Skip to content

Commit

Permalink
chore(deps): bump ip from 1.1.8 to 1.1.9 in example apps (software-ma…
Browse files Browse the repository at this point in the history
…nsion#2044)

## Description

Just aggregating dependabot PRs with the version updates of `ip` package
from 1.1.8 to 1.1.9.

For the context, this change is made because of the latest vulnerability
that has been exposed in `ip` library. The version of this package is
vulnerable to Server-Side Request Forgery (SSRF) attacks (CVE:
GHSA-78xj-cgh5-2h22).

## Changes

- software-mansion#2039
- software-mansion#2040
- software-mansion#2041
- software-mansion#2042
- software-mansion#2043

## Checklist

- [X] Ensured that CI passes

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
2 people authored and ja1ns committed Oct 9, 2024
1 parent 2014eed commit 2de8ac5
Show file tree
Hide file tree
Showing 5 changed files with 32 additions and 24 deletions.
12 changes: 7 additions & 5 deletions Example/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -4403,9 +4403,9 @@ invariant@*, invariant@^2.2.4:
loose-envify "^1.0.0"

ip@^1.1.5:
version "1.1.8"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48"
integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==
version "1.1.9"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396"
integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==

is-accessor-descriptor@^0.1.6:
version "0.1.6"
Expand Down Expand Up @@ -6906,8 +6906,10 @@ react-native-safe-area-context@^4.8.1:
integrity sha512-gYoZyxKuWHfxXHTFGpkFKgfRHDAqTs+I/NZsiXdllMmIfOme25MGPHVmuHrA0Jq4rg189x/JiscFCv2IvDCC6A==

"react-native-screens@link:..":
version "0.0.0"
uid ""
version "3.29.0"
dependencies:
react-freeze "^1.0.0"
warn-once "^0.1.0"

react-native-vector-icons@^8.0.0:
version "8.1.0"
Expand Down
12 changes: 7 additions & 5 deletions FabricExample/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -3965,9 +3965,9 @@ invariant@^2.2.4:
loose-envify "^1.0.0"

ip@^1.1.5:
version "1.1.8"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48"
integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==
version "1.1.9"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396"
integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==

is-array-buffer@^3.0.1, is-array-buffer@^3.0.2:
version "3.0.2"
Expand Down Expand Up @@ -5953,8 +5953,10 @@ react-native-safe-area-context@^4.8.1:
integrity sha512-gYoZyxKuWHfxXHTFGpkFKgfRHDAqTs+I/NZsiXdllMmIfOme25MGPHVmuHrA0Jq4rg189x/JiscFCv2IvDCC6A==

"react-native-screens@link:..":
version "0.0.0"
uid ""
version "3.29.0"
dependencies:
react-freeze "^1.0.0"
warn-once "^0.1.0"

react-native@0.73.4:
version "0.73.4"
Expand Down
12 changes: 7 additions & 5 deletions FabricTestExample/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -4071,9 +4071,9 @@ invariant@^2.2.4:
loose-envify "^1.0.0"

ip@^1.1.5:
version "1.1.8"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48"
integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==
version "1.1.9"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396"
integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==

is-array-buffer@^3.0.1, is-array-buffer@^3.0.2:
version "3.0.2"
Expand Down Expand Up @@ -5997,8 +5997,10 @@ react-native-safe-area-context@^4.8.1:
integrity sha512-gYoZyxKuWHfxXHTFGpkFKgfRHDAqTs+I/NZsiXdllMmIfOme25MGPHVmuHrA0Jq4rg189x/JiscFCv2IvDCC6A==

"react-native-screens@link:..":
version "0.0.0"
uid ""
version "3.29.0"
dependencies:
react-freeze "^1.0.0"
warn-once "^0.1.0"

react-native@0.73.4:
version "0.73.4"
Expand Down
8 changes: 4 additions & 4 deletions TVOSExample/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -3837,9 +3837,9 @@ invariant@2.2.4, invariant@^2.2.4:
loose-envify "^1.0.0"

ip@^1.1.5:
version "1.1.8"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48"
integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==
version "1.1.9"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396"
integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==

is-accessor-descriptor@^0.1.6:
version "0.1.6"
Expand Down Expand Up @@ -6207,7 +6207,7 @@ react-native-safe-area-context@^4.0.1-rc.5:
integrity sha512-0WORnk9SkREGUg2V7jHZbuN5x4vcxj/1B0QOcXJjdYWrzZHgLcUzYWWIUecUPJh747Mwjt/42RZDOaFn3L8kPQ==

"react-native-screens@link:..":
version "3.26.0"
version "3.29.0"
dependencies:
react-freeze "^1.0.0"
warn-once "^0.1.0"
Expand Down
12 changes: 7 additions & 5 deletions TestsExample/yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -4071,9 +4071,9 @@ invariant@^2.2.4:
loose-envify "^1.0.0"

ip@^1.1.5:
version "1.1.8"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.8.tgz#ae05948f6b075435ed3307acce04629da8cdbf48"
integrity sha512-PuExPYUiu6qMBQb4l06ecm6T6ujzhmh+MeJcW9wa89PoAz5pvd4zPgN5WJV104mb6S2T1AwNIAaB70JNrLQWhg==
version "1.1.9"
resolved "https://registry.yarnpkg.com/ip/-/ip-1.1.9.tgz#8dfbcc99a754d07f425310b86a99546b1151e396"
integrity sha512-cyRxvOEpNHNtchU3Ln9KC/auJgup87llfQpQ+t5ghoC/UhL16SWzbueiCsdTnWmqAWl7LadfuwhlqmtOaqMHdQ==

is-array-buffer@^3.0.1, is-array-buffer@^3.0.2:
version "3.0.2"
Expand Down Expand Up @@ -6007,8 +6007,10 @@ react-native-safe-area-context@^4.8.1:
integrity sha512-gYoZyxKuWHfxXHTFGpkFKgfRHDAqTs+I/NZsiXdllMmIfOme25MGPHVmuHrA0Jq4rg189x/JiscFCv2IvDCC6A==

"react-native-screens@link:..":
version "0.0.0"
uid ""
version "3.29.0"
dependencies:
react-freeze "^1.0.0"
warn-once "^0.1.0"

react-native@0.73.4:
version "0.73.4"
Expand Down

0 comments on commit 2de8ac5

Please sign in to comment.