Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 26, 2025

Bumps the rnx-kit group with 5 updates in the / directory:

Package From To
@rnx-kit/align-deps 3.0.8 3.3.3
@rnx-kit/lint-lockfile 0.1.0 0.1.1
@rnx-kit/metro-config 2.1.0 2.2.1
@rnx-kit/cli 0.18.9 0.18.16
@rnx-kit/metro-resolver-symlinks 0.2.5 0.2.7

Updates @rnx-kit/align-deps from 3.0.8 to 3.3.3

Release notes

Sourced from @​rnx-kit/align-deps's releases.

@​rnx-kit/align-deps@​3.3.3

Patch Changes

  • 72a98f6: Bumped js-yaml to address potential prototype pollution

@​rnx-kit/align-deps@​3.3.2

Patch Changes

  • 647a678: Don't read the current package's manifest from disk twice

@​rnx-kit/align-deps@​3.3.1

Patch Changes

  • 691ec7d: Support Bun catalogs

@​rnx-kit/align-deps@​3.3.0

Minor Changes

  • d55311e: Added command for exporting catalogs

Patch Changes

  • 9271487: Allow specifying presets for catalogs
  • b569de1: Fixed --mode=allow-subset not handling catalog:

@​rnx-kit/align-deps@​3.2.4

Patch Changes

  • 2d34b01: Add profile for 0.82

@​rnx-kit/align-deps@​3.2.3

Patch Changes

  • b31498b: Fixed a prototype-polluting assignment vulnerability

@​rnx-kit/align-deps@​3.2.2

Patch Changes

  • 3529107: Declare package exports

@​rnx-kit/align-deps@​3.2.1

Patch Changes

  • 46a41d0: Add profile for 0.81

@​rnx-kit/align-deps@​3.2.0

Minor Changes

  • 46d657f: Use react-native-screens >=4.0 <4.5 for React Native 0.76 as 4.4.0 of it is the latest compatible with React Native 0.76 when using Fabric and

... (truncated)

Changelog

Sourced from @​rnx-kit/align-deps's changelog.

3.3.3

Patch Changes

  • 72a98f6: Bumped js-yaml to address potential prototype pollution

3.3.2

Patch Changes

  • 647a678: Don't read the current package's manifest from disk twice

3.3.1

Patch Changes

  • 691ec7d: Support Bun catalogs

3.3.0

Minor Changes

  • d55311e: Added command for exporting catalogs

Patch Changes

  • 9271487: Allow specifying presets for catalogs
  • b569de1: Fixed --mode=allow-subset not handling catalog:

3.2.4

Patch Changes

  • 2d34b01: Add profile for 0.82

3.2.3

Patch Changes

  • b31498b: Fixed a prototype-polluting assignment vulnerability

3.2.2

Patch Changes

  • 3529107: Declare package exports

3.2.1

Patch Changes

... (truncated)

Commits

Updates @rnx-kit/lint-lockfile from 0.1.0 to 0.1.1

Release notes

Sourced from @​rnx-kit/lint-lockfile's releases.

@​rnx-kit/lint-lockfile@​0.1.1

Patch Changes

  • 72a98f6: Bumped js-yaml to address potential prototype pollution
  • 72a98f6: Added shebang
Changelog

Sourced from @​rnx-kit/lint-lockfile's changelog.

0.1.1

Patch Changes

  • 72a98f6: Bumped js-yaml to address potential prototype pollution
  • 72a98f6: Added shebang
Commits

Updates @rnx-kit/metro-config from 2.1.0 to 2.2.1

Release notes

Sourced from @​rnx-kit/metro-config's releases.

@​rnx-kit/metro-config@​2.2.1

Patch Changes

  • dc0f31f: Fixed crash when react-native-web is installed

@​rnx-kit/metro-config@​2.2.0

Minor Changes

  • 34faeb6: Add react-native-web support

Patch Changes

  • Updated dependencies [34faeb6]
    • @​rnx-kit/tools-react-native@​2.3.1

@​rnx-kit/metro-config@​2.1.3

Patch Changes

  • 8f72d16: Delay calling getModulesRunBeforeMainModule until necessary

@​rnx-kit/metro-config@​2.1.2

Patch Changes

  • 90fc3ae: Handle upstream exclusionList no longer being public as of 0.83.0. Our exclusionList will still be available and continue to work as before.

    For more context, see: facebook/metro#1564

Changelog

Sourced from @​rnx-kit/metro-config's changelog.

2.2.1

Patch Changes

  • dc0f31f: Fixed crash when react-native-web is installed

2.2.0

Minor Changes

  • 34faeb6: Add react-native-web support

Patch Changes

  • Updated dependencies [34faeb6]
    • @​rnx-kit/tools-react-native@​2.3.1

2.1.3

Patch Changes

  • 8f72d16: Delay calling getModulesRunBeforeMainModule until necessary

2.1.2

Patch Changes

  • 90fc3ae: Handle upstream exclusionList no longer being public as of 0.83.0. Our exclusionList will still be available and continue to work as before.

    For more context, see: facebook/metro#1564

2.1.1

Patch Changes

  • 4bca263: Fix duplicate packages slipping through in a Yarn + pnpm setup
Commits
  • c1914d6 test(metro-config): add tests for default config (#3866)
  • 635ee36 RELEASING: Releasing 4 package(s) (#3851)
  • dc0f31f fix(metro-config): fix crash when react-native-web is installed (#3860)
  • 1b7c821 RELEASING: Releasing 2 package(s) (#3839)
  • 34faeb6 fix(metro-config): add react-native-web support (#3838)
  • 0bdbf80 RELEASING: Releasing 2 package(s) (#3832)
  • 8f72d16 fix(metro-config): delay calling getModulesRunBeforeMainModule (#3833)
  • 3f5f00f chore: retire tsx usage in tests where possible (#3819)
  • 58ecee5 chore: enforce erasable syntax where possible (#3795)
  • 7bf2194 fix(metro): add support for 0.83.x (#3790)
  • Additional commits viewable in compare view

Updates @rnx-kit/cli from 0.18.9 to 0.18.16

Release notes

Sourced from @​rnx-kit/cli's releases.

@​rnx-kit/cli@​0.18.16

Patch Changes

  • 4142304: Log the address/port when starting dev server
  • Updated dependencies [72a98f6]
    • @​rnx-kit/align-deps@​3.3.3

@​rnx-kit/cli@​0.18.14

Patch Changes

  • 2190a96: Ensure host is set to localhost by default when starting the dev server, otherwise it will listen to external connections.
  • Updated dependencies [cbde4c1]
    • @​rnx-kit/metro-serializer-esbuild@​0.2.6

@​rnx-kit/cli@​0.18.12

Patch Changes

  • 0ed9f3a: Allow react-native.config.js to be imported without the .js extension

@​rnx-kit/cli@​0.18.11

Patch Changes

  • f8ab2e2: Allow passing additional arguments to Gradle
  • Updated dependencies [f8ab2e2]
    • @​rnx-kit/tools-android@​0.2.1

@​rnx-kit/cli@​0.18.10

Patch Changes

  • caf3b28: Fix crash when exiting Metro server in 0.83
  • Updated dependencies [6d82b98]
    • @​rnx-kit/align-deps@​3.1.0
Changelog

Sourced from @​rnx-kit/cli's changelog.

0.18.16

Patch Changes

  • 4142304: Log the address/port when starting dev server
  • Updated dependencies [72a98f6]
    • @​rnx-kit/align-deps@​3.3.3

0.18.15

Patch Changes

  • db82e27: Add support for building Windows apps
  • Updated dependencies [51c3654]
    • @​rnx-kit/metro-serializer-esbuild@​0.2.7

0.18.14

Patch Changes

  • 2190a96: Ensure host is set to localhost by default when starting the dev server, otherwise it will listen to external connections.
  • Updated dependencies [cbde4c1]
    • @​rnx-kit/metro-serializer-esbuild@​0.2.6

0.18.13

Patch Changes

  • dee694b: Add support for Metro 0.83

0.18.12

Patch Changes

  • 0ed9f3a: Allow react-native.config.js to be imported without the .js extension

0.18.11

Patch Changes

  • f8ab2e2: Allow passing additional arguments to Gradle
  • Updated dependencies [f8ab2e2]
    • @​rnx-kit/tools-android@​0.2.1

0.18.10

Patch Changes

... (truncated)

Commits
  • cbfa921 RELEASING: Releasing 3 package(s) (#3867)
  • 4142304 fix(cli): log address:port when starting dev server (#3873)
  • 635ee36 RELEASING: Releasing 4 package(s) (#3851)
  • db82e27 fix(cli): add support for building Windows apps (#3856)
  • 51c3654 fix(metro-serializer-esbuild): infer build target from React Native version (...
  • 35e7f0d RELEASING: Releasing 2 package(s) (#3844)
  • 2190a96 fix(cli): ensure host is set when starting dev server (#3843)
  • 7bf2194 fix(metro): add support for 0.83.x (#3790)
  • 3529107 chore: allow rnx-cli to be run without explicitly building it first (#3771)
  • 5f31d60 RELEASING: Releasing 6 package(s) (#3738)
  • Additional commits viewable in compare view

Updates @rnx-kit/metro-resolver-symlinks from 0.2.5 to 0.2.7

Release notes

Sourced from @​rnx-kit/metro-resolver-symlinks's releases.

@​rnx-kit/metro-resolver-symlinks@​0.2.7

Patch Changes

  • 8b429ae: Allow oxc-resolver to be used with experimental_retryResolvingFromDisk

@​rnx-kit/metro-resolver-symlinks@​0.2.6

Patch Changes

  • a9d2290: Bump oxc-resolver to v11
Changelog

Sourced from @​rnx-kit/metro-resolver-symlinks's changelog.

0.2.7

Patch Changes

  • 8b429ae: Allow oxc-resolver to be used with experimental_retryResolvingFromDisk

0.2.6

Patch Changes

  • a9d2290: Bump oxc-resolver to v11
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rnx-kit group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@rnx-kit/align-deps](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/align-deps) | `3.0.8` | `3.3.3` |
| [@rnx-kit/lint-lockfile](https://github.com/microsoft/rnx-kit/tree/HEAD/incubator/lint-lockfile) | `0.1.0` | `0.1.1` |
| [@rnx-kit/metro-config](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/metro-config) | `2.1.0` | `2.2.1` |
| [@rnx-kit/cli](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/cli) | `0.18.9` | `0.18.16` |
| [@rnx-kit/metro-resolver-symlinks](https://github.com/microsoft/rnx-kit/tree/HEAD/packages/metro-resolver-symlinks) | `0.2.5` | `0.2.7` |



Updates `@rnx-kit/align-deps` from 3.0.8 to 3.3.3
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/align-deps/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/align-deps@3.3.3/packages/align-deps)

Updates `@rnx-kit/lint-lockfile` from 0.1.0 to 0.1.1
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/incubator/lint-lockfile/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/lint-lockfile@0.1.1/incubator/lint-lockfile)

Updates `@rnx-kit/metro-config` from 2.1.0 to 2.2.1
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/metro-config/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/metro-config@2.2.1/packages/metro-config)

Updates `@rnx-kit/cli` from 0.18.9 to 0.18.16
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/cli@0.18.16/packages/cli)

Updates `@rnx-kit/metro-resolver-symlinks` from 0.2.5 to 0.2.7
- [Release notes](https://github.com/microsoft/rnx-kit/releases)
- [Changelog](https://github.com/microsoft/rnx-kit/blob/main/packages/metro-resolver-symlinks/CHANGELOG.md)
- [Commits](https://github.com/microsoft/rnx-kit/commits/@rnx-kit/metro-resolver-symlinks@0.2.7/packages/metro-resolver-symlinks)

---
updated-dependencies:
- dependency-name: "@rnx-kit/align-deps"
  dependency-version: 3.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rnx-kit
- dependency-name: "@rnx-kit/lint-lockfile"
  dependency-version: 0.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: rnx-kit
- dependency-name: "@rnx-kit/metro-config"
  dependency-version: 2.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: rnx-kit
- dependency-name: "@rnx-kit/cli"
  dependency-version: 0.18.16
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: rnx-kit
- dependency-name: "@rnx-kit/metro-resolver-symlinks"
  dependency-version: 0.2.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: rnx-kit
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 26, 2025

Labels

The following labels could not be found: Type: Dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant