[Snyk] Security upgrade react-native from 0.72.7 to 0.73.0

[zepor]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - DeviceSyncApp/frontend/react-native.todo.flex/package.json - DeviceSyncApp/frontend/react-native.todo.flex/package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **141/1000**
**Why?** Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 21, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.35, Score Version: V5 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | No | Proof of Concept (*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-native

The new version differs by 250 commits.

• 1eb4bf0 [0.73.0] Bump version numbers
• 6a4b434 [0.73.0-rc.8] Bump version numbers
• 0b3a811 Revert D49509633: Multisect successfully blamed "D49509633: [react-native][PR] fix: Text cut off issues when adjusting text size and font weight in system settings" for test or build failures
• d2517af Update Podfile.lock
• bb989e9 [0.73.0-rc.7] Bump version numbers
• d97e8e6 Update Podfile.lock
• cd43de6 Fix android root view group removal during instance re-creation (#41678)
• 0d5e678 [0.73.0-rc.6] Bump version numbers
• 61867e2 Bump package versions
• dcdea80 Fix `build_codegen!` not finding `@ react-native/codegen` in pnpm setups (#41399)
• c32064c Correctly declare runtime dependencies
• e03137e Bump package versions
• f3f75e8 Fix projects being broken on dependencies starting with `a..` (#41621)
• 830c2e7 [RN][iOS] Fix React-ImageManager dependencies
• 9dfb0ff Revert "RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)"
• 3bb7a70 [LOCAL] Update Podfile.lock
• 154a81a FP Tolerance in iOS Paper SafeAreaView debouncing (#41614)
• a66cda9 Remove "Open Debugger" action under JSC (#41535)
• 02a411e RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)
• 3da0959 Update CLI to v12.1.1
• 4cd4b39 [0.73.0-rc.5] Bump version numbers
• 2896a57 bumped packages versions
• 5a3bcea Update podfile.lock
• 3efabb6 bumped packages versions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/zepor/project/d8bfbabf-5511-4c65-adb6-6eae52e720ed?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/zepor/project/d8bfbabf-5511-4c65-adb6-6eae52e720ed?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"6603c1c3-5581-4a2c-a5d3-739e4066d72e","prPublicId":"6603c1c3-5581-4a2c-a5d3-739e4066d72e","dependencies":[{"name":"react-native","from":"0.72.7","to":"0.73.0"}],"packageManager":"npm","projectPublicId":"d8bfbabf-5511-4c65-adb6-6eae52e720ed","projectUrl":"https://app.snyk.io/org/zepor/project/d8bfbabf-5511-4c65-adb6-6eae52e720ed?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-INFLIGHT-6095116"],"upgrade":["SNYK-JS-INFLIGHT-6095116"],"isBreakingChange":false,"env":"prod","prType":"backlog","templateVariants":["updated-fix-title","priorityScore","pkg-based-remediation"],"priorityScoreList":[141],"remediationStrategy":"dependency"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)

[codeautopilot[bot]]

PR summary

The Pull Request upgrades the react-native package from version 0.72.7 to 0.73.0. This update addresses a security vulnerability related to the inflight package, which could potentially lead to a denial of service (DoS) attack. The PR also downgrades react-native-gesture-handler from 2.14.0 to 2.13.4.

Suggestion

• Ensure that the downgrade of react-native-gesture-handler does not introduce any issues or incompatibilities with the current codebase.
• Test the application thoroughly to ensure that the upgrade does not introduce any regressions or breaking changes.
• Verify that the security vulnerability has been effectively resolved by the upgrade.
• Consider checking if any new features or improvements in react-native 0.73.0 can be leveraged in the project.

_Disclaimer: This comment was entirely generated using AI. Be aware that the information provided may be incorrect._ Current plan usage: 64.19% **Have feedback or need help?** [Discord](https://discord.gg/r72ykfvyx7) [Documentation](https://docs.codeautopilot.com/) [support@codeautopilot.com](mailto:support@codeautopilot.com)