Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update react-native to 0.7x #21122

Open
wants to merge 61 commits into
base: main
Choose a base branch
from
Open

Update react-native to 0.7x #21122

wants to merge 61 commits into from

Conversation

jchen351
Copy link
Contributor

@jchen351 jchen351 commented Jun 20, 2024

Description

Updates react-native to 0.74 and run npm audit fix

Motivation and Context

Trying to fix CGs that associated with npm.

Dependent

@snnn snnn requested review from skottmckay and fs-eire June 20, 2024 21:34
@snnn
Copy link
Member

snnn commented Jun 20, 2024

This change is surprisingly huge.

@jchen351
Copy link
Contributor Author

jchen351 commented Jun 20, 2024

This change is surprisingly huge.

Because those 2 yarn.lock files are generated by npm.

I think it might be better generate them during the CI runtime, instead of committing them to the git repo.

@jchen351 jchen351 requested a review from edgchen1 June 20, 2024 22:07
@snnn
Copy link
Member

snnn commented Jun 20, 2024

@skottmckay , do we need to keep the file there? Nobody can really review the 5 thousand lines of change. Therefore I would think it is a security risk, because we don't exactly know what are brought in there.

@jchen351
Copy link
Contributor Author

This PR requires #17361

@skottmckay
Copy link
Contributor

AFAIK the contents of the yarn.lock files don't affect the bits we ship so it may not matter too much. @fs-eire is that correct?

This would suggest it's better to checkin yarn.lock for things to be deterministic, but that's countered by our project being a library not an app. https://stackoverflow.com/questions/39990017/should-i-commit-the-yarn-lock-file-and-what-is-it-for

Maybe that equates to checking in yarn.lock for the e2e test app and not checking it in for the top-level project.

@fs-eire
Copy link
Contributor

fs-eire commented Jun 24, 2024

The file is already excluded in the library (NPM package).

Keeping it in the code source helps to make it consistency between all dev environment, which avoid strange errors on CI, for example.

@jchen351 jchen351 requested a review from a team as a code owner July 17, 2024 20:13
jchen351 added 28 commits July 29, 2024 13:29
        run(sdk_tool_paths.adb, *args)
    else:
        print("No emulator is running.")

def is_emulator_running(adb_path: str) -> bool:
    result = run([adb_path, 'devices'], capture_stdout=True)
    output = result.stdout
    lines = output.strip().split('\n')
    if len(lines) > 1:
        for line in lines[1:]:
            if "emulator" in line:
                return True
    return False
# Conflicts:
#	tools/python/run_adb.py
@jchen351 jchen351 changed the title Update react-native to 0.74 and run npm audit fix Update react-native to 0.7x Sep 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants