metamask-mobile icon indicating copy to clipboard operation
metamask-mobile copied to clipboard

chore(devDeps): bump metro and react-native

Open legobeat opened this issue 1 year ago • 58 comments

Description

Update react-native and metro to receive patches.

  • Update metro from 0.73 to 0.76
  • Migrate from metro-config to @react-native/metro-config
  • Update react-native from 0.71.15 to 0.72.14
    • Port patch
    • Remove hermes patch
  • Bump and unpin @react-native-community/ packages
  • Update @react-native-community/netinfo from 6.0.0 to ^9.5.0
  • Update @react-native-masked-view/masked-view
  • Upgrade to Gradle version 8.0.1 and Android SDK 33

React Native Upgrade Android SDK Update

Related issues

  • Fixes: https://github.com/MetaMask/mobile-planning/issues/1262
  • #7759

Manual testing steps

Node environment must be 18.18.2 Supports Java version 17.0.10

  1. Check out branch
  2. Run yarn setup
  3. Run yarn watch
  4. Run yarn start:ios - wait for app to build on iOS simulator
  5. Run yarn start:android - wait for app to build Android emulator

Screenshots/Recordings

Before

After

Pre-merge author checklist

  • [x] I’ve followed MetaMask Coding Standards.
  • [x] I've completed the PR template to the best of my ability
  • [x] I’ve included tests if applicable
  • [x] I’ve documented my code using JSDoc format if applicable
  • [x] I’ve applied the right labels on the PR (see labeling guidelines). Not required for external contributors.

Pre-merge reviewer checklist

  • [ ] I've manually tested the PR (e.g. pull and build branch, run the app, test code being changed).
  • [ ] I confirm that this PR addresses all acceptance criteria described in the ticket it closes and includes the necessary testing evidence such as recordings and or screenshots.

legobeat avatar Apr 17 '24 07:04 legobeat

CLA Signature Action:

Thank you for your submission, we really appreciate it. We ask that you all read and sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just by adding a comment to this pull request with this exact sentence:

I have read the CLA Document and I hereby sign the CLA

By commenting with the above message you are agreeing to the terms of the CLA. Your account will be recorded as agreeing to our CLA so you don't need to sign it again for future contributions to this repository.

11 out of 12 committers have signed the CLA. :white_check_mark: @legobeat :white_check_mark: @leotm :white_check_mark: @Daniel-Cross :white_check_mark: @Cal-L :white_check_mark: @tommasini :white_check_mark: @omridan159 :white_check_mark: @sethkfman :white_check_mark: @jpuri :white_check_mark: @sahar-fehri :white_check_mark: @Prithpal-Sooriya :white_check_mark: @kylanhurt :x: @Dan Cross

GitHub can't find an account for Dan Cross. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.

github-actions[bot] avatar Apr 17 '24 07:04 github-actions[bot]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/[email protected] None 0 0 B
npm/@react-native-community/[email protected] None 0 109 kB titozzz
npm/@react-native-community/[email protected] None 0 190 kB nicholaslee119
npm/@react-native-community/[email protected] environment, filesystem, shell Transitive: network +25 850 kB thymikee
npm/@react-native-community/[email protected] environment, filesystem, shell Transitive: network +15 566 kB thymikee
npm/@react-native-community/[email protected] network 0 511 kB mattoakes
npm/@react-native-community/[email protected] None 0 293 kB bartoszklonowski
npm/@react-native-masked-view/[email protected] None 0 59 kB naturalclar
npm/@react-native/[email protected] environment +1 26.9 kB react-native-bot
npm/@react-native/[email protected] None 0 13.4 kB cortinico
npm/[email protected] None 0 13.5 kB ljharb
npm/[email protected] None +1 35.5 kB ljharb
npm/[email protected] None +27 2.83 MB ljharb
npm/[email protected] None 0 11 kB ljharb
npm/[email protected] filesystem Transitive: environment, eval +21 1.7 MB ljharb
npm/[email protected] None 0 768 kB flowtype
npm/[email protected] None 0 14.3 kB ljharb
npm/[email protected] None 0 17.6 kB ljharb
npm/[email protected] None 0 8.77 kB ljharb
npm/[email protected] None 0 20.5 kB ljharb
npm/[email protected] None 0 17.6 kB ljharb
npm/[email protected] eval 0 31.9 kB ljharb
npm/[email protected] None 0 18.7 kB ljharb
npm/[email protected] None 0 23.3 kB ljharb
npm/[email protected] filesystem Transitive: environment, network, unsafe +11 237 kB metro-bot
npm/[email protected] None +1 42.5 kB metro-bot
npm/[email protected] environment Transitive: unsafe +9 309 kB metro-bot
npm/[email protected] environment, filesystem +3 1.27 MB metro-bot
npm/[email protected] None 0 102 kB metro-bot
npm/[email protected] None +1 140 kB metro-bot
npm/[email protected] Transitive: filesystem +4 276 kB metro-bot
npm/[email protected] environment, filesystem, network Transitive: eval, shell, unsafe +45 5 MB metro-bot
npm/[email protected] None +1 41.7 kB ljharb
npm/[email protected] None +1 25.5 kB ljharb
npm/[email protected] None +1 40.7 kB ljharb
npm/[email protected] environment, eval +1 3.5 MB piaskowyk
npm/[email protected] environment, network Transitive: eval, filesystem, shell +101 121 MB react-native-bot
npm/[email protected] None 0 40.4 kB ljharb
npm/[email protected] None 0 16.4 kB ljharb
npm/[email protected] None +1 33.4 kB ljharb
npm/[email protected] None +2 55.4 kB ljharb
npm/[email protected] None +1 42.7 kB ljharb
npm/[email protected] None +4 92.7 kB ljharb

🚮 Removed packages: npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-community/[email protected], npm/@react-native-masked-view/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

socket-security[bot] avatar Apr 17 '24 07:04 socket-security[bot]

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/@babel/[email protected], npm/@react-native-community/[email protected], npm/@react-native/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

socket-security[bot] avatar Apr 17 '24 07:04 socket-security[bot]

just noting we've removed old .node-version in RN 72 upstream so we may want to remove our .nvmrc too to simplify our setup if not causing any issues

leotm avatar May 02 '24 07:05 leotm

just noting we've removed old .node-version in RN 72 upstream so we may want to remove our .nvmrc too to simplify our setup if not causing any issues

It's still used in GitHub Actions workflows. But in any case, it would be nice to consolidate the declaration of the project nodejs version.

We could already tell asdf to read version from .nvmrc as well: https://github.com/asdf-vm/asdf-nodejs?tab=readme-ov-file#nvmrc-and-node-version-support

They do refer to it as legacy, though. An alternative would be to replace .nvmrc with the newer .tool-versions, which @actions/setup-node also supports.

legobeat avatar May 02 '24 07:05 legobeat

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: f7a521731f1aa9957a8be19e930b47649872b0ad Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/c839fcda-58f7-4f47-aec0-98cbb6056b2b

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar May 08 '24 10:05 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 00a2a88993ad7ae3943a9765a158b404fbcddaf6 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/ee873da1-d949-4526-a864-1c914686e049

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar May 16 '24 09:05 github-actions[bot]

@Daniel-Cross needs a yarn deduplicate

legobeat avatar May 16 '24 09:05 legobeat

@SocketSecurity ignore npm/[email protected]
@SocketSecurity ignore npm/@react-native-community/[email protected]
@SocketSecurity ignore npm/@react-native/[email protected]
@SocketSecurity ignore npm/[email protected]

new authors ok

legobeat avatar May 20 '24 05:05 legobeat

@SocketSecurity ignore npm/@react-native-community/[email protected]

shell access ok

legobeat avatar May 20 '24 05:05 legobeat

@Daniel-Cross needs a yarn deduplicate

@Daniel-Cross Again a yarn deduplicate should clear the failing ci check (:

legobeat avatar May 27 '24 13:05 legobeat

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: cea970023e0bc11562d94fca241864042595d889 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/d5421866-405b-4e38-a02a-45a1dcea6c77

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar May 27 '24 13:05 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 74651a298e3a056417ba7552ce7b76dee705e837 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/7225238d-c316-49db-a3e8-c112088626db

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 05 '24 12:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 6eb5efcb967f150afa465c3655733118a0b3dad1 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/6f6277e0-393c-41b0-b1e5-3ac2f741e1b3

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 07 '24 09:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 138ffcebe64075f24a02d96dca672e48c8f7f9bf Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/a0eec9fe-4f43-4e01-bb02-2edb0a5f06d2

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 07 '24 11:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: ada906789dc9cd860924f55c18e8130365991901 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/c563feb4-b100-4a25-9905-44a311bf0113

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 11 '24 15:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 52b98f30168d77392ef9a9c661deeaf4ef23ed93 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/f5b749ae-b43e-4637-83d6-02f486c31569

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 13 '24 10:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 746fa12cb123d21c8b9ea48c3a7998f60af49de0 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/243a0bb3-7198-492c-8294-5fbde6888357

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 15 '24 08:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 0d3a58f1db364733d3e455ad13b56113e8005f97 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/76d61e2d-be9d-4428-b69b-1f35b81acb42

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 15 '24 09:06 github-actions[bot]

added14b41e252696fa4f6e5a6f63b872d00e449 https://t.me/elhadel_coin/23

AbuSabreen avatar Jun 18 '24 15:06 AbuSabreen

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 2f38bc7f1bcab5aac5eacf178de6c82773caba22 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/873ec0a7-75ed-4c7a-b4f0-c22ba3916533

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 18 '24 20:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: c0516b33cc767f5e65c5372201eac9e6f8002331 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/f1b32806-5044-4b17-978d-070ad00a416c

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 19 '24 12:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: c7129d6d4b90fbd9db095a6949cae0005464f132 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/c7529a85-4e19-474f-a1dd-abe93633c22a

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 19 '24 13:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 1fbf67f7b8566af10bf39f404a283b208a91d66d Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/a57ab6eb-9d57-4e23-8e28-6b9a5d3ea5c3

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 20 '24 07:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 58e60cc69a3d93057e0ff9eff2e0bc8cf79772f1 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/325b01a7-eb86-4268-9eb4-3f5802c31264

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 24 '24 15:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: c364421cc2211b7f57c38b564913c803156c1f4f Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/185d1e08-75e9-4cfd-80a7-9d8139d7ff09

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 24 '24 16:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: f2917ddef7c1e95925dafdcc8ccb70ed4ca6923c Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/cee913ce-519b-4c61-ac78-95c86cc30ff3

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 25 '24 05:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: a65f458a42b11fe09604583b6a0b0943b937f0f5 Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/5cac279c-2749-4691-af84-71cb47c9eade

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 26 '24 16:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 94b61bc0183b2583ffb80230a367391b09cd257c Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/924b06f3-0af0-4b1e-a653-416ab191afb7

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 26 '24 21:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 7d2f111c053796a794b30e4227ceb5f10fcb5a6a Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/83d0e4e9-e05e-43c0-b7c1-4366b17b9261

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

github-actions[bot] avatar Jun 27 '24 06:06 github-actions[bot]

https://bitrise.io/ Bitrise

❌❌❌ pr_smoke_e2e_pipeline failed on Bitrise! ❌❌❌

Commit hash: 7d2f111c053796a794b30e4227ceb5f10fcb5a6a Build link: https://app.bitrise.io/app/be69d4368ee7e86d/pipelines/44dc764a-453d-4ce9-bcdd-605e549d4a86

[!NOTE]

  • You can kick off another pr_smoke_e2e_pipeline on Bitrise by removing and re-applying the Run Smoke E2E label on the pull request

metamaskbot avatar Jun 27 '24 06:06 metamaskbot