[Snyk] Upgrade react-native from 0.63.3 to 0.72.0 #1102

NOUIY · 2023-07-13T01:31:47Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 124 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-06-21.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Use After Free SNYK-JS-HERMESENGINE-1309667	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	569/1000 Why? Has a fix available, CVSS 7.1	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	569/1000 Why? Has a fix available, CVSS 7.1	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Prototype Pollution SNYK-JS-UNSETVALUE-2400660	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	569/1000 Why? Has a fix available, CVSS 7.1	Proof of Concept
Prototype Pollution SNYK-JS-HERMESENGINE-608850	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.72.0 - 2023-06-21

🎉 0.72 stable is out 🎉

This release includes over 1100 commits from 70+ contributors! Thank you to all our contributors new and old!

See the highlights of the release in our release blog post.

You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.72.0-rc.6 - 2023-06-13
0.72.0-rc.5 - 2023-06-01
0.72.0-rc.4 - 2023-05-31
0.72.0-rc.3 - 2023-05-11
0.72.0-rc.2 - 2023-05-04
0.72.0-rc.1 - 2023-04-05
0.72.0-rc.0 - 2023-03-20
0.71.12 - 2023-07-04
Fixed
- Prevent LogBox from crashing on very long messages (cd56347dca by @ motiz88)
Android specific
- Added CSS logical properties by mapping layout props (2b06a75631 by @ NickGerleman and @ AlexanderEggers) to fix view flattening on Android.
iOS specific
- fix pod install --project-directory=ios failing (fc1abe1d69 by @ tido64)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.11 - 2023-06-14
Changed
- Bump CLI to 10.2.4 and Metro to 0.73.10 (69804c70cb by @ kelset)
iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan)
Fixed

Android specific
- Fixed crash occurring in certain native views when handling keyboard events. (f7e35d4ef7 by @ aleqsio)
- Prevent crash on OnePlus/Oppo devices in runAnimationStep (f2c05142 by @ hsource)
- Revert "fix: border width top/bottom not matching the border radius" to fix border styling issues (fd8a19d by @ kelset)
iOS specific
- Make 0.71 compatible with Xcode 15 (thanks to @ AlexanderEggers for the commit in main) (5bd1a4256e by @ kelset)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.10 - 2023-06-07
0.71.9 - 2023-06-07
0.71.8 - 2023-05-10
0.71.7 - 2023-04-19
0.71.6 - 2023-04-03
0.71.5 - 2023-03-29
0.71.4 - 2023-03-08
0.71.3 - 2023-02-14
0.71.2 - 2023-02-01
0.71.1 - 2023-01-19
0.71.0 - 2023-01-12
0.71.0-rc.6 - 2023-01-09
0.71.0-rc.5 - 2022-12-19
0.71.0-rc.4 - 2022-12-14
0.71.0-rc.3 - 2022-11-30
0.71.0-rc.2 - 2022-11-24
0.71.0-rc.1 - 2022-11-23
0.71.0-rc.0 - 2022-11-04
0.70.12 - 2023-07-05
Fixed

iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan) to address #36794
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.11 - 2023-07-04
Changed
- Bump CLI to 9.3.3 and Metro do 0.72.4 (2a9d71dc34 by @ kelset) to address #36794
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.10 - 2023-06-08
0.70.9 - 2023-04-19
0.70.8 - 2023-04-04
0.70.7 - 2023-01-31
0.70.6 - 2022-11-15
0.70.5 - 2022-11-06
0.70.4 - 2022-10-25
0.70.3 - 2022-10-12
0.70.2 - 2022-10-04
0.70.1 - 2022-09-15
0.70.0 - 2022-09-05
0.70.0-rc.4 - 2022-08-22
0.70.0-rc.3 - 2022-08-15
0.70.0-rc.2 - 2022-08-04
0.70.0-rc.1 - 2022-07-28
0.70.0-rc.0 - 2022-07-15
0.69.12 - 2023-07-04
Changed
- [0.69] Bump CLI to ^8.0.7, Metro to 0.70.4 (56807fadfa by @ robhogan)
iOS specific
- [0.69] Use Content-Location header in bundle response as JS source URL (#37501) (367fc7ad52 by @ robhogan)
Fixed

Android specific
- Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487) (4db7a10e25 by @ hsource)
0.69.12 is the latest patch the Release Crew will prepare for version 0.69. You can have a look at the latest discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.11 - 2023-06-08
0.69.10 - 2023-04-25
0.69.9 - 2023-04-04
0.69.8 - 2023-01-30
0.69.7 - 2022-11-06
0.69.6 - 2022-09-27
0.69.5 - 2022-08-25
0.69.4 - 2022-08-08
0.69.3 - 2022-07-25
0.69.2 - 2022-07-20
0.69.1 - 2022-06-29
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.7 - 2023-04-26
0.68.6 - 2023-01-30
0.68.5 - 2022-11-06
0.68.4 - 2022-10-10
0.68.3 - 2022-08-08
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.5 - 2022-11-06
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.5 - 2022-11-06
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.3 - 2022-11-06
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.4 - 2022-11-07
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.5 - 2022-11-07
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

7a893e4 [0.72.0] Bump version numbers
3863877 [LOCAL] update podfile.lock
ec4771b [0.72.0-rc.6] Bump version numbers
a2df07e [LOCAL] bump CLI to 11.3.2
b2f2737 bumped packages versions
0817eaa Revert "fix: border width top/bottom not matching the border radius" (Revert "fix: border width top/bottom not matching the border radius" facebook/react-native#37840)
0da7e06 Remove CallInvoker parameter from toJs method in Codegen (Remove CallInvoker parameter from toJs method in Codegen facebook/react-native#37832)
2d15f50 Fix Android border clip check (Fix Android border clip check facebook/react-native#37828)
2760042 Fix loading NODE_BINARY inside Generate Legacy Components Interop (Fix loading NODE_BINARY inside Generate Legacy Components Interop facebook/react-native#37802)
8ed2cfd Add support for building with Xcode 15 (Add support for building with Xcode 15 facebook/react-native#37758)
73f4a78 Fixed random styling for text nodes with many children ([ANDROID] [FIXED] Fixed random styling for text nodes with many children facebook/react-native#36656)
dfc64d5 Fix copy / paste menu and simplify controlled text selection on Android (Fix copy / paste menu and simplify controlled text selection on Android facebook/react-native#37424)
bab5bab [LOCAL] bump hermes podlock
a98c7c6 [0.72.0-rc.5] Bump version numbers
7dc11bc bumped packages versions
e11396e [0.72.0-rc.4] Bump version numbers
60a452b [LOCAL] Fix performance issues in Hermes when Debug
32327cc [LOCAL] Fix hermesc for linux ([LOCAL] Fix hermesc for linux facebook/react-native#37591)
52d2065 [LOCAL] Make sure Java Toolchain and source/target level is applied to all projects ([LOCAL] Make sure Java Toolchain and source/target level is applied to all projects facebook/react-native#37576)
e0c88fe [LOCAL] Fix Ruby tests
a4aaee0 [LOCAL] Remove double definition of task wrapper after merge conflict
74e3803 bumped packages versions
7c5dc1d [LOCAL] bump metro to 0.76.5 and CLI to 11.3.1
c43bd7a Do not use setNativeState in RuntimeScheduler::Task

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.0. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native from 0.63.3 to 0.72.0 #1102

[Snyk] Upgrade react-native from 0.63.3 to 0.72.0 #1102

NOUIY commented Jul 13, 2023

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific

[Snyk] Upgrade react-native from 0.63.3 to 0.72.0 #1102

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.72.0 #1102

Conversation

NOUIY commented Jul 13, 2023

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.72.0.

🎉 0.72 stable is out 🎉

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Changed

iOS specific

Fixed

Android specific