[Snyk] Security upgrade expo from 36.0.2 to 39.0.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo

The new version differs by 250 commits.

• 36f0c3f Publish expo
• 0b55ad5 Publish packages
• d779848 [docs] Improve formatting of customizing-webpack headers
• 2566ad7 [notifications] Update README with managed workflow installation instructions
• bc21f27 [docs] Update wording of Firebase configuration in Using FCM docs
• 49e2e4e [ncl] use silentLaunch: true in development clients (#9923)
• 517f1b9 [android][ios][expo-updates] fix manifest isVerified/id values for expo-cli-hosted and self-hosted apps (#9919)
• 3f550d5 [docs] Upgrade React Native docs to 0.63.2 (#9838)
• eb9bd27 Add Reanimated v2 to Expo (#9879)
• 2465596 [ios] Add RCTBridgeModule conformance o EXDisabledDevMenu (#9932)
• 0bf8402 [expo-gl-cpp] enable stencil buffer on Android (#9928)
• 5810672 [repo] Remove Flutter code from the workspace (#9913)
• a2aad4e [iOS][test-suite][notifications] Disable foreign notif test (#9929)
• fd13d3a [ios] Enable TurboModules based on a flag (#9908)
• c6134b4 [home] Publish dev home with DevMenu fixes
• b42dcb4 [ios][expotools] Fixes for versioned TurboModules (#9862)
• 3e69bc1 [ncl] fix GLThreeSprite example (#9911)
• 08b9659 [expo-gl-cpp] coerce bool value when number is expected (#9910)
• fb3e0f7 [ios] Fix DevMenu and RedBox behavior when TurboModules are enabled (#9906)
• 60a287a [docs][expo-updates] pass over updates config values documentation
• bd64e50 [docs] No more "check the IDFA box" in SDK 39
• 7943ac3 Publish packages
• 7b76bab [iOS][amplitude] Upgrade Amplitude-iOS@4.7.1 to Amplitude@6.0.0 (#9880)
• 25cd9f1 [expo-gl-cpp] invalidate gl jsi cache on jsi::Runtime destroy (#9883)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic