Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade react-native to 0.73.8 #4548

Draft
wants to merge 4 commits into
base: x
Choose a base branch
from
Draft

chore: upgrade react-native to 0.73.8 #4548

wants to merge 4 commits into from

Conversation

huhuanming
Copy link
Contributor

No description provided.

Copy link

codesandbox bot commented May 7, 2024

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@huhuanming huhuanming enabled auto-merge (squash) May 7, 2024 16:18
Copy link

what-the-diff bot commented May 7, 2024

PR Summary

  • Adjustment to OneKeyWallet project
    The OneKeyWallet project file underwent certain updates - a whitespace was added to the OTHER_LDFLAGS property. This might appear small, but can sometimes serve as a necessary adjustment for the accurate execution of the software.

  • Upgrade of React Native in Mobile Application
    The software version of react-native, a popular framework used for building mobile applications, was updated from 0.73.7 to 0.73.8 in the mobile app configuration file. This update most likely brings performance enhancements and fixes for previous issues, improving the overall application functionality.

  • Update of React Native in Main Application
    Simultaneously, the same react-native version update was made in the main application. Maintaining consistent versions across multiple parts of the project can help avoid compatibility problems and maintain the stability of the application.

@huhuanming huhuanming marked this pull request as draft May 7, 2024 16:42
auto-merge was automatically disabled May 7, 2024 16:42

Pull request was converted to draft

Copy link

socket-security bot commented May 14, 2024

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/helper-builder-binary-assignment-operator-visitor@7.24.6 None 0 66.3 kB nicolo-ribaudo
npm/@babel/helper-create-regexp-features-plugin@7.24.6 None 0 93.5 kB nicolo-ribaudo
npm/@babel/helper-hoist-variables@7.24.6 None 0 7.04 kB nicolo-ribaudo
npm/@babel/helper-remap-async-to-generator@7.24.6 None 0 76.4 kB nicolo-ribaudo
npm/@babel/helper-string-parser@7.24.6 None 0 31.7 kB nicolo-ribaudo
npm/@babel/helper-wrap-function@7.24.6 None 0 73.7 kB nicolo-ribaudo
npm/@babel/plugin-transform-typeof-symbol@7.24.6 None 0 76.4 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-escapes@7.24.6 None 0 79.9 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-property-regex@7.24.6 None 0 71.4 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-regex@7.24.6 None 0 70.3 kB nicolo-ribaudo
npm/@babel/plugin-transform-unicode-sets-regex@7.24.6 None 0 71.1 kB nicolo-ribaudo
npm/@babel/preset-modules@0.1.6-no-external-plugins None 0 38.6 kB nicolo-ribaudo
npm/@jridgewell/resolve-uri@3.1.2 None 0 53.2 kB jridgewell
npm/@jridgewell/set-array@1.2.1 None 0 17.9 kB jridgewell
npm/@keystonehq/alias-sampling@0.1.2 None 0 10.3 kB keystoneorg
npm/@mysten/bcs@0.7.1 None 0 366 kB ebmifa
npm/@mysten/wallet-standard@0.7.2 Transitive: network +2 5.04 MB ebmifa
npm/@noble/curves@1.4.0 None 0 1.39 MB paulmillr
npm/@noble/hashes@1.4.0 None 0 773 kB paulmillr
npm/@onekeyfe/cross-inpage-provider-events@2.0.0-alpha.5 None 0 26.9 kB 1keyfe
npm/@onekeyfe/desktop-bridge-injected@2.0.0-alpha.5 None 0 16.5 kB 1keyfe
npm/@onekeyfe/extension-bridge-injected@2.0.0-alpha.5 None 0 19 kB 1keyfe
npm/@onekeyfe/hd-transport-http@1.0.0-alpha.9 Transitive: environment, network +3 1.08 MB 1keyfe
npm/@onekeyfe/hd-transport-react-native@1.0.0-alpha.9 environment 0 62.7 kB 1keyfe
npm/@onekeyfe/hd-transport-webusb@1.0.0-alpha.9 None 0 20.7 kB 1keyfe
npm/@onekeyfe/inpage-providers-hub@2.0.0-alpha.5 environment 0 591 kB 1keyfe
npm/@onekeyfe/native-bridge-injected@2.0.0-alpha.5 None 0 14.4 kB 1keyfe
npm/@onekeyfe/onekey-aptos-provider@2.0.0-alpha.5 None 0 58.8 kB 1keyfe
npm/@onekeyfe/onekey-btc-provider@2.0.0-alpha.5 None 0 44.6 kB 1keyfe
npm/@onekeyfe/onekey-cardano-provider@2.0.0-alpha.5 None 0 46.6 kB 1keyfe
npm/@onekeyfe/onekey-conflux-provider@2.0.0-alpha.5 None 0 41.3 kB 1keyfe
npm/@onekeyfe/onekey-cosmos-provider@2.0.0-alpha.5 None 0 56.8 kB 1keyfe
npm/@onekeyfe/onekey-eth-provider@2.0.0-alpha.5 None 0 112 kB 1keyfe
npm/@onekeyfe/onekey-nostr-provider@2.0.0-alpha.5 None 0 29 kB 1keyfe
npm/@onekeyfe/onekey-polkadot-provider@2.0.0-alpha.5 None +2 200 kB 1keyfe
npm/@onekeyfe/onekey-private-external-account-provider@2.0.0-alpha.5 None 0 26.9 kB 1keyfe
npm/@onekeyfe/onekey-private-provider@2.0.0-alpha.5 None 0 20 kB 1keyfe
npm/@onekeyfe/onekey-solana-provider@2.0.0-alpha.5 None 0 93.9 kB 1keyfe
npm/@onekeyfe/onekey-starcoin-provider@2.0.0-alpha.5 None 0 103 kB 1keyfe
npm/@onekeyfe/onekey-sui-provider@2.0.0-alpha.5 None 0 50.9 kB 1keyfe
npm/@onekeyfe/onekey-tron-provider@2.0.0-alpha.5 None 0 45.3 kB 1keyfe
npm/@onekeyfe/onekey-webln-provider@2.0.0-alpha.5 None 0 36.2 kB 1keyfe
npm/@onekeyfe/react-native-ble-plx@3.0.0 None 0 344 kB 1keyfe
npm/@open-rpc/client-js@1.8.1 None 0 283 kB belfordz
npm/@polkadot/api@10.13.1 None +1 3.27 MB polkadotjs
npm/@polkadot/keyring@12.6.2 None 0 130 kB polkadotjs
npm/@polkadot/rpc-provider@10.13.1 network 0 176 kB polkadotjs
npm/@polkadot/types-augment@10.13.1 None 0 1.78 MB polkadotjs
npm/@polkadot/types-codec@10.13.1 None 0 652 kB polkadotjs
npm/@polkadot/types-create@10.13.1 None 0 77.8 kB polkadotjs
npm/@polkadot/util@12.6.2 None 0 549 kB polkadotjs
npm/@polkadot/x-global@12.6.2 None 0 16.6 kB polkadotjs
npm/@scure/bip32@1.4.0 None 0 58.7 kB paulmillr
npm/@scure/bip39@1.3.0 None 0 374 kB paulmillr
npm/@solana/wallet-standard-features@1.2.0 None 0 45.3 kB jordansexton
npm/@solana/web3.js@1.91.8 network 0 10.8 MB lorisleiva
npm/@suchipi/femver@1.0.0 None 0 7.33 kB suchipi
npm/@wallet-standard/base@1.0.1 None 0 42.3 kB jordansexton
npm/@wallet-standard/core@1.0.3 None 0 14.6 kB jordansexton
npm/ajv-formats@2.1.1 None 0 52.2 kB esp
npm/ajv-keywords@5.1.0 None 0 132 kB esp
npm/ajv@8.14.0 eval 0 1.03 MB esp
npm/ansi-html-community@0.0.8 None 0 20.1 kB mahdyar
npm/ansi-styles@4.3.0 None 0 17 kB sindresorhus
npm/aptos@1.21.0 None 0 6.73 MB aptos-labs
npm/assert@2.1.0 None 0 82.1 kB ljharb
npm/babel-plugin-polyfill-corejs2@0.4.11 None 0 81.5 kB nicolo-ribaudo
npm/babel-plugin-polyfill-corejs3@0.10.4 None 0 207 kB nicolo-ribaudo
npm/babel-plugin-polyfill-regenerator@0.6.2 None 0 9.74 kB nicolo-ribaudo
npm/bs58@5.0.0 None 0 6.21 kB junderw
npm/buffer@6.0.3 None 0 91.3 kB feross
npm/bytebuffer@5.0.1 None 0 982 kB dcode
npm/cbor-sync@1.0.4 None 0 34.8 kB thegecko
npm/clean-webpack-plugin@4.0.0 None 0 35.7 kB johnagan
npm/core-js-compat@3.37.1 None 0 731 kB zloirock
npm/core-js-pure@3.37.1 environment, eval, filesystem 0 1.09 MB zloirock
npm/crc@3.8.0 None 0 94.3 kB alexgorbatchev
npm/css-minimizer-webpack-plugin@3.4.1 eval 0 65.1 kB evilebottnawi
npm/electron@30.0.8 environment, filesystem, shell 0 989 kB electron-nightly
npm/error-stack-parser@2.1.4 None 0 35.9 kB titanism
npm/eth-rpc-errors@4.0.3 None 0 52.2 kB rekmarks
npm/events@3.3.0 None 0 82.8 kB goto-bus-stop
npm/expo-pwa@0.0.127 None 0 111 kB keith-kurak
npm/fast-glob@3.3.2 filesystem 0 96.7 kB mrmlnc
npm/fast-safe-stringify@2.1.1 None 0 39.7 kB matteo.collina
npm/find-cache-dir@3.3.2 filesystem 0 6.79 kB sindresorhus
npm/find-up@5.0.0 None 0 11.8 kB sindresorhus
npm/find-yarn-workspace-root@2.0.0 filesystem 0 16.7 kB bmishkin
npm/follow-redirects@1.15.6 network 0 29.4 kB rubenverborgh
npm/form-data@4.0.0 filesystem, network 0 43.4 kB niftylettuce
npm/fs-extra@11.2.0 None 0 54.9 kB ryanzim
npm/getenv@1.0.0 environment 0 10.2 kB ctavan
npm/glob-parent@6.0.2 None 0 7.72 kB phated
npm/globby@12.2.0 None 0 22.6 kB sindresorhus
npm/html-entities@2.5.2 None 0 287 kB mdevils
npm/is-wsl@2.2.0 environment, filesystem 0 3.76 kB sindresorhus
npm/isomorphic-fetch@3.0.0 None 0 6.34 kB mattandrews
npm/isomorphic-ws@5.0.0 None 0 4.04 kB heineiuo
npm/jayson@4.1.0 network 0 162 kB tedeh
npm/jsbi@3.2.5 None 0 322 kB google-wombot
npm/jszip@3.10.1 None 0 762 kB stuk
npm/loader-utils@2.0.4 None 0 36.3 kB evilebottnawi
npm/lodash-es@4.17.21 eval 0 636 kB bnjmnt4n
npm/lodash@4.17.21 None 0 1.41 MB bnjmnt4n
npm/long@4.0.0 None 0 177 kB dcode
npm/make-dir@3.1.0 filesystem 0 10 kB sindresorhus
npm/mini-css-extract-plugin@2.9.0 unsafe 0 133 kB evilebottnawi
npm/mitt@3.0.1 None 0 26.4 kB developit
npm/ms@2.1.3 None 0 6.72 kB styfle
npm/node-html-parser@5.4.2 None 0 156 kB taoqf
npm/p-finally@1.0.0 None 0 3.11 kB sindresorhus
npm/parse-uri@1.0.9 None 0 5.42 kB kikobeats
npm/protobufjs@6.11.4 filesystem, network 0 14.7 MB google-wombot
npm/querystring@0.2.1 None 0 9.39 kB medikoo
npm/quick-lru@5.1.1 None 0 8.64 kB sindresorhus
npm/react-native-ble-manager@8.8.0 None 0 222 kB marcosinigaglia
npm/react-native@0.73.8 environment, network 0 69.7 MB react-native-bot
npm/regenerator-transform@0.15.2 None 0 135 kB benjamn
npm/regexpu-core@5.3.2 None 0 53.8 kB google-wombot
npm/ripple-keypairs@1.3.1 None 0 38.5 kB khancode_
npm/rpc-websockets@7.11.0 None 0 5.27 MB mkozjak
npm/rxjs@7.8.1 None 0 4.5 MB blesh
npm/schema-utils@2.7.1 None 0 77.4 kB evilebottnawi
npm/serialize-javascript@6.0.2 None 0 16.9 kB redonkulus
npm/sha.js@2.4.11 None 0 31.1 kB dcousens
npm/source-map-loader@3.0.2 None 0 32.1 kB evilebottnawi
npm/source-map@0.7.4 filesystem, network 0 226 kB eemeli
npm/strict-event-emitter-types@2.0.0 None 0 10.3 kB bterlson
npm/sunweb@1.1.0 None 0 224 kB cathytan
npm/superstruct@1.0.4 None 0 179 kB artmllr
npm/supports-color@7.2.0 None 0 7.04 kB sindresorhus
npm/terser-webpack-plugin@5.3.10 None 0 88 kB evilebottnawi
npm/tronweb@5.3.2 eval 0 7.18 MB troncore
npm/tweetnacl@1.0.3 None 0 175 kB dchest

🚮 Removed packages: npm/@aashutoshrathi/word-wrap@1.2.6, npm/@bcoe/v8-coverage@0.2.3, npm/@eslint-community/regexpp@4.10.0, npm/@humanwhocodes/module-importer@1.0.1, npm/@istanbuljs/schema@0.1.3, npm/@nodelib/fs.stat@2.0.5, npm/@protobufjs/aspromise@1.1.2, npm/@protobufjs/base64@1.1.2, npm/@protobufjs/codegen@2.0.4, npm/@protobufjs/eventemitter@1.1.0, npm/@protobufjs/float@1.0.2, npm/@protobufjs/inquire@1.1.0, npm/@protobufjs/path@1.1.2, npm/@protobufjs/pool@1.1.0, npm/@protobufjs/utf8@1.1.0, npm/@types/http-errors@2.0.4, npm/@types/json5@0.0.29, npm/@types/mime@1.3.5, npm/@types/range-parser@1.2.7, npm/argparse@2.0.1, npm/array-union@2.1.0, npm/assert-plus@1.0.0, npm/aws-sign2@0.7.0, npm/aws4@1.12.0, npm/balanced-match@1.0.2, npm/base64-js@1.5.1, npm/bluebird@3.7.2, npm/buffer-from@1.1.2, npm/callsites@3.1.0, npm/camelcase@5.3.1, npm/caseless@0.12.0, npm/co@4.6.0, npm/color-name@1.1.3, npm/concat-map@0.0.1, npm/deep-is@0.1.4, npm/deepmerge@4.3.1, npm/detect-newline@3.1.0, npm/emittery@0.13.1, npm/escape-string-regexp@1.0.5, npm/eslint-visitor-keys@3.4.3, npm/esprima@4.0.1, npm/exit@0.1.2, npm/extend@3.0.2, npm/fast-deep-equal@3.1.3, npm/fast-json-stable-stringify@2.1.0, npm/fast-levenshtein@2.0.6, npm/forever-agent@0.6.1, npm/fs.realpath@1.0.0, npm/function-bind@1.1.2, npm/functions-have-names@1.2.3, npm/get-package-type@0.1.0, npm/get-stream@6.0.1, npm/glob-to-regexp@0.4.1, npm/graceful-fs@4.2.11, npm/graphemer@1.4.0, npm/har-schema@2.0.0, npm/has-bigints@1.0.2, npm/has-flag@3.0.0, npm/has-symbols@1.0.3, npm/html-escaper@2.0.2, npm/human-signals@2.1.0, npm/imurmurhash@0.1.4, npm/inherits@2.0.4, npm/is-arrayish@0.2.1, npm/is-callable@1.2.7, npm/is-extglob@2.1.1, npm/is-generator-fn@2.1.0, npm/is-number@7.0.0, npm/is-path-inside@3.0.3, npm/is-stream@2.0.1, npm/is-typedarray@1.0.0, npm/isarray@1.0.0, npm/isexe@2.0.0, npm/isstream@0.1.2, npm/jsbn@0.1.1, npm/json-parse-better-errors@1.0.2, npm/json-parse-even-better-errors@2.3.1, npm/json-schema-traverse@0.4.1, npm/json-schema@0.4.0, npm/json-stable-stringify-without-jsonify@1.0.1, npm/json-stringify-safe@5.0.1, npm/kleur@3.0.3, npm/leven@3.1.0, npm/lines-and-columns@1.2.4, npm/lodash.memoize@4.1.2, npm/lodash.merge@4.6.2, npm/merge-stream@2.0.0, npm/merge2@1.4.1, npm/mimic-fn@2.1.0, npm/mkdirp@1.0.4, npm/natural-compare@1.4.0, npm/nice-try@1.0.5, npm/node-int64@0.4.0, npm/oauth-sign@0.9.0, npm/object-inspect@1.13.1, npm/object-keys@1.1.1, npm/p-try@2.2.0, npm/path-exists@4.0.0, npm/path-is-absolute@1.0.1, npm/path-key@3.1.1, npm/path-parse@1.0.7, npm/path-type@4.0.0, npm/performance-now@2.1.0, npm/picomatch@2.3.1, npm/prelude-ls@1.2.1, npm/psl@1.9.0, npm/queue-microtask@1.2.3, npm/react-native@0.73.7, npm/resolve-from@5.0.0, npm/resolve-pkg-maps@1.0.0, npm/resolve.exports@2.0.2, npm/reusify@1.0.4, npm/safe-buffer@5.2.1, npm/safer-buffer@2.1.2, npm/shebang-regex@1.0.0, npm/signal-exit@3.0.7, npm/sisteransi@1.0.5, npm/slash@3.0.0, npm/sprintf-js@1.0.3, npm/strip-bom@4.0.0, npm/strip-final-newline@2.0.0, npm/strip-json-comments@2.0.1, npm/strnum@1.0.5, npm/supports-preserve-symlinks-flag@1.0.0, npm/tapable@2.2.1, npm/text-table@0.2.0, npm/tmpl@1.0.5, npm/tree-kill@1.2.2, npm/type-detect@4.0.8, npm/type-fest@0.20.2, npm/undici-types@5.26.5

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package Note
Install scripts npm/protobufjs@6.11.4
  • Install script: postinstall
  • Source: node scripts/postinstall
Install scripts npm/core-js-pure@3.37.1
  • Install script: postinstall
  • Source: node -e "try{require('./postinstall')}catch(e){}"
Install scripts npm/electron@30.0.8

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/protobufjs@6.11.4
  • @SocketSecurity ignore npm/core-js-pure@3.37.1
  • @SocketSecurity ignore npm/electron@30.0.8

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant