[Snyk] Upgrade react-native from 0.63.3 to 0.69.3 #559

snyk-bot · 2022-08-16T01:35:01Z

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 60 versions ahead of your current version.
The recommended version was released 21 days ago, on 2022-07-25.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.69.3 - 2022-07-25
Fixed

iOS specific
- Fix React-bridging header not found for third party modules (fa2acc32d1 by @ Kudo)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.2 - 2022-07-20
Changed
- Set react-shallow-renderer v16.15.0 for react v18 compat (a39a7c453d by @ mikehardy)
- Upgrade RN CLI to v8.0.3 (28cbd21d21 by @ thymikee)
iOS specific
- Hermes pod: change logic to use the hermes tag to set the pod source correctly (46a9edc854 by @ kelset)
- Fix the race condition when calling readAsDataURL after new Blob(blobs) (bd12e41188 by @ wood1986)
- Make sure that Flipper pods are not installed when creating a release build (23accbf58d by @ cipolleschi)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.1 - 2022-06-29

Changed

iOS specific
- Make all Yoga headers public and add #ifdef __cplusplus (43f831b23c by @ janicduplessis)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
iOS specific
- Fix build for React-RCTText (4ea38e16bf by @ ph4r05)
- Fix RCT-Folly build error when use_frameworks! and hermes are both enabled (79baca678a by @ Kudo)
- Fix use_frameworks! for 0.69 (f97c6a5b49 by @ Kudo)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.3 - 2022-08-08
Changed

Android specific
- Let's not build reactnativeutilsjni shared library (af9225ec5f by @ SparshaSaha)
- Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
Android specific
- Logging a soft error when ReactRootView has an id other than -1 instead of crashing the app in hybrid apps (1ca2c24930 by @ Kunal-Airtel2022)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

6fe8367 [0.69.3] Bump version numbers
b9e9b53 Merge pull request Fix React-bridging header not found for third party modules facebook/react-native#34214 from Kudo/fix-34102
fa2acc3 Fix React-bridging header not found for third party modules
30d1e20 Merge pull request [FIX] Build hermes from source on PR against stable facebook/react-native#34228 from facebook/fix/build_hermes_against_stable
a2d6f5a fix: build hermes from source on PR against stable
75eb6e7 [0.69.2] Bump version numbers
b807253 Merge pull request Fix/hermes in release facebook/react-native#34223 from facebook/fix/hermes_in_release
d6be1af fix: make sure we can build hermes when working against stable
a19578d Hermes pod: change logic to use the hermes tag to set the pod source correctly ([fix] Hermes pod: change logic to use the hermes tag to set the pod source correctly facebook/react-native#34221)
112d678 fix: fix the race condition when calling readAsDataURL after new Blob(blobs) (fix: fix the race condition when calling readAsDataURL after new Blob(blobs) facebook/react-native#34096)
4f72a02 fix(jest): make assetFileTransformer return an object (fix(jest): make assetFileTransformer return an object facebook/react-native#33756)
a39a7c4 fix(deps): react-shallow-renderer v16.15.0 for react v18 compat (fix(deps): react-shallow-renderer v16.15.0 for react v18 compat facebook/react-native#34104)
28cbd21 Upgrade RN CLI to v8.0.3 (Upgrade RN CLI to v8.0.3 facebook/react-native#34159)
23accbf [fix] backport FlipperConfiguration from main ([fix] backport FlipperConfiguration from main facebook/react-native#34098)
587eb4e [0.69.1] Bump version numbers
802d324 fix(build): fixes React-RCTText build with RN 0.69.0 (fix(build): fixes React-RCTText build with RN 0.69.0 facebook/react-native#34064)
050924a Fix RCT-Folly build error when use_frameworks! and hermes are both enabled (Fix RCT-Folly build error when use_frameworks! and hermes are both enabled facebook/react-native#34030)
9e591ac Fix broken use_frameworks from React-bridging ([ios] Fix broken use_frameworks from React-bridging facebook/react-native#34011)
9d3ce32 revert Fix ios build error when podfile generate_multiple_pod_projects=true and fabric is on facebook/react-native#33381 changes ([yoga] revert #33381 changes facebook/react-native#33973)
aa068e0 Make all headers public and add #ifdef __cplusplus ([Snyk] Upgrade firebase from 7.10.0 to 7.24.0 #1150)
dc334a2 Use monotonic clock for performance.now() (Use monotonic clock for performance.now() facebook/react-native#33983)
74a08a3 [0.69.0] Bump version numbers
e68aa6a [0.69.0-rc.6] Bump version numbers
e8af5b8 Make sure sdks/.hermesversion is included inside the NPM package.

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.3. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native from 0.63.3 to 0.69.3 #559

[Snyk] Upgrade react-native from 0.63.3 to 0.69.3 #559

snyk-bot commented Aug 16, 2022

Fixed

iOS specific

Changed

iOS specific

Changed

iOS specific

Fixed

iOS specific

Changed

Android specific

Fixed

Android specific

[Snyk] Upgrade react-native from 0.63.3 to 0.69.3 #559

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.69.3 #559

Conversation

snyk-bot commented Aug 16, 2022

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.3.

Fixed

iOS specific

Changed

iOS specific

Changed

iOS specific

Fixed

iOS specific

Changed

Android specific

Fixed

Android specific