[Snyk] Upgrade react-native from 0.63.3 to 0.69.2 #536

NOUIY · 2022-08-11T02:31:52Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.69.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 59 versions ahead of your current version.
The recommended version was released 22 days ago, on 2022-07-20.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.69.2 - 2022-07-20
Changed
- Set react-shallow-renderer v16.15.0 for react v18 compat (a39a7c453d by @ mikehardy)
- Upgrade RN CLI to v8.0.3 (28cbd21d21 by @ thymikee)
iOS specific
- Hermes pod: change logic to use the hermes tag to set the pod source correctly (46a9edc854 by @ kelset)
- Fix the race condition when calling readAsDataURL after new Blob(blobs) (bd12e41188 by @ wood1986)
- Make sure that Flipper pods are not installed when creating a release build (23accbf58d by @ cipolleschi)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.1 - 2022-06-29

Changed

iOS specific
- Make all Yoga headers public and add #ifdef __cplusplus (43f831b23c by @ janicduplessis)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
iOS specific
- Fix build for React-RCTText (4ea38e16bf by @ ph4r05)
- Fix RCT-Folly build error when use_frameworks! and hermes are both enabled (79baca678a by @ Kudo)
- Fix use_frameworks! for 0.69 (f97c6a5b49 by @ Kudo)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.0 - 2022-06-22
0.69 stable is out!

This release includes 629 commits with 80 contributors! Thank you to all our contributors new and old! See the highlights of the release in our release blog post.

You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.69.0-rc.6 - 2022-06-01
0.69.0-rc.5 - 2022-05-31
0.69.0-rc.4 - 2022-05-31
0.69.0-rc.3 - 2022-05-24
0.69.0-rc.2 - 2022-05-20
0.69.0-rc.1 - 2022-05-11
0.69.0-rc.0 - 2022-04-28
0.68.3 - 2022-08-08
Changed

Android specific
- Let's not build reactnativeutilsjni shared library (af9225ec5f by @ SparshaSaha)
- Modified getDefaultJSExecutorFactory method (87cfd386cb by @ KunalFarmah98)
Fixed
- Use monotonic clock for performance.now() (114d31feee)
Android specific
- Logging a soft error when ReactRootView has an id other than -1 instead of crashing the app in hybrid apps (1ca2c24930 by @ Kunal-Airtel2022)
You can participate in the conversation on the status of this release in this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.68.2 - 2022-05-09
0.68.1 - 2022-04-13
0.68.0 - 2022-03-30
0.68.0-rc.4 - 2022-03-25
0.68.0-rc.3 - 2022-03-17
0.68.0-rc.2 - 2022-02-24
0.68.0-rc.1 - 2022-02-03
0.68.0-rc.0 - 2022-01-28
0.67.4 - 2022-03-18
0.67.3 - 2022-02-22
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29