[Snyk] Upgrade react-native from 0.63.3 to 0.69.5 #699

snyk-bot · 2022-09-16T03:12:48Z

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 62 versions ahead of your current version.
The recommended version was released 21 days ago, on 2022-08-25.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.69.5 - 2022-08-25
Changed
- Bump react-native-codegen to 0.69.2 (df3d52bfbf by @ dmitryrykun)
Android specific
- Replaced reactnativeutilsjni with reactnativejni in the build process to reduce size (54a4fcbfdc by @ SparshaSaha)
Fixed
- Codegen should ignore .d.ts files (0f0d52067c by @ tido64)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file
0.69.4 - 2022-08-08
Changed
- Upgrade RN CLI to v8.0.4 (66c68c37ce by @ thymikee)
Android specific
- Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.3 - 2022-07-25
0.69.2 - 2022-07-20
0.69.1 - 2022-06-29
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.3 - 2022-08-08
Changed

Android specific
- Let's not build reactnativeutilsjni shared library (af9225ec5f by @ SparshaSaha)
- Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
Android specific
- Logging a soft error when ReactRootView has an id other than -1 instead of crashing the app in hybrid apps (1ca2c24930 by @ Kunal-Airtel2022)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

38cfe63 [0.69.5] Bump version numbers
eb779dc Fix test-manual-e2e on Android/Hermes for New App Template (Fix test-manual-e2e on Android/Hermes for New App Template facebook/react-native#34294)
df3d52b Bump react-native-codegen to 0.69.2
5d2b4ee Fix codegen trying to parse `.d.ts` files (Fix codegen trying to parse .d.ts files facebook/react-native#34439)
48a3127 Removing reactnativeutilsjni as it is built from the same sources as reactnativejni (Removing reactnativeutilsjni as it is built from the same sources as reactnativejni facebook/react-native#34339)
4bdec97 [0.69.4] Bump version numbers
8524177 Added additional builder method receiving arguments for using jsc or hermes to correctly decide which DSO to load at app startup. (Added additional builder method receiving arguments for using jsc or hermes to correctly decide which DSO to load at app startup. facebook/react-native#33952)
df31a1e Update script from prepublish (deprecated) to prepack ([codegen] Update script from prepublish (deprecated) to prepack facebook/react-native#34198)
66c68c3 Upgrade RN CLI to v8.0.4 (Upgrade RN CLI to v8.0.4 facebook/react-native#34272)
6fe8367 [0.69.3] Bump version numbers
b9e9b53 Merge pull request Fix React-bridging header not found for third party modules facebook/react-native#34214 from Kudo/fix-34102
fa2acc3 Fix React-bridging header not found for third party modules
30d1e20 Merge pull request [FIX] Build hermes from source on PR against stable facebook/react-native#34228 from facebook/fix/build_hermes_against_stable
a2d6f5a fix: build hermes from source on PR against stable
75eb6e7 [0.69.2] Bump version numbers
b807253 Merge pull request Fix/hermes in release facebook/react-native#34223 from facebook/fix/hermes_in_release
d6be1af fix: make sure we can build hermes when working against stable
a19578d Hermes pod: change logic to use the hermes tag to set the pod source correctly ([fix] Hermes pod: change logic to use the hermes tag to set the pod source correctly facebook/react-native#34221)
112d678 fix: fix the race condition when calling readAsDataURL after new Blob(blobs) (fix: fix the race condition when calling readAsDataURL after new Blob(blobs) facebook/react-native#34096)
4f72a02 fix(jest): make assetFileTransformer return an object (fix(jest): make assetFileTransformer return an object facebook/react-native#33756)
a39a7c4 fix(deps): react-shallow-renderer v16.15.0 for react v18 compat (fix(deps): react-shallow-renderer v16.15.0 for react v18 compat facebook/react-native#34104)
28cbd21 Upgrade RN CLI to v8.0.3 (Upgrade RN CLI to v8.0.3 facebook/react-native#34159)
23accbf [fix] backport FlipperConfiguration from main ([fix] backport FlipperConfiguration from main facebook/react-native#34098)
587eb4e [0.69.1] Bump version numbers

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.5. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade react-native from 0.63.3 to 0.69.5 #699

[Snyk] Upgrade react-native from 0.63.3 to 0.69.5 #699

Uh oh!

snyk-bot commented Sep 16, 2022

Changed

Android specific

Fixed

Changed

Android specific

Changed

Android specific

Fixed

Android specific

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

[Snyk] Upgrade react-native from 0.63.3 to 0.69.5 #699

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.69.5 #699

Uh oh!

Conversation

snyk-bot commented Sep 16, 2022

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.5.

Changed

Android specific

Fixed

Changed

Android specific

Changed

Android specific

Fixed

Android specific

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants