[Snyk] Upgrade react-native from 0.63.3 to 0.71.2 #987
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.2. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.2.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-HERMESENGINE-1309667
Why? Has a fix available, CVSS 7.1
SNYK-JS-SHELLQUOTE-1766506
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-1727253
Why? Has a fix available, CVSS 7.1
SNYK-JS-REACTNATIVE-1298632
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-1015406
Why? Has a fix available, CVSS 7.1
SNYK-JS-WS-1296835
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-2342071
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-608850
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-629268
Why? Has a fix available, CVSS 7.1
SNYK-JS-HERMESENGINE-629748
Why? Has a fix available, CVSS 7.1
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 7.1
SNYK-JS-NODEFETCH-674311
Why? Has a fix available, CVSS 7.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.71.2 - 2023-02-01
- Added AlertOptions argument to the type definition for Alert.prompt to bring it into parity with the js code. (305ca337c0 by @ paulmand3l)
- Added missing
- Added missing
- Bump
- Add
- Fix crash by conditional value of aspectRatio style value (a8166bd75b by @ mym0404)
- Fix TurboModuleRegistry TS type (c289442848 by @ janicduplessis)
- Fix invariant violation when nesting VirtualizedList inside ListEmptyComponent (1fef376812 by @ NickGerleman)
- [RNGP] Properly set the
- Do not use WindowInsetsCompat for Keyboard Events (32f54877ff by @ NickGerleman)
- Mitigation for Samsung TextInput Hangs (4650ef3 by @ NickGerleman)
- Add Back dynamic framework support for the Old Architecture with Hermes (b3040ec624 by @ cipolleschi)
- Add Back dynamic framework support for the old architecture (da270d038c by @ cipolleschi)
-
0.71.1 - 2023-01-19
- Add
- Add
- Bump CLI to 10.1.3 (b868970037 by @ kelset)
- Bump RNGP to 0.71.13 (416463c406 by @ cipolleschi)
- Fix(cli,metro,babel): bump cli and metro and babel to fix Windows+Metro issue (df7c92ff4c by @ kelset)
- Fix ReactRootView crash when root view window insets are null (4cdc2c48e8 by @ enahum)
- Fix for resources not correctly bundlded on release appbundles (60b9d8c2b9 by @ cortinico)
- RNGP - Honor the --active-arch-only when configuring the NDK (470f79b617 by @ cortinico)
- Fixed typo in template build.gradle (38e35df47c by @ Titozzz)
- Exclude
- Fix RCTAlertController not showing when using SceneDelegate on iOS 13.0+. (0c53420a7a)
- Handle Null Exception to Validate input in RCTAlertController and in RCTDevLoadingView (79e603c5ab by @ admirsaheta)
- Fixed the potential race condition when dismissing and presentating modal (e948c79bda by @ wood1986)
- Fix build errors when inheriting RCTAppDelegate in Swift modules (5eb25d2186 by @ Kudo)
- OnSelectionChange() is fired before onChange() on multiline TextInput (64475aeb3b by @ s77rt)
- Build: remove deprecated File.exists() method from Hermes podspec. (38e5fa6a96 by @ kelset)
-
0.71.0 - 2023-01-12
⚠️ Git Bash users on Windows might experience "Unable to resolve" red boxes, because of an issue with Metro (silently fails without discovering any files). It will be fixed in 0.71.1 next week, in the meantime you can set
-
0.71.0-rc.6 - 2023-01-09
-
-
-
-
0.71.0-rc.5 - 2022-12-19
-
-
-
-
0.71.0-rc.4 - 2022-12-14
-
0.71.0-rc.3 - 2022-11-30
-
0.71.0-rc.2 - 2022-11-24
-
0.71.0-rc.1 - 2022-11-23
-
0.71.0-rc.0 - 2022-11-04
-
0.70.7 - 2023-01-31
- Mitigation for Samsung TextInput Hangs (be69c8b5a7 by @ NickGerleman)
- Fix the potential race condition when dismissing and presenting modal (279fb52e03 by @ wood1986)
- Add
-
0.70.6 - 2022-11-15
-
0.70.5 - 2022-11-06
-
0.70.4 - 2022-10-25
-
0.70.3 - 2022-10-12
-
0.70.2 - 2022-10-04
-
0.70.1 - 2022-09-15
-
0.70.0 - 2022-09-05
-
0.70.0-rc.4 - 2022-08-22
-
0.70.0-rc.3 - 2022-08-15
-
0.70.0-rc.2 - 2022-08-04
-
0.70.0-rc.1 - 2022-07-28
-
0.70.0-rc.0 - 2022-07-15
-
0.69.8 - 2023-01-30
-
0.69.7 - 2022-11-06
-
0.69.6 - 2022-09-27
-
0.69.5 - 2022-08-25
-
0.69.4 - 2022-08-08
-
0.69.3 - 2022-07-25
-
0.69.2 - 2022-07-20
-
0.69.1 - 2022-06-29
-
0.69.0 - 2022-06-22
-
0.69.0-rc.6 - 2022-06-01
-
0.69.0-rc.5 - 2022-05-31
-
0.69.0-rc.4 - 2022-05-31
-
0.69.0-rc.3 - 2022-05-24
-
0.69.0-rc.2 - 2022-05-20
-
0.69.0-rc.1 - 2022-05-11
-
0.69.0-rc.0 - 2022-04-28
-
0.68.6 - 2023-01-30
-
0.68.5 - 2022-11-06
-
0.68.4 - 2022-10-10
-
0.68.3 - 2022-08-08
-
0.68.2 - 2022-05-09
-
0.68.1 - 2022-04-13
-
0.68.0 - 2022-03-30
-
0.68.0-rc.4 - 2022-03-25
-
0.68.0-rc.3 - 2022-03-17
-
0.68.0-rc.2 - 2022-02-24
-
0.68.0-rc.1 - 2022-02-03
-
0.68.0-rc.0 - 2022-01-28
-
0.67.5 - 2022-11-06
-
0.67.4 - 2022-03-18
-
0.67.3 - 2022-02-22
-
0.67.2 - 2022-01-31
-
0.67.1 - 2022-01-20
-
0.67.0 - 2022-01-18
-
0.67.0-rc.6 - 2021-12-14
-
0.67.0-rc.5 - 2021-12-06
-
0.67.0-rc.4 - 2021-11-30
-
0.67.0-rc.3 - 2021-11-05
-
0.67.0-rc.2 - 2021-10-25
-
0.67.0-rc.1 - 2021-10-22
-
0.67.0-rc.0 - 2021-10-16
-
0.66.5 - 2022-11-06
-
0.66.4 - 2021-12-09
-
0.66.3 - 2021-11-10
-
0.66.2 - 2021-11-04
-
0.66.1 - 2021-10-15
-
0.66.0 - 2021-10-01
-
0.66.0-rc.4 - 2021-09-24
-
0.66.0-rc.3 - 2021-09-17
-
0.66.0-rc.2 - 2021-09-10
-
0.66.0-rc.1 - 2021-09-01
-
0.66.0-rc.0 - 2021-08-27
-
0.65.3 - 2022-11-06
-
0.65.2 - 2021-11-04
-
0.65.1 - 2021-08-19
-
0.65.0 - 2021-08-17
-
0.65.0-rc.4 - 2021-08-11
-
0.65.0-rc.3 - 2021-07-23
-
0.65.0-rc.2 - 2021-06-18
-
0.65.0-rc.1 - 2021-06-17
-
0.65.0-rc.0 - 2021-06-09
-
0.64.4 - 2022-11-07
-
0.64.3 - 2021-11-04
-
0.64.2 - 2021-06-03
-
0.64.1 - 2021-05-05
-
0.64.0 - 2021-03-12
-
0.64.0-rc.4 - 2021-03-01
-
0.64.0-rc.3 - 2021-02-05
-
0.64.0-rc.2 - 2020-12-18
-
0.64.0-rc.1 - 2020-11-25
-
0.64.0-rc.0 - 2020-11-23
-
0.63.5 - 2022-11-07
-
0.63.4 - 2020-11-30
-
0.63.3 - 2020-09-29
from react-native GitHub release notesAdded
accessibilityLabelledByTypeScript type (e162b07982 by @ DimitarNestorov)accessibilityLanguageTypeScript type (71c4f57baf by @ DimitarNestorov)Changed
react-native-gradle-pluginto^0.71.14in core,@ react-native-community/eslint-configto^3.2.0in starting template (785bc8d97b by @ kelset)Fixed
TextInput'sinputModeTypeScript types (fac7859863 by @ eps1lon)Android specific
jsRootDirdefault value (c0004092f9 by @ cortinico)iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Added
Android specific
jsinspectorto the prefab target (a80cf96fc8 by @ Kudo)iOS specific
initialPropsproperty toRCTAppDelegate(b314e6f147 by @ jblarriviere)Changed
Fixed
Android specific
iOS specific
react-native-flipperwhenNO_FLIPPER=1to prevent iOS build fail (f47b5b8b5d by @ retyui)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
0.71 stable is out!
This release includes over 1000 commits from 70+ contributors! Thank you to all our contributors new and old!
See the highlights of the release in our release blog post.
resolver.useWatchman: falseinmetro.config.js.You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
⚙️ Technical Release
This release has no changes from RC5. We are only making it to ensure that after the CircleCI Security Incident, we have rotated all the necessary secrets correctly.
How To Test
Generate a new project with the standard command:
npx react-native init RN0710RC6 --version 0.71.0-rc.6You can participate in the conversation on the status of this release in the working group.
To help you upgrade to this version, you can use the upgrade helper ⚛️
See changes from this release in the changelog PR
Help us testing 🧪
Let us know how it went by posting a comment in the working group discussion! Please specify with system you tried it on (ex. macos, windows).
Bonus points: It would be even better if you could swap things around: instead of using a fresh new app, use a more complex one - or use a different library that is already leveraging the new architecture!
Golden Release Candidate
This is our last release of 2022: we are considering this the golden RC for 0.71, so we'll give it a few weeks to be tested before 0.71.0 in early Jan.
How To Test
Generate a new project with the standard command:
npx react-native init RN0710RC5 --version 0.71.0-rc.5You can participate in the conversation on the status of this release in the working group.
To help you upgrade to this version, you can use the upgrade helper ⚛️
See changes from this release in the changelog PR
Help us testing 🧪
Let us know how it went by posting a comment in the working group discussion! Please specify with system you tried it on (ex. macos, windows).
Bonus points: It would be even better if you could swap things around: instead of using a fresh new app, use a more complex one - or use a different library that is already leveraging the new architecture!
Fixes
Android Specific
iOS Specific
Added
Android
POST_NOTIFICATIONSand deprecatePOST_NOTIFICATION(b5280bbc93 by @ dcangulo)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
This version is a patch release with a mitigation solution for the Android issue on Samsung devices.
Please let us know in the issue if this new version addresses the problem for you.
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.
Hotfix
This version is a patch release with a mitigation solution for the Android issue on Samsung devices.
Please let us know in the issue if this new version addresses the problem for you.
To help you upgrade to new versions, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
jsRootDirdefault value facebook/react-native#35992)TextInput'sinputModeTypeScript types facebook/react-native#35987)aspectRatioconditionally cause js crash facebook/react-native#35858) (Fix crash by conditional value of aspectRatio style value (#35858) facebook/react-native#35859)accessibilityLabelledByTypeScript type facebook/react-native#35883)accessibilityLanguagetype facebook/react-native#35882)Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs