Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-native from 0.49.5 to 0.62.2 #8

Merged
merged 1 commit into from Jul 13, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade react-native from 0.49.5 to 0.62.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 115 versions ahead of your current version.
  • The recommended version was released 13 days ago, on 2020-04-08.

The recommended version fixes:

Severity Issue Exploit Maturity
Prototype Override Protection Bypass
npm:qs:20170213
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:negotiator:20160616
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:fresh:20170908
No Known Exploit
Uninitialized Memory Exposure
npm:base64-url:20180512
Mature
Insecure use of Tmp files
npm:sync-exec:20160124
No Known Exploit
Arbitrary Code Injection
SNYK-JS-MORGAN-72579
Proof of Concept
Regular Expression Denial of Service (ReDoS)
npm:ms:20170412
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:ms:20170412
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:mime:20170907
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
No Known Exploit
Release notes
Package name: react-native
  • 0.62.2 - 2020-04-08

    This release fixes a few minor issues that were reported by the community. You can view the complete changelog here.

    You can participate in the conversation for the next patch release in the dedicated issue.


    To help you upgrade to this version, you can use the new upgrade helper ⚛️


    You can find the whole changelog history over at react-native-releases.

  • 0.62.1 - 2020-04-03

    This release fixes a YellowBox regression in v0.62.0 where the Flipper network inspector causes YellowBox to crash the app due to using base64 images.

    You can view the complete changelog here.

    You can participate in the conversation for the next patch release in the dedicated issue.


    To help you upgrade to this version, you can use the new upgrade helper ⚛️


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0 - 2020-03-26

    0.62.0

    0.62 stable is here 🎉

    Thanks to everyone who contributed and helped to get this together, everyone worked really hard and we hope you are as excited as we are 🤗

    Some of the major changes that this version brings:

    • Flipper support
    • a new LogBox experience
    • better dark mode support

    Among many others - please refer to the blog post for more details.


    This release comes in the midst of a global pandemic. We’re releasing this version today to respect the work of hundreds of contributors who made this release possible and to prevent the release from falling too far behind master. You can participate in the conversation on the status of this release at this issue, but please be mindful of the reduced capacity of contributors to help with issues and prepare to delay upgrading if necessary.


    You can upgrade to this version using the upgrade helper webtool ⚛️
    And if you are having troubles, please refer to the new Upgrade Support repository by our awesome community.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.5 - 2020-03-07

    THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.

    Please only upgrade or create new apps with 0.62.0-rc.5 if you'd like to help us test this before the stable release - which would be super useful 🤗

    To test it, run:

    npx react-native init RN062 --version 0.62.0-rc.5

    This version introduces the new LogBox experience behind a feature flag. To try it out, add the following to your index.js file:

    require('react-native').unstable_enableLogBox()

    This version also introduces Flipper integration and support for a new version of Hermes (0.4.0). For details and to report issues, see this issue.


    This release will be quite massive (there are around 1200 commits of delta between this version and 0.61!) so we don't have the changelog ready yet (draft PR) - it will be fully ready for when we will publish 0.62.0.

    You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.4 - 2020-03-06

    THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.

    Please only upgrade or create new apps with 0.62.0-rc.4 if you'd like to help us test this before the stable release - which would be super useful 🤗

    To test it, run:

    npx react-native init RN062 --version 0.62.0-rc.4

    This version introduces the new LogBox experience behind a feature flag. To try it out, add the following to your index.js file:

    require('react-native').unstable_enableLogBox()

    This version also introduces Flipper integration and support for a new version of Hermes (0.4.0). For details and to report issues, see this issue.


    This release will be quite massive (there are around 1200 commits of delta between this version and 0.61!) so we don't have the changelog ready yet (draft PR) - it will be fully ready for when we will publish 0.62.0.

    You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.3 - 2020-02-25

    THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.

    Please only upgrade or create new apps with 0.62.0-rc.3 if you'd like to help us test this before the stable release - which would be super useful 🤗

    To test it, run:

    npx react-native init RN062 --version 0.62.0-rc.3

    RC3 introduces the new LogBox experience behind a feature flag. To try it out, add the following to your index.js file:

    require('react-native').unstable_enableLogBox()

    RC3 also introduces Flipper integration and support for a new version of Hermes (0.4.0). For details and to report issues, see this issue.


    This release will be quite massive (there are around 1200 commits of delta between this version and 0.61!) so we don't have the changelog ready yet (draft PR) - it will be fully ready for when we will publish 0.62.0.

    You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.2 - 2020-02-13

    THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.

    Please only upgrade or create new apps with 0.62.0-rc.2 if you'd like to help us test this before the stable release - which would be super useful 🤗

    To test it, run:

    npx react-native init RN062 --version 0.62.0-rc.2

    RC2 introduces the new LogBox experience behind a feature flag. To try it out, add the following to your index.js file:

    require('react-native').unstable_enableLogBox()

    RC2 also introduces Flipper integration. For details and to report issues, see this issue.


    This release will be quite massive (there are around 1200 commits of delta between this version and 0.61!) so we don't have the changelog ready yet (draft PR) - it will be fully ready for when we will publish 0.62.0.

    You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.1 - 2020-01-21

    THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.

    Please only upgrade or create new apps with 0.62.0-rc.1 if you'd like to help us test this before the stable release - which would be super useful 🤗

    To test it, run:

    npx react-native init RN062 --version 0.62.0-rc.1

    This RC1 introduces the new LogBox experience behind a feature flag: to try it out, add in the index.js file:

    require('react-native').unstable_enableLogBox()

    We are also aware of some Android and Hermes related issues, keep an eye on the RC status issue to know more - they are still being investigated but will likely be fixed in the next RC.


    This release will be quite massive (there are around 1200 commits of delta between this version and 0.61!) so we don't have the changelog ready yet (draft PR) - it will be fully ready for when we will publish 0.62.0.

    You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.


    You can find the whole changelog history over at react-native-releases.

  • 0.62.0-rc.0 - 2019-12-18
  • 0.61.5 - 2019-11-23
  • 0.61.4 - 2019-11-04
  • 0.61.3 - 2019-10-29
  • 0.61.2 - 2019-10-02
  • 0.61.1 - 2019-09-25
  • 0.61.0 - 2019-09-24
  • 0.61.0-rc.3 - 2019-09-10
  • 0.61.0-rc.2 - 2019-09-04
  • 0.61.0-rc.0 - 2019-08-27
  • 0.60.6 - 2019-09-24
  • 0.60.5 - 2019-08-13
  • 0.60.4 - 2019-07-18
  • 0.60.3 - 2019-07-11
  • 0.60.2 - 2019-07-11
  • 0.60.1 - 2019-07-11
  • 0.60.0 - 2019-07-03
  • 0.60.0-rc.3 - 2019-06-28
  • 0.60.0-rc.2 - 2019-06-20
  • 0.60.0-rc.1 - 2019-06-10
  • 0.60.0-rc.0 - 2019-05-30
  • 0.59.10 - 2019-07-02
  • 0.59.9 - 2019-06-05
  • 0.59.8 - 2019-05-08
  • 0.59.7 - 2019-05-08
  • 0.59.6 - 2019-04-18
  • 0.59.5 - 2019-04-17
  • 0.59.4 - 2019-04-08
  • 0.59.3 - 2019-04-01
  • 0.59.2 - 2019-03-25
  • 0.59.1 - 2019-03-14
  • 0.59.0 - 2019-03-12
  • 0.59.0-rc.3 - 2019-02-27
  • 0.59.0-rc.2 - 2019-02-18
  • 0.59.0-rc.1 - 2019-02-15
  • 0.59.0-rc.0 - 2019-02-13
  • 0.58.6 - 2019-02-28
  • 0.58.5 - 2019-02-19
  • 0.58.4 - 2019-02-06
  • 0.58.3 - 2019-01-28
  • 0.58.2 - 2019-01-28
  • 0.58.1 - 2019-01-25
  • 0.58.0 - 2019-01-24
  • 0.58.0-rc.3 - 2019-01-17
  • 0.58.0-rc.2 - 2018-12-18
  • 0.58.0-rc.1 - 2018-12-06
  • 0.58.0-rc.0 - 2018-11-22
  • 0.57.8 - 2018-12-13
  • 0.57.7 - 2018-11-27
  • 0.57.6 - 2018-11-26
  • 0.57.5 - 2018-11-13
  • 0.57.4 - 2018-10-25
  • 0.57.3 - 2018-10-12
  • 0.57.2 - 2018-10-04
  • 0.57.1 - 2018-09-21
  • 0.57.0 - 2018-09-12
  • 0.57.0-rc.4 - 2018-09-06
  • 0.57.0-rc.3 - 2018-08-24
  • 0.57.0-rc.2 - 2018-08-22
  • 0.57.0-rc.1 - 2018-08-22
  • 0.57.0-rc.0 - 2018-08-16
  • 0.56.1 - 2018-09-10
  • 0.56.0 - 2018-07-04
  • 0.56.0-rc.5 - 2018-07-04
  • 0.56.0-rc.4 - 2018-06-27
  • 0.56.0-rc.3 - 2018-06-22
  • 0.56.0-rc.2 - 2018-06-15
  • 0.56.0-rc.1 - 2018-06-13
  • 0.56.0-rc - 2018-06-11
  • 0.55.4 - 2018-05-08
  • 0.55.3 - 2018-04-17
  • 0.55.2 - 2018-04-09
  • 0.55.1 - 2018-04-05
  • 0.55.0 - 2018-04-03
  • 0.55.0-rc.2 - 2018-03-29
  • 0.55.0-rc.1 - 2018-03-21
  • 0.55.0-rc.0 - 2018-03-13
  • 0.54.4 - 2018-03-29
  • 0.54.3 - 2018-03-26
  • 0.54.2 - 2018-03-12
  • 0.54.1 - 2018-03-10
  • 0.54.0 - 2018-03-01
  • 0.54.0-rc.4 - 2018-02-27
  • 0.54.0-rc.3 - 2018-02-13
  • 0.54.0-rc.2 - 2018-02-12
  • 0.54.0-rc.0 - 2018-02-12
  • 0.53.3 - 2018-02-20
  • 0.53.2 - 2018-02-19
  • 0.53.0 - 2018-02-05
  • 0.53.0-rc.0 - 2018-01-10
  • 0.52.3 - 2018-02-19
  • 0.52.2 - 2018-01-26
  • 0.52.1 - 2018-01-22
  • 0.52.0 - 2018-01-08
  • 0.52.0-rc.0 - 2017-12-18
  • 0.51.1 - 2018-02-19
  • 0.51.0 - 2017-12-06
  • 0.51.0-rc.3 - 2017-12-04
  • 0.51.0-rc.2 - 2017-11-22
  • 0.50.4 - 2017-11-24
  • 0.50.3 - 2017-11-08
  • 0.50.2 - 2017-11-07
  • 0.50.1 - 2017-11-04
  • 0.50.0 - 2017-11-03
  • 0.50.0-rc.2 - 2017-10-30
  • 0.50.0-rc.1 - 2017-10-19
  • 0.50.0-rc.0 - 2017-10-11
  • 0.49.5 - 2017-10-27
from react-native GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@BrianLusina BrianLusina merged commit 56e8305 into master Jul 13, 2020
@delete-merged-branch delete-merged-branch bot deleted the snyk-upgrade-3192701efecca1beacdce06e0f9444ff branch July 13, 2020 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants