[Snyk] Security upgrade react-native from 0.78.0 to 0.85.0#22
[Snyk] Security upgrade react-native from 0.78.0 to 0.85.0#22revan-zhang wants to merge 1 commit intomainfrom
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
| "dependencies": { | ||
| "react": "19.0.0", | ||
| "react-native": "0.78.0", | ||
| "react-native": "0.85.0", |
There was a problem hiding this comment.
🔴 Incomplete version upgrade: @react-native/ devDependencies still pinned to 0.78.0 after react-native bump to 0.85.0*
The react-native dependency was bumped from 0.78.0 to 0.85.0, but the corresponding @react-native/* devDependencies (@react-native/babel-preset, @react-native/metro-config, @react-native/typescript-config) at example/package.json:24-26 are still pinned to 0.78.0. In the React Native ecosystem, these packages are versioned in lockstep with react-native itself (note they were all at 0.78.0 before this change, matching the previous react-native version). Running the example app with this mismatch will likely cause build or runtime failures due to incompatible tooling versions. The @react-native-community/cli* packages at 15.0.1 (example/package.json:21-23) were also released for react-native 0.78 and may need updating as well.
Prompt for agents
The react-native dependency in example/package.json was bumped from 0.78.0 to 0.85.0, but the @react-native/* devDependencies were not updated to match. Specifically, @react-native/babel-preset (line 24), @react-native/metro-config (line 25), and @react-native/typescript-config (line 26) are still at 0.78.0. These packages are versioned in lockstep with react-native. Additionally, the @react-native-community/cli packages (lines 21-23) at 15.0.1 were built for RN 0.78 and may also need updating. All these devDependencies should be updated to versions compatible with react-native 0.85.0.
Was this helpful? React with 👍 or 👎 to provide feedback.
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
example/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-INFLIGHT-6095116
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.