Skip to content

[Snyk] Security upgrade react-native from 0.42.3 to 0.69.12#26

Open
MHxGH-ServiceAccount wants to merge 1 commit intomasterfrom
snyk-fix-bc365be3c1ba70d84a24ad812376f199
Open

[Snyk] Security upgrade react-native from 0.42.3 to 0.69.12#26
MHxGH-ServiceAccount wants to merge 1 commit intomasterfrom
snyk-fix-bc365be3c1ba70d84a24ad812376f199

Conversation

@MHxGH-ServiceAccount
Copy link

@MHxGH-ServiceAccount MHxGH-ServiceAccount commented Dec 31, 2025

snyk-top-banner

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

  • examples/SampleRN42/package.json

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Allocation of Resources Without Limits or Throttling
SNYK-JS-QS-14724253
  170  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling


Note

Updates dependency in the example app.

  • Upgrades react-native from 0.42.3 to 0.69.12 in examples/SampleRN42/package.json

Written by Cursor Bugbot for commit 22cf8e5. This will update automatically on new commits. Configure here.

@MHxGH-ServiceAccount
Copy link
Author

MHxGH-ServiceAccount commented Dec 31, 2025

Snyk checks have failed. 4 issues have been found so far.

Status Scanner Critical High Medium Low Total (4)
Open Source Security 0 4 0 0 4 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@MHxGH-ServiceAccount
Copy link
Author

Merge Risk: High

This is a massive upgrade across dozens of major versions, representing a fundamental architectural overhaul rather than a simple update. Migrating from version 0.42.3 will require a complete project refactor.

Key Breaking Changes:

  • Build System: The native dependency management system was completely changed. Manual linking with react-native link is removed and replaced by Autolinking, which requires using Cocoapods on iOS. [1, 2, 5]
  • AndroidX Migration: React Native 0.60 and later require AndroidX. All Android native code and dependencies must be migrated from the old Support Library. [2, 6]
  • Lean Core: Many core components and APIs (AsyncStorage, WebView, Slider, etc.) were removed from React Native and must now be installed from separate community packages (@react-native-community/*). [4, 22]
  • React 18 Support: Version 0.69 introduces support for React 18 and its new concurrent features, which may affect application behavior. [3, 20]

Source: React Native Release Notes
Recommendation: A direct upgrade is not feasible. This requires a staged migration, potentially by creating a new project on the target version and porting code over. Use the official React Native Upgrade Helper to assess the code-level changes between each major version.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

"dependencies": {
"react": "15.4.2",
"react-native": "0.42.3",
"react-native": "0.69.12",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

React version incompatible with upgraded react-native

The react-native upgrade from 0.42.3 to 0.69.12 creates a version incompatibility. React Native 0.69 requires React 18.x, but react remains at version 15.4.2. This mismatch will cause the application to fail at runtime since React Native 0.69 relies on React 18 features and APIs that don't exist in React 15.

Fix in Cursor Fix in Web

"dependencies": {
"react": "15.4.2",
"react-native": "0.42.3",
"react-native": "0.69.12",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Start script path no longer exists in react-native

The start script references node_modules/react-native/local-cli/cli.js, but this path doesn't exist in react-native 0.69.12. The CLI was moved to cli.js at the package root and later extracted to @react-native-community/cli. The start command will fail with a "module not found" error.

Fix in Cursor Fix in Web

"dependencies": {
"react": "15.4.2",
"react-native": "0.42.3",
"react-native": "0.69.12",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Postinstall uses deprecated react-native link command

The postinstall script uses react-native link, which was deprecated in React Native 0.60 when autolinking was introduced. In React Native 0.69, this command either fails or behaves unexpectedly, preventing proper native module linking during installation.

Fix in Cursor Fix in Web

"dependencies": {
"react": "15.4.2",
"react-native": "0.42.3",
"react-native": "0.69.12",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Deprecated babel preset incompatible with react-native 0.69

The babel-preset-react-native package at version 1.9.1 was deprecated and replaced by metro-react-native-babel-preset starting from React Native 0.57. With react-native 0.69.12, this outdated preset will fail to properly transform the JavaScript code, causing build failures when bundling the application.

Fix in Cursor Fix in Web

"dependencies": {
"react": "15.4.2",
"react-native": "0.42.3",
"react-native": "0.69.12",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

react-test-renderer version mismatches required React version

The react-test-renderer at version 15.4.2 must match the React version being used. Since react-native 0.69.12 requires React 18.x, but react-test-renderer remains at 15.4.2, tests will fail due to version mismatch errors between the renderer and React internals.

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants