Skip to content

[Snyk] Security upgrade react-native from 0.75.4 to 0.84.0#109

Open
snyk-io[bot] wants to merge 1 commit intomainfrom
snyk-fix-3797d0ce3acd292ae225b7b984183f51
Open

[Snyk] Security upgrade react-native from 0.75.4 to 0.84.0#109
snyk-io[bot] wants to merge 1 commit intomainfrom
snyk-fix-3797d0ce3acd292ae225b7b984183f51

Conversation

@snyk-io
Copy link

@snyk-io snyk-io bot commented Feb 11, 2026

snyk-top-banner

Snyk has created this PR to fix 2 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

  • Implementations/AdobeAnalytics/package.json
  • Implementations/AdobeAnalytics/yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
  131  
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073
  57  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

…obeAnalytics/yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-9789073
@snyk-io snyk-io bot requested a review from a team as a code owner February 11, 2026 23:01
@snyk-io snyk-io bot requested review from LiuPierre and cedancp-cs February 11, 2026 23:01
@snyk-io
Copy link
Author

snyk-io bot commented Feb 11, 2026

Merge Risk: High

This is a major upgrade that spans multiple significant and breaking versions of React Native, moving from the Legacy Architecture to the New Architecture (Fabric and TurboModules). This is a substantial migration effort that will require significant code and dependency updates.

Key Breaking Changes:

  • Mandatory New Architecture: The most critical change is the complete removal of the Legacy Architecture. Starting in v0.76, the New Architecture was enabled by default, and by v0.82, the legacy architecture is no longer selectable. Your application must be fully migrated to the new Fabric rendering engine and TurboModules system.
  • React 19 Upgrade: Version 0.78 and later incorporate React 19, which removes deprecated features like propTypes and introduces new APIs.
  • API and Component Deprecations:
    • The core <SafeAreaView> component is deprecated in v0.81 and will be removed. You must migrate to react-native-safe-area-context.
    • Deep imports (e.g., react-native/Libraries/...) are deprecated in v0.80 and will cause your app to break in later versions.
    • Support for CxxModules is removed in v0.84.
  • Environment and Tooling Changes:
    • The minimum required Node.js version is increased, reaching v22.11 in version 0.84.
    • New iOS projects default to Swift as of v0.77.
    • Android 16 (API 36) is the default target in v0.81, which enforces mandatory edge-to-edge UI rendering.

Recommendation: This is a high-effort, high-risk upgrade that should be treated as a dedicated migration project. Do not attempt this as a routine dependency bump. Use the official React Native Upgrade Helper tool to see a detailed file-by-file diff and guide your migration.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

0 participants