[Snyk] Upgrade react-native from 0.50.3 to 0.61.5 #1

snyk-bot · 2020-01-23T06:23:18Z

Snyk has created this PR to upgrade react-native from 0.50.3 to 0.61.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 99 versions ahead of your current version.
The recommended version was released 2 months ago, on 2019-11-23.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Denial of Service (DoS) npm:ws:20171108	Mature
	Regular Expression Denial of Service (ReDoS) npm:sshpk:20180409	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:sshpk:20180409	Proof of Concept
	Prototype Override Protection Bypass npm:qs:20170213	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:plist:20180219	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:plist:20180219	Proof of Concept
	Regular Expression Denial of Service (DoS) npm:negotiator:20160616	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	No Known Exploit
	Prototype Pollution npm:extend:20180424	No Known Exploit
	Prototype Pollution npm:deep-extend:20180409	No Known Exploit
	Uninitialized Memory Exposure npm:base64-url:20180512	Mature
	Arbitrary File Overwrite SNYK-JS-TAR-174125	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-FSTREAM-174725	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:tough-cookie:20170905	No Known Exploit
	Insecure use of Tmp files npm:sync-exec:20160124	No Known Exploit
	Uninitialized Memory Exposure npm:stringstream:20180511	Mature
	Prototype Pollution npm:hoek:20180212	No Known Exploit
	Prototype Pollution npm:hoek:20180212	No Known Exploit
	Insecure Randomness npm:cryptiles:20180710	No Known Exploit
	Arbitrary Code Injection SNYK-JS-MORGAN-72579	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:braces:20180219	Proof of Concept
	Prototype Pollution SNYK-JS-MERGE-72553	Mature
	Information Disclosure SNYK-JS-KINDOF-537849	Proof of Concept
	Information Disclosure SNYK-JS-KINDOF-537849	Proof of Concept

Release notes

Package name: react-native

0.61.5 - 2019-11-23
This release fixes a few minor issues that were reported by the community. You can view the complete changelog here.

You can participate in the conversation for the next patch release in the dedicated issue.

To help you upgrade to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.4 - 2019-11-04
This release fixes a few minor issues that were reported by the community. You can view the complete changelog here.

You can participate in the conversation for the next patch release in the dedicated issue.

To help you upgrade to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.3 - 2019-10-29
This release fixes few minor issues that were reported by the community. You can view the complete changelog here.

You can participate in the conversation for the next patch release in the dedicated issue.

To help you upgrade to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.2 - 2019-10-02
This release fixes shadow issues that were happening on Android as well as improves StatusBar API to better support iOS 13 dark mode.

Unfortunately, it re-introduces an issue with ripple effect not respecting borderRadius. Consider using the workaround provided in the linked issue while we are working on a better solution.

You can participate in the conversation for the next patch release in the dedicated issue.

To help you upgrade to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.1 - 2019-09-25
This release fixes issues with react-native-gesture-handler.

You can participate in the conversation for the next patch release in the dedicated issue.

To help you upgrade to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.0 - 2019-09-24
0.61 stable is here 🎉

Thanks to everyone who contributed and helped to get this together, everyone worked really hard and we hope you are as excited as we are 🤗

Some of the major changes that this version brings:
- Whole new hot reloading experience, called "Fast refresh". It is turned on by default and can be accessed under the developer menu. Expect more details about this feature in the upcoming blog post.
- React version has been updated to 16.9 - 0ccedf3
- Better CocoaPods support with use_frameworks!
Please refer to this issue for updates on the status of this release candidate - also, you can post here the link to the issues you have reported for this version so that they can be surfaced easily.

You can also test upgrading to this version using the upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.61.0-rc.3 - 2019-09-10
[0.61.0-rc.3] Bump version numbers
0.61.0-rc.2 - 2019-09-04
[0.61.0-rc.2] Bump version numbers
0.61.0-rc.0 - 2019-08-27
0.60.6 - 2019-09-24
This is a small patch release with a commit to fix the build break in MSVC (thanks @acoates!) to help the users of react-native-windows.

You can participate to the conversation for the next patch release in the dedicated issue.

To help you upgrading to this version, you can use the new upgrade helper webtool ⚛️

You can find the whole changelog history over at react-native-releases.
0.60.5 - 2019-08-13
0.60.4 - 2019-07-18
0.60.3 - 2019-07-11
0.60.2 - 2019-07-11
0.60.1 - 2019-07-11
0.60.0 - 2019-07-03
0.60.0-rc.3 - 2019-06-28
0.60.0-rc.2 - 2019-06-20
0.60.0-rc.1 - 2019-06-10
0.60.0-rc.0 - 2019-05-30
0.59.10 - 2019-07-02
0.59.9 - 2019-06-05
0.59.8 - 2019-05-08
0.59.7 - 2019-05-08
0.59.6 - 2019-04-18
0.59.5 - 2019-04-17
0.59.4 - 2019-04-08
0.59.3 - 2019-04-01
0.59.2 - 2019-03-25
0.59.1 - 2019-03-14
0.59.0 - 2019-03-12
0.59.0-rc.3 - 2019-02-27
0.59.0-rc.2 - 2019-02-18
0.59.0-rc.1 - 2019-02-15
0.59.0-rc.0 - 2019-02-13
0.58.6 - 2019-02-28
0.58.5 - 2019-02-19
0.58.4 - 2019-02-06
0.58.3 - 2019-01-28
0.58.2 - 2019-01-28
0.58.1 - 2019-01-25
0.58.0 - 2019-01-24
0.58.0-rc.3 - 2019-01-17
0.58.0-rc.2 - 2018-12-18
0.58.0-rc.1 - 2018-12-06
0.58.0-rc.0 - 2018-11-22
0.57.8 - 2018-12-13
0.57.7 - 2018-11-27
0.57.6 - 2018-11-26
0.57.5 - 2018-11-13
0.57.4 - 2018-10-25
0.57.3 - 2018-10-12
0.57.2 - 2018-10-04
0.57.1 - 2018-09-21
0.57.0 - 2018-09-12
0.57.0-rc.4 - 2018-09-06
0.57.0-rc.3 - 2018-08-24
0.57.0-rc.2 - 2018-08-22
0.57.0-rc.1 - 2018-08-22
0.57.0-rc.0 - 2018-08-16
0.56.1 - 2018-09-10
0.56.0 - 2018-07-04
0.56.0-rc.5 - 2018-07-04
0.56.0-rc.4 - 2018-06-27
0.56.0-rc.3 - 2018-06-22
0.56.0-rc.2 - 2018-06-15
0.56.0-rc.1 - 2018-06-13
0.56.0-rc - 2018-06-11
0.55.4 - 2018-05-08
0.55.3 - 2018-04-17
0.55.2 - 2018-04-09
0.55.1 - 2018-04-05
0.55.0 - 2018-04-03
0.55.0-rc.2 - 2018-03-29
0.55.0-rc.1 - 2018-03-21
0.55.0-rc.0 - 2018-03-13
0.54.4 - 2018-03-29
0.54.3 - 2018-03-26
0.54.2 - 2018-03-12
0.54.1 - 2018-03-10
0.54.0 - 2018-03-01
0.54.0-rc.4 - 2018-02-27
0.54.0-rc.3 - 2018-02-13
0.54.0-rc.2 - 2018-02-12
0.54.0-rc.0 - 2018-02-12
0.53.3 - 2018-02-20
0.53.2 - 2018-02-19
0.53.0 - 2018-02-05
0.53.0-rc.0 - 2018-01-10
0.52.3 - 2018-02-19
0.52.2 - 2018-01-26
0.52.1 - 2018-01-22
0.52.0 - 2018-01-08
0.52.0-rc.0 - 2017-12-18
0.51.1 - 2018-02-19
0.51.0 - 2017-12-06
0.51.0-rc.3 - 2017-12-04
0.51.0-rc.2 - 2017-11-22
0.50.4 - 2017-11-24
0.50.3 - 2017-11-08