react-native-boilerplate icon indicating copy to clipboard operation
react-native-boilerplate copied to clipboard

[Snyk] Security upgrade react-native from 0.61.2 to 0.68.0

Open snyk-bot opened this issue 2 years ago • 0 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 519/1000
Why? Has a fix available, CVSS 6.1
Denial of Service (DoS)
SNYK-JS-HERMESENGINE-2342071
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: react-native The new version differs by 250 commits.
  • 51f5ea1 [0.68.0] Bump version numbers
  • a4a6e23 [0.68.0-rc.4] Bump version numbers
  • e645629 Enable SonarKit and Flipper in React-Core (#33499)
  • b3f19d7 [0.68.0-rc.3] Bump version numbers
  • cb28a26 Bump Flipper-Glog to 0.5.0.4
  • 4163386 fix(ios, flipper): update flipper sub-pods to support macCatalyst (#33406)
  • ccd1708 Re-apply: Consider relative to pwd installation root when looking for files in rn module via cocoapods (#33427)
  • 4e34e6c fix: `cliPath` should handle absolute paths (#32983)
  • 3e69592 Fix ios build error when use_frameworks is on and fabric is off (v2) (#33409)
  • 5fd04fa Start surface after setting the delegate (#33402)
  • a761b79 Use relative installation root instead of absolute to avoid embedding absolute paths in pods project (#33187)
  • d7d33c7 Revert D31628461
  • 7b33f20 Ship enableNestedTextOnPressEventFix
  • 4b370ce Include folly fabric headers in source files (#33188)
  • 63e4bd6 Fix Switch causing RetryableMountingLayerException (#32602)
  • 762db49 Make sure configureNdkBuild* tasks are depending on preBuild
  • 65e4d98 [0.68.0-rc.2] Bump version numbers
  • 66b82ae chore(deps): bump CLI version to 7.0.3 to address web debugging issue (#33156)
  • 2cd3173 Remove optional codegen config inside template (#33108)
  • 61f0d1a Release react-native-gradle-plugin 0.0.5
  • 57cc524 Gradle: Deprecate `reactRoot` in favor of `root` and `reactNativeDir` (#33142)
  • bca4cf0 Set a resolution strategy for com.facebook.react:react-native when on New Architecture. (#33134)
  • f5d371a Set Java source/target compatibility for react-native-gradle-plugin to 8
  • b1c30f8 fix: jvm 11 error message from ReactPlugin.kt and react.gradle (#33048)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

snyk-bot avatar Mar 30 '22 16:03 snyk-bot