[Snyk] Upgrade react-native from 0.63.3 to 0.70.6

[snyk-bot]

Snyk has created this PR to upgrade react-native from 0.63.3 to 0.70.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 83 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2022-11-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Use After Free SNYK-JS-HERMESENGINE-1309667	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Prototype Pollution SNYK-JS-SIMPLEPLIST-2413671	619/1000 Why? Has a fix available, CVSS 8.1	Proof of Concept
	Denial of Service SNYK-JS-NODEFETCH-674311	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-629748	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Prototype Pollution SNYK-JS-HERMESENGINE-608850	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	619/1000 Why? Has a fix available, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: react-native

• 0.70.6 - 2022-11-15
  

  Fixed

  • Fixed regression: @ jest/create-cache-key-function dependency was inadvertedly bumped to 29.x. We are bringing it back to 27.0.1. (fb0e88beb9 by @ kelset)

  Changed

  • Bump version of Promise from 8.0.3 to 8.3.0, enabling Promise.allSettled and Promise.any (475310dbba by @ retyui)
  • Bump CLI to 9.3.2 (9bcc5e0373 by @ kelset)

  iOS specific

  • Cleanup codegen build folder before installing the pods (0e316ec671 by @ cipolleschi)

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.70.5 - 2022-11-06
  

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.70.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.70.4 - 2022-10-25
• 0.70.3 - 2022-10-12
• 0.70.2 - 2022-10-04
• 0.70.1 - 2022-09-15
• 0.70.0 - 2022-09-05
• 0.70.0-rc.4 - 2022-08-22
• 0.70.0-rc.3 - 2022-08-15
• 0.70.0-rc.2 - 2022-08-04
• 0.70.0-rc.1 - 2022-07-28
• 0.70.0-rc.0 - 2022-07-15
• 0.69.7 - 2022-11-06
  

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.69.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.69.6 - 2022-09-27
• 0.69.5 - 2022-08-25
• 0.69.4 - 2022-08-08
• 0.69.3 - 2022-07-25
• 0.69.2 - 2022-07-20
• 0.69.1 - 2022-06-29
• 0.69.0 - 2022-06-22
• 0.69.0-rc.6 - 2022-06-01
• 0.69.0-rc.5 - 2022-05-31
• 0.69.0-rc.4 - 2022-05-31
• 0.69.0-rc.3 - 2022-05-24
• 0.69.0-rc.2 - 2022-05-20
• 0.69.0-rc.1 - 2022-05-11
• 0.69.0-rc.0 - 2022-04-28
• 0.68.5 - 2022-11-06
  

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.68.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

  ---

  You can participate in the conversation on the status of this release in this discussion

  ---

  To help you upgrade to this version, you can use the upgrade helper ⚛️

  ---

  You can find the whole changelog history in the changelog.md file.

• 0.68.4 - 2022-10-10
• 0.68.3 - 2022-08-08
• 0.68.2 - 2022-05-09
• 0.68.1 - 2022-04-13
• 0.68.0 - 2022-03-30
• 0.68.0-rc.4 - 2022-03-25
• 0.68.0-rc.3 - 2022-03-17
• 0.68.0-rc.2 - 2022-02-24
• 0.68.0-rc.1 - 2022-02-03
• 0.68.0-rc.0 - 2022-01-28
• 0.67.5 - 2022-11-06
• 0.67.4 - 2022-03-18
• 0.67.3 - 2022-02-22
• 0.67.2 - 2022-01-31
• 0.67.1 - 2022-01-20
• 0.67.0 - 2022-01-18
• 0.67.0-rc.6 - 2021-12-14
• 0.67.0-rc.5 - 2021-12-06
• 0.67.0-rc.4 - 2021-11-30
• 0.67.0-rc.3 - 2021-11-05
• 0.67.0-rc.2 - 2021-10-25
• 0.67.0-rc.1 - 2021-10-22
• 0.67.0-rc.0 - 2021-10-16
• 0.66.5 - 2022-11-06
• 0.66.4 - 2021-12-09
• 0.66.3 - 2021-11-10
• 0.66.2 - 2021-11-04
• 0.66.1 - 2021-10-15
• 0.66.0 - 2021-10-01
• 0.66.0-rc.4 - 2021-09-24
• 0.66.0-rc.3 - 2021-09-17
• 0.66.0-rc.2 - 2021-09-10
• 0.66.0-rc.1 - 2021-09-01
• 0.66.0-rc.0 - 2021-08-27
• 0.65.3 - 2022-11-06
• 0.65.2 - 2021-11-04
• 0.65.1 - 2021-08-19
• 0.65.0 - 2021-08-17
• 0.65.0-rc.4 - 2021-08-11
• 0.65.0-rc.3 - 2021-07-23
• 0.65.0-rc.2 - 2021-06-18
• 0.65.0-rc.1 - 2021-06-17
• 0.65.0-rc.0 - 2021-06-09
• 0.64.4 - 2022-11-07
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.64.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.64.3 - 2021-11-04
• 0.64.2 - 2021-06-03
• 0.64.1 - 2021-05-05
• 0.64.0 - 2021-03-12
• 0.64.0-rc.4 - 2021-03-01
• 0.64.0-rc.3 - 2021-02-05
• 0.64.0-rc.2 - 2020-12-18
• 0.64.0-rc.1 - 2020-11-25
• 0.64.0-rc.0 - 2020-11-23
• 0.63.5 - 2022-11-07
  

  🚨 IMPORTANT: This is an exceptional release on an unsupported version. We recommend you upgrade to one of the supported versions, listed here.

  Hotfix

  This version is a patch release addressing the Android build issue that has been ongoing since Nov 4th 2022. If you are on 0.63.x, update to this version to fix it.

  If you are on an older version of React Native, refer to this issue for details and the workaround you can apply in your project.

• 0.63.4 - 2020-11-30
• 0.63.3 - 2020-09-29

from react-native GitHub release notes

Commit messages

Package name: react-native

• 49dd38f [0.70.6] Bump version numbers
• fb0e88b [LOCAL] correct fix: bring back jest cache but on the right version
• c563759 [LOCAL] Bump git checkout cache key
• 69ce989 Revert "[0.70.6] Bump version numbers"
• 02a388f [0.70.6] Bump version numbers
• ef29c9b [LOCAL] remove regression: unwanted @ jest/create-cache-key-function dependency
• 9bcc5e0 [LOCAL] Bump CLI to 9.3.2
• 11473c3 Add support `Promise.any` out of box (Add support Promise.any out of box facebook/react-native#35080)
• 3f1c55b Update ruby codegen to cleanup build folder. (Update ruby codegen to cleanup build folder. facebook/react-native#34398)
• 35fa47b [0.70.5] Bump version numbers
• 59407a4 Force dependencies resolution to minor series for 0.70
• 54e6662 [0.70.4] Bump version numbers
• f5ebb69 chore: bump CLI to 9.2.1 (chore: bump CLI to 9.2.1 facebook/react-native#35022)
• 72c940b Center text if line height isn't 0
• 93bb2d6 Fix rn config file load codegen (Fix rn config file load codegen facebook/react-native#34895)
• 866021b Bump react-native-codegen to 0.70.6
• c4b094f Fix: Codegen template error in RCTThirdPartyFabricComponentsProvider (Fix: Codegen template error in RCTThirdPartyFabricComponentsProvider facebook/react-native#34738)
• 917e97b [0.70.3] Bump version numbers
• fe8f0fb Apply Animated initialProps handling to Fabric only (Apply Animated initialProps handling to Fabric only facebook/react-native#34927)
• 37790e4 fix(ios): add xcode 14 workaround (turn off signing resource bundles) for pods (fix(ios): add xcode 14 workaround (turn off signing resource bundles) for pods facebook/react-native#34826)
• ebf746b Use NMake generator for Hermes build on Windows (Use NMake generator for Hermes build on Windows facebook/react-native#34790)
• 0c2f55d Fixing failure building RN codegen CLI on Windows (Fixing failure building RN codegen CLI on Windows  facebook/react-native#34791)
• e2645a5 Revert D37801394: Multisect successfully blamed D37801394 for test or build failures
• b9c2975 [0.70.2] Bump version numbers

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs