[Snyk] Security upgrade react-native from 0.50.1 to 0.69.12#40
[Snyk] Security upgrade react-native from 0.50.1 to 0.69.12#40MHxGH-ServiceAccount wants to merge 1 commit intomasterfrom
Conversation
…uthExample/package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-AJV-15274295
⛔ Snyk checks have failed. 3 issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
|
Upgrading from React Native Key Breaking Changes & Architectural Shifts:
Recommendation: A manual, file-by-file upgrade across this many versions is extremely high-risk and impractical. The official and strongly recommended approach is to use the React Native Upgrade Helper tool. This tool provides a diff of all the changes between your starting and target versions, showing exactly what needs to be modified in your project's configuration, native build files, and JavaScript code. An alternative, often safer, strategy for such a large jump is to create a new project with the target version ( Source: React Native Upgrade Helper, React Native Release Notes
|
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
examples/BiometricAuthExample/package.jsonexamples/BiometricAuthExample/package-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-AJV-15274295
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
Note
Medium Risk
Large dependency jump for React Native in an example app; risk is mainly build/runtime breakage due to RN/Metro tooling and transitive dependency changes rather than core library logic.
Overview
Upgrades the
examples/BiometricAuthExampleapp’sreact-nativedependency from0.50.1to0.69.12to address a reported ReDoS vulnerability (via transitive dependency updates).Updates
package-lock.jsonaccordingly, pulling in a large set of newer React Native-era transitive packages and integrity hashes for the example app.Written by Cursor Bugbot for commit 98e6dfd. This will update automatically on new commits. Configure here.