[Snyk] Security upgrade expo from 34.0.4 to 42.0.0

[anniekao]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo

The new version differs by 250 commits.

• 1f1398e Publish packages
• 21bdae9 Publish packages
• 2188102 [template][bare] update expo-updates to latest
• b21b611 [av][iOS] Allow video audio to continue to play in the background (#12950)
• 9b7b618 [bare-expo] Update Podfile.lock
• cc6dc18 [android][ios] Bump Expo Go version
• 03ce324 [home] Update dev and prod home
• 3ca3c39 [ios] Update location permission usage message
• d5be25e Publish expo-dev-client
• 0614038 Publish expo-dev-client
• 9858796 [dev-launcher][plugin] Ensure that `withErrorHandling` is triggered on every platform (#13438)
• b5fd37b [expo-dev-launcher] fix error message when loading a production app without expo-updates (#13458)
• f8f11fc [dev-menu][dev-launcher] Make items order consistently across platforms (#13449)
• a7a44a0 [home] Add release channel label back to project page (#13459)
• 678da87 [ios] Bump Expo Go version
• 60b514a [ios] Fix second instance of manifest JSON bug (#13443)
• b3fc001 Update AndroidManifest.xml (#13173)
• 8697b30 Remove READ_PHONE_STATE permission from default template (#13176)
• b02e45d [expo-splash-screen][ios] search for viewController with a RCTRootView (#13429)
• 2bb90ff [ios] Fix bug where we attempt to validate manifest instance rather than JSON as a JSON object (#13442)
• abb9e79 [skip-ci][ios][android] Update dev and prod home
• 3495c4a [home] check for camera permissions on QR scanner deep link (#13410)
• 2a35a64 [skip-ci][ios][android] Bump app versions
• 39db2c7 [home] Update prod home

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution