[Snyk] Upgrade react-native from 0.63.3 to 0.69.5

[snyk-bot]

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 62 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-08-25.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

• 0.69.5 - 2022-08-25
  

  Changed

  • Bump react-native-codegen to 0.69.2 (df3d52bfbf by @ dmitryrykun)

  Android specific

  • Replaced reactnativeutilsjni with reactnativejni in the build process to reduce size (54a4fcbfdc by @ SparshaSaha)

  Fixed

  • Codegen should ignore .d.ts files (0f0d52067c by @ tido64)

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file

• 0.69.4 - 2022-08-08
  

  Changed

  • Upgrade RN CLI to v8.0.4 (66c68c37ce by @ thymikee)

  Android specific

  • Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.69.3 - 2022-07-25
• 0.69.2 - 2022-07-20
• 0.69.1 - 2022-06-29
• 0.69.0 - 2022-06-22
• 0.69.0-rc.6 - 2022-06-01
• 0.69.0-rc.5 - 2022-05-31
• 0.69.0-rc.4 - 2022-05-31
• 0.69.0-rc.3 - 2022-05-24
• 0.69.0-rc.2 - 2022-05-20
• 0.69.0-rc.1 - 2022-05-11
• 0.69.0-rc.0 - 2022-04-28
• 0.68.3 - 2022-08-08
  

  Changed

  Android specific

  • Let's not build reactnativeutilsjni shared library (af9225ec5f by @ SparshaSaha)
  • Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)

  Fixed

  • Use monotonic clock for performance.now() (114d31feee)

  Android specific

  • Logging a soft error when ReactRootView has an id other than -1 instead of crashing the app in hybrid apps (1ca2c24930 by @ Kunal-Airtel2022)

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.68.2 - 2022-05-09
• 0.68.1 - 2022-04-13
• 0.68.0 - 2022-03-30
• 0.68.0-rc.4 - 2022-03-25
• 0.68.0-rc.3 - 2022-03-17
• 0.68.0-rc.2 - 2022-02-24
• 0.68.0-rc.1 - 2022-02-03
• 0.68.0-rc.0 - 2022-01-28
• 0.67.4 - 2022-03-18
• 0.67.3 - 2022-02-22
• 0.67.2 - 2022-01-31
• 0.67.1 - 2022-01-20
• 0.67.0 - 2022-01-18
• 0.67.0-rc.6 - 2021-12-14
• 0.67.0-rc.5 - 2021-12-06
• 0.67.0-rc.4 - 2021-11-30
• 0.67.0-rc.3 - 2021-11-05
• 0.67.0-rc.2 - 2021-10-25
• 0.67.0-rc.1 - 2021-10-22
• 0.67.0-rc.0 - 2021-10-16
• 0.66.4 - 2021-12-09
• 0.66.3 - 2021-11-10
• 0.66.2 - 2021-11-04
• 0.66.1 - 2021-10-15
• 0.66.0 - 2021-10-01
• 0.66.0-rc.4 - 2021-09-24
• 0.66.0-rc.3 - 2021-09-17
• 0.66.0-rc.2 - 2021-09-10
• 0.66.0-rc.1 - 2021-09-01
• 0.66.0-rc.0 - 2021-08-27
• 0.65.2 - 2021-11-04
• 0.65.1 - 2021-08-19
• 0.65.0 - 2021-08-17
• 0.65.0-rc.4 - 2021-08-11
• 0.65.0-rc.3 - 2021-07-23
• 0.65.0-rc.2 - 2021-06-18
• 0.65.0-rc.1 - 2021-06-17
• 0.65.0-rc.0 - 2021-06-09
• 0.64.3 - 2021-11-04
• 0.64.2 - 2021-06-03
• 0.64.1 - 2021-05-05
• 0.64.0 - 2021-03-12
• 0.64.0-rc.4 - 2021-03-01
• 0.64.0-rc.3 - 2021-02-05
• 0.64.0-rc.2 - 2020-12-18
• 0.64.0-rc.1 - 2020-11-25
• 0.64.0-rc.0 - 2020-11-23
• 0.63.4 - 2020-11-30
• 0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

• 38cfe63 [0.69.5] Bump version numbers
• eb779dc Fix test-manual-e2e on Android/Hermes for New App Template (Fix test-manual-e2e on Android/Hermes for New App Template facebook/react-native#34294)
• df3d52b Bump react-native-codegen to 0.69.2
• 5d2b4ee Fix codegen trying to parse `.d.ts` files (Fix codegen trying to parse .d.ts files facebook/react-native#34439)
• 48a3127 Removing reactnativeutilsjni as it is built from the same sources as reactnativejni (Removing reactnativeutilsjni as it is built from the same sources as reactnativejni facebook/react-native#34339)
• 4bdec97 [0.69.4] Bump version numbers
• 8524177 Added additional builder method receiving arguments for using jsc or hermes to correctly decide which DSO to load at app startup. (Added additional builder method receiving arguments for using jsc or hermes to correctly decide which DSO to load at app startup.  facebook/react-native#33952)
• df31a1e Update script from prepublish (deprecated) to prepack ([codegen] Update script from prepublish (deprecated) to prepack facebook/react-native#34198)
• 66c68c3 Upgrade RN CLI to v8.0.4 (Upgrade RN CLI to v8.0.4 facebook/react-native#34272)
• 6fe8367 [0.69.3] Bump version numbers
• b9e9b53 Merge pull request Fix React-bridging header not found for third party modules facebook/react-native#34214 from Kudo/fix-34102
• fa2acc3 Fix React-bridging header not found for third party modules
• 30d1e20 Merge pull request [FIX] Build hermes from source on PR against stable facebook/react-native#34228 from facebook/fix/build_hermes_against_stable
• a2d6f5a fix: build hermes from source on PR against stable
• 75eb6e7 [0.69.2] Bump version numbers
• b807253 Merge pull request Fix/hermes in release facebook/react-native#34223 from facebook/fix/hermes_in_release
• d6be1af fix: make sure we can build hermes when working against stable
• a19578d Hermes pod: change logic to use the hermes tag to set the pod source correctly ([fix] Hermes pod: change logic to use the hermes tag to set the pod source correctly facebook/react-native#34221)
• 112d678 fix: fix the race condition when calling readAsDataURL after new Blob(blobs) (fix: fix the race condition when calling readAsDataURL after new Blob(blobs) facebook/react-native#34096)
• 4f72a02 fix(jest): make assetFileTransformer return an object (fix(jest): make assetFileTransformer return an object facebook/react-native#33756)
• a39a7c4 fix(deps): react-shallow-renderer v16.15.0 for react v18 compat (fix(deps): react-shallow-renderer v16.15.0 for react v18 compat facebook/react-native#34104)
• 28cbd21 Upgrade RN CLI to v8.0.3 (Upgrade RN CLI to v8.0.3 facebook/react-native#34159)
• 23accbf [fix] backport FlipperConfiguration from main ([fix] backport FlipperConfiguration from main facebook/react-native#34098)
• 587eb4e [0.69.1] Bump version numbers

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs