Skip to content

[Snyk] Upgrade react-native-screens from 3.22.1 to 3.29.0#19

Merged
RelxOff merged 1 commit intomainfrom
snyk-upgrade-b01662c46cf32f9d43987bfa596b5ed2
Mar 29, 2024
Merged

[Snyk] Upgrade react-native-screens from 3.22.1 to 3.29.0#19
RelxOff merged 1 commit intomainfrom
snyk-upgrade-b01662c46cf32f9d43987bfa596b5ed2

Conversation

@RelxOff
Copy link
Copy Markdown
Collaborator

@RelxOff RelxOff commented Mar 29, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-native-screens from 3.22.1 to 3.29.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 7 versions ahead of your current version.
  • The recommended version was released 4 months ago, on 2023-12-07.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Server-side Request Forgery (SSRF)
SNYK-JS-IP-6240864
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Path Traversal
SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Open Redirect
SNYK-JS-EXPRESS-6474509
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion')
SNYK-JS-TAR-6476909
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-native-screens
  • 3.29.0 - 2023-12-07

    Minor release including fix for iOS that was accidentally omitted from 3.28.0. It should be now possible to present modal in outer stack, from modal in nested stack (😄 )

    What's Changed

    🐛 Bug fixes

    • fix(iOS): select correct VC for nested modal presentation by @ kkafar in #1912

    Full Changelog: 3.28.0...3.29.0

  • 3.28.0 - 2023-12-07

    Minor release adding a support for React Native 0.73, adding new iOS-like slide animation, fixing crashes with AVPlayer on iOS and resolving build issues on Android.

    Note: Please note that when using new renderer - Fabric, only the 0.73.x version of react-native is supported from this version onwards. With Paper renderer backward compatibility is maintained.

    What's Changed

    🐛 Bug fixes

    • Update status bar & orientation in screen stack fragment by @ delphinebugner in #1934
    • Set stateWrapper in ScreenViewManager in Fabric by @ joemun in #1944
    • Don't include AVPlayerView in traverseForScrollView method by @ tboba in #1969
    • Fix error about duplicate class ViewModelLazy by @ tboba in #1977
    • Move DelayedFreeze setImmediate into an effect by @ amadeus in #1980

    👍 Improvements

    🔢 Miscellaneous

    New Contributors

    Full Changelog: 3.27.0...3.28.0

  • 3.27.0 - 2023-10-23

    Minor release focusing on resolving build issues in certain configurations, compatibility with RC versions of React Native and crash on Fabric.

    What's Changed

    🐛 Bug fixes

    • Unresolved reference: attr after upgrading to 0.73.0-rc.2 by @ ivanignatiev in #1919
    • Downgrade native deps to avoid conflicts with other libs by @ kkafar in #1943
    • Add canCoalesce method to RNSHeaderHeightChangeEvent by @ tboba in #1933

    🔢 Miscellaneous

    • Update @ babel/traverse from 7.21.0 to 7.23.2 by @ kkafar in #1929
    • Update react-devtools-core from 4.28.0 to 4.28.4 by @ tboba in #1941

    New Contributors

    Full Changelog: 3.26.0...3.27.0

  • 3.26.0 - 2023-10-17
    Read more
  • 3.25.0 - 2023-08-31

    What's Changed

    Minor release focused on bug fixes & internals.

    🐛 Bug fixes

    • iOS: Add missing call to super method in RNSScreenView#finalizeUpdates by @ kkafar in #1855
    • Android: Shorten alpha animation to 83ms on default enter-out by @ kkafar in #1835
    • iOS: Wrong title in back button menu for screens w/ hidden header by @ kkafar in #1866
    • iOS: Full window overlay cannot receive tap when modal is full screen by @ intergalacticspacehighway in #1872

    🔢 Miscellaneous

    • Reinstall deps & pods in example apps after release by @ kkafar in #1862
    • Fix typo in docs on sheetCornerRadius by @ kkafar in #1863
    • Use PlatformColor instead of plain string for color related props by @ retyui in #1846
    • Android: Migrate replaceSystemWindowInsets to Builder.setSystemWindowInsets by @ kirillzyusko in #1868

    New Contributors

    Full Changelog: 3.24.0...3.25.0

  • 3.24.0 - 2023-08-04
    Read more
  • 3.23.0 - 2023-07-26
  • 3.22.1 - 2023-07-06
from react-native-screens GitHub release notes
Commit messages
Package name: react-native-screens
  • 471127e fix(iOS): select correct VC for nested modal presentation (#1912)
  • c42cad0 fix: move DelayedFreeze setImmediate into an effect (#1980)
  • 811fe65 chore: support for RN 0.73 (#1956)
  • d4c16b8 fix(Android): Fix error about duplicate class ViewModelLazy (#1977)
  • 2756734 chore: Update Podfile.lock files in example projects (#1979)
  • d7cba6d fix(iOS): Don't include AVPlayerView in `traverseForScrollView` method (#1969)
  • 4224c7c chore: use JDK 17 for CI builds as required for RN 0.73 (#1957)
  • 7994eda feat(Android): add ios like slide animation (#1945)
  • 5eb15d8 fix(Android): Set stateWrapper in ScreenViewManager in Fabric (#1944)
  • b1725c6 fix(Android): update status bar & orientation in screen stack fragment (#1934)
  • 1ea36fc Release 3.27.0
  • e646372 fix: downgrade native deps to avoid conflicts with other libs (#1943)
  • b6db977 fix(iOS): add `canCoalesce` method to RNSHeaderHeightChangeEvent (#1933)
  • d3035e5 chore(deps): update `react-devtools-core` from 4.28.0 to 4.28.4 (#1941)
  • ca7abf0 fix: unresolved reference: attr after upgrading to 0.73.0-rc.2 (#1919)
  • 64e3cb1 chore(deps): update `@ babel/traverse` from 7.21.0 to 7.23.2 (#1929)
  • 2fc6688 Release 3.26.0
  • c3d1ae8 chore(iOS): update podspec to use install_modules_dependencies (#1920)
  • 72ab692 fix(Android): Fix calculating header height when changing status/action bar visibility (#1922)
  • dbb7430 fix(iOS): change implementation of calculating status bar, refactor methods used on header height change (#1917)
  • 20fccf1 fix: Allow Reanimated Screen to check large header (#1915)
  • 2468905 chore: use `require` syntax for resolution of all native components (#1909)
  • fd00720 chore(CI): trigger e2e tests on JS-only changes (#1910)
  • bfe5534 fix(iOS): Fix positioning of large header and search bar (#1895)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@RelxOff RelxOff merged commit 586b9b7 into main Mar 29, 2024
@RelxOff RelxOff deleted the snyk-upgrade-b01662c46cf32f9d43987bfa596b5ed2 branch March 29, 2024 21:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants