Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade react-native from 0.71.8 to 0.72.3 #60

Merged
merged 2 commits into from
Aug 22, 2023

Conversation

Woodpile37
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-native from 0.71.8 to 0.72.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 15 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-07-12.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-UNSETVALUE-2400660
375/1000
Why? CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: react-native
  • 0.72.3 - 2023-07-12

    Fixed

    iOS specific


    You can participate in the conversation on the status of this release in this discussion.


    To help you upgrade to this version, you can use the upgrade helper ⚛️


    You can find the whole changelog history in the changelog.md file.

  • 0.72.2 - 2023-07-11

    Changed

    Android specific

    iOS specific

    Fixed

    • global.performance in undefined when starting metro from Expo CLI (0ccbd65581 by @ Kudo)
    • Re-enabled debugging for debug builds (41477c898c by Matt Blagden)
    • Add global hook to assert that base Metro config is called (29f2602ff9 by @ huntie)

    Android specific

    iOS specific

    • Fix build error when there are multiple EXTRA_COMPILER_ARGS (28f4ebab8a by @ fergusean)
    • Build failure with pnpm and use_frameworks! due to incorrect header paths (58adc5e4b9 by evelant)
    • Fix onChangeText not firing when clearing the value of TextInput with multiline=true on iOS (0c9c57a9f7 by @ kkoudev)
    • Fix pod install for libraries using Swift code when the new architecture is enabled (a4a0655496 by @ louiszawadzki)

    ⚠️ we are aware of an issue with building iOS apps with Xcode 14.2, please refer to this issue for more details and updates.


    You can participate in the conversation on the status of this release in this discussion.


    To help you upgrade to this version, you can use the upgrade helper ⚛️


    You can find the whole changelog history in the changelog.md file.

  • 0.72.1 - 2023-06-29

    Added

    iOS specific

    Changed

    • react-native/metro-config now includes all base config values from metro-config (bbcedd385b by @ huntie)
    • Bump CLI to 11.3.3 (da84901f78 by @ kelset)
    • Bumped @ react-native/metro-config to 0.72.7, @ react-native/gradle-plugin to 0.72.11, @ react-native/virtualized-lists to 0.72.6 (95db9f98f2 by @ kelset)

    Fixed

    • react-native/virtualized-lists does not need react-test-renderer at runtime (7a2a3278d0 by @ tido64)

    Android specific

    iOS specific


    You can participate in the conversation on the status of this release in this discussion.


    To help you upgrade to this version, you can use the upgrade helper ⚛️


    You can find the whole changelog history in the changelog.md file.

  • 0.72.0 - 2023-06-21
  • 0.72.0-rc.6 - 2023-06-13
  • 0.72.0-rc.5 - 2023-06-01
  • 0.72.0-rc.4 - 2023-05-31
  • 0.72.0-rc.3 - 2023-05-11
  • 0.72.0-rc.2 - 2023-05-04
  • 0.72.0-rc.1 - 2023-04-05
  • 0.72.0-rc.0 - 2023-03-20
  • 0.71.12 - 2023-07-04

    Fixed

    Android specific

    iOS specific


    You can participate in the conversation on the status of this release in this discussion.


    To help you upgrade to this version, you can use the upgrade helper ⚛️


    You can find the whole changelog history in the changelog.md file.

  • 0.71.11 - 2023-06-14
  • 0.71.10 - 2023-06-07
  • 0.71.9 - 2023-06-07
  • 0.71.8 - 2023-05-10
from react-native GitHub release notes
Commit messages
Package name: react-native
  • 24b6820 [0.72.3] Bump version numbers
  • 8f41f25 Revert "Fix pod install for swift libs using new arch (#38121)"
  • b95c87d [0.72.2] Bump version numbers
  • 63f78ea [LOCAL] remove stub types from dependencies
  • 839091b Revert "[LOCAL] fix the metro-config version or it will pick the wrong one on CI"
  • 73ca044 [LOCAL] fix the metro-config version or it will pick the wrong one on CI
  • f373861 bumped packages versions
  • ba5fa9c [LOCAL] bump CLI to 11.3.5 and Metro do 0.76.7
  • 9781850 Restore envinfo for test_windows (#38062)
  • 21daa6e bumped packages versions
  • 4704497 Update when view are added to the ViewRegistry (#38223)
  • 1683b12 add InitializeCore in getModulesRunBeforeMainModule (#38207)
  • e163a13 fix: repairs $EXTRA_COMPILER_ARGS error with multiple args (#38147)
  • ee8d5e0 Compile hermes-engine with -DHERMES_ENABLE_DEBUGGER=False on Release (#38212)
  • fe2964a Fix build failure on iOS with pnpm and use_frameworks! (#38158)
  • 965169f Enable debugging in debug build (#38205)
  • 0759422 Fix onChangeText not firing when clearing the value of TextInput with multiline=true on iOS (#37958)
  • 914db09 Disable nstextstorage_caching in OSS (#38129)
  • 7a4ae79 Fix pod install for swift libs using new arch (#38121)
  • e250676 Add global hook to assert that base Metro config is called (#38126)
  • 03b9b52 Remove okhttp internal util usage (#37843)
  • a46a7cd Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487)
  • d73b61c Do not create RuntimeExecutor on non-JSI executors (#38125) (#38142)
  • e22bd7f [LOCAL] update podlock

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@changeset-bot
Copy link

changeset-bot bot commented Aug 22, 2023

⚠️ No Changeset found

Latest commit: c6edd9c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@socket-security
Copy link

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
react-native 0.71.8...0.72.3 None +59/-143 69 MB react-native-bot

@Woodpile37 Woodpile37 merged commit 9d74d84 into master Aug 22, 2023
1 check was pending
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants