Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Security upgrades #919

Merged
merged 3 commits into from
Sep 21, 2022
Merged

Security upgrades #919

merged 3 commits into from
Sep 21, 2022

Conversation

pavjacko
Copy link
Member

@pavjacko pavjacko commented Sep 21, 2022

Description

BEFORE:
40 vulnerabilities found - Packages audited: 3206
Severity: 9 Moderate | 21 High | 10 Critical

AFTER:
12 vulnerabilities found - Packages audited: 3288
Severity: 9 Moderate | 1 High | 2 Critical

Breaking Changes

  • PRs should not introduce breaking changes to existing functionality
  • if breaking change cannot be avoided it has to be introduced in 2 phases (release cycles of 0.x.0)
    • 0.x.0 Add new functionality + add DEPRECATED warning to existing fuctionality
    • 0.[x+1].0 Remove deprecated functionality

I have tested my changes on:

ReNative project directly:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

New project:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

Existing Project created with previous version of renative:

  • ios simulator
  • ios device
  • android simulator
  • android device
  • web browser
  • tvos simulator
  • tvos device
  • androidtv simulator
  • androidtv device
  • androidwear simulator
  • androidwear device
  • tizen simulator
  • tizen device
  • tizenmobile simulator
  • tizenwatch device
  • webos simulator
  • webos device
  • macos
  • windows
  • chromecast device

* canary: (34 commits)
  upgrade iphoneos targets
  android support for whitespace workaround
  0.37.0-canary.2
  add support for font name spaces
  fix: make tv tests work
  fix: template-starter tv with bundle assets error
  fix: androidtv and firetv app icon sizes
  0.37.0-canary.1
  fix tests
  [feat] add support for dynamic plugin fonts
  feat(Info.plist): Allow integer values to be inserted into Info.plist file
  chore(deps): bump moment-timezone from 0.5.34 to 0.5.37
  chore(deps): bump parse-url from 6.0.0 to 6.0.5
  0.36.2-canary.4
  feat(sdk-apple): don't provide default -destination argument is -arch is set in xcodebuildArgs, as they are not compatible
  feat: Add xcodebuildArgs to CLI constants
  chore(deps): bump terser from 4.8.0 to 4.8.1
  added terraform integration
  safeguard
  feat: added json output
  ...

# Conflicts:
#	package.json
#	packages/template-starter/package.json
#	yarn.lock
@pavjacko pavjacko merged commit ae40555 into canary Sep 21, 2022
@pavjacko pavjacko deleted the chore/security-upgrades branch September 21, 2022 23:10
@pavjacko pavjacko added this to the 0.37 milestone Jun 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant