[Snyk] Upgrade react-native from 0.63.3 to 0.71.11 #1097

NOUIY · 2023-07-06T03:35:49Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 115 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-06-14.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Use After Free SNYK-JS-HERMESENGINE-1309667	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	569/1000 Why? Has a fix available, CVSS 7.1	Proof of Concept
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	569/1000 Why? Has a fix available, CVSS 7.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.71.11 - 2023-06-14
Changed
- Bump CLI to 10.2.4 and Metro to 0.73.10 (69804c70cb by @ kelset)
iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan)
Fixed

Android specific
- Fixed crash occurring in certain native views when handling keyboard events. (f7e35d4ef7 by @ aleqsio)
- Prevent crash on OnePlus/Oppo devices in runAnimationStep (f2c05142 by @ hsource)
- Revert "fix: border width top/bottom not matching the border radius" to fix border styling issues (fd8a19d by @ kelset)
iOS specific
- Make 0.71 compatible with Xcode 15 (thanks to @ AlexanderEggers for the commit in main) (5bd1a4256e by @ kelset)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.71.10 - 2023-06-07
0.71.9 - 2023-06-07
0.71.8 - 2023-05-10
0.71.7 - 2023-04-19
0.71.6 - 2023-04-03
0.71.5 - 2023-03-29
0.71.4 - 2023-03-08
0.71.3 - 2023-02-14
0.71.2 - 2023-02-01
0.71.1 - 2023-01-19
0.71.0 - 2023-01-12
0.71.0-rc.6 - 2023-01-09
0.71.0-rc.5 - 2022-12-19
0.71.0-rc.4 - 2022-12-14
0.71.0-rc.3 - 2022-11-30
0.71.0-rc.2 - 2022-11-24
0.71.0-rc.1 - 2022-11-23
0.71.0-rc.0 - 2022-11-04
0.70.12 - 2023-07-05
Fixed

iOS specific
- Prefer Content-Location header in bundle response as JS source URL (671ea383fe by @ robhogan) to address #36794
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.11 - 2023-07-04
Changed
- Bump CLI to 9.3.3 and Metro do 0.72.4 (2a9d71dc34 by @ kelset) to address #36794
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.10 - 2023-06-08
Fixed

Android specific
- Prevent crash on OnePlus/Oppo devices in runAnimationStep (c05d822f7d by @ hsource)
iOS specific
- USE_HERMES envvar check fixed in react-native-xcode.sh. (61106ac680) by @ kidroca)
- USE_HERMES envvar check fixed in react-native-xcode.sh. Now source maps are generated by default. (8ad63714) by @ dmytrorykun)
- USE_HERMES envvar check fixed in react-native-xcode.sh. (4108b3) by @ dmytrorykun)
- When source maps are enabled, clean up temporary files from the build directory. Reduces bundle size by at least 1MB. (bad3949) by @ dmytrorykun)
- Make 0.70 compatible with Xcode 15 (thanks to @ AlexanderEggers for the commit in main) (c5e549e694)
You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.70.9 - 2023-04-19
0.70.8 - 2023-04-04
0.70.7 - 2023-01-31
0.70.6 - 2022-11-15
0.70.5 - 2022-11-06
0.70.4 - 2022-10-25
0.70.3 - 2022-10-12
0.70.2 - 2022-10-04
0.70.1 - 2022-09-15
0.70.0 - 2022-09-05
0.70.0-rc.4 - 2022-08-22
0.70.0-rc.3 - 2022-08-15
0.70.0-rc.2 - 2022-08-04
0.70.0-rc.1 - 2022-07-28
0.70.0-rc.0 - 2022-07-15
0.69.12 - 2023-07-04
Changed
- [0.69] Bump CLI to ^8.0.7, Metro to 0.70.4 (56807fadfa by @ robhogan)
iOS specific
- [0.69] Use Content-Location header in bundle response as JS source URL (#37501) (367fc7ad52 by @ robhogan)
Fixed

Android specific
- Prevent crash in runAnimationStep on OnePlus and Oppo devices (#37487) (4db7a10e25 by @ hsource)
0.69.12 is the latest patch the Release Crew will prepare for version 0.69. You can have a look at the latest discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.11 - 2023-06-08
0.69.10 - 2023-04-25
0.69.9 - 2023-04-04
0.69.8 - 2023-01-30
0.69.7 - 2022-11-06
0.69.6 - 2022-09-27
0.69.5 - 2022-08-25
0.69.4 - 2022-08-08
0.69.3 - 2022-07-25
0.69.2 - 2022-07-20
0.69.1 - 2022-06-29
0.69.0 - 2022-06-22
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.7 - 2023-04-26
0.68.6 - 2023-01-30
0.68.5 - 2022-11-06
0.68.4 - 2022-10-10
0.68.3 - 2022-08-08
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.5 - 2022-11-06
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.5 - 2022-11-06
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.3 - 2022-11-06
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.4 - 2022-11-07
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.5 - 2022-11-07
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

7ea7d94 [0.71.11] Bump version numbers
69804c7 [LOCAL] Bump CLI to 10.2.4 and Metro to 0.73.10
5bd1a42 [LOCAL] Make 0.70 compatible with Xcode 15 (thanks to @ AlexanderEggers for the commit in main)
91b172d Use `Content-Location` header in bundle response as JS source URL (Use Content-Location header in bundle response as JS source URL facebook/react-native#37501)
f2c0514 Prevent crash in runAnimationStep on OnePlus and Oppo devices (Prevent crash in runAnimationStep on OnePlus and Oppo devices facebook/react-native#37487)
c11e0f5 Fix invalid context cast in ReactRootView (Fix invalid context cast in ReactRootView facebook/react-native#36121)
fd8a19d Revert "fix: border width top/bottom not matching the border radius (fix: border width top/bottom not matching the border radius facebook/react-native#34362)"
dfdc97a [LOCAL] update podlock to fix CI
4e92d67 [0.71.10] Bump version numbers
3be3a7d bump RNGP to 0.71.19
1564d4d bumped packages versions
ed9ef98 [0.71.9] Bump version numbers
3f61b5f Make CircleCI caches for hermesc be version dependent (Make CircleCI caches for hermesc be version dependent facebook/react-native#37452)
a582ca5 [LOCAL] bump hermes version post release
fa33e76 fix: fix virtualizedList scrollToEnd for 0 items (fix: fix virtualizedList scrollToEnd for 0 items facebook/react-native#36067)
9762016 fix: [gradle-plugin] 3rd party lib dependency substitution (fix: [gradle-plugin] 3rd party lib dependency substitution facebook/react-native#37445)
b245919 Allow string `transform` style in TypeScript (Allow string transform style in TypeScript facebook/react-native#37569)
b8040b9 fix(types): cross platform autoComplete for TextInput (fix(types): cross platform autoComplete for TextInput facebook/react-native#36931)
d2a8739 [0.71.8] Bump version numbers
a93778c [LOCAL] update podlock
4bf4c47 [LOCAL] bump RNGP to 0.71.18
fb76526 bumped packages versions
0dda452 Read Maven group from GROUP property ([gradle-plugin] Read Maven group from GROUP property facebook/react-native#37204)
1fbfd8c Do not send extra onChangeText even wnen instantianting multiline TextView (Do not send extra onChangeText even wnen instantianting multiline TextView facebook/react-native#36930)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.11. See this package in npm: https://www.npmjs.com/package/react-native See this project in Snyk: https://app.snyk.io/org/nexuscompute/project/0222b3fd-d039-47e2-9aa3-18449fae0cf0?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade react-native from 0.63.3 to 0.71.11 #1097

[Snyk] Upgrade react-native from 0.63.3 to 0.71.11 #1097

NOUIY commented Jul 6, 2023

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific

[Snyk] Upgrade react-native from 0.63.3 to 0.71.11 #1097

Are you sure you want to change the base?

[Snyk] Upgrade react-native from 0.63.3 to 0.71.11 #1097

Conversation

NOUIY commented Jul 6, 2023

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.71.11.

Changed

iOS specific

Fixed

Android specific

iOS specific

Fixed

iOS specific

Changed

Fixed

Android specific

iOS specific

Changed

iOS specific

Fixed

Android specific