[Snyk] Security upgrade react-native from 0.50.1 to 0.69.12#37
[Snyk] Security upgrade react-native from 0.50.1 to 0.69.12#37MHxGH-ServiceAccount wants to merge 1 commit intomasterfrom
Conversation
…ties The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-14724253
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
|
This is a massive upgrade across 19 major versions, introducing numerous significant breaking changes. This is a major migration effort, not a simple version bump. Key Breaking Changes:
Recommendation: Do not attempt to upgrade by just changing the version number. Use the official React Native Upgrade Helper to see a detailed diff of all the file changes required between your current version and the target version. [1, 3, 4] Source: React Native Upgrade Helper
|
| "dependencies": { | ||
| "react": "16.0.0", | ||
| "react-native": "0.50.1", | ||
| "react-native": "0.69.12", |
There was a problem hiding this comment.
React version incompatible with upgraded React Native
Upgrading react-native from 0.50.1 to 0.69.12 introduces a peer dependency incompatibility. React Native 0.69 requires React 18.x, but the react dependency remains at version 16.0.0. This will cause npm/yarn installation failures or runtime errors due to API differences between React 16 and React 18. The react-test-renderer at 16.0.0 also needs to be updated to match.
Additional Locations (1)
| "dependencies": { | ||
| "react": "16.0.0", | ||
| "react-native": "0.50.1", | ||
| "react-native": "0.69.12", |
There was a problem hiding this comment.
Start script references nonexistent CLI path
The start script references node_modules/react-native/local-cli/cli.js, which existed in React Native 0.50.1 but was restructured in later versions. React Native 0.69.12 has the CLI entry point at ./cli.js in the package root. After this upgrade, running npm start will fail with a "module not found" error. The script needs to use npx react-native start or reference the correct CLI path.
Additional Locations (1)
| "dependencies": { | ||
| "react": "16.0.0", | ||
| "react-native": "0.50.1", | ||
| "react-native": "0.69.12", |
There was a problem hiding this comment.
Deprecated Babel preset incompatible with React Native 0.69
The babel-preset-react-native package at version 4.0.0 was deprecated and replaced by metro-react-native-babel-preset in newer React Native versions. React Native 0.69 uses the Metro bundler with the new babel preset structure. The outdated preset will cause transpilation failures when building the app, as it doesn't support the syntax and transforms required by React Native 0.69.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
examples/BiometricAuthExample/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-QS-14724253
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling
Note
Updates dependency to align the example app with a newer React Native version.
react-nativefrom0.50.1to0.69.12inexamples/BiometricAuthExample/package.jsonWritten by Cursor Bugbot for commit 07c7220. This will update automatically on new commits. Configure here.