[Snyk] Upgrade react-native from 0.63.3 to 0.67.2 #12

snyk-bot · 2022-02-22T08:54:54Z

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.67.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 38 versions ahead of your current version.
The recommended version was released 22 days ago, on 2022-01-31.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service SNYK-JS-NODEFETCH-674311	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.67.2 - 2022-01-31
Fixed
- Fix error "mockModal is not a function" (507b05f4c0 by @ AntoineDoubovetzky)
Android specific
- Fix potential crash if ReactRootView does not have insets attached. (6239e2f5ce by @ enahum)
- Upgrading OkHttp from 4.9.1 to 4.9.2 to fix CVE-2021-0341. (e896d21 by @ owjsub)
iOS specific
- Fix Time.h patch not being applied when running pod install --project-directory=ios (60cef850bd by @ tido64)
- Find-node.sh now respects .nvmrc (35bcf934b1 by @ igrayson)
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.1 - 2022-01-20
A patch release including fixes to unblock Detox and Android JSC builds
- Remove alert's window when call to hide. (a46a99e120 by @ asafkorem)
- Do not remove libjscexecutor.so from release builds (574a773f8f by @ cortinico)
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.0 - 2022-01-18
0.67 stable is out!

This release includes 385 commits with 75 contributors! Thank you to all our contributors new and old! You can find the full changelog here.
- See the highlights of the release in our release blog post.
- You can participate in the conversation on the status of this release at this issue.
- You can upgrade to this version using the upgrade helper webtool ⚛️
0.67.0-rc.6 - 2021-12-14
We are aiming for this to be our candidate for stable. We aim to promote 0.67.0-rc.6 to stable in the first half of January 2022.
- (iOS) Fix M1 build error when pod has no IPHONEOS_DEPLOYMENT_TARGET 9cd4092
To test it, run
```
npx react-native init RN067RC6 --version 0.67.0-rc.6
```
You can participate in the conversation on the status of this release at this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.0-rc.5 - 2021-12-06
We are aiming for this to be our candidate for stable (🤞)
- Revert Hermes 0.10 due to facebook/hermes#649
  - Revert Hermes on iOS: a510c27
  - Revert Hermes on Android: 16a16cf
- Fix post_install_workaround downgrading development targets 87592fb
- Picks related to automating releases on CircleCI
  - 9faa42e, c37a83e, 1de642a, 43eaf3c, 1c73abb, f269c2d
To test it, run
```
npx react-native init RN067RC5 --version 0.67.0-rc.5
```
You can participate in the conversation on the status of this release at this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.0-rc.4 - 2021-11-30
Updated pre-release with some fixes and Hermes 0.10
- Hermes 0.10 for iOS: 040e72e, Hermes 0.10 for Android: 1d6af14
- Revert f3fe7a0 as it breaks EXTRA_PACKAGER_ARGS on iOS
- Revert "Fix Deadlock in RCTi18nUtil (iOS) (#31032)" 70ddf46
You can participate in the conversation on the status of this release at this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
Fixes for iOS:
- Revert "Fix Deadlock in RCTi18nUtil (iOS) (#31032)" 70ddf46
- Pick Fix post_install_workaround downgrading development targets: a4a3e67
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29