This repository was archived by the owner on Jun 26, 2021. It is now read-only.
[Snyk] Upgrade react-native from 0.11.4 to 0.64.1 #1
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade react-native from 0.11.4 to 0.64.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
npm:underscore.string:20170908
Why? CVSS 7.5
npm:uglify-js:20150824
Why? CVSS 7.5
npm:qs:20170213
Why? CVSS 7.5
npm:qs:20140806
Why? CVSS 7.5
npm:fresh:20170908
Why? CVSS 7.5
npm:deep-extend:20180409
Why? CVSS 7.5
npm:ws:20171108
Why? CVSS 7.5
npm:ws:20160624
Why? CVSS 7.5
SNYK-JS-TRIMNEWLINES-1298042
Why? CVSS 7.5
npm:minimatch:20160620
Why? CVSS 7.5
SNYK-JS-MINIMATCH-1019388
Why? CVSS 7.5
SNYK-JS-MERGE-1042987
Why? CVSS 7.5
SNYK-JS-MERGE-1040469
Why? CVSS 7.5
SNYK-JS-LODASHTEMPLATE-1088054
Why? CVSS 7.5
SNYK-JS-LODASH-73638
Why? CVSS 7.5
SNYK-JS-LODASH-608086
Why? CVSS 7.5
SNYK-JS-LODASH-590103
Why? CVSS 7.5
SNYK-JS-LODASH-450202
Why? CVSS 7.5
SNYK-JS-LODASH-1040724
Why? CVSS 7.5
npm:uglify-js:20151024
Why? CVSS 7.5
npm:tunnel-agent:20170305
Why? CVSS 7.5
npm:send:20151103
Why? CVSS 7.5
npm:send:20140912
Why? CVSS 7.5
npm:qs:20140806-1
Why? CVSS 7.5
npm:ms:20151024
Why? CVSS 7.5
npm:hoek:20180212
Why? CVSS 7.5
npm:cookie-signature:20160804
Why? CVSS 7.5
npm:ws:20160920
Why? CVSS 7.5
npm:ws:20160104
Why? CVSS 7.5
SNYK-JS-UNDERSCORE-1080984
Why? CVSS 7.5
SNYK-JS-MINIMIST-559764
Why? CVSS 7.5
npm:lodash:20180130
Why? CVSS 7.5
SNYK-JS-LODASH-73639
Why? CVSS 7.5
SNYK-JS-LODASH-567746
Why? CVSS 7.5
SNYK-JS-LODASH-1018905
Why? CVSS 7.5
SNYK-JS-GLOBPARENT-1016905
Why? CVSS 7.5
SNYK-JS-GLOBPARENT-1016905
Why? CVSS 7.5
SNYK-JS-EJS-1049328
Why? CVSS 7.5
SNYK-JS-DECOMPRESSTAR-559095
Why? CVSS 7.5
SNYK-JS-DECOMPRESS-557358
Why? CVSS 7.5
SNYK-JS-CSSWHAT-1298035
Why? CVSS 7.5
npm:mime:20170907
Why? CVSS 7.5
npm:debug:20170905
Why? CVSS 7.5
npm:braces:20180219
Why? CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: react-native
This patch release is specifically targetted towards fixing iOS build problems in Xcode 12.5. If it doesn't help, please refer to this issue.
Aside from bumping your version from 0.64.0 to 0.64.1, please check your podfile.lock and make sure that Flipper is on 0.75 or higher, and Flipper-Folly is 2.5.3 or higher; if not, add this line to your podfile (or modify it if you already had it):
After which, do all the classic necessary cleans (node_modules, caches, pod folders, etc)(react-native-clean-project is your ally) then do
yarn install
and apod install --repo-update
(if pod install fails on an error about a Flipper package, just remove the relevant lines from the podfile.lock and run the pod install again).The only other commit picked & released along the Xcode 12.5 fixes is:
You can participate in the conversation on the status of this release at this issue.
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history over at
react-native-releases
.0.64 stable is here 🎉
Thanks to everyone who contributed and helped to get this together, everyone worked really hard and we hope you are as excited as we are 🤗
Some of the most important highlights of this version:
Among many others - please refer to the blog post for more details.
You can participate in the conversation on the status of this release at this issue.
You can upgrade to this version using the upgrade helper webtool ⚛️
And if you are having trouble, please refer to the new Upgrade Support repository by our awesome community.
You can find the whole changelog history over at
react-native-releases
.THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.
Please only upgrade or create new apps with
0.64.0-rc.4
if you'd like to help us test this before the stable release - which would be super useful 🤗To test it, run:
We're working on the changelog right now and will update this release as soon as the draft is ready. Meanwhile, you may want to look at the most important changes that we have decided to highlight:
profile-hermes
CLI command for converting Hermes tracing profile to Chrome formatYou can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.
You can find the whole changelog history over at react-native-releases.
THIS IS A RELEASE CANDIDATE: this means it's not stable yet, so proceed with care.
Please only upgrade or create new apps with
0.64.0-rc.3
if you'd like to help us test this before the stable release - which would be super useful 🤗To test it, run:
We're working on the changelog right now and will update this release as soon as the draft is ready. Meanwhile, you may want to look at the most important changes that we have decided to highlight:
profile-hermes
CLI command for converting Hermes tracing profile to Chrome formatYou can participate in the conversation on the RC status this issue for updates, where you can post your bug reports and cherry-pick suggestions.
You can find the whole changelog history over at react-native-releases.
This patch release is specifically targetted towards Xcode 12.5. The changes done are tailored to unblock developers still relying on v0.62 of RN.
Aside from bumping your version from 0.62.2 to 0.62.3, please make sure to add this line to your podfile (or modify it if you already had it):
After which, do all the classic necessary cleans (node_modules, caches, pod folders, etc)(react-native-clean-project is your ally) then do
yarn install
and apod install --repo-update
(if pod install fails on an error about a Flipper package, just remove the relevant lines from the podfile.lock and run the pod install again).The only other commit picked & released along the Xcode 12.5 fixes is:
To help you upgrade to this version, you can use the upgrade helper ⚛️
You can find the whole changelog history over at
react-native-releases
.Commit messages
Package name: react-native
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs