Skip to content

fix(deps): update dependency react-native-reanimated to v2 [security] - #170

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-react-native-reanimated-vulnerability
Open

fix(deps): update dependency react-native-reanimated to v2 [security]#170
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/npm-react-native-reanimated-vulnerability

Conversation

@renovate

@renovate renovate Bot commented Oct 21, 2022

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
react-native-reanimated (source) 1.13.3 -> 2.10.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-24373

The package react-native-reanimated before 2.10.0 is vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.


Release Notes

software-mansion/react-native-reanimated (react-native-reanimated)

v2.10.0

Compare Source

🚀 Main changes

  • Added useAnimatedKeyboard() hook
  • Added useFrameCallback() hook
  • Added support for React Native 0.70
  • Added support for react-native-v8 (building from source only)
  • Detect multiple versions of Reanimated.
  • And many different fixes.

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2889631689

Full Changelog: software-mansion/react-native-reanimated@2.9.1...2.10.0

v2.9.1

Compare Source

What's Changed

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2595830511

🙌 Thank you for your contributions!

v2.9.0

Compare Source

What's Changed

Package contains binaries for react-native in version from 0.65 to 0.69

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2590392729

🙌 Thank you for your contributions!

v2.8.0

Compare Source

What's Changed

New Contributors

@​dylmye @​jiulongw @​lukmccall

Full Changelog: software-mansion/react-native-reanimated@2.7.0...2.8.0

🙌 Thank you for your contributions!

v2.7.0

Compare Source

What's Changed

New Contributors

@​AlexanderEggers @​gozdecoban @​jacobarvidsson

Full Changelog: software-mansion/react-native-reanimated@2.6.0...2.7.0

🙌 Thank you for your contributions!

v2.6.0

Compare Source

What's Changed

  • Fix TypeScript definitions
  • Fix building for TvOS
  • Update to react-native@0.68
  • Support for Gradle plugin 7

v2.5.0

Compare Source

🚀 New features

🐛 Important Bug fixes

What's Changed

New Contributors

Full Changelog: software-mansion/react-native-reanimated@2.4.1...2.5.0

🙌 Thank you for your contributions!

v2.4.1

Compare Source

What's Changed

Full Changelog: software-mansion/react-native-reanimated@2.4.0...2.4.1

v2.4.0

Compare Source

What's Changed

Package build

Full Changelog: software-mansion/react-native-reanimated@2.3.1...2.4.0

v2.3.3

Compare Source

What's Changed

  • Fix path for Web (CI build)

Full Changelog: software-mansion/react-native-reanimated@2.3.2...2.3.3

v2.3.2

Compare Source

What's Changed

  • Fix chrome debugger for iOS

v2.3.1

Compare Source

💡 Main changes

Two fixes for Expo

  • Fix duplicated BuildConfig error in release build #​2713
  • Import react classes from formal react module #​2720

🙌 Thank you for your contributions!

v2.3.0

Compare Source

💡 Main changes

🐛 Bug fixes

👍 Improvements

Full Changelog: software-mansion/react-native-reanimated@2.2.4...2.3.0

⚠️ Please note that we no longer support React Native 0.62. Please upgrade to 0.63+.

🙌 Thank you for your contributions!

v2.2.4

Compare Source

🔑 Key changes

All changes: compare 2.2.3 - 2.2.4

🙌 Thank you for your contributions!

v2.2.3

Compare Source

🔑 Key changes

  • Added support for react-native@0.66
  • Fix problem with flavor names in Gradle
  • Removed binary for react-native@0.62 from package

⚠️ JS part of 2.2.3 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.2

Compare Source

🔑 Key changes

  • Patch release to fix build issues people using Expo EAS

⚠️ JS part of 2.2.2 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.1

Compare Source

🔑 Key changes

⚠️ JS part of 2.2.1 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.0

Compare Source

🔑 Key changes

🐛 Bug fixes

👍 Improvements

  • Speeded up building on Android (Example App) 7aebe68
  • Named exported animation functions 462e21e
  • Possibility to set custom globals in our babel plugin 11250a0
  • Made shared values more aware of multithreading c511a5d

📓 Docs improvements

  • Broken links fixes 85e5705, ee5e557
  • Docs appearance update 5b0e39f
  • Add information about JSC support to the docs 22bbc3a
  • Clarify iOS installation steps b8b7da8
  • Update testing related doc ab6afd1
  • Added info about Webpack configuration to docs ee11c63

🙌 Thank you for your contributions!

📢 Keep watching! We will back with new features soon! 🤗

v2.1.0

Compare Source

🔑 Key changes

🐛 Bug fixes

👍 Improvements

📓 Docs improvements

🙌 Thank you for your contributions!

📢 Keep watching! We will back with new features soon! 🤗

v2.0.1

Compare Source

🔑 Key changes

v2.0.0

Compare Source

🔑 Key changes

  • Added support for Jest.js test (#​1731)
  • Rewrited Example app to TypeScript (#​1724)
  • Refactor of SharableValue for optimization memory usage (#​1639)

🐛 Bug fixes

👍 Improvements

  • Added bindings for console.log for React Native 0.64 (#​1646)
  • Updated react-native-navigation in Example app (#​1725)
  • Improved TypeScript types for Reanimated (#​1745) (#​1698)

📓 Docs improvements

🙌 Thank you for your contributions!

v1.13.4

Compare Source

What's Changed

Full Changelog: software-mansion/react-native-reanimated@1.13.3...1.13.4


Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot changed the title fix(deps): update dependency react-native-reanimated to v2 [security] fix(deps): update dependency react-native-reanimated to v2 [security] - autoclosed Jan 28, 2023
@renovate renovate Bot closed this Jan 28, 2023
@renovate
renovate Bot deleted the renovate/npm-react-native-reanimated-vulnerability branch January 28, 2023 03:02
@renovate renovate Bot changed the title fix(deps): update dependency react-native-reanimated to v2 [security] - autoclosed fix(deps): update dependency react-native-reanimated to v2 [security] Jan 28, 2023
@renovate
renovate Bot restored the renovate/npm-react-native-reanimated-vulnerability branch January 28, 2023 05:38
@renovate renovate Bot reopened this Jan 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants