[Snyk] Upgrade react-native from 0.60.5 to 0.71.6 #1160
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade react-native from 0.60.5 to 0.71.6. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/mdfkbtc/project/a2088718-36c2-4867-a45b-42143012aac0?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade react-native from 0.60.5 to 0.71.6.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-ASYNC-2441827
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-REACTNATIVE-1298632
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-SHELLQUOTE-1766506
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1536528
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1536531
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1579152
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1579155
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-LOGKITTY-568763
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1579147
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-WS-1296835
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-WS-1296835
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-HAPIHOEK-548452
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-JSON5-3182856
Why? Proof of Concept exploit, CVSS 7.5
npm:mem:20180117
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-NODENOTIFIER-1035794
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TAR-1536758
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-FSEVENTS-5487987
Why? Proof of Concept exploit, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
-
0.71.6 - 2023-04-03
- Fix React Codegen podspec to build on Xcode 14.3 (0010c3807d by @ cipolleschi)
-
0.71.5 - 2023-03-29
- Bump CLI to 10.2.2 and Metro to 0.73.9 (4c3bc24893 by @ kelset), contains:
- CLI fix: correctly list ios devices and simulators (relevant PR)
- Metro fix: fix watching contents of new directories in NodeWatcher (ab86982 by @ robhogan)
- Bump react-native-gradle-plugin to 0.71.17 (bf490d379f by @ kelset), contains:
- Fix patch for codegen for 0.71 (ec3681143e by @ kelset)
- Remove ruby-version from 0.71 (1d22e29146 by @ cipolleschi)
- Fix race condition in ReadableNativeMap (9aac13d by @ rshest)
- Give precedence to
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.71.4 - 2023-03-08
-
0.71.3 - 2023-02-14
-
0.71.2 - 2023-02-01
-
0.71.1 - 2023-01-19
-
0.71.0 - 2023-01-12
-
0.71.0-rc.6 - 2023-01-09
-
0.71.0-rc.5 - 2022-12-19
-
0.71.0-rc.4 - 2022-12-14
-
0.71.0-rc.3 - 2022-11-30
-
0.71.0-rc.2 - 2022-11-24
-
0.71.0-rc.1 - 2022-11-23
-
0.71.0-rc.0 - 2022-11-04
-
0.70.9 - 2023-04-19
- Update Hermes to
- Remove register stack size override in hermes.cpp (03f2df)
- Increase default max stack size (1b759f4)
- Resolved bug with Text components in new arch losing text alignment state. (31a8e92cad by @ javache)
- Mimimize EditText Spans 9/9: Remove
- Minimize EditText Spans 8/N: CustomStyleSpan (b384bb613b by @ NickGerleman)
- Minimize EditText Spans 6/N: letterSpacing (5791cf1f7b by @ NickGerleman)
- Minimize Spans 5/N: Strikethrough and Underline (0869ea29db by @ NickGerleman)
- Minimize Spans 4/N: ReactForegroundColorSpan (8c9c8ba5ad by @ NickGerleman)
- Minimize Spans 3/N: ReactBackgroundColorSpan (cc0ba57ea4 by @ NickGerleman)
- Minimize Spans 1/N: Fix precedence (1743dd7ab4 by @ NickGerleman)
- Fix measurement of uncontrolled TextInput after edit (8a0fe30591 by @ NickGerleman)
- Address Hermes performance regression (1df92c6 by @ kelset)
-
0.70.8 - 2023-04-04
- Relax Ruby requirements (e3a5fbe72f by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (34f3794f18 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.70.7 - 2023-01-31
-
0.70.6 - 2022-11-15
-
0.70.5 - 2022-11-06
-
0.70.4 - 2022-10-25
-
0.70.3 - 2022-10-12
-
0.70.2 - 2022-10-04
-
0.70.1 - 2022-09-15
-
0.70.0 - 2022-09-05
-
0.70.0-rc.4 - 2022-08-22
-
0.70.0-rc.3 - 2022-08-15
-
0.70.0-rc.2 - 2022-08-04
-
0.70.0-rc.1 - 2022-07-28
-
0.70.0-rc.0 - 2022-07-15
-
0.69.10 - 2023-04-25
- Minimize EditText Spans 8/N: CustomStyleSpan (b384bb613b by @ NickGerleman)
- Minimize EditText Spans 6/N: letterSpacing (5791cf1f7b by @ NickGerleman)
- Minimize Spans 5/N: Strikethrough and Underline (0869ea29db by @ NickGerleman)
- Minimize Spans 4/N: ReactForegroundColorSpan (8c9c8ba5ad by @ NickGerleman)
- Minimize Spans 3/N: ReactBackgroundColorSpan (cc0ba57ea4 by @ NickGerleman)
- Minimize Spans 1/N: Fix precedence (1743dd7ab4 by @ NickGerleman)
- Fix measurement of uncontrolled TextInput after edit (8a0fe30591 by @ NickGerleman)
-
0.69.9 - 2023-04-04
- Relax Ruby requirements (4e015c69d6 by @ cipolleschi)
- Fix React Codegen podspec to build on Xcode 14.3 (74ba411b55 by @ cipolleschi)
- Blob data is no longer prematurely deallocated when using blob.slice (36cc71ab36 by @ awinograd)
-
0.69.8 - 2023-01-30
-
0.69.7 - 2022-11-06
-
0.69.6 - 2022-09-27
-
0.69.5 - 2022-08-25
-
0.69.4 - 2022-08-08
-
0.69.3 - 2022-07-25
-
0.69.2 - 2022-07-20
-
0.69.1 - 2022-06-29
-
0.69.0 - 2022-06-22
-
0.69.0-rc.6 - 2022-06-01
-
0.69.0-rc.5 - 2022-05-31
-
0.69.0-rc.4 - 2022-05-31
-
0.69.0-rc.3 - 2022-05-24
-
0.69.0-rc.2 - 2022-05-20
-
0.69.0-rc.1 - 2022-05-11
-
0.69.0-rc.0 - 2022-04-28
-
0.68.7 - 2023-04-26
- Use logical operator instead of bit operation in Yoga (c3ad8 by @ cuva)
- Minimize EditText Spans 8/N: CustomStyleSpan (b384bb613b by @ NickGerleman)
- Minimize EditText Spans 6/N: letterSpacing (5791cf1f7b by @ NickGerleman)
- Minimize Spans 5/N: Strikethrough and Underline (0869ea29db by @ NickGerleman)
- Minimize Spans 4/N: ReactForegroundColorSpan (8c9c8ba5ad by @ NickGerleman)
- Minimize Spans 3/N: ReactBackgroundColorSpan (cc0ba57ea4 by @ NickGerleman)
- Minimize Spans 1/N: Fix precedence (1743dd7ab4 by @ NickGerleman)
- Fix measurement of uncontrolled TextInput after edit (8a0fe30591 by @ NickGerleman)
-
0.68.6 - 2023-01-30
-
0.68.5 - 2022-11-06
-
0.68.4 - 2022-10-10
-
0.68.3 - 2022-08-08
-
0.68.2 - 2022-05-09
-
0.68.1 - 2022-04-13
-
0.68.0 - 2022-03-30
-
0.68.0-rc.4 - 2022-03-25
-
0.68.0-rc.3 - 2022-03-17
-
0.68.0-rc.2 - 2022-02-24
-
0.68.0-rc.1 - 2022-02-03
-
0.68.0-rc.0 - 2022-01-28
-
0.67.5 - 2022-11-06
-
0.67.4 - 2022-03-18
-
0.67.3 - 2022-02-22
-
0.67.2 - 2022-01-31
-
0.67.1 - 2022-01-20
-
0.67.0 - 2022-01-18
-
0.67.0-rc.6 - 2021-12-14
-
0.67.0-rc.5 - 2021-12-06
-
0.67.0-rc.4 - 2021-11-30
-
0.67.0-rc.3 - 2021-11-05
-
0.67.0-rc.2 - 2021-10-25
-
0.67.0-rc.1 - 2021-10-22
-
0.67.0-rc.0 - 2021-10-16
-
0.66.5 - 2022-11-06
-
0.66.4 - 2021-12-09
-
0.66.3 - 2021-11-10
-
0.66.2 - 2021-11-04
-
0.66.1 - 2021-10-15
-
0.66.0 - 2021-10-01
-
0.66.0-rc.4 - 2021-09-24
-
0.66.0-rc.3 - 2021-09-17
-
0.66.0-rc.2 - 2021-09-10
-
0.66.0-rc.1 - 2021-09-01
-
0.66.0-rc.0 - 2021-08-27
-
0.65.3 - 2022-11-06
-
0.65.2 - 2021-11-04
-
0.65.1 - 2021-08-19
-
0.65.0 - 2021-08-17
-
0.65.0-rc.4 - 2021-08-11
-
0.65.0-rc.3 - 2021-07-23
-
0.65.0-rc.2 - 2021-06-18
-
0.65.0-rc.1 - 2021-06-17
-
0.65.0-rc.0 - 2021-06-09
-
0.64.4 - 2022-11-07
-
0.64.3 - 2021-11-04
-
0.64.2 - 2021-06-03
-
0.64.1 - 2021-05-05
-
0.64.0 - 2021-03-12
-
0.64.0-rc.4 - 2021-03-01
-
0.64.0-rc.3 - 2021-02-05
-
0.64.0-rc.2 - 2020-12-18
-
0.64.0-rc.1 - 2020-11-25
-
0.64.0-rc.0 - 2020-11-23
-
0.63.5 - 2022-11-07
-
0.63.4 - 2020-11-30
-
0.63.3 - 2020-09-29
-
0.63.2 - 2020-07-22
-
0.63.1 - 2020-07-14
-
0.63.0 - 2020-07-08
-
0.63.0-rc.1 - 2020-05-04
-
0.63.0-rc.0 - 2020-04-16
-
0.62.3 - 2021-05-05
-
0.62.2 - 2020-04-08
-
0.62.1 - 2020-04-03
-
0.62.0 - 2020-03-26
-
0.62.0-rc.5 - 2020-03-07
-
0.62.0-rc.4 - 2020-03-06
-
0.62.0-rc.3 - 2020-02-25
-
0.62.0-rc.2 - 2020-02-13
-
0.62.0-rc.1 - 2020-01-21
-
0.62.0-rc.0 - 2019-12-18
-
0.61.5 - 2019-11-23
-
0.61.4 - 2019-11-04
-
0.61.3 - 2019-10-29
-
0.61.2 - 2019-10-02
-
0.61.1 - 2019-09-25
-
0.61.0 - 2019-09-24
-
0.61.0-rc.3 - 2019-09-10
-
0.61.0-rc.2 - 2019-09-04
-
0.61.0-rc.0 - 2019-08-27
-
0.60.6 - 2019-09-24
-
0.60.5 - 2019-08-13
from react-native GitHub release notesFixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
Android specific
iOS specific
Fixed
Android specific
iOS specific
textContentTypeproperty for backwards compat as mentioned in #36229 (comment) (c0abff11b6 by @ lunaleaps)You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
This release is primarily aimed at addressing issues with ANRs using multiline TextInput on Samsung devices (#35936, #35590).
Changed
hermes-2023-04-13-RNv0.70.8-c9b539bf3d7bfa4143ff1a5751886c7b2dd728a2(7b1441730b), contains:Fixed
Android specific
addSpansForMeasurement()(92b8981499 by @ NickGerleman)iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
This release is primarily aimed at addressing issues with ANRs using multiline TextInput on Samsung devices (#35936, #35590).
Fixed
Android specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
Changed
iOS specific
Fixed
iOS specific
You can participate in the conversation on the status of this release in this discussion.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history in the changelog.md file.
🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.
Hotfix
This release is primarily aimed at addressing issues with ANRs using multiline TextInput on Samsung devices (#35936, #35590).
Fixed
Android specific
You can find the whole changelog history in the changelog.md file.
Commit messages
Package name: react-native
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs