Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-native-web from 0.13.18 to 0.18.9 #81

Open
wants to merge 1 commit into
base: canary
Choose a base branch
from

Conversation

jackromo888
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-native-web from 0.13.18 to 0.18.9.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 46 versions ahead of your current version.
  • The recommended version was released a month ago, on 2022-08-30.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Denial of Service
SNYK-JS-NODEFETCH-674311
306/1000
Why? CVSS 5.9
No Known Exploit
Information Exposure
SNYK-JS-NODEFETCH-2342118
306/1000
Why? CVSS 5.9
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-native-web
  • 0.18.9 - 2022-08-30

    0.18.9

  • 0.18.8 - 2022-08-25

    0.18.8

  • 0.18.7 - 2022-07-19

    0.18.7

  • 0.18.6 - 2022-07-06

    0.18.6

  • 0.18.5 - 2022-07-06

    0.18.5

  • 0.18.4 - 2022-07-03

    0.18.4

  • 0.18.3 - 2022-07-02

    0.18.3

  • 0.18.2 - 2022-06-27

    0.18.2

  • 0.18.1 - 2022-06-14

    0.18.1

  • 0.18.0 - 2022-06-10

    Breaking changes

    • Browser support has been reduced. Changes as follows: Safari 10.1+, Edge (Chromium), no IE, no legacy Android browser.
    • Styles are inserted on module eval, not component render. This is needed to account for changes to rendering in React 18.
    • Style sheets rendered on the server will now include styles from all the eval-ed modules, rather than only the styles produced by the initial render.
    • StyleSheet.create() is now the identify function, returning the input style objects. Previously, it replaced styles with numeric ids. This improves compatibility with React Native, but accessing the returned style objects at runtime is still not recommended as it can prevent static extraction to CSS. (#2068)
    • StyleSheet.getSheet() can be used on the server to retrieve the current style sheet as a CSS string. (#2196)
    • I18nManager is now a mock API included only for compatibility with React Native. The ability to flip left/right properties or values has now been removed entirely (use start/end instead). See below for new localization APIs.
    • Inline styles are no longer automatically vendor-prefixed. This improves inline style performance and discourages use of inline styles. This should have little effect in practice if your app is predominantly using StyleSheet.create().
    • The deprecated accessible, accessibilityState, and accessibilityValue props have been removed.
    • The :focus-visible polyfill has been removed, as by default modern browsers no longer show focus rings for pointer interactions.
    • VirtualizedList, FlatList, and SectionList vendor components have been updated to match latest React Native. (#2241) Thanks to @ DavidRieman.
    • The legacy jest preset and snapshot serializer has been removed from the npm package.
    • The unstable_createElement API has changed. Children are no longer accepted as the 3rd argument, they must be included in the props as the 2nd argument. The 3rd argument is now an options object with a field to set the expected writing direction ({ writingDirection }).

    New features

    • Localized LTR/RTL layouts can now be nesting to arbitrary depths simply by setting the dir or lang prop on a component. By default, layouts are rendering RTL. To render RTL you must set dir="rtl" on an outer element rendered by React.
    • Localized LTR/RTL layouts can be switched dynamically at runtime.
    • useLocaleContext is a new export API. Use it to query a component's locale and writing direction context for fine-grained control over localized layout.
    • Rendering into multiple windows and shadow roots in now supported. (#1517, #2138)
    • Extraction to static CSS and consumption of external CSS is now possible but not yet recommended. The StyleSheet runtime can consume any styles that match an expected format, but StyleSheet.flatten cannot work with extracted styles. (See below for more details.)

    Fixes

    • Fixes static and dynamic shortform / longform deduplication. (#2007)
    • Display the focus ring on CheckBox and Switch elements. (#2242)
    • Prevent href navigation for disabled Pressables and Touchables. (#2299)
    • Linking.openURL supports target value. (#2277)

    Notes

    StyleSheet runtime

    StyleSheet has been rewritten to better separate the runtime from the compiler. The performance of the new merging runtime is on par with using css-modules. The core runtime is a standalone package called styleQ; refer to the styleQ documentation for more details.

    image

    The performance of inline styles has also been significantly improved, although StyleSheet still has to perform extra work to transform non-standard React Native styles and polyfill logical styles.

    image

    The StyleSheet import is now a standalone module. StyleSheet itself is a function that can be called to resolve styles to DOM className and style values, e.g.,

    const [ className, inlineStyle ] = StyleSheet([ styles.root, prop.styles ])

    StyleSheet extraction

    One of the benefits behind the new architecture is that StyleSheet can resolve compiled styles that conform to the expected format, whether they are produced by the built-in compiler or an external source. However, this is not yet recommended, as explained below.

    Style compilers must produce annotated objects that are treated as class name maps, and classes are de-duplicated based on whether they share the same key, e.g.,

    {
      $$css: true,
      display: 'display-class',
      opacity: 'opacity-class'
    }

    This is the first step towards allowing 3rd party tools to extract styles to static CSS files, and optionally dropping the client-side compiler, without needing to integrate deeply with the StyleSheet runtime or having to modify props/prop values in the source code, i.e., only the StyleSheet.create() call needs transforming by the compiler.

    The existence of the StyleSheet.flatten() API is a problem for build-time compiling of some styles. Components that flatten styles (e.g., Animated, Image) expect to be able to work with the source styles, and use the source values at runtime. A compiler that aims to extract all styles and have no runtime transform would also need to disallow the use of StyleSheet.flatten() entirely. A future release of React Native for Web may remove use of StyleSheet.flatten from internal implementations, but cannot prevent this API from being used in product code or 3rd party packages.

  • 0.17.7 - 2022-03-01
  • 0.17.6 - 2022-02-18
  • 0.17.5 - 2021-09-29
  • 0.17.4 - 2021-09-29
  • 0.17.3 - 2021-09-29
  • 0.17.2 - 2021-09-28
  • 0.17.1 - 2021-06-23
  • 0.17.0 - 2021-06-17
  • 0.16.5 - 2021-06-08
  • 0.16.4 - 2021-06-08
  • 0.16.3 - 2021-05-13
  • 0.16.2 - 2021-05-03
  • 0.16.1 - 2021-04-23
  • 0.16.0 - 2021-04-20
  • 0.15.7 - 2021-04-13
  • 0.15.6 - 2021-04-07
  • 0.15.5 - 2021-03-31
  • 0.15.4 - 2021-03-30
  • 0.15.3 - 2021-03-29
  • 0.15.2 - 2021-03-29
  • 0.15.1 - 2021-03-26
  • 0.15.0 - 2021-02-12
  • 0.14.13 - 2021-02-05
  • 0.14.12 - 2021-02-04
  • 0.14.11 - 2021-01-29
  • 0.14.10 - 2020-12-17
  • 0.14.9 - 2020-12-04
  • 0.14.8 - 2020-11-09
  • 0.14.7 - 2020-10-30
  • 0.14.6 - 2020-10-30
  • 0.14.5 - 2020-10-27
  • 0.14.4 - 2020-10-22
  • 0.14.3 - 2020-10-19
  • 0.14.2 - 2020-10-16
  • 0.14.1 - 2020-10-12
  • 0.14.0 - 2020-10-09
  • 0.13.18 - 2020-10-09
from react-native-web GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants