[Snyk] Upgrade react-native from 0.60.5 to 0.72.1 #1287

mdfkbtc · 2023-07-31T23:08:36Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.60.5 to 0.72.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 152 versions ahead of your current version.
The recommended version was released a month ago, on 2023-06-29.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-ASYNC-2441827	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-LOGKITTY-568763	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HAPIHOEK-548452	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Denial of Service (DoS) npm:mem:20180117	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Command Injection SNYK-JS-NODENOTIFIER-1035794	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
Exposure of Resource to Wrong Sphere SNYK-JS-FSEVENTS-5487987	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Mature
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.72.1 - 2023-06-29
Added

iOS specific
- Add warning to help users migrate away from the interop layer. (a702d0515f by @ cipolleschi)
- Allow to lookup for ViewManager without the RCT prefix in the Interop Layer (a28881a3d7 by @ cipolleschi)
Changed
- react-native/metro-config now includes all base config values from metro-config (bbcedd385b by @ huntie)
- Bump CLI to 11.3.3 (da84901f78 by @ kelset)
- Bumped @ react-native/metro-config to 0.72.7, @ react-native/gradle-plugin to 0.72.11, @ react-native/virtualized-lists to 0.72.6 (95db9f98f2 by @ kelset)
Fixed
- react-native/virtualized-lists does not need react-test-renderer at runtime (7a2a3278d0 by @ tido64)
Android specific
- Exclude trailing whitespace from newline character on measuring text line width (83d7a48a46 by @ bernhardoj)
  -Set kotlin.jvm.target.validation.mode=warning on user projects (10beefbbfa by @ cortinico)
iOS specific
- Bump SocketRocket to 0.6.1 (8ce471e2fa by @ cipolleschi)
- fix pod install --project-directory=ios failing (0b96bdcf32 by @ tido64)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.72.0 - 2023-06-21

🎉 0.72 stable is out 🎉

This release includes over 1100 commits from 70+ contributors! Thank you to all our contributors new and old!

See the highlights of the release in our release blog post.

You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.72.0-rc.6 - 2023-06-13
0.72.0-rc.5 - 2023-06-01
0.72.0-rc.4 - 2023-05-31
0.72.0-rc.3 - 2023-05-11
0.72.0-rc.2 - 2023-05-04
0.72.0-rc.1 - 2023-04-05
0.72.0-rc.0 - 2023-03-20
0.71.12 - 2023-07-04
Fixed
- Prevent LogBox from crashing on very long messages (cd56347dca by @ motiz88)
Android specific
- Added CSS logical properties by mapping layout props (2b06a75631 by @ NickGerleman and @ AlexanderEggers) to fix view flattening on Android.
iOS specific
- fix pod install --project-directory=ios failing (fc1abe1d69 by @ tido64)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.11 - 2023-06-14
0.71.10 - 2023-06-07
0.71.9 - 2023-06-07
0.71.8 - 2023-05-10
0.71.7 - 2023-04-19
0.71.6 - 2023-04-03
0.71.5 - 2023-03-29
0.71.4 - 2023-03-08
0.71.3 - 2023-02-14
0.71.2 - 2023-02-01
0.71.1 - 2023-01-19
0.71.0 - 2023-01-12
0.71.0-rc.6 - 2023-01-09
0.71.0-rc.5 - 2022-12-19
0.71.0-rc.4 - 2022-12-14
0.71.0-rc.3 - 2022-11-30
0.71.0-rc.2 - 2022-11-24
0.71.0-rc.1 - 2022-11-23
0.71.0-rc.0 - 2022-11-04
0.70.13 - 2023-07-28
Fixed
- Fix: bumped CLI to address broken backward compatibility (549ff6380a by @ Titozzz)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.12 - 2023-07-05
Fixed

iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan) to address #36794
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.11 - 2023-07-04
Changed
- Bump CLI to 9.3.3 and Metro do 0.72.4 (2a9d71dc34 by @ kelset) to address #36794
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.10 - 2023-06-08
0.70.9 - 2023-04-19
0.70.8 - 2023-04-04
0.70.7 - 2023-01-31
0.70.6 - 2022-11-15
0.70.5 - 2022-11-06
0.70.4 - 2022-10-25
0.70.3 - 2022-10-12
0.70.2 - 2022-10-04
0.70.1 - 2022-09-15
0.70.0 - 2022-09-05
0.70.0-rc.4 - 2022-08-22
0.70.0-rc.3 - 2022-08-15
0.70.0-rc.2 - 2022-08-04
0.70.0-rc.1 - 2022-07-28
0.70.0-rc.0 - 2022-07-15
0.69.12 - 2023-07-04
Changed
- [0.69] Bump CLI to ^8.0.7, Metro to 0.70.4 (56807fadfa by @ robhogan)
iOS specific
- [0.69] Use Content-Location header in bundle response as JS source URL (#37501) (367fc7ad52 by @ robhogan)
Fixed

Android specific
- Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487) (4db7a10e25 by @ hsource)
0.69.12 is the latest patch the Release Crew will prepare for version 0.69. You can have a look at the latest discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.11 - 2023-06-08
0.69.10 - 2023-04-25
0.69.9 - 2023-04-04
0.69.8 - 2023-01-30
0.69.7 - 2022-11-06
0.69.6 - 2022-09-27
0.69.5 - 2022-08-25
0.69.4 - 2022-08-08
0.69.3 - 2022-07-25
0.69.2 - 2022-07-20
0.69.1 - 2022-06-29
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.7 - 2023-04-26
0.68.6 - 2023-01-30
0.68.5 - 2022-11-06
0.68.4 - 2022-10-10
0.68.3 - 2022-08-08
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.5 - 2022-11-06
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.5 - 2022-11-06
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.3 - 2022-11-06
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.4 - 2022-11-07
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.5 - 2022-11-07
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29
0.63.2 - 2020-07-22
0.63.1 - 2020-07-14
0.63.0 - 2020-07-08
0.63.0-rc.1 - 2020-05-04
0.63.0-rc.0 - 2020-04-16
0.62.3 - 2021-05-05
0.62.2 - 2020-04-08
0.62.1 - 2020-04-03
0.62.0 - 2020-03-26
0.62.0-rc.5 - 2020-03-07
0.62.0-rc.4 - 2020-03-06
0.62.0-rc.3 - 2020-02-25
0.62.0-rc.2 - 2020-02-13
0.62.0-rc.1 - 2020-01-21
0.62.0-rc.0 - 2019-12-18
0.61.5 - 2019-11-23
0.61.4 - 2019-11-04
0.61.3 - 2019-10-29
0.61.2 - 2019-10-02
0.61.1 - 2019-09-25
0.61.0 - 2019-09-24
0.61.0-rc.3 - 2019-09-10
0.61.0-rc.2 - 2019-09-04
0.61.0-rc.0 - 2019-08-27
0.60.6 - 2019-09-24
0.60.5 - 2019-08-13

from react-native GitHub release notes

Commit messages

Package name: react-native

73293f2 [0.72.1] Bump version numbers
8ce471e [LOCAL] Bump SocketRocket to 6.1.0
a8cfeb9 [LOCAL] update podlock file for RNTester
92d50d4 Resubmit D46501420 (#37790)
4ddfeb6 Warn users when a component is registered in Rendere and in the interop (#38089)
f537257 Implement multiple manager lookup for the interop layer (#38093)
95db9f9 bumped packages versions
da84901 [LOCAL] bump CLI to 11.3.3
10beefb [LOCAL] reapply "Set kotlin.jvm.target.validation.mode=warning on user projects" by Nicola
78c1a7e Restore base config merge in metro-config (#38092)
69705a4 Add nullptr check to SharedFunction (#38075)
ba46e5b fix(virtualized-lists): `react-test-renderer` is not a runtime dependency (#37955)
4d8a6a2 Add README to RN Template App, added when `npx react-native@latest init <AppName>` (#37521)
0b96bdc fix(ios): fix `pod install --project-directory=ios` failing (#37994)
7a893e4 [0.72.0] Bump version numbers
3863877 [LOCAL] update podfile.lock
ec4771b [0.72.0-rc.6] Bump version numbers
a2df07e [LOCAL] bump CLI to 11.3.2
b2f2737 bumped packages versions
0817eaa Revert "fix: border width top/bottom not matching the border radius" (#37840)
0da7e06 Remove CallInvoker parameter from toJs method in Codegen (#37832)
2d15f50 Fix Android border clip check (#37828)
2760042 Fix loading NODE_BINARY inside Generate Legacy Components Interop (#37802)
8ed2cfd Add support for building with Xcode 15 (#37758)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.60.5 to 0.72.1. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/mdfkbtc/project/a2088718-36c2-4867-a45b-42143012aac0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native from 0.60.5 to 0.72.1 #1287

[Snyk] Upgrade react-native from 0.60.5 to 0.72.1 #1287

mdfkbtc commented Jul 31, 2023

Added

iOS specific

Changed

Fixed

Android specific

iOS specific

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Fixed

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific

[Snyk] Upgrade react-native from 0.60.5 to 0.72.1 #1287

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.60.5 to 0.72.1 #1287

Conversation

mdfkbtc commented Jul 31, 2023

Snyk has created this PR to upgrade react-native from 0.60.5 to 0.72.1.

Added

iOS specific

Changed

Fixed

Android specific

iOS specific

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Fixed

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific