72.7, @ react-native/gradle-plugin to 0.72.11, @ react-native/virtualized-lists to 0.72.6 (95db9f98f2 by @ kelset)
Fixed
- react-native/virtualized-lists does not need react-test-renderer at runtime (7a2a3278d0 by @ tido64)
Android specific
- Exclude trailing whitespace from newline character on measuring text line width (83d7a48a46 by @ bernhardoj)
  -Set kotlin.jvm.target.validation.mode=warning on user projects (10beefbbfa by @ cortinico)
iOS specific
- Bump SocketRocket to 0.6.1 (8ce471e2fa by @ cipolleschi)
- fix pod install --project-directory=ios failing (0b96bdcf32 by @ tido64)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.72.0 - 2023-06-21

🎉 0.72 stable is out 🎉

This release includes over 1100 commits from 70+ contributors! Thank you to all our contributors new and old!

See the highlights of the release in our release blog post.

You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.72.0-rc.6 - 2023-06-13
0.72.0-rc.5 - 2023-06-01
0.72.0-rc.4 - 2023-05-31
0.72.0-rc.3 - 2023-05-11
0.72.0-rc.2 - 2023-05-04
0.72.0-rc.1 - 2023-04-05
0.72.0-rc.0 - 2023-03-20
0.71.12 - 2023-07-04
Fixed
- Prevent LogBox from crashing on very long messages (cd56347dca by @ motiz88)
Android specific
- Added CSS logical properties by mapping layout props (2b06a75631 by @ NickGerleman and @ AlexanderEggers) to fix view flattening on Android.
iOS specific
- fix pod install --project-directory=ios failing (fc1abe1d69 by @ tido64)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.11 - 2023-06-14
Changed
- Bump CLI to 10.2.4 and Metro to 0.73.10 (69804c70cb by @ kelset)
iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan)
Fixed

Android specific
- Fixed crash occurring in certain native views when handling keyboard events. (f7e35d4ef7 by @ aleqsio)
- Prevent crash on OnePlus/Oppo devices in runAnimationStep (f2c05142 by @ hsource)
- Revert "fix: border width top/bottom not matching the border radius" to fix border styling issues (fd8a19d by @ kelset)
iOS specific
- Make 0.71 compatible with Xcode 15 (thanks to @ AlexanderEggers for the commit in main) (5bd1a4256e by @ kelset)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.10 - 2023-06-07
0.71.9 - 2023-06-07
0.71.8 - 2023-05-10
0.71.7 - 2023-04-19
0.71.6 - 2023-04-03
0.71.5 - 2023-03-29
0.71.4 - 2023-03-08
0.71.3 - 2023-02-14
0.71.2 - 2023-02-01
0.71.1 - 2023-01-19
0.71.0 - 2023-01-12
0.71.0-rc.6 - 2023-01-09
0.71.0-rc.5 - 2022-12-19
0.71.0-rc.4 - 2022-12-14
0.71.0-rc.3 - 2022-11-30
0.71.0-rc.2 - 2022-11-24
0.71.0-rc.1 - 2022-11-23
0.71.0-rc.0 - 2022-11-04
0.70.12 - 2023-07-05
Fixed

iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan) to address #36794
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.11 - 2023-07-04
Changed
- Bump CLI to 9.3.3 and Metro do 0.72.4 (2a9d71dc34 by @ kelset) to address #36794
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.10 - 2023-06-08
0.70.9 - 2023-04-19
0.70.8 - 2023-04-04
0.70.7 - 2023-01-31
0.70.6 - 2022-11-15
0.70.5 - 2022-11-06
0.70.4 - 2022-10-25
0.70.3 - 2022-10-12
0.70.2 - 2022-10-04
0.70.1 - 2022-09-15
0.70.0 - 2022-09-05
0.70.0-rc.4 - 2022-08-22
0.70.0-rc.3 - 2022-08-15
0.70.0-rc.2 - 2022-08-04
0.70.0-rc.1 - 2022-07-28
0.70.0-rc.0 - 2022-07-15
0.69.12 - 2023-07-04
Changed
- [0.69] Bump CLI to ^8.0.7, Metro to 0.70.4 (56807fadfa by @ robhogan)
iOS specific
- [0.69] Use Content-Location header in bundle response as JS source URL (#37501) (367fc7ad52 by @ robhogan)
Fixed

Android specific
- Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487) (4db7a10e25 by @ hsource)
0.69.12 is the latest patch the Release Crew will prepare for version 0.69. You can have a look at the latest discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.11 - 2023-06-08
0.69.10 - 2023-04-25
0.69.9 - 2023-04-04
0.69.8 - 2023-01-30
0.69.7 - 2022-11-06
0.69.6 - 2022-09-27
0.69.5 - 2022-08-25
0.69.4 - 2022-08-08
0.69.3 - 2022-07-25
0.69.2 - 2022-07-20
0.69.1 - 2022-06-29
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.7 - 2023-04-26
0.68.6 - 2023-01-30
0.68.5 - 2022-11-06
0.68.4 - 2022-10-10
0.68.3 - 2022-08-08
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.5 - 2022-11-06
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.5 - 2022-11-06
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.3 - 2022-11-06
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.4 - 2022-11-07
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.5 - 2022-11-07
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

73293f2 [0.72.1] Bump version numbers
8ce471e [LOCAL] Bump SocketRocket to 6.1.0
a8cfeb9 [LOCAL] update podlock file for RNTester
92d50d4 Resubmit D46501420 (Exclude trailing whitespace from newline character on measuring text line width facebook/react-native#37790)
4ddfeb6 Warn users when a component is registered in Rendere and in the interop (Warn users when a component is registered in Rendere and in the interop facebook/react-native#38089)
f537257 Implement multiple manager lookup for the interop layer (Implement multiple manager lookup for the interop layer facebook/react-native#38093)
95db9f9 bumped packages versions
da84901 [LOCAL] bump CLI to 11.3.3
10beefb [LOCAL] reapply "Set kotlin.jvm.target.validation.mode=warning on user projects" by Nicola
78c1a7e Restore base config merge in metro-config (Restore base config merge in metro-config facebook/react-native#38092)
69705a4 Add nullptr check to SharedFunction (Add nullptr check to SharedFunction facebook/react-native#38075)
ba46e5b fix(virtualized-lists): `react-test-renderer` is not a runtime dependency (fix(virtualized-lists): react-test-renderer is not a runtime dependency facebook/react-native#37955)
4d8a6a2 Add README to RN Template App, added when `npx react-native@latest init <AppName>` (Add README to RN Template App, added when npx react-native@latest init <AppName> facebook/react-native#37521)
0b96bdc fix(ios): fix `pod install --project-directory=ios` failing (fix(ios): fix pod install --project-directory=ios failing facebook/react-native#37994)
7a893e4 [0.72.0] Bump version numbers
3863877 [LOCAL] update podfile.lock
ec4771b [0.72.0-rc.6] Bump version numbers
a2df07e [LOCAL] bump CLI to 11.3.2
b2f2737 bumped packages versions
0817eaa Revert "fix: border width top/bottom not matching the border radius" (Revert "fix: border width top/bottom not matching the border radius" facebook/react-native#37840)
0da7e06 Remove CallInvoker parameter from toJs method in Codegen (Remove CallInvoker parameter from toJs method in Codegen facebook/react-native#37832)
2d15f50 Fix Android border clip check (Fix Android border clip check facebook/react-native#37828)
2760042 Fix loading NODE_BINARY inside Generate Legacy Components Interop (Fix loading NODE_BINARY inside Generate Legacy Components Interop facebook/react-native#37802)
8ed2cfd Add support for building with Xcode 15 (Add support for building with Xcode 15 facebook/react-native#37758)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.1. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native from 0.63.3 to 0.72.1 #1107

[Snyk] Upgrade react-native from 0.63.3 to 0.72.1 #1107

NOUIY commented Jul 21, 2023

Added

iOS specific

Changed

Fixed

Android specific

iOS specific

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific

[Snyk] Upgrade react-native from 0.63.3 to 0.72.1 #1107

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.72.1 #1107

Conversation

NOUIY commented Jul 21, 2023

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.1.

Added

iOS specific

Changed

Fixed

Android specific

iOS specific

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific