Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Security upgrade react-native from 0.69.10 to 0.74.0 #37

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

GTVolk
Copy link
Member

@GTVolk GTVolk commented Apr 24, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 631/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.2
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: react-native The new version differs by 250 commits.
  • 972b420 Release 0.74.0
  • 5d1272f Update Podfile.lock
  • d4a48ce Release 0.74.0-rc.9
  • 2b18fdf [LOCAL][iOS] Fix RNTester project and remove CCACHE from project when disabled
  • 92c6d22 add privacy manifest to pod install
  • bb5451b Fix Open Debugger dev menu item missing from iOS Bridgeless
  • 0b3ebdf Change bridgeless check in dev menu (#43976)
  • 26854de Implement getJavaScriptContextHolder for BridgelessCatalystInstance (#44054)
  • e7131fa Implement getRuntimeExecutor for BridgelessCatalystInstance (#44053)
  • 012a95c Update Podfile.lock
  • 2a6e156 Release 0.74.0-rc.8
  • cb2d93e [RN][iOS] Cherry Pick #43757 and #43994 (#44007)
  • 2d84d83 add privacy manifest to hello world template
  • 03d526f Fix bridge mode by constructing ReactDelegate correctly. (#43999)
  • 4eb0534 Fix Orientation listener in bridgeless mode (#43971)
  • c2317bf Fix double metro banner in Bridgeless (#43967)
  • 85170c9 Fix possible deadlock in dispatchViewUpdates (#43643)
  • cbfa0a2 Update Podfile.lock
  • 40feba6 Release 0.74.0-rc.7
  • 44159e3 Remove invalidate observer instead of re-adding observer in DeviceInfo module (#43737)
  • 42eebaf Fix static linking for Bridgeless mode (#43846)
  • 4e9196d Fix RCTRCTComposedViewRegistry for Old Arch by adding count and keyEnumerator (#43850)
  • 57ed1bd fix: add missing fields to native errors in new arch (#43649)
  • 454e576 fix: build settings for custom build configuration (#43780)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants