[Snyk] Upgrade react-native from 0.63.3 to 0.68.1 #99

snyk-bot · 2022-05-05T01:08:31Z

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.68.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 47 versions ahead of your current version.
The recommended version was released 21 days ago, on 2022-04-13.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Use After Free SNYK-JS-HERMESENGINE-1309667	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Denial of Service SNYK-JS-NODEFETCH-674311	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Out-of-Bounds SNYK-JS-HERMESENGINE-629748	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HERMESENGINE-608850	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

0.68.1 - 2022-04-13
Changed

Android specific
- Bump React Native Gradle plugin to 0.0.6 (9573d7b84d by @ cortinico)
- Don't require yarn for codegen tasks (d5da70e17e by @ danilobuerger)
Fixed
- Fix dynamic_cast (RTTI) by adding key function to ShadowNodeWrapper and related classes (58a2eb7f37 by @ kmagiera)
- Pin use-subscription to < 1.6.0 (5534634892 by @ danilobuerger)
Android specific
- Use NDK 23 only for Windows users. (e48a580080 by @ cortinico)
- Improve support for Android users on M1 machine (4befd2a29c by @ cortinico)
- Template: Specify abiFilters if enableSeparateBuildPerCPUArchitecture is not set. (5dff920177 by @ cortinico)
- Fix for building new architecture sources on Windows (5a8033df98 by @ mganandraj)
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.68.0 - 2022-03-30
0.68 stable is out!

This release includes 614 commits by 68 contributors! Thank you to all our contributors new and old! You can find the full changelog here.
- See the highlights of the release in our release blog post.
- You can participate in the conversation on the status of this release at this issue.
- You can upgrade to this version using the upgrade helper webtool ⚛️
0.68.0-rc.4 - 2022-03-25
Includes fixes to Flipper setup on iOS.

To test it, run:
```
npx react-native init RN068RC4 --version 0.68.0-rc.4
```
Please be aware that with 0.68, JDK 11 is required for Android compilation.

You can participate in the conversation on the status of this release in the working group discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

See changes from this release in the changelog PR
0.68.0-rc.3 - 2022-03-17
Includes improvements to the new architecture setup on Android and iOS, as well as dependency fixes for maccatalyst.

To test it, run:
```
npx react-native init RN068RC3 --version 0.68.0-rc.3
```
Please be aware that with 0.68, JDK 11 is required for Android compilation.

You can participate in the conversation on the status of this release in the working group discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

See changes from this release in the changelog PR
0.68.0-rc.2 - 2022-02-24
Includes improvements to the new architecture setup on Android and backported fixes from 0.67.3.

To test it, run:
```
npx react-native init RN068RC2 --version 0.68.0-rc.2
```
Please be aware that with 0.68, JDK 11 is required.

You can participate in the conversation on the status of this release in the working group discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

See changes from this release in the changelog PR
0.68.0-rc.1 - 2022-02-03
Notable changes:
- Bump RN CLI to v7, and Metro to 67 (848ba6fb1d by @ kelset)
- Added DoNotStripAny proguard rules (48318b1542 by @ ShikaSD)
- Do not bundle libhermes.so or libjsc.so inside the React Native Android AAR (fa85417179 by @ cortinico)
- Fix potential crash if ReactRootView does not have insets attached. (6239e2f5ce by @ enahum) - picked from 0.67.2
To test it, run:
```
npx react-native init RN068RC1 --version 0.68.0-rc.1
```
Please be aware that with 0.68, JDK 11 is required.

You can participate in the conversation on the status of this release in the working group discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

See changes from this release in the changelog PR
0.68.0-rc.0 - 2022-01-28
0.67.4 - 2022-03-18
Fixed

Android specific
- Added a null check to native.value in Switch to fix #32594 (8d50bf1133 by @ jonathanmos)
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.3 - 2022-02-22
Fixed

Android specific
- Text with adjustsFontSizeToFit changes the text layout infinitely (c1db41f060)
iOS specific
- Fix a broken input for the Korean alphabet in TextInput (1a83dc36ce by @ bernard-kms)
You can participate in the conversation on the status of this release at this discussion

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.
0.67.2 - 2022-01-31
0.67.1 - 2022-01-20
0.67.0 - 2022-01-18
0.67.0-rc.6 - 2021-12-14
0.67.0-rc.5 - 2021-12-06
0.67.0-rc.4 - 2021-11-30
0.67.0-rc.3 - 2021-11-05
0.67.0-rc.2 - 2021-10-25
0.67.0-rc.1 - 2021-10-22
0.67.0-rc.0 - 2021-10-16
0.66.4 - 2021-12-09
0.66.3 - 2021-11-10
0.66.2 - 2021-11-04
0.66.1 - 2021-10-15
0.66.0 - 2021-10-01
0.66.0-rc.4 - 2021-09-24
0.66.0-rc.3 - 2021-09-17
0.66.0-rc.2 - 2021-09-10
0.66.0-rc.1 - 2021-09-01
0.66.0-rc.0 - 2021-08-27
0.65.2 - 2021-11-04
0.65.1 - 2021-08-19
0.65.0 - 2021-08-17
0.65.0-rc.4 - 2021-08-11
0.65.0-rc.3 - 2021-07-23
0.65.0-rc.2 - 2021-06-18
0.65.0-rc.1 - 2021-06-17
0.65.0-rc.0 - 2021-06-09
0.64.3 - 2021-11-04
0.64.2 - 2021-06-03
0.64.1 - 2021-05-05
0.64.0 - 2021-03-12
0.64.0-rc.4 - 2021-03-01
0.64.0-rc.3 - 2021-02-05
0.64.0-rc.2 - 2020-12-18
0.64.0-rc.1 - 2020-11-25
0.64.0-rc.0 - 2020-11-23
0.63.4 - 2020-11-30
0.63.3 - 2020-09-29