Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Breaking: Require ReactNative version 0.62.2 #315

Merged
merged 2 commits into from
Jun 8, 2020
Merged

Conversation

lbalmaceda
Copy link
Contributor

@lbalmaceda lbalmaceda commented Jun 8, 2020

Changes

This PR bumps most dependencies to their latest version.

It also upgrades the minimum required react-native version from 0.60.5 to 0.62.2. This is in response to CVE-2020-8149.

  • AndroidX Browser to 1.2.0
  • React to +16.11.0
  • React-Native to +0.62.2
  • Logkitty to +0.7.1

References

GHSA-v8v8-6859-qxm4

Testing

No additional tests were required. I will be updating the sample app soon.

  • This change adds unit test coverage
  • This change has been tested on the latest version of the platform/language or why not

Checklist

@lbalmaceda lbalmaceda added CH: Security small This PR may require low effort to action, or contains few changes to review labels Jun 8, 2020
@lbalmaceda lbalmaceda added this to the v2-Next milestone Jun 8, 2020
@lbalmaceda lbalmaceda requested a review from a team June 8, 2020 18:54
@lbalmaceda lbalmaceda merged commit 1396162 into master Jun 8, 2020
@lbalmaceda lbalmaceda modified the milestones: v2-Next, v2.5.0 Jun 9, 2020
@evansims evansims deleted the bump-react branch July 5, 2022 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CH: Security small This PR may require low effort to action, or contains few changes to review
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants