[Snyk] Security upgrade react-native-code-push from 5.7.0 to 6.3.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-REACTNATIVECODEPUSH-173775	Yes	No Known Exploit

Commit messages

Package name: react-native-code-push

The new version differs by 44 commits.

• 34508a6 Update documents for using Multi-Deployment Testing with Xcode 11 (#1901)
• 0d3d2d7 Move disallowRestart to native side (#1894)
• 69fe187 Update docs for using video component (#1900)
• 6ae9392 Fix capitalization of GitHub org (#1888)
• 35119d7 Mitigate zipperdown (#1881)
• 89f4edc Update dependecies (#1880)
• d6f174e Add overloaded type for CodePush function that accepts a React Component (#1801)
• 0988fb5 Update documents: Add examples with functional component (#1877)
• 60c6302 Fix everytime spelling (#1876)
• 9ab5d53 Remove executable bit from non-executable files (#1656)
• 15d7589 default JWT should be 3.0.0-beta.12 not 3.0.0-beta.7 when we upgrade react-native 0.61.2 or above (#1710)
• f8b58d5 Redux Saga URL corrected (#1675)
• ac97022 Fix ON_NEXT_SUSPEND install mode (#1863)
• df921ae Fix mkdirp security vulnerabilities (#1839)
• 2d974bc Fix vulnerable dependencies (#1837)
• 3d1f21c Update compatibility table (#1830)
• e4195ce Add compatibility with react-native v0.62 (#1829)
• 65ff8d0 Update package-lock (#1811)
• c787e41 Add promise resolve (#1810)
• 97f84b1 Updat description for minimumBackgroundDuration (#1809)
• c9f64d9 [CI] Create react-native-code-push CI (#1800)
• fbebc93 Remove update notice banner (#1796)
• 352995d [Tests] Use env in scripts and update docs (#1788)
• f95194f [Tests] Clean up tests (#1787)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic