Snyk has created this PR to upgrade react-native from 0.64.1 to 0.65.1.
:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 8 versions ahead of your current version.
The recommended version was released 2 months ago, on 2021-08-19.
Hello everyone đ 0.65.1 is out and addresses a couple of compatibility issues (with M1, with latest Android Studio), bumps react-test-renderer to the correct version in the template and fixes a colorProps issue for Android.
Thanks to everyone who contributed (over 1100 commits from 61 contributors!) and helped to get this together, we worked really hard and we hope you are as excited as we are đ¤
Some of the most important highlights of this version:
Hermes 0.8.1. Please see the highlighted changes from its 0.8.0 and 0.8.1 release notes.
react-native-codegen version 0.0.7 is now needed as a devDependency in the package.json.
JCenter has been sunsetted and read-only now. We have removed JCenter as a maven repository and updated dependencies to use MavenCentral and Jitpack.
Upgraded OkHttp from v3 to v4.9.1. See Upgrading to OkHttp 4 for more details on changes.
â ď¸THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.
Please only upgrade or create new apps with 0.65.0-rc.4 if you'd like to help us test this before the stable release - which would be super useful đ¤
Snyk has created this PR to upgrade react-native from 0.64.1 to 0.65.1.
The recommended version fixes:
SNYK-JS-UAPARSERJS-1023599
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-TMPL-1583443
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-LODASH-1040724
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-HERMESENGINE-1727253
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-UAPARSERJS-1072471
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-PROMPTS-1729737
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, CVSS 7.5
SNYK-JS-COLORSTRING-1082939
Why? Proof of Concept exploit, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
Hello everyoneđ 0.65.1 is out and addresses a couple of compatibility issues (with M1, with latest Android Studio), bumps react-test-renderer to the correct version in the template and fixes a colorProps issue for Android.
Changed
react-test-renderer
to17.0.2
in the template (d272880 by @@ rickhanlonii)Fixed
Android specific
You can participate in the conversation on the status of this release at this issue.
To help you upgrade to this version, you can use the upgrade helperâď¸
You can find the whole changelog history over at
react-native-releases
.0.65 stable is heređ
Thanks to everyone who contributed (over 1100 commits from 61 contributors!) and helped to get this together, we worked really hard and we hope you are as excited as we aređ¤
Some of the most important highlights of this version:
react-native-codegen
version0.0.7
is now needed as adevDependency
in thepackage.json
.Among many others - please refer to the blog post for more details.
You can participate in the conversation on the status of this release at this issue.
You can upgrade to this version using the upgrade helper webtoolâď¸
You can find the whole changelog history over at
react-native-releases
.Please only upgrade or create new apps withđ¤
0.65.0-rc.4
if you'd like to help us test this before the stable release - which would be super usefulTo test it, run:
We're working on the changelog and you can read the draft here.
You can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.
You can find the whole changelog history over at react-native-releases.
Commit messages
Package name: react-native
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:![](https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI1ZmViZDMzZS1lYTAzLTRjM2QtYTNmYi0xODY5NWRiZjFhOTIiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjVmZWJkMzNlLWVhMDMtNGMzZC1hM2ZiLTE4Njk1ZGJmMWE5MiJ9fQ==)
đ§ View latest project report
đ Adjust upgrade PR settings
đ Ignore this dependency or unsubscribe from future upgrade PRs