[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

NOUIY · 2022-08-11T02:31:52Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 59 versions ahead of your current version.
The recommended version was released 22 days ago, on 2022-07-20.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.69.2 - 2022-07-20
Changed
- Set react-shallow-renderer v16.15.0 for react v18 compat (a39a7c453d by @ mikehardy)
- Upgrade RN CLI to v8.0.3 (28cbd21d21 by @ thymikee)
iOS specific
- Hermes pod: change logic to use the hermes tag to set the pod source correctly (46a9edc854 by @ kelset)
- Fix the race condition when calling readAsDataURL after new Blob(blobs) (bd12e41188 by @ wood1986)
- Make sure that Flipper pods are not installed when creating a release build (23accbf58d by @ cipolleschi)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.1 - 2022-06-29

Changed

iOS specific
- Make all Yoga headers public and add #ifdef __cplusplus (43f831b23c by @ janicduplessis)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
iOS specific
- Fix build for React-RCTText (4ea38e16bf by @ ph4r05)
- Fix RCT-Folly build error when use_frameworks! and hermes are both enabled (79baca678a by @ Kudo)
- Fix use_frameworks! for 0.69 (f97c6a5b49 by @ Kudo)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.0 - 2022-06-22
0.69 stable is out!

This release includes 629 commits with 80 contributors! Thank you to all our contributors new and old! See the highlights of the release in our release blog post.

You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.3 - 2022-08-08
Changed

Android specific
- Let's not build reactnativeutilsjni shared library (af9225ec5f by @ SparshaSaha)
- Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
Android specific
- Logging a soft error when ReactRootView has an id other than -1 instead of crashing the app in hybrid apps (1ca2c24930 by @ Kunal-Airtel2022)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

75eb6e7 [0.69.2] Bump version numbers
b807253 Merge pull request Fix/hermes in release facebook/react-native#34223 from facebook/fix/hermes_in_release
d6be1af fix: make sure we can build hermes when working against stable
a19578d Hermes pod: change logic to use the hermes tag to set the pod source correctly ([fix] Hermes pod: change logic to use the hermes tag to set the pod source correctly facebook/react-native#34221)
112d678 fix: fix the race condition when calling readAsDataURL after new Blob(blobs) (fix: fix the race condition when calling readAsDataURL after new Blob(blobs) facebook/react-native#34096)
4f72a02 fix(jest): make assetFileTransformer return an object (fix(jest): make assetFileTransformer return an object facebook/react-native#33756)
a39a7c4 fix(deps): react-shallow-renderer v16.15.0 for react v18 compat (fix(deps): react-shallow-renderer v16.15.0 for react v18 compat facebook/react-native#34104)
28cbd21 Upgrade RN CLI to v8.0.3 (Upgrade RN CLI to v8.0.3 facebook/react-native#34159)
23accbf [fix] backport FlipperConfiguration from main ([fix] backport FlipperConfiguration from main facebook/react-native#34098)
587eb4e [0.69.1] Bump version numbers
802d324 fix(build): fixes React-RCTText build with RN 0.69.0 (fix(build): fixes React-RCTText build with RN 0.69.0 facebook/react-native#34064)
050924a Fix RCT-Folly build error when use_frameworks! and hermes are both enabled (Fix RCT-Folly build error when use_frameworks! and hermes are both enabled facebook/react-native#34030)
9e591ac Fix broken use_frameworks from React-bridging ([ios] Fix broken use_frameworks from React-bridging facebook/react-native#34011)
9d3ce32 revert Fix ios build error when podfile generate_multiple_pod_projects=true and fabric is on facebook/react-native#33381 changes ([yoga] revert #33381 changes facebook/react-native#33973)
aa068e0 Make all headers public and add #ifdef __cplusplus ([Snyk] Upgrade firebase from 7.10.0 to 7.24.0 #1150)
dc334a2 Use monotonic clock for performance.now() (Use monotonic clock for performance.now() facebook/react-native#33983)
74a08a3 [0.69.0] Bump version numbers
e68aa6a [0.69.0-rc.6] Bump version numbers
e8af5b8 Make sure sdks/.hermesversion is included inside the NPM package.
7262acc Fix Hermes not being downloaded on RC5 (Fix Hermes not being downloaded on RC5 facebook/react-native#33945)
6d200c3 [0.69.0-rc.5] Bump version numbers
f50936b Lazily query for git branch & remote (Lazily query for git branch & remote facebook/react-native#33936)
88fa872 Fix downloading prebuilt hermes from the Github release (Fix downloading prebuilt hermes from the Github release facebook/react-native#33935)
2c6df02 [0.69.0-rc.4] Bump version numbers

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.2. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

Uh oh!

NOUIY commented Aug 11, 2022

Changed

iOS specific

Changed

iOS specific

Fixed

iOS specific

Changed

Android specific

Fixed

Android specific

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

Uh oh!

Conversation

NOUIY commented Aug 11, 2022

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.2.

Changed

iOS specific

Changed

iOS specific

Fixed

iOS specific

Changed

Android specific

Fixed

Android specific

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants