[Snyk] Upgrade: react, , , , eas-cli, expo, expo-status-bar, mongodb, mongoose, react-native, react-native-reanimated, react-native-safe-area-context, react-native-screens, react-native-svg, tailwindcss #188
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
react
from 18.2.0 to 18.3.1 | 385 versions ahead of your current version | 5 months ago
on 2024-04-26
@react-native-async-storage/async-storage
from 1.23.1 to 1.24.0 | 1 version ahead of your current version | 2 months ago
on 2024-07-12
@react-navigation/native
from 6.1.10 to 6.1.18 | 8 versions ahead of your current version | 2 months ago
on 2024-07-16
@react-navigation/native-stack
from 6.9.17 to 6.11.0 | 12 versions ahead of your current version | 2 months ago
on 2024-07-25
eas-cli
from 7.3.0 to 7.8.5 | 12 versions ahead of your current version | 5 months ago
on 2024-04-26
expo
from 50.0.15 to 50.0.20 | 5 versions ahead of your current version | a month ago
on 2024-08-08
expo-status-bar
from 1.6.0 to 1.12.1 | 9 versions ahead of your current version | 5 months ago
on 2024-04-23
mongodb
from 6.3.0 to 6.8.0 | 87 versions ahead of your current version | 3 months ago
on 2024-06-27
mongoose
from 8.2.0 to 8.6.0 | 23 versions ahead of your current version | 23 days ago
on 2024-08-28
react-native
from 0.72.10 to 0.75.2 | 429 versions ahead of your current version | a month ago
on 2024-08-20
react-native-reanimated
from 3.3.0 to 3.15.1 | 445 versions ahead of your current version | 23 days ago
on 2024-08-28
react-native-safe-area-context
from 4.6.3 to 4.10.9 | 24 versions ahead of your current version | a month ago
on 2024-08-15
react-native-screens
from 3.22.1 to 3.34.0 | 16 versions ahead of your current version | a month ago
on 2024-08-05
react-native-svg
from 13.9.0 to 13.14.1 | 6 versions ahead of your current version | 4 months ago
on 2024-05-15
tailwindcss
from 3.3.2 to 3.4.10 | 16 versions ahead of your current version | a month ago
on 2024-08-13
Issues fixed by the recommended upgrade:
SNYK-JS-TAR-6476909
SNYK-JS-FASTXMLPARSER-7573289
SNYK-JS-IP-7148531
SNYK-JS-SERVESTATIC-7926865
Release notes
Package name: react
act
fromreact
f1338fThis release is identical to 18.2 but adds warnings for deprecated APIs and other changes that are needed for React 19.
Read the React 19 Upgrade Guide for more info.
React
this.refs
to support string ref codemod 909071findDOMNode
outside StrictMode c3b283test-utils
methods d4ea75defaultProps
for function components #25699key
#25697act
fromtest-utils
d4ea75React DOM
unmountComponentAtNode
8a015brenderToStaticNodeStream
#28874React DOM
onRecoverableError
. (@ gnoff in #24591)document
causing a blank page on mismatch. (@ gnoff in #24523)setState
in Safari when adding an iframe. (@ gaearon in #24459)React DOM Server
<title>
elements to match the browser constraints. (@ gnoff in #24679)highWaterMark
to0
. (@ jplhomer in #24641)Server Components (Experimental)
useId()
inside Server Components. (@ gnoff) in #24172Package name: @react-native-async-storage/async-storage
Minor Changes
1.23.1 (2024-03-20)
Bug Fixes
Package name: @react-navigation/native
Package name: @react-navigation/native-stack
Package name: eas-cli
v7.8.5
🐛 Bug fixes
🧹 Chores
UNAUTHORIZED_ERROR
. (#2345 by @ szdziedzic)v7.8.4
🧹 Chores
v7.8.3
🐛 Bug fixes
android.package
andios.bundleIdentifier
values when running in non-interactive mode. (#2336 by @ szdziedzic)🧹 Chores
v7.8.2
🐛 Bug fixes
🧹 Chores
v7.8.1
🐛 Bug fixes
README
. (#2318 by @ szdziedzic)🧹 Chores
eas-build
dependencies. (#2316 by @ expo-bot)Build.resourceClass
field. (#2320 by @ szdziedzic)v7.8.0
🎉 New features
auto
,sdk-50
andsdk-49
image tags. (#2298 by @ szdziedzic)--build-logger-level
flag toeas build
command. (#2313 by @ szdziedzic)🧹 Chores
default
image tag. (#2298 by @ szdziedzic)v7.7.0
🎉 New features
eas credentials:configure-build
subcommand. (#2282 by @ fiberjw)🧹 Chores
eas.schema.json
. (#2312 by @ szdziedzic)v7.6.2
🧹 Chores
eas-build
dependencies. (#2301 by @ expo-bot)v7.6.1
🧹 Chores
eas-build
dependencies. (#2291 by @ expo-bot)eas-build
dependencies. (#2293 by @ expo-bot)v7.6.0
🎉 New features
🐛 Bug fixes
🧹 Chores
eas-build
dependencies. (#2277 by @ expo-bot)eas-build
dependencies. (#2283 by @ expo-bot)@ expo/apple-utils
version to switch between thedeveloper.apple.com
anddeveloper-mdn.apple.com
domains when one of them doesn't work. (#2290 by @ szdziedzic)Package name: expo
Package name: expo-status-bar
Package name: mongodb
6.8.0 (2024-06-27)
The MongoDB Node.js team is pleased to announce version 6.8.0 of the
mongodb
package!Release Notes
Add
ReadConcernMajorityNotAvailableYet
to retryable errorsReadConcernMajorityNotAvailableYet
(error code134
) is now a retryable read error.ClientEncryption.createDataKey() and other helpers now support named KMS providers
KMS providers can now be associated with a name and multiple keys can be provided per-KMS provider. The following example configures a ClientEncryption object with multiple AWS keys:
'aws:key1': {
accessKeyId: ...,
secretAccessKey: ...
},
'aws:key2': {
accessKeyId: ...,
secretAccessKey: ...
},
clientEncryption.createDataKey('aws:key-1', { ... });
Named KMS providers are supported for azure, AWS, KMIP, local and gcp KMS providers. Named KMS providers cannot be used if the application is using the automatic KMS provider refresh capability.
This feature requires mongodb-client-encryption>=6.0.1.
KMIP data keys now support a
delegated
optionWhen creating a KMIP data key,
delegated
can now be specified. If true, the KMIP provider will perform encryption / decryption of the data key locally, ensuring that the encryption key never leaves the KMIP server.This feature requires mongodb-client-encryption>=6.0.1.
Cursor responses are now parsed lazily 🦥
MongoDB cursors (find, aggregate, etc.) operate on batches of documents equal to
batchSize
. Each time the driver runs out of documents for the current batch it gets more (getMore
) and returns each document one at a time through APIs likecursor.next()
orfor await (const doc of cursor)
.Prior to this change, the Node.js driver was designed in such a way that the entire BSON response was decoded after it was received. Parsing BSON, just like parsing JSON, is a synchronous blocking operation. This means that throughout a cursor's lifetime invocations of
.next()
that need to fetch a new batch hold up on parsingbatchSize
(default 1000) documents before returning to the user.In an effort to provide more responsiveness, the driver now decodes BSON "on demand". By operating on the layers of data returned by the server, the driver now receives a batch, and only obtains metadata like size, and if there are more documents to iterate after this batch. After that, each document is parsed out of the BSON as the cursor is iterated.
A perfect example of where this comes in handy is our beloved
mongosh
! 💚That
Type "it" for more
message would now print after parsing only the documents displayed rather than after the entire batch is parsed.Add Signature to Github Releases
The Github release for the
mongodb
package now contains a detached signature file for the NPM package (namedmongodb-X.Y.Z.tgz.sig
), on every major and patch release to 6.x and 5.x. To verify the signature, follow the instructions in the 'Release Integrity' section of theREADME.md
file.The
LocalKMSProviderConfiguration
'skey
property acceptsBinary
A
local
KMS provider at runtime accepted aBSON
Binary
instance but the Typescript inaccurately only permittedBuffer
andstring
.Clarified cursor state properties
The cursor has a few properties that represent the current state from the perspective of the driver and server. This PR corrects an issue that never made it to a release but we would like to take the opportunity to re-highlight what each of these properties mean.
cursor.closed
-cursor.close()
has been called, and there are no more documents stored in the cursor.cursor.killed
-cursor.close()
was called while the cursor still had a non-zero id, and the driver sent a killCursors command to free server-side resources...