[Snyk] Security upgrade react-native from 0.20.0 to 0.69.12#25
[Snyk] Security upgrade react-native from 0.20.0 to 0.69.12#25MHxGH-ServiceAccount wants to merge 1 commit intomasterfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-14724253
⛔ Snyk checks have failed. 2 issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
|
This upgrade from version 0.20.0 to 0.69.12 spans over six years of development and constitutes a complete architectural overhaul of the framework. A manual upgrade is not feasible; this should be treated as a full project migration. Key Breaking Changes:
Recommendation: Do not attempt an incremental upgrade. The recommended approach is to create a new project using the latest React Native version and migrate your application's source code and dependencies into the new project structure. Source: React Native Upgrade Guide
|
| }, | ||
| "dependencies": { | ||
| "react-native": "0.20.0", | ||
| "react-native": "0.69.12", |
There was a problem hiding this comment.
Start script path incompatible with upgraded React Native
The start script references node_modules/react-native/local-cli/cli.js, which existed in React Native 0.20.0 but was removed as part of the "Lean Core" initiative around version 0.60. In React Native 0.69.12, the CLI has been extracted to @react-native-community/cli and this path no longer exists. Running npm start will fail with a "module not found" error. The script needs to be updated to use npx react-native start or the modern CLI path.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
examples/SampleRN20/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-QS-14724253
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling
Note
Updates the example app dependency.
react-nativeinexamples/SampleRN20/package.jsonfrom0.20.0to0.69.12Written by Cursor Bugbot for commit d9c4a17. This will update automatically on new commits. Configure here.