spotify-react-native-app
spotify-react-native-app copied to clipboard
jaayperez
[Snyk] Security upgrade expo from 46.0.15 to 47.0.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
703/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2 |
Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116 |
Yes | Proof of Concept |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: expo
The new version differs by 250 commits.- 7bd5b06 Publish packages
- 652787f [babel-preset-expo] added object-rest-spread plugin to deps (#19829)
- 783d2af [templates] drop .expo-shared directories (#19823)
- fb6154a [expo] Revert #18913 (#19848)
- 9a0b315 [haptics] Backport #19819 to SDK 47
- f30c665 [ios][android][docs] "custom development build" -> "development build" (#19828)
- abef1f1 [ios][haptics] Feedback Generators in HapticModule now operate on the main thread (#19819)
- 18f828a [expo] Update react-dom bundled version [skip ci]
- ae341f3 [android] Bump Expo Go version [skip ci]
- 2f674b8 [android] Workaround for release build error (#17221)
- a2c81d9 [docs] Update using-hermes guide (#19795)
- daec5fc [expo] Fix crash on v8 (#19843)
- cb30a98 [expo] Send a warning for missing native modules (#19845)
- 4021cd3 [docs] Fix onDestroy typo in android modules (#19844)
- 3b96aab [gh] Replace deprecated ::set-output (#19839)
- 45b839d [bare-expo] Update detox (#19827)
- c53ca92 Add missing codeowners for package manager (#19767)
- ce810e9 [updates] yet another fix for missing app.manifest on android (#19809)
- 3086fa7 [create-expo-module] Fix example project bundling error (#19797)
- f3cc5a0 [templates] Update for latest beta
- 1a87dcc Publish packages
- c96ebba [expo] Fix missing disable-missing-native-module-errors.js on npm (#19815)
- e963041 fix(config-plugins): add missing null checks (#19754)
- 2bd6434 fix(cli): resolve `metadata.json` file path absolutely for `npx expo export` (#19802)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.
