treecounter-app
treecounter-app copied to clipboard
[Snyk] Security upgrade react-native from 0.68.2 to 0.69.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
| 619/1000 Why? Has a fix available, CVSS 8.1 |
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: react-native
The new version differs by 250 commits.- 74a08a3 [0.69.0] Bump version numbers
- e68aa6a [0.69.0-rc.6] Bump version numbers
- e8af5b8 Make sure sdks/.hermesversion is included inside the NPM package.
- 7262acc Fix Hermes not being downloaded on RC5 (#33945)
- 6d200c3 [0.69.0-rc.5] Bump version numbers
- f50936b Lazily query for git branch & remote (#33936)
- 88fa872 Fix downloading prebuilt hermes from the Github release (#33935)
- 2c6df02 [0.69.0-rc.4] Bump version numbers
- 0ca6e41 Check isOnAReleaseTag alongside isOnAReleaseBranch
- 9a4e716 Revert "[0.69.0-rc.4] Bump version numbers"
- 5f50b0b [0.69.0-rc.4] Bump version numbers
- 605c90e Circle CI: Build Hermes apple runtime artifacts on CI (#33876)
- 2a6832a Fix formatting for hermes-utils.js
- 659b693 Fix hermes-utils.js building from source when on the release branch
- a72d196 Fix hermes-engine.podspec building from source when on the release branch
- b33cc1f Remove duplicate pod dependency on local hermes-engine
- 6759dc3 Remove broken hermes-utils-test.js
- 9dded5e Fix `pod install --project-directory=ios` failing when Hermes is enabled (#33909)
- f44e0bf Remove shelljs dependency and duplicated scripts in files (#33915)
- 6b1e193 Hermes: Use pre-built artifacts in hermes-engine
- ea6706e Hermes: Add scripts to package, remove shelljs
- 27751ba [0.69.0-rc.3] Bump version numbers
- ac1c7ad Fix hermes compilation in the `react-native` package (#33881)
- 1eb90f5 [0.69.0-rc.2] Bump version numbers
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
Should be done manually: https://react-native-community.github.io/upgrade-helper/?from=0.68.2&to=0.69.1