[Snyk] Upgrade react-native from 0.63.3 to 0.71.5 #1034
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.5. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.5.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-SHELLQUOTE-1766506
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1309667
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1727253
Why? Has a fix available, CVSS 8.1
SNYK-JS-REACTNATIVE-1298632
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-1015406
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-2342071
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-608850
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629268
Why? Has a fix available, CVSS 8.1
SNYK-JS-HERMESENGINE-629748
Why? Has a fix available, CVSS 8.1
SNYK-JS-WS-1296835
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-2342118
Why? Has a fix available, CVSS 8.1
SNYK-JS-NODEFETCH-674311
Why? Has a fix available, CVSS 8.1
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.71.5 - 2023-03-29
- Bump CLI to 10.2.2 and Metro to 0.73.9 (4c3bc24893 by @ kelset), contains:
- CLI fix: correctly list ios devices and simulators (relevant PR)
- Metro fix: fix watching contents of new directories in NodeWatcher (ab86982 by @ robhogan)
- Bump react-native-gradle-plugin to 0.71.17 (bf490d379f by @ kelset), contains:
- Fix patch for codegen for 0.71 (ec3681143e by @ kelset)
- Remove ruby-version from 0.71 (1d22e29146 by @ cipolleschi)
- Fix race condition in ReadableNativeMap (9aac13d by @ rshest)
- Give precedence to
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.71.4 - 2023-03-08
- Make FlatList permissive of ArrayLike data (c03de97fb4 by @ NickGerleman)
- Bumping RNGP to
- Update CLI to 10.2.0, Metro to 0.73.8 (20a6fbd373 by @ robhogan) - contains:
- fix: Source maps may have invalid entries when using Terser minification. (
- fix: Mitigate potential source map mismatches with concurrent transformations due to terser#1341. (
- Bump Hermes Version (291cc0af10) - contains:
- use ConsecutiveStringStorage to dedup serialized literals (62d58e)
- Remove register stack size override in hermes.cpp (6146eb)
- fix: specify currency in locale identifier when formatting currency plural (21f15c)
- Increase default max stack size (ee2588)
- Refactor HBC test helper (31fdcf)
- Expose
- Fix touchable hitSlop type (23607aea68 by @ bigcupcoffee)
- Fix TouchableOpacity componentDidUpdate causing an excessive number of pending callbacks (8b1f6e09c1 by @ gabrieldonadel)
- ENTRY_FILE should resolve relative paths from root (6dde1dc7cb by @ cortinico)
- Better Monorepo support for New Architecture (0487108461 by @ cortinico)
-
0.71.3 - 2023-02-14
-
0.71.2 - 2023-02-01
-
0.71.1 - 2023-01-19
-
0.71.0 - 2023-01-12
-
0.71.0-rc.6 - 2023-01-09
-
0.71.0-rc.5 - 2022-12-19
-
0.71.0-rc.4 - 2022-12-14
-
0.71.0-rc.3 - 2022-11-30
-
0.71.0-rc.2 - 2022-11-24
-
0.71.0-rc.1 - 2022-11-23
-
0.71.0-rc.0 - 2022-11-04
-
0.70.9 - 2023-04-19
- Update Hermes to
- Remove register stack size override in hermes.cpp (03f2df)
- Increase default max stack size (1b759f4)
- Resolved bug with Text components in new arch losing text alignment state. (31a8e92cad by @ javache)
- Mimimize EditText Spans 9/9: Remove
- Minimize EditText Spans 8/N: CustomStyleSpan (b384bb613b by @ NickGerleman)
- Minimize EditText Spans 6/N: letterSpacing (5791cf1f7b by @ NickGerleman)
- Minimize Spans 5/N: Strikethrough and Underline (0869ea29db by @ NickGerleman)
- Minimize Spans 4/N: ReactForegroundColorSpan (8c9c8ba5ad by @ NickGerleman)
- Minimize Spans 3/N: ReactBackgroundColorSpan (cc0ba57ea4 by @ NickGerleman)
- Minimize Spans 1/N: Fix precedence (1743dd7ab4 by @ NickGerleman)
- Fix measurement of uncontrolled TextInput after edit (8a0fe30591 by @ NickGerleman)
- Address Hermes performance regression (1df92c6 by @ kelset)
-
0.70.8 - 2023-04-04
- Relax Ruby requirements (e3a5fbe72f by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (34f3794f18 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.70.7 - 2023-01-31
-
0.70.6 - 2022-11-15
-
0.70.5 - 2022-11-06
-
0.70.4 - 2022-10-25
-
0.70.3 - 2022-10-12
-
0.70.2 - 2022-10-04
-
0.70.1 - 2022-09-15
-
0.70.0 - 2022-09-05
-
0.70.0-rc.4 - 2022-08-22
-
0.70.0-rc.3 - 2022-08-15
-
0.70.0-rc.2 - 2022-08-04
-
0.70.0-rc.1 - 2022-07-28
-
0.70.0-rc.0 - 2022-07-15
-
0.69.9 - 2023-04-04
- Relax Ruby requirements (4e015c69d6 by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (74ba411b55 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.69.8 - 2023-01-30
-
0.69.7 - 2022-11-06
-
0.69.6 - 2022-09-27
-
0.69.5 - 2022-08-25
-
0.69.4 - 2022-08-08
-
0.69.3 - 2022-07-25
-
0.69.2 - 2022-07-20
-
0.69.1 - 2022-06-29
-
0.69.0 - 2022-06-22
-
0.69.0-rc.6 - 2022-06-01
-
0.69.0-rc.5 - 2022-05-31
-
0.69.0-rc.4 - 2022-05-31
-
0.69.0-rc.3 - 2022-05-24
-
0.69.0-rc.2 - 2022-05-20
-
0.69.0-rc.1 - 2022-05-11
-
0.69.0-rc.0 - 2022-04-28
-
0.68.6 - 2023-01-30
-
0.68.5 - 2022-11-06
-
0.68.4 - 2022-10-10
-
0.68.3 - 2022-08-08
-
0.68.2 - 2022-05-09
-
0.68.1 - 2022-04-13
-
0.68.0 - 2022-03-30
-
0.68.0-rc.4 - 2022-03-25
-
0.68.0-rc.3 - 2022-03-17
-
0.68.0-rc.2 - 2022-02-24
-
0.68.0-rc.1 - 2022-02-03
-
0.68.0-rc.0 - 2022-01-28
-
0.67.5 - 2022-11-06
-
0.67.4 - 2022-03-18
-
0.67.3 - 2022-02-22
-
0.67.2 - 2022-01-31
-
0.67.1 - 2022-01-20
-
0.67.0 - 2022-01-18
-
0.67.0-rc.6 - 2021-12-14
-
0.67.0-rc.5 - 2021-12-06
-
0.67.0-rc.4 - 2021-11-30
-
0.67.0-rc.3 - 2021-11-05
-
0.67.0-rc.2 - 2021-10-25
-
0.67.0-rc.1 - 2021-10-22
-
0.67.0-rc.0 - 2021-10-16
-
0.66.5 - 2022-11-06
-
0.66.4 - 2021-12-09
-
0.66.3 - 2021-11-10
-
0.66.2 - 2021-11-04
-
0.66.1 - 2021-10-15
-
0.66.0 - 2021-10-01
-
0.66.0-rc.4 - 2021-09-24
-
0.66.0-rc.3 - 2021-09-17
-
0.66.0-rc.2 - 2021-09-10
-
0.66.0-rc.1 - 2021-09-01
-
0.66.0-rc.0 - 2021-08-27
-
0.65.3 - 2022-11-06
-
0.65.2 - 2021-11-04
-
0.65.1 - 2021-08-19
-
0.65.0 - 2021-08-17
-
0.65.0-rc.4 - 2021-08-11
-
0.65.0-rc.3 - 2021-07-23
-
0.65.0-rc.2 - 2021-06-18
-
0.65.0-rc.1 - 2021-06-17
-
0.65.0-rc.0 - 2021-06-09
-
0.64.4 - 2022-11-07
-
0.64.3 - 2021-11-04
-
0.64.2 - 2021-06-03
-
0.64.1 - 2021-05-05
-
0.64.0 - 2021-03-12
-
0.64.0-rc.4 - 2021-03-01
-
0.64.0-rc.3 - 2021-02-05
-
0.64.0-rc.2 - 2020-12-18
-
0.64.0-rc.1 - 2020-11-25
-
0.64.0-rc.0 - 2020-11-23
-
0.63.5 - 2022-11-07
-
0.63.4 - 2020-11-30
-
0.63.3 - 2020-09-29
from react-native GitHub release notesChanged
Android specific
iOS specific
Fixed
Android specific
iOS specific
textContentTypeproperty for backwards compat as mentioned in #36229 (comment) (c0abff11b6 by @ lunaleaps)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
^0.71.16(3df4a79c3d by @ kelset)metro/#928)metro/#929)Android specific
rrc_rootvia prefab. (3418f65d88 by @ tomekzaw)Fixed
Android specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
This release is primarily aimed at addressing issues with ANRs using multiline TextInput on Samsung devices (#35936, #35590).
Changed
hermes-2023-04-13-RNv0.70.8-c9b539bf3d7bfa4143ff1a5751886c7b2dd728a2(7b1441730b), contains:Fixed
Android specific
addSpansForMeasurement()(92b8981499 by @ NickGerleman)iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs