[Snyk] Upgrade react-native from 0.73.2 to 0.73.5 #3
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.73.2 to 0.73.5. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/aathil1231/project/29795952-2cd9-46e6-907d-a57a1d975078?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade react-native from 0.73.2 to 0.73.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-IP-6240864
Why? Proof of Concept exploit, CVSS 8.6
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.73.5 - 2024-02-26
- Update CLI to 12.3.6 (ffcd8f5249 by @ szymonrybczak)
- Hermes bump (3bdd54a51c by @ lunaleaps)
- Fix: fix codegen not finding all third-party libraries (67e2bb455f by @ tido64)
- Fix compiler flags passed to libraries (929df582c8 by @ cipolleschi)
-
-
- Debug
- Release
-
0.73.4 - 2024-02-06
- Fix: cannot find module
- Ignore the one-time NullPointerException and print error log (ca9b6b5038)
- Fix warning when loading RCTUIManager and A11yManager (f56bf1fa0a by @ cipolleschi)
-
0.73.3 - 2024-01-29
- Handle TSAsExpression when looking for the codegen declaration (02957718d7 by @ dmytrorykun)
- Bump CLI to 12.3.2 (bcb229e8f8 by @ szymonrybczak)
- Call super.onRequestPermissionsResult in ReactActivity's onRequestPermissionsResult() (96ed1190c6 by @ LimAlbert)
- Remove ATS config patch from react_native_post_install (41c601e478 by @ gabrieldonadel)
- Declare missing dependency
- TouchableBounce, TouchableHighlight and TouchableNativeFeedback dropping touches with React 18. (e4708d661b by @ sammy-SC)
- TouchableWithoutFeedback and TouchableOpacity dropping touches with React 18. (54166342f0 by @ sammy-SC)
- Restrict Cocoapods versions < 1.15. (3869ae4d80 by @ blakef)
- Make
- Fix support for SOURCEMAP_FILE path containing spaces (63e893d23d by @ paulschreiber)
- Fix release build error due to a casing issue in hermes tarball path after download prebuilt tarball (2e2f8a6689 by @ wfern)
- Fix race condition between A11yManager and UIManager (f39f34ed82 by @ cipolleschi)
- Fix symbol not found _jump_fcontext with use_frameworks (a2771ce58a by @ cipolleschi)
-
0.73.2 - 2024-01-08
- Unhandled promise rejection - attach non-standard Error object stack info if possible (655b12dbfa by @ ospfranco)
- Bump Metro to ^v0.80.3 (16dff523b0 by @ huntie)
- Automatically reconnect to an existing debugger session on relaunching the app (0806ad7854 by @ motiz88)
- Update ios pod post_install logic for detecting if hermes is enabled (d6163d7f43 by @ gabrieldonadel)
- Fix comment about adding packages in android template (ac9b87cd57 by @ janicduplessis)
- Fix boost download url (7e721f09ad by @ cipolleschi)
- Removed invalid translations that prevented Play Store publishes. Fixes #42024 (8edc36e33c by @ lunaleaps)
- Fix horizontal scrollview scrollTo coordinate space in RTL on oldarch (e809e0aca7 by @ NickGerleman)
- enhance IP address retrieval for iOS devices in Metro bundler setup (9f28616650 by @ Morritz)
from react-native GitHub release notesChangelog
Security
Changed
Fixed
How to Test
Generate a new project:
To help you upgrade to this version, you can use the upgrade helper ⚛️
See changes from this release in the changelog
Hermes dSYMS:
Help us testing 🧪
If you experience a regression, please file an Upgrade issue and file a pick request in the appropriate discussion: https://github.com/reactwg/react-native-releases/discussions/
v0.73.4
Fixed
react-native-*/Libraries/Core/InitializeCore(562447be47 by @ tido64)Android
iOS
You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the CHANGELOG.md file.
Fixed
Added
iOS specific
Changed
Android specific
iOS specific
Fixed
chalk(9155e2d182 by @ tido64)iOS specific
RCTDeviceInfolisten to invalidate events and unregister observers while invalidating the bridge (d46d80d2ef by @ cipolleschi)You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the CHANGELOG.md file.
Added
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the CHANGELOG.md file.
Commit messages
Package name: react-native
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs