[Snyk] Upgrade react-native from 0.63.3 to 0.70.4

[NOUIY]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.70.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 81 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-10-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

• 0.70.4 - 2022-10-25
• 0.70.3 - 2022-10-12
• 0.70.2 - 2022-10-04
• 0.70.1 - 2022-09-15
• 0.70.0 - 2022-09-05
• 0.70.0-rc.4 - 2022-08-22
• 0.70.0-rc.3 - 2022-08-15
• 0.70.0-rc.2 - 2022-08-04
• 0.70.0-rc.1 - 2022-07-28
• 0.70.0-rc.0 - 2022-07-15
• 0.69.7 - 2022-11-06
  

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.69.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.69.6 - 2022-09-27
• 0.69.5 - 2022-08-25
• 0.69.4 - 2022-08-08
• 0.69.3 - 2022-07-25
• 0.69.2 - 2022-07-20
• 0.69.1 - 2022-06-29
• 0.69.0 - 2022-06-22
• 0.69.0-rc.6 - 2022-06-01
• 0.69.0-rc.5 - 2022-05-31
• 0.69.0-rc.4 - 2022-05-31
• 0.69.0-rc.3 - 2022-05-24
• 0.69.0-rc.2 - 2022-05-20
• 0.69.0-rc.1 - 2022-05-11
• 0.69.0-rc.0 - 2022-04-28
• 0.68.5 - 2022-11-06
  

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.68.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.68.4 - 2022-10-10
• 0.68.3 - 2022-08-08
• 0.68.2 - 2022-05-09
• 0.68.1 - 2022-04-13
• 0.68.0 - 2022-03-30
• 0.68.0-rc.4 - 2022-03-25
• 0.68.0-rc.3 - 2022-03-17
• 0.68.0-rc.2 - 2022-02-24
• 0.68.0-rc.1 - 2022-02-03
• 0.68.0-rc.0 - 2022-01-28
• 0.67.5 - 2022-11-06
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.67.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.67.4 - 2022-03-18
• 0.67.3 - 2022-02-22
• 0.67.2 - 2022-01-31
• 0.67.1 - 2022-01-20
• 0.67.0 - 2022-01-18
• 0.67.0-rc.6 - 2021-12-14
• 0.67.0-rc.5 - 2021-12-06
• 0.67.0-rc.4 - 2021-11-30
• 0.67.0-rc.3 - 2021-11-05
• 0.67.0-rc.2 - 2021-10-25
• 0.67.0-rc.1 - 2021-10-22
• 0.67.0-rc.0 - 2021-10-16
• 0.66.5 - 2022-11-06
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.66.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.66.4 - 2021-12-09
• 0.66.3 - 2021-11-10
• 0.66.2 - 2021-11-04
• 0.66.1 - 2021-10-15
• 0.66.0 - 2021-10-01
• 0.66.0-rc.4 - 2021-09-24
• 0.66.0-rc.3 - 2021-09-17
• 0.66.0-rc.2 - 2021-09-10
• 0.66.0-rc.1 - 2021-09-01
• 0.66.0-rc.0 - 2021-08-27
• 0.65.3 - 2022-11-06
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.65.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.65.2 - 2021-11-04
• 0.65.1 - 2021-08-19
• 0.65.0 - 2021-08-17
• 0.65.0-rc.4 - 2021-08-11
• 0.65.0-rc.3 - 2021-07-23
• 0.65.0-rc.2 - 2021-06-18
• 0.65.0-rc.1 - 2021-06-17
• 0.65.0-rc.0 - 2021-06-09
• 0.64.4 - 2022-11-07
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.64.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.64.3 - 2021-11-04
• 0.64.2 - 2021-06-03
• 0.64.1 - 2021-05-05
• 0.64.0 - 2021-03-12
• 0.64.0-rc.4 - 2021-03-01
• 0.64.0-rc.3 - 2021-02-05
• 0.64.0-rc.2 - 2020-12-18
• 0.64.0-rc.1 - 2020-11-25
• 0.64.0-rc.0 - 2020-11-23
• 0.63.5 - 2022-11-07
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.63.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.63.4 - 2020-11-30
• 0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

• 54e6662 [0.70.4] Bump version numbers
• f5ebb69 chore: bump CLI to 9.2.1 (chore: bump CLI to 9.2.1 facebook/react-native#35022)
• 72c940b Center text if line height isn't 0
• 93bb2d6 Fix rn config file load codegen (Fix rn config file load codegen facebook/react-native#34895)
• 866021b Bump react-native-codegen to 0.70.6
• c4b094f Fix: Codegen template error in RCTThirdPartyFabricComponentsProvider (Fix: Codegen template error in RCTThirdPartyFabricComponentsProvider facebook/react-native#34738)
• 917e97b [0.70.3] Bump version numbers
• fe8f0fb Apply Animated initialProps handling to Fabric only (Apply Animated initialProps handling to Fabric only facebook/react-native#34927)
• 37790e4 fix(ios): add xcode 14 workaround (turn off signing resource bundles) for pods (fix(ios): add xcode 14 workaround (turn off signing resource bundles) for pods facebook/react-native#34826)
• ebf746b Use NMake generator for Hermes build on Windows (Use NMake generator for Hermes build on Windows facebook/react-native#34790)
• 0c2f55d Fixing failure building RN codegen CLI on Windows (Fixing failure building RN codegen CLI on Windows  facebook/react-native#34791)
• e2645a5 Revert D37801394: Multisect successfully blamed D37801394 for test or build failures
• b9c2975 [0.70.2] Bump version numbers
• 13a2b11 Minor: Rename AccessibilityInfo.sendAccessibilityEvent_unstable to sendAccessibilityEvent
• 2de4cf0 chore(deps): bump CLI to 9.1.3 and Metro to 0.72.3 (chore(deps): bump CLI to 9.1.3 and Metro to 0.72.3 facebook/react-native#34803)
• 7b53a24 Fix port as -1 if dev server without specifying port on Android (Fix port as -1 if dev server without specifying port on Android facebook/react-native#34705)
• b03f536 fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enabled (fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enabled facebook/react-native#34503)
• 764f584 Let ScrollView Know About Keyboard Opened Before Mount
• 75d5679 feat: Add support for "Prefer Cross-Fade Transitions" into AccessibilityInfo (feat: Add support for "Prefer Cross-Fade Transitions" into AccessibilityInfo facebook/react-native#34406)
• 73e5533 Add a pseudo flow declaration for AccessibilityInfo
• 9fd7643 Revert "fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enabled (fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enabled facebook/react-native#34503)"
• a54ba33 [0.70.1] Bump version numbers
• e336336 Bump react-native-gradle-plugin to 0.70.3
• 6a8c38e Bump react-native-codegen to 0.70.5

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs