[Snyk] Security upgrade react-native from 0.69.4 to 0.71.0

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	118/1000 Why? Confidentiality impact: None, Integrity impact: Low, Availability impact: Low, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00043, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 4.19, Likelihood: 2.81, Score Version: V5	Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-native

The new version differs by 250 commits.

• 5a251ba [0.71.0] Bump version numbers
• 7dee5e7 [0.71.0-rc.6] Bump version numbers
• 06e8577 Update fingerprint for SSH deploy key ([Post template] Update how sticky posts are displayed WordPress/gutenberg#35791)
• 22f920f fix(CI): prevent the e2e test from running on 0.71 (Documentation: update npm run build command for developing with Gutenberg locally WordPress/gutenberg#35681)
• 6ece074 [0.71.0-rc.5] Bump version numbers
• 52df783 [LOCAL] Bump RNGP
• 9519a0d [LOCAL] Fix eslint config for template
• ce3eefe Fix cleanup not working on template app (Update docs and readme post merge of #35645 WordPress/gutenberg#35679)
• f7b35c0 Automatically detect when use frameworks is used (Navigation Block: Flip submenu indicator arrow icon on click/hover WordPress/gutenberg#35636)
• 5b32348 Add compiler flag for the new Arch when enabled. (Remove active / focussed block outlines in the Site / Template editor WordPress/gutenberg#35672)
• aaa795b Improve Codegen Cleanup (Storybook: Add LTR/RTL switching WordPress/gutenberg#35642)
• a0ee98d fix: remove gap if its last element in line (fix flex gap extra spacing when children determine parents main axis size) (Fix sticky scrollbar with sidebar open. WordPress/gutenberg#1188)
• dc1b20d Add missing AccessibilityInfo Types to TS Typings
• ed08edd Fix Errors with TypeScript Tests
• de11363 Add missing VirtualizedList Imperative Types
• 1bd3831 Fix virtual list type (Site Logo: Remove "Reset" button icon WordPress/gutenberg#35434)
• 213c26c Add missing types for AppRegistry
• fd28032 Add type for RootTagContext
• f04f067 Add missing types to PushNotificationIOS
• 696f4b5 Fix missing animation type (CircleCI Break)
• f9ab91c Fix types for deprecated scrollTo fields
• 9b76188 Fix Vibration.vibrate() allowing null params
• 8770b27 Mark scrollToEnd animated as optional
• 754524e Fix type for `StyleSheet.compose()`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
gutenberg	❌ Failed (Inspect)			Oct 22, 2023 6:47pm
gutenberg-wd9x	❌ Failed (Inspect)			Oct 22, 2023 6:47pm

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
react-native	0.71.0	environment	+186	145 MB	react-native-bot

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue	Package	Version	Note	Source
Chronological version anomaly	metro-inspector-proxy	0.73.10	Previous Chronological: metro-inspector-proxy@0.72.4 (6/7/2023, 4:34:22 PM) Previous Semver: metro-inspector-proxy@0.73.9 (3/21/2023, 2:33:40 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-cache-key	0.73.10	Previous Chronological: metro-cache-key@0.72.4 (6/7/2023, 4:34:27 PM) Previous Semver: metro-cache-key@0.73.9 (3/21/2023, 2:33:47 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-transform-plugins	0.73.10	Previous Chronological: metro-transform-plugins@0.72.4 (6/7/2023, 4:34:37 PM) Previous Semver: metro-transform-plugins@0.73.9 (3/21/2023, 2:33:58 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-react-native-babel-preset	0.73.10	Previous Chronological: metro-react-native-babel-preset@0.72.4 (6/7/2023, 4:34:24 PM) Previous Semver: metro-react-native-babel-preset@0.73.9 (3/21/2023, 2:33:42 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-config	0.73.10	Previous Chronological: metro-config@0.76.6 (6/7/2023, 4:54:33 PM) Previous Semver: metro-config@0.73.9 (3/21/2023, 2:33:56 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	@react-native-community/cli-plugin-metro	10.2.3	Previous Chronological: @react-native-community/cli-plugin-metro@9.3.3 (6/12/2023, 11:16:37 AM) Previous Semver: @react-native-community/cli-plugin-metro@10.2.2 (3/22/2023, 8:18:01 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-runtime	0.73.10	Previous Chronological: metro-runtime@0.72.4 (6/7/2023, 4:34:25 PM) Previous Semver: metro-runtime@0.73.9 (3/21/2023, 2:33:46 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	@sinonjs/commons	3.0.0	Previous Chronological: @sinonjs/commons@1.8.6 (11/28/2022, 5:37:36 PM) Previous Semver: @sinonjs/commons@2.0.0 (11/7/2022, 4:50:09 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-cache	0.73.10	Previous Chronological: metro-cache@0.72.4 (6/7/2023, 4:34:28 PM) Previous Semver: metro-cache@0.73.9 (3/21/2023, 2:33:49 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	deprecated-react-native-prop-types	3.0.2	Previous Chronological: deprecated-react-native-prop-types@4.2.1 (7/29/2023, 3:29:42 AM) Previous Semver: deprecated-react-native-prop-types@3.0.1 (12/3/2022, 2:44:23 AM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
New author	deprecated-react-native-prop-types	3.0.2	New Author: rh389 Previous Author: yungsters	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Unstable ownership	deprecated-react-native-prop-types	3.0.2	Author: rh389	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-file-map	0.73.10	Previous Chronological: metro-file-map@0.72.4 (6/7/2023, 4:34:22 PM) Previous Semver: metro-file-map@0.73.9 (3/21/2023, 2:33:40 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Debug access	metro-file-map	0.73.10	Module: perf_hooks Location: src/crawlers/watchman/index.js +2 more instances...	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Dynamic require	metro-file-map	0.73.10	Location: src/lib/rootRelativeCacheKeys.js +2 more instances...	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Filesystem access	metro-file-map	0.73.10	Module: fs Location: src/Watcher.js +2 more instances...	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
No v1	metro-file-map	0.73.10	Location: Package overview	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Shell access	metro-file-map	0.73.10	Module: child_process Location: src/crawlers/node.js +1 more instances...	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro	0.73.10	Previous Chronological: metro@0.72.4 (6/7/2023, 4:34:35 PM) Previous Semver: metro@0.73.9 (3/21/2023, 2:33:55 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, react-native-url-polyfill@1.1.2 via packages/react-native-editor/package.json
Chronological version anomaly	metro-babel-transformer	0.73.10	Previous Chronological: metro-babel-transformer@0.76.6 (6/7/2023, 4:54:30 PM) Previous Semver: metro-babel-transformer@0.73.9 (3/21/2023, 2:33:52 PM)	@emotion/native@11.0.0, @testing-library/react-native@11.3.0, @wordpress/react-native-aztec@1.88.0, @wordpress/react-native-bridge@1.88.0, @wordpress/react-native-editor@1.88.0, react-native@0.71.0, react-native-url-polyfill@1.1.2 via package.json react-native@0.71.0 via packages/react-native-aztec/package.json @wordpress/react-native-aztec@1.88.0, react-native@0.71.0 via packages/react-native-bridge/package.json