[Snyk] Upgrade react-native from 0.63.3 to 0.72.4 #1143
  Add this suggestion to a batch that can be applied as a single commit.
  This suggestion is invalid because no changes were made to the code.
  Suggestions cannot be applied while the pull request is closed.
  Suggestions cannot be applied while viewing a subset of changes.
  Only one suggestion per line can be applied in a batch.
  Add this suggestion to a batch that can be applied as a single commit.
  Applying suggestions on deleted lines is not supported.
  You must change the existing code in this line in order to create a valid suggestion.
  Outdated suggestions cannot be applied.
  This suggestion has been applied or marked resolved.
  Suggestions cannot be applied from pending reviews.
  Suggestions cannot be applied on multi-line comments.
  Suggestions cannot be applied while the pull request is queued to merge.
  Suggestion cannot be applied right now. Please check back later.
  
    
  
    
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.4.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SHELLQUOTE-1766506
Why? Has a fix available, CVSS 8.1
SNYK-JS-UNSETVALUE-2400660
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1309667
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1727253
Why? Has a fix available, CVSS 8.1
SNYK-JS-REACTNATIVE-1298632
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1015406
Why? Has a fix available, CVSS 8.1
SNYK-JS-WS-1296835
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-2342071
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-608850
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629268
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629748
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-674311
Why? Has a fix available, CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
- 
        0.72.4 - 2023-08-14
- Native part of fixing ANR when having an inverted FlatList on android API 33+ (6d206a3f54 by @ hannojg)
 
- For targeting SDK 34 - Added RECEIVER_EXPORTED/RECEIVER_NOT_EXPORTED flag support in DevSupportManagerBase (177d97d8ea by @ apuruni)
 
- Bump cli and metro (40ea8ffcc7 by @ lunaleaps)
 
- Hermes bump for hermes-2023-08-07-RNv0.72.4-813b2def12bc9df026 (e9ea926ba3 by Luna Wei)
 
- Bump CLI to 11.3.6 (a3cfdf0a08 by @ szymonrybczak)
 
- Allow string 
 
- Fix missing Platform in VirtualizedList (7aa8cd55be by Luna Wei)
 
- Mount react devtools overlay only when devtools are attached (03187b68e5 by @ hoxyq)
 
- Remove option to paste rich text from Android EditText context menu (b1ceea456d by @ fabriziobertoglio1987)
 
- Fixed ScrollView not responding to Keyboard events when nested inside a KeyboardAvoidingView (c616148a05 by @ andreacassani)
 
- ANR when having an inverted FlatList on android API 33+ (3dd816c6b7 by @ hannojg)
 
 
      - 
        0.72.3 - 2023-07-12
- Revert "Fix pod install for swift libs using new arch (#38121)" to fix build error with Xcode lower than Xcode 14.3 (8f41f25 by @ kelset)
 
 
      - 
        0.72.2 - 2023-07-11
- Remove deprecated stub types 
 
- Bump CLI to 11.3.5 and Metro do 0.76.7 (ba5fa9c394 by @ kelset)
 
- Bump 
 
- Remove okhttp3 internal util usage (3e3032636d by @ adrianha)
 
- Update logic to add and remove views in the view registry for the interop layer. (8d2eec367d by @ cipolleschi)
 
- Disable NSTextStorage caching in OSS (5bda54c1f1 by @ sammy-SC)
 
 
- Re-enabled debugging for debug builds (41477c898c by Matt Blagden)
 
- Add global hook to assert that base Metro config is called (29f2602ff9 by @ huntie)
 
- Do not create RuntimeExecutor on non-JSI executors (#38125) (d73b61c7c7 by @ lunaleaps)
 
- Prevent crash on OnePlus/Oppo devices in runAnimationStep (a46a7cd1 by @ hsource)
 
- Fix build error when there are multiple EXTRA_COMPILER_ARGS (28f4ebab8a by @ fergusean)
 
- Build failure with pnpm and use_frameworks! due to incorrect header paths (58adc5e4b9 by evelant)
 
- Fix onChangeText not firing when clearing the value of TextInput with multiline=true on iOS (0c9c57a9f7 by @ kkoudev)
 
- Fix pod install for libraries using Swift code when the new architecture is enabled (a4a0655496 by @ louiszawadzki)
 
⚠️  we are aware of an issue with building iOS apps with Xcode 14.2, please refer to this issue for more details and updates.
 
      - 
        0.72.1 - 2023-06-29
      
 
      - 
        0.72.0 - 2023-06-21
      
 
      - 
        0.72.0-rc.6 - 2023-06-13
      
 
      - 
        0.72.0-rc.5 - 2023-06-01
      
 
      - 
        0.72.0-rc.4 - 2023-05-31
      
 
      - 
        0.72.0-rc.3 - 2023-05-11
      
 
      - 
        0.72.0-rc.2 - 2023-05-04
      
 
      - 
        0.72.0-rc.1 - 2023-04-05
      
 
      - 
        0.72.0-rc.0 - 2023-03-20
      
 
      - 
        0.71.13 - 2023-08-22
- For targeting SDK 34 - Added RECEIVER_EXPORTED/RECEIVER_NOT_EXPORTED flag support in DevSupportManagerBase (177d97d8ea by @ apuruni)
 
- Added support to inline the source map via RCTBundleURLProvider
 
- Fix: mount devtools overlay only if react devtools are connected (b3c7a5d4cc by @ hoxyq)
 
- Fix onChangeText not firing when clearing the value of TextInput with multiline=true on iOS (0c9c57a9f7 by @ kkoudev)
 
 
      - 
        0.71.12 - 2023-07-04
- Prevent LogBox from crashing on very long messages (cd56347dca by @ motiz88)
 
- Added CSS logical properties by mapping layout props (2b06a75631 by @ NickGerleman and @ AlexanderEggers) to fix view flattening on Android.
 
- fix 
 
 
      - 
        0.71.11 - 2023-06-14
      
 
      - 
        0.71.10 - 2023-06-07
      
 
      - 
        0.71.9 - 2023-06-07
      
 
      - 
        0.71.8 - 2023-05-10
      
 
      - 
        0.71.7 - 2023-04-19
      
 
      - 
        0.71.6 - 2023-04-03
      
 
      - 
        0.71.5 - 2023-03-29
      
 
      - 
        0.71.4 - 2023-03-08
      
 
      - 
        0.71.3 - 2023-02-14
      
 
      - 
        0.71.2 - 2023-02-01
      
 
      - 
        0.71.1 - 2023-01-19
      
 
      - 
        0.71.0 - 2023-01-12
      
 
      - 
        0.71.0-rc.6 - 2023-01-09
      
 
      - 
        0.71.0-rc.5 - 2022-12-19
      
 
      - 
        0.71.0-rc.4 - 2022-12-14
      
 
      - 
        0.71.0-rc.3 - 2022-11-30
      
 
      - 
        0.71.0-rc.2 - 2022-11-24
      
 
      - 
        0.71.0-rc.1 - 2022-11-23
      
 
      - 
        0.71.0-rc.0 - 2022-11-04
      
 
      - 
        0.70.13 - 2023-07-28
- Fix: bumped CLI to address broken backward compatibility (549ff6380a by @ Titozzz)
 
 
      - 
        0.70.12 - 2023-07-05
- Prefer 
 
 
      - 
        0.70.11 - 2023-07-04
- Bump CLI to 9.3.3 and Metro do 0.72.4 (2a9d71dc34 by @ kelset) to address #36794
 
 
      - 
        0.70.10 - 2023-06-08
      
 
      - 
        0.70.9 - 2023-04-19
      
 
      - 
        0.70.8 - 2023-04-04
      
 
      - 
        0.70.7 - 2023-01-31
      
 
      - 
        0.70.6 - 2022-11-15
      
 
      - 
        0.70.5 - 2022-11-06
      
 
      - 
        0.70.4 - 2022-10-25
      
 
      - 
        0.70.3 - 2022-10-12
      
 
      - 
        0.70.2 - 2022-10-04
      
 
      - 
        0.70.1 - 2022-09-15
      
 
      - 
        0.70.0 - 2022-09-05
      
 
      - 
        0.70.0-rc.4 - 2022-08-22
      
 
      - 
        0.70.0-rc.3 - 2022-08-15
      
 
      - 
        0.70.0-rc.2 - 2022-08-04
      
 
      - 
        0.70.0-rc.1 - 2022-07-28
      
 
      - 
        0.70.0-rc.0 - 2022-07-15
      
 
      - 
        0.69.12 - 2023-07-04
- [0.69] Bump CLI to ^8.0.7, Metro to 0.70.4 (56807fadfa by @ robhogan)
 
- [0.69] Use 
 
- Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487) (4db7a10e25 by @ hsource)
 
 
      - 
        0.69.11 - 2023-06-08
      
 
      - 
        0.69.10 - 2023-04-25
      
 
      - 
        0.69.9 - 2023-04-04
      
 
      - 
        0.69.8 - 2023-01-30
      
 
      - 
        0.69.7 - 2022-11-06
      
 
      - 
        0.69.6 - 2022-09-27
      
 
      - 
        0.69.5 - 2022-08-25
      
 
      - 
        0.69.4 - 2022-08-08
      
 
      - 
        0.69.3 - 2022-07-25
      
 
      - 
        0.69.2 - 2022-07-20
      
 
      - 
        0.69.1 - 2022-06-29
      
 
      - 
        0.69.0 - 2022-06-22
      
 
      - 
        0.69.0-rc.6 - 2022-06-01
      
 
      - 
        0.69.0-rc.5 - 2022-05-31
      
 
      - 
        0.69.0-rc.4 - 2022-05-31
      
 
      - 
        0.69.0-rc.3 - 2022-05-24
      
 
      - 
        0.69.0-rc.2 - 2022-05-20
      
 
      - 
        0.69.0-rc.1 - 2022-05-11
      
 
      - 
        0.69.0-rc.0 - 2022-04-28
      
 
      - 
        0.68.7 - 2023-04-26
      
 
      - 
        0.68.6 - 2023-01-30
      
 
      - 
        0.68.5 - 2022-11-06
      
 
      - 
        0.68.4 - 2022-10-10
      
 
      - 
        0.68.3 - 2022-08-08
      
 
      - 
        0.68.2 - 2022-05-09
      
 
      - 
        0.68.1 - 2022-04-13
      
 
      - 
        0.68.0 - 2022-03-30
      
 
      - 
        0.68.0-rc.4 - 2022-03-25
      
 
      - 
        0.68.0-rc.3 - 2022-03-17
      
 
      - 
        0.68.0-rc.2 - 2022-02-24
      
 
      - 
        0.68.0-rc.1 - 2022-02-03
      
 
      - 
        0.68.0-rc.0 - 2022-01-28
      
 
      - 
        0.67.5 - 2022-11-06
      
 
      - 
        0.67.4 - 2022-03-18
      
 
      - 
        0.67.3 - 2022-02-22
      
 
      - 
        0.67.2 - 2022-01-31
      
 
      - 
        0.67.1 - 2022-01-20
      
 
      - 
        0.67.0 - 2022-01-18
      
 
      - 
        0.67.0-rc.6 - 2021-12-14
      
 
      - 
        0.67.0-rc.5 - 2021-12-06
      
 
      - 
        0.67.0-rc.4 - 2021-11-30
      
 
      - 
        0.67.0-rc.3 - 2021-11-05
      
 
      - 
        0.67.0-rc.2 - 2021-10-25
      
 
      - 
        0.67.0-rc.1 - 2021-10-22
      
 
      - 
        0.67.0-rc.0 - 2021-10-16
      
 
      - 
        0.66.5 - 2022-11-06
      
 
      - 
        0.66.4 - 2021-12-09
      
 
      - 
        0.66.3 - 2021-11-10
      
 
      - 
        0.66.2 - 2021-11-04
      
 
      - 
        0.66.1 - 2021-10-15
      
 
      - 
        0.66.0 - 2021-10-01
      
 
      - 
        0.66.0-rc.4 - 2021-09-24
      
 
      - 
        0.66.0-rc.3 - 2021-09-17
      
 
      - 
        0.66.0-rc.2 - 2021-09-10
      
 
      - 
        0.66.0-rc.1 - 2021-09-01
      
 
      - 
        0.66.0-rc.0 - 2021-08-27
      
 
      - 
        0.65.3 - 2022-11-06
      
 
      - 
        0.65.2 - 2021-11-04
      
 
      - 
        0.65.1 - 2021-08-19
      
 
      - 
        0.65.0 - 2021-08-17
      
 
      - 
        0.65.0-rc.4 - 2021-08-11
      
 
      - 
        0.65.0-rc.3 - 2021-07-23
      
 
      - 
        0.65.0-rc.2 - 2021-06-18
      
 
      - 
        0.65.0-rc.1 - 2021-06-17
      
 
      - 
        0.65.0-rc.0 - 2021-06-09
      
 
      - 
        0.64.4 - 2022-11-07
      
 
      - 
        0.64.3 - 2021-11-04
      
 
      - 
        0.64.2 - 2021-06-03
      
 
      - 
        0.64.1 - 2021-05-05
      
 
      - 
        0.64.0 - 2021-03-12
      
 
      - 
        0.64.0-rc.4 - 2021-03-01
      
 
      - 
        0.64.0-rc.3 - 2021-02-05
      
 
      - 
        0.64.0-rc.2 - 2020-12-18
      
 
      - 
        0.64.0-rc.1 - 2020-11-25
      
 
      - 
        0.64.0-rc.0 - 2020-11-23
      
 
      - 
        0.63.5 - 2022-11-07
      
 
      - 
        0.63.4 - 2020-11-30
      
 
      - 
        0.63.3 - 2020-09-29
      
 
    
from react-native GitHub release notesAdded
Android specific
Changed
Fixed
transformstyle in TypeScript (2558c3d4f5 by @ NickGerleman)Android specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
@ types/metro-configfrom template (63f78ea8de by @ kelset)@ react-native/metro-configto0.72.9(21daa6e790, f37386176 by @ kelset)Android specific
iOS specific
Fixed
global.performancein undefined when starting metro from Expo CLI (0ccbd65581 by @ Kudo)Android specific
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Added
Android specific
iOS specific
(f7219ec02d by @ Saadnajmi)
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixed
Android specific
iOS specific
pod install --project-directory=iosfailing (fc1abe1d69 by @ tido64)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixed
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixed
iOS specific
Content-Locationheader in bundle response as JS source URL (671ea383fe by @ robhogan) to address #36794You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Content-Locationheader in bundle response as JS source URL (#37501) (367fc7ad52 by @ robhogan)Fixed
Android specific
0.69.12 is the latest patch the Release Crew will prepare for version 0.69. You can have a look at the latest discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
hermes-enginepod tag when installing pods from a different folder facebook/react-native#38754)transformstyle in TypeScript facebook/react-native#37569)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs