[Snyk] Upgrade react-native from 0.63.3 to 0.71.7 #1052
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.7. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.7.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SHELLQUOTE-1766506
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1309667
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1727253
Why? Has a fix available, CVSS 8.1
SNYK-JS-REACTNATIVE-1298632
Why? Has a fix available, CVSS 8.1
SNYK-JS-WS-1296835
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1015406
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-2342071
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-608850
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629268
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629748
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-674311
Why? Has a fix available, CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.71.7 - 2023-04-19
-
0.71.6 - 2023-04-03
- Fix React Codegen podspec to build on Xcode 14.3 (0010c3807d by @ cipolleschi)
-
0.71.5 - 2023-03-29
- Bump CLI to 10.2.2 and Metro to 0.73.9 (4c3bc24893 by @ kelset), contains:
- CLI fix: correctly list ios devices and simulators (relevant PR)
- Metro fix: fix watching contents of new directories in NodeWatcher (ab86982 by @ robhogan)
- Bump react-native-gradle-plugin to 0.71.17 (bf490d379f by @ kelset), contains:
- Fix patch for codegen for 0.71 (ec3681143e by @ kelset)
- Remove ruby-version from 0.71 (1d22e29146 by @ cipolleschi)
- Fix race condition in ReadableNativeMap (9aac13d by @ rshest)
- Give precedence to
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.71.4 - 2023-03-08
- Make FlatList permissive of ArrayLike data (c03de97fb4 by @ NickGerleman)
- Bumping RNGP to
- Update CLI to 10.2.0, Metro to 0.73.8 (20a6fbd373 by @ robhogan) - contains:
- fix: Source maps may have invalid entries when using Terser minification. (
- fix: Mitigate potential source map mismatches with concurrent transformations due to terser#1341. (
- Bump Hermes Version (291cc0af10) - contains:
- use ConsecutiveStringStorage to dedup serialized literals (62d58e)
- Remove register stack size override in hermes.cpp (6146eb)
- fix: specify currency in locale identifier when formatting currency plural (21f15c)
- Increase default max stack size (ee2588)
- Refactor HBC test helper (31fdcf)
- Expose
- Fix touchable hitSlop type (23607aea68 by @ bigcupcoffee)
- Fix TouchableOpacity componentDidUpdate causing an excessive number of pending callbacks (8b1f6e09c1 by @ gabrieldonadel)
- ENTRY_FILE should resolve relative paths from root (6dde1dc7cb by @ cortinico)
- Better Monorepo support for New Architecture (0487108461 by @ cortinico)
-
0.71.3 - 2023-02-14
- Bump package versions (4b84888a90 by @ cipolleschi), (60f0a71060 by @ cipolleschi), (a3f205a27b by @ cipolleschi):
- (codegen) Add missing C++ include for prop conversion of complex array type (92fc32aa by @ rshest)
- Fixed jscexecutor crash on Android which is caused from NDK incompatibility (a232decbb1 by @ Kudo)
- Used relative paths for gradle commands (bb02ccf13f by @ shivenmian)
- fix
-
0.71.2 - 2023-02-01
- Added AlertOptions argument to the type definition for Alert.prompt to bring it into parity with the js code. (305ca337c0 by @ paulmand3l)
- Added missing
- Added missing
- Bump
- Add
- Fix crash by conditional value of aspectRatio style value (a8166bd75b by @ mym0404)
- Fix TurboModuleRegistry TS type (c289442848 by @ janicduplessis)
- Fix invariant violation when nesting VirtualizedList inside ListEmptyComponent (1fef376812 by @ NickGerleman)
- [RNGP] Properly set the
- Do not use WindowInsetsCompat for Keyboard Events (32f54877ff by @ NickGerleman)
- Mitigation for Samsung TextInput Hangs (4650ef3 by @ NickGerleman)
- Add Back dynamic framework support for the Old Architecture with Hermes (b3040ec624 by @ cipolleschi)
- Add Back dynamic framework support for the old architecture (da270d038c by @ cipolleschi)
-
0.71.1 - 2023-01-19
-
0.71.0 - 2023-01-12
-
0.71.0-rc.6 - 2023-01-09
-
0.71.0-rc.5 - 2022-12-19
-
0.71.0-rc.4 - 2022-12-14
-
0.71.0-rc.3 - 2022-11-30
-
0.71.0-rc.2 - 2022-11-24
-
0.71.0-rc.1 - 2022-11-23
-
0.71.0-rc.0 - 2022-11-04
-
0.70.9 - 2023-04-19
-
0.70.8 - 2023-04-04
- Relax Ruby requirements (e3a5fbe72f by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (34f3794f18 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.70.7 - 2023-01-31
- Mitigation for Samsung TextInput Hangs (be69c8b5a7 by @ NickGerleman)
- Fix the potential race condition when dismissing and presenting modal (279fb52e03 by @ wood1986)
- Add
-
0.70.6 - 2022-11-15
-
0.70.5 - 2022-11-06
-
0.70.4 - 2022-10-25
-
0.70.3 - 2022-10-12
-
0.70.2 - 2022-10-04
-
0.70.1 - 2022-09-15
-
0.70.0 - 2022-09-05
-
0.70.0-rc.4 - 2022-08-22
-
0.70.0-rc.3 - 2022-08-15
-
0.70.0-rc.2 - 2022-08-04
-
0.70.0-rc.1 - 2022-07-28
-
0.70.0-rc.0 - 2022-07-15
-
0.69.10 - 2023-04-25
-
0.69.9 - 2023-04-04
- Relax Ruby requirements (4e015c69d6 by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (74ba411b55 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.69.8 - 2023-01-30
-
0.69.7 - 2022-11-06
-
0.69.6 - 2022-09-27
-
0.69.5 - 2022-08-25
-
0.69.4 - 2022-08-08
-
0.69.3 - 2022-07-25
-
0.69.2 - 2022-07-20
-
0.69.1 - 2022-06-29
-
0.69.0 - 2022-06-22
-
0.69.0-rc.6 - 2022-06-01
-
0.69.0-rc.5 - 2022-05-31
-
0.69.0-rc.4 - 2022-05-31
-
0.69.0-rc.3 - 2022-05-24
-
0.69.0-rc.2 - 2022-05-20
-
0.69.0-rc.1 - 2022-05-11
-
0.69.0-rc.0 - 2022-04-28
-
0.68.7 - 2023-04-26
-
0.68.6 - 2023-01-30
-
0.68.5 - 2022-11-06
-
0.68.4 - 2022-10-10
-
0.68.3 - 2022-08-08
-
0.68.2 - 2022-05-09
-
0.68.1 - 2022-04-13
-
0.68.0 - 2022-03-30
-
0.68.0-rc.4 - 2022-03-25
-
0.68.0-rc.3 - 2022-03-17
-
0.68.0-rc.2 - 2022-02-24
-
0.68.0-rc.1 - 2022-02-03
-
0.68.0-rc.0 - 2022-01-28
-
0.67.5 - 2022-11-06
-
0.67.4 - 2022-03-18
-
0.67.3 - 2022-02-22
-
0.67.2 - 2022-01-31
-
0.67.1 - 2022-01-20
-
0.67.0 - 2022-01-18
-
0.67.0-rc.6 - 2021-12-14
-
0.67.0-rc.5 - 2021-12-06
-
0.67.0-rc.4 - 2021-11-30
-
0.67.0-rc.3 - 2021-11-05
-
0.67.0-rc.2 - 2021-10-25
-
0.67.0-rc.1 - 2021-10-22
-
0.67.0-rc.0 - 2021-10-16
-
0.66.5 - 2022-11-06
-
0.66.4 - 2021-12-09
-
0.66.3 - 2021-11-10
-
0.66.2 - 2021-11-04
-
0.66.1 - 2021-10-15
-
0.66.0 - 2021-10-01
-
0.66.0-rc.4 - 2021-09-24
-
0.66.0-rc.3 - 2021-09-17
-
0.66.0-rc.2 - 2021-09-10
-
0.66.0-rc.1 - 2021-09-01
-
0.66.0-rc.0 - 2021-08-27
-
0.65.3 - 2022-11-06
-
0.65.2 - 2021-11-04
-
0.65.1 - 2021-08-19
-
0.65.0 - 2021-08-17
-
0.65.0-rc.4 - 2021-08-11
-
0.65.0-rc.3 - 2021-07-23
-
0.65.0-rc.2 - 2021-06-18
-
0.65.0-rc.1 - 2021-06-17
-
0.65.0-rc.0 - 2021-06-09
-
0.64.4 - 2022-11-07
-
0.64.3 - 2021-11-04
-
0.64.2 - 2021-06-03
-
0.64.1 - 2021-05-05
-
0.64.0 - 2021-03-12
-
0.64.0-rc.4 - 2021-03-01
-
0.64.0-rc.3 - 2021-02-05
-
0.64.0-rc.2 - 2020-12-18
-
0.64.0-rc.1 - 2020-11-25
-
0.64.0-rc.0 - 2020-11-23
-
0.63.5 - 2022-11-07
-
0.63.4 - 2020-11-30
-
0.63.3 - 2020-09-29
from react-native GitHub release notesFixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
Android specific
iOS specific
Fixed
Android specific
iOS specific
textContentTypeproperty for backwards compat as mentioned in #36229 (comment) (c0abff11b6 by @ lunaleaps)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
^0.71.16(3df4a79c3d by @ kelset)metro/#928)metro/#929)Android specific
rrc_rootvia prefab. (3418f65d88 by @ tomekzaw)Fixed
Android specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
react-native-codegento0.71.5react-native-gradle-pluginto0.71.15Fixed
Android specific
iOS specific
pod install --project-directory=...(ad1ddc241a by @ tido64)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Added
accessibilityLabelledByTypeScript type (e162b07982 by @ DimitarNestorov)accessibilityLanguageTypeScript type (71c4f57baf by @ DimitarNestorov)Changed
react-native-gradle-pluginto^0.71.14in core,@ react-native-community/eslint-configto^3.2.0in starting template (785bc8d97b by @ kelset)Fixed
TextInput'sinputModeTypeScript types (fac7859863 by @ eps1lon)Android specific
jsRootDirdefault value (c0004092f9 by @ cortinico)iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Fixes
Android Specific
iOS Specific
Added
Android
POST_NOTIFICATIONSand deprecatePOST_NOTIFICATION(b5280bbc93 by @ dcangulo)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
addSpansForMeasurementfacebook/react-native#36575)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs