[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • apps/native-component-list/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	704/1000 Why? Has a fix available, CVSS 9.8	Insecure Policy SNYK-JS-EXPOSECURESTORE-2437082	No	No Known Exploit
	519/1000 Why? Has a fix available, CVSS 6.1	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo-secure-store

The new version differs by 250 commits.

• 1bf7e48 Publish packages
• d468822 [bare-expo] Add app icon for bare-expo on iOS
• 42b335e Fix metro config for react-navigation v5 in bare-expo and test-suite (Fix metro config for react-navigation v5 in bare-expo and test-suite expo/expo#9393)
• d129185 [jest-expo] Clarify README
• 1cb2ed8 [jest-expo] add description to the package.json ([jest-expo] add description to the package.json expo/expo#9325)
• 1e8f40c [expo-updates] Update CHANGELOG to reflect release from expo-updates/0.2.x branch
• db13c28 [expo-updates] Fetch asset manifest through programmatic CLI interface instead of depending on a running React Native CLI server ([expo-updates] Fetch asset manifest through programmatic CLI interface instead of depending on a running React Native CLI server expo/expo#9372)
• 66d8719 Publish expo-av
• 5e32152 [expo-av] Improve changelog descriptions
• a85ab9a [expo-av] Fix posterStyle warning ([expo-av] Fix posterStyle warning expo/expo#9384)
• 4c91cd3 [ncl] Fix video tests failing on re-run ([ncl] Fix video tests failing on re-run expo/expo#9383)
• 37f133d [expo-av] Fix mem-leak when unmounting Video component ([expo-av] Fix mem-leak when unmounting Video component expo/expo#9379)
• e9aa9df [expo-av] Fix instability issues when changing source and useNativeControls ([expo-av] Fix instability issues when changing source and useNativeControls expo/expo#9381)
• 668cb40 [Android][shell-app] Fix guava class duplication error
• edcb294 [expo-av] Fix resume audio when in background ([expo-av] Fix resume audio when in background expo/expo#9363)
• 843a2b4 [expo-av] De-activate audio-session after unloading sound ([expo-av] De-activate audio-session after unloading sound expo/expo#9365)
• 91353ad [expo-av] Fix duplicate full-screen will-dismiss event on iOS ([expo-av] Fix duplicate full-screen will-dismiss event on iOS expo/expo#9366)
• 0fb43c6 [expo-image-picker] Fixed downsizing cropped image on iOS ([expo-image-picker] Fixed downsizing cropped image on iOS expo/expo#9316)
• f224439 [notifications][android] Add `sticky` property to notifications ([notifications][android] Add sticky property to notifications expo/expo#9351)
• 9e51403 Added missing deps for NCL (Added missing deps for NCL expo/expo#9373)
• 873109c [bare-expo] pod install
• 4da0b1b Revert "[bare-expo] add expo-updates as a unimodule dependency, add Test subspec"
• 09fa69c [home][chore] migrate to react navigation v5 ([home][chore] migrate to react navigation v5 expo/expo#9345)
• 9aed980 [docs] Fix ScreenCapture documentation examples ([docs] Fix ScreenCapture documentation examples expo/expo#9362)

See the full diff

Package name: react-native

The new version differs by 250 commits.

• 51f5ea1 [0.68.0] Bump version numbers
• a4a6e23 [0.68.0-rc.4] Bump version numbers
• e645629 Enable SonarKit and Flipper in React-Core (#33499)
• b3f19d7 [0.68.0-rc.3] Bump version numbers
• cb28a26 Bump Flipper-Glog to 0.5.0.4
• 4163386 fix(ios, flipper): update flipper sub-pods to support macCatalyst (#33406)
• ccd1708 Re-apply: Consider relative to pwd installation root when looking for files in rn module via cocoapods (#33427)
• 4e34e6c fix: `cliPath` should handle absolute paths ([expo-go] Remove expo-audio expo/expo#32983)
• 3e69592 Fix ios build error when use_frameworks is on and fabric is off (v2) (#33409)
• 5fd04fa Start surface after setting the delegate (#33402)
• a761b79 Use relative installation root instead of absolute to avoid embedding absolute paths in pods project (#33187)
• d7d33c7 Revert D31628461
• 7b33f20 Ship enableNestedTextOnPressEventFix
• 4b370ce Include folly fabric headers in source files (#33188)
• 63e4bd6 Fix Switch causing RetryableMountingLayerException (feat(cli): add npx expo serve command expo/expo#32602)
• 762db49 Make sure configureNdkBuild* tasks are depending on preBuild
• 65e4d98 [0.68.0-rc.2] Bump version numbers
• 66b82ae chore(deps): bump CLI version to 7.0.3 to address web debugging issue (#33156)
• 2cd3173 Remove optional codegen config inside template (#33108)
• 61f0d1a Release react-native-gradle-plugin 0.0.5
• 57cc524 Gradle: Deprecate `reactRoot` in favor of `root` and `reactNativeDir` (#33142)
• bca4cf0 Set a resolution strategy for com.facebook.react:react-native when on New Architecture. (#33134)
• f5d371a Set Java source/target compatibility for react-native-gradle-plugin to 8
• b1c30f8 fix: jvm 11 error message from ReactPlugin.kt and react.gradle (#33048)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.