[Snyk] Security upgrade react-native from 0.65.0 to 0.68.0

[Watemlifts]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • lib/cli/test/fixtures/react_native/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	No	Proof of Concept
	/1000 Why?	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	No	No Known Exploit
	619/1000 Why? Has a fix available, CVSS 8.1	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-native

The new version differs by 250 commits.

• 51f5ea1 [0.68.0] Bump version numbers
• a4a6e23 [0.68.0-rc.4] Bump version numbers
• e645629 Enable SonarKit and Flipper in React-Core (#33499)
• b3f19d7 [0.68.0-rc.3] Bump version numbers
• cb28a26 Bump Flipper-Glog to 0.5.0.4
• 4163386 fix(ios, flipper): update flipper sub-pods to support macCatalyst (#33406)
• ccd1708 Re-apply: Consider relative to pwd installation root when looking for files in rn module via cocoapods (#33427)
• 4e34e6c fix: `cliPath` should handle absolute paths (#32983)
• 3e69592 Fix ios build error when use_frameworks is on and fabric is off (v2) (#33409)
• 5fd04fa Start surface after setting the delegate (#33402)
• a761b79 Use relative installation root instead of absolute to avoid embedding absolute paths in pods project (#33187)
• d7d33c7 Revert D31628461
• 7b33f20 Ship enableNestedTextOnPressEventFix
• 4b370ce Include folly fabric headers in source files (#33188)
• 63e4bd6 Fix Switch causing RetryableMountingLayerException (#32602)
• 762db49 Make sure configureNdkBuild* tasks are depending on preBuild
• 65e4d98 [0.68.0-rc.2] Bump version numbers
• 66b82ae chore(deps): bump CLI version to 7.0.3 to address web debugging issue (#33156)
• 2cd3173 Remove optional codegen config inside template (#33108)
• 61f0d1a Release react-native-gradle-plugin 0.0.5
• 57cc524 Gradle: Deprecate `reactRoot` in favor of `root` and `reactNativeDir` (#33142)
• bca4cf0 Set a resolution strategy for com.facebook.react:react-native when on New Architecture. (#33134)
• f5d371a Set Java source/target compatibility for react-native-gradle-plugin to 8
• b1c30f8 fix: jvm 11 error message from ReactPlugin.kt and react.gradle (#33048)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Remote Code Execution (RCE)

[stale]

Hi everyone! Seems like there hasn't been much going on in this issue lately. If there are still questions, comments, or bugs, please feel free to continue the discussion. Unfortunately, we don't have time to get to every issue. We are always open to contributions so please send us a pull request if you would like to help. Inactive issues will be closed after 30 days. Thanks!