react-native-boilerplate
react-native-boilerplate copied to clipboard
[Snyk] Security upgrade react-native from 0.61.2 to 0.68.0
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
519/1000 Why? Has a fix available, CVSS 6.1 |
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: react-native
The new version differs by 250 commits.- 51f5ea1 [0.68.0] Bump version numbers
- a4a6e23 [0.68.0-rc.4] Bump version numbers
- e645629 Enable SonarKit and Flipper in React-Core (#33499)
- b3f19d7 [0.68.0-rc.3] Bump version numbers
- cb28a26 Bump Flipper-Glog to 0.5.0.4
- 4163386 fix(ios, flipper): update flipper sub-pods to support macCatalyst (#33406)
- ccd1708 Re-apply: Consider relative to pwd installation root when looking for files in rn module via cocoapods (#33427)
- 4e34e6c fix: `cliPath` should handle absolute paths (#32983)
- 3e69592 Fix ios build error when use_frameworks is on and fabric is off (v2) (#33409)
- 5fd04fa Start surface after setting the delegate (#33402)
- a761b79 Use relative installation root instead of absolute to avoid embedding absolute paths in pods project (#33187)
- d7d33c7 Revert D31628461
- 7b33f20 Ship enableNestedTextOnPressEventFix
- 4b370ce Include folly fabric headers in source files (#33188)
- 63e4bd6 Fix Switch causing RetryableMountingLayerException (#32602)
- 762db49 Make sure configureNdkBuild* tasks are depending on preBuild
- 65e4d98 [0.68.0-rc.2] Bump version numbers
- 66b82ae chore(deps): bump CLI version to 7.0.3 to address web debugging issue (#33156)
- 2cd3173 Remove optional codegen config inside template (#33108)
- 61f0d1a Release react-native-gradle-plugin 0.0.5
- 57cc524 Gradle: Deprecate `reactRoot` in favor of `root` and `reactNativeDir` (#33142)
- bca4cf0 Set a resolution strategy for com.facebook.react:react-native when on New Architecture. (#33134)
- f5d371a Set Java source/target compatibility for react-native-gradle-plugin to 8
- b1c30f8 fix: jvm 11 error message from ReactPlugin.kt and react.gradle (#33048)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.