{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":107826162,"defaultBranch":"main","name":"react-native-iap","ownerLogin":"dooboolab-community","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2017-10-22T00:31:20.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/45788556?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1712284568.0","currentOid":""},"activityList":{"items":[{"before":"2f72a3cb5822d4014e56214fb56f69828ce3b373","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/undici-5.28.4","pushedAt":"2024-04-05T02:36:08.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"}},{"before":"82a80c650c67a6d592e0d3e611a6d7f26addbfbb","after":"b777049e7235febf93cbc8950eca0a346900317f","ref":"refs/heads/main","pushedAt":"2024-04-05T02:36:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"build(deps): bump undici from 5.28.3 to 5.28.4 (#2721)\n\nBumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.\r\n
\r\nRelease notes\r\n

Sourced from undici's\r\nreleases.

\r\n
\r\n

v5.28.4

\r\n

:warning: Security Release :warning:

\r\n\r\n

Full Changelog: https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4

\r\n
\r\n
\r\n
\r\nCommits\r\n\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=undici&package-manager=npm_and_yarn&previous-version=5.28.3&new-version=5.28.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dooboolab-community/react-native-iap/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"build(deps): bump undici from 5.28.3 to 5.28.4 (#2721)"}},{"before":null,"after":"2f72a3cb5822d4014e56214fb56f69828ce3b373","ref":"refs/heads/dependabot/npm_and_yarn/undici-5.28.4","pushedAt":"2024-04-04T17:28:47.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps): bump undici from 5.28.3 to 5.28.4\n\nBumps [undici](https://github.com/nodejs/undici) from 5.28.3 to 5.28.4.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v5.28.3...v5.28.4)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps): bump undici from 5.28.3 to 5.28.4"}},{"before":"14889eac5dabc4fb26b6ceb8442ed26cc0ef1e26","after":"82a80c650c67a6d592e0d3e611a6d7f26addbfbb","ref":"refs/heads/main","pushedAt":"2024-04-04T05:00:53.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"12.13.1","shortMessageHtmlLink":"12.13.1"}},{"before":"0c88e78ac9a9515d23c703d870d1fc0c794ee749","after":"14889eac5dabc4fb26b6ceb8442ed26cc0ef1e26","ref":"refs/heads/main","pushedAt":"2024-04-04T05:00:32.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"fix: Android 14 bug fixed (One of RECEIVER_EXPORTED or RECEIVER_NOT_E… (#2717)\n\n`com.android.billingclient:billing-ktx:6.0.1` makes apps using\r\n`react-native-iap` crash when run on Android 14:\r\n\r\n```\r\nOne of RECEIVER_EXPORTED or RECEIVER_NOT_EXPORTED should be specified when a receiver isn't being registered exclusively for system broadcasts\r\n```\r\n\r\n`com.android.billingclient:billing-ktx:6.1.0` is safe for use.\r\n\r\n---------\r\n\r\nCo-authored-by: hyochan ","shortMessageHtmlLink":"fix: Android 14 bug fixed (One of RECEIVER_EXPORTED or RECEIVER_NOT_E… ("}},{"before":"97d8df3deced83515cc28ca785f2c86f02305c57","after":"ceebb2443e8cd331af69d67587801f90eca0cffb","ref":"refs/heads/gh-pages","pushedAt":"2024-04-04T04:35:28.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 0c88e78ac9a9515d23c703d870d1fc0c794ee749","shortMessageHtmlLink":"deploy: 0c88e78"}},{"before":"9dc9a4e43d39477e2687565fc2371d8e7f1fe71f","after":"0c88e78ac9a9515d23c703d870d1fc0c794ee749","ref":"refs/heads/main","pushedAt":"2024-04-04T04:33:31.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"docs: update readme","shortMessageHtmlLink":"docs: update readme"}},{"before":"0588888560dc3efbfd5cdc5a0828b0d570df01bd","after":"97d8df3deced83515cc28ca785f2c86f02305c57","ref":"refs/heads/gh-pages","pushedAt":"2024-04-04T04:32:44.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 9dc9a4e43d39477e2687565fc2371d8e7f1fe71f","shortMessageHtmlLink":"deploy: 9dc9a4e"}},{"before":"2edfe7f15ce85b9d4f4fa32e694e80db79b54f67","after":"9dc9a4e43d39477e2687565fc2371d8e7f1fe71f","ref":"refs/heads/main","pushedAt":"2024-04-04T04:30:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"docs: update readme","shortMessageHtmlLink":"docs: update readme"}},{"before":"04448d54db2db317c659714352d957a77a1aa8e2","after":"0588888560dc3efbfd5cdc5a0828b0d570df01bd","ref":"refs/heads/gh-pages","pushedAt":"2024-03-31T11:07:51.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 2edfe7f15ce85b9d4f4fa32e694e80db79b54f67","shortMessageHtmlLink":"deploy: 2edfe7f"}},{"before":"f844f140e08f9e85b989edb9121a3c84c6f52402","after":"04448d54db2db317c659714352d957a77a1aa8e2","ref":"refs/heads/gh-pages","pushedAt":"2024-03-31T11:07:36.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: ecb8a9a4fbaa09104eca3d1148fd9d1ca166dbee","shortMessageHtmlLink":"deploy: ecb8a9a"}},{"before":"a1ac8c54d3176a4d4c5b9e22018219b07a34a4cf","after":"f844f140e08f9e85b989edb9121a3c84c6f52402","ref":"refs/heads/gh-pages","pushedAt":"2024-03-31T11:07:18.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 87e5756ccdbfbaedb30160c46cd5de999d26e9df","shortMessageHtmlLink":"deploy: 87e5756"}},{"before":"20a0827ddfe2e533662526e6e140d48a7fb3d789","after":"a1ac8c54d3176a4d4c5b9e22018219b07a34a4cf","ref":"refs/heads/gh-pages","pushedAt":"2024-03-31T11:07:01.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: 3fe90427ab8cf1d3531d5be5cc9189b70ba16641","shortMessageHtmlLink":"deploy: 3fe9042"}},{"before":"54b4f324978ea58c1f93b36cbbe46351882b6f9d","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/docs/express-4.19.2","pushedAt":"2024-03-31T11:05:40.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"}},{"before":"ecb8a9a4fbaa09104eca3d1148fd9d1ca166dbee","after":"2edfe7f15ce85b9d4f4fa32e694e80db79b54f67","ref":"refs/heads/main","pushedAt":"2024-03-31T11:05:37.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"build(deps): bump express from 4.18.2 to 4.19.2 in /docs (#2714)\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to\r\n4.19.2.\r\n
\r\nRelease notes\r\n

Sourced from express's\r\nreleases.

\r\n
\r\n

4.19.2

\r\n

What's Changed

\r\n
    \r\n
  • Improved\r\nfix for open redirect allow list bypass
  • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.1...4.19.2

\r\n

4.19.1

\r\n

What's Changed

\r\n
    \r\n
  • Fix ci after location patch by @​wesleytodd in expressjs/express#5552
  • \r\n
  • fixed un-edited version in history.md for 4.19.0 by @​wesleytodd in expressjs/express#5556
  • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.19.0...4.19.1

\r\n

4.19.0

\r\n

What's Changed

\r\n
    \r\n
  • fix typo in release date by @​UlisesGascon\r\nin expressjs/express#5527
  • \r\n
  • docs: nominating @​wesleytodd to be\r\nproject captian by @​wesleytodd in expressjs/express#5511
  • \r\n
  • docs: loosen TC activity rules by @​wesleytodd in expressjs/express#5510
  • \r\n
  • Add note on how to update docs for new release by @​crandmck in expressjs/express#5541
  • \r\n
  • Prevent\r\nopen redirect allow list bypass due to encodeurl
  • \r\n
  • Release 4.19.0 by @​wesleytodd in expressjs/express#5551
  • \r\n
\r\n

New Contributors

\r\n
    \r\n
  • @​crandmck\r\nmade their first contribution in expressjs/express#5541
  • \r\n
\r\n

Full Changelog: https://github.com/expressjs/express/compare/4.18.3...4.19.0

\r\n

4.18.3

\r\n

Main Changes

\r\n
    \r\n
  • Fix routing requests without method
  • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
    • \r\n
    • deps: content-type@~1.0.5
    • \r\n
    • deps: raw-body@2.5.2
    • \r\n
    \r\n
  • \r\n
\r\n

Other Changes

\r\n
    \r\n
  • Use https: protocol instead of deprecated git: protocol by @​vcsjones in expressjs/express#5032
  • \r\n
  • build: Node.js@16.18 and Node.js@18.12 by @​abenhamdine in\r\nexpressjs/express#5034
  • \r\n
  • ci: update actions/checkout to v3 by @​armujahid in expressjs/express#5027
  • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5124
  • \r\n
  • Remove unused originalIndex from acceptParams by @​raksbisht in expressjs/express#5119
  • \r\n
  • Fixed typos by @​raksbisht in expressjs/express#5117
  • \r\n
  • examples: remove unused params by @​raksbisht in expressjs/express#5113
  • \r\n
  • fix: parameter str is not described in JSDoc by @​raksbisht in expressjs/express#5130
  • \r\n
  • fix: typos in History.md by @​raksbisht in expressjs/express#5131
  • \r\n
  • build : add Node.js@19.7 by @​abenhamdine in\r\nexpressjs/express#5028
  • \r\n
  • test: remove unused function arguments in params by @​raksbisht in expressjs/express#5137
  • \r\n
\r\n\r\n
\r\n

... (truncated)

\r\n
\r\n
\r\nChangelog\r\n

Sourced from express's\r\nchangelog.

\r\n
\r\n

4.19.2 / 2024-03-25

\r\n
    \r\n
  • Improved fix for open redirect allow list bypass
  • \r\n
\r\n

4.19.1 / 2024-03-20

\r\n
    \r\n
  • Allow passing non-strings to res.location with new encoding handling\r\nchecks
  • \r\n
\r\n

4.19.0 / 2024-03-20

\r\n
    \r\n
  • Prevent open redirect allow list bypass due to encodeurl
  • \r\n
  • deps: cookie@0.6.0
  • \r\n
\r\n

4.18.3 / 2024-02-29

\r\n
    \r\n
  • Fix routing requests without method
  • \r\n
  • deps: body-parser@1.20.2\r\n
      \r\n
    • Fix strict json error message on Node.js 19+
    • \r\n
    • deps: content-type@~1.0.5
    • \r\n
    • deps: raw-body@2.5.2
    • \r\n
    \r\n
  • \r\n
  • deps: cookie@0.6.0\r\n
      \r\n
    • Add partitioned option
    • \r\n
    \r\n
  • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 04bc627\r\n4.19.2
  • \r\n
  • da4d763\r\nImproved fix for open redirect allow list bypass
  • \r\n
  • 4f0f6cc\r\n4.19.1
  • \r\n
  • a003cfa\r\nAllow passing non-strings to res.location with new encoding handling\r\nchecks f...
  • \r\n
  • a1fa90f\r\nfixed un-edited version in history.md for 4.19.0
  • \r\n
  • 11f2b1d\r\nbuild: fix build due to inconsistent supertest behavior in older\r\nversions
  • \r\n
  • 084e365\r\n4.19.0
  • \r\n
  • 0867302\r\nPrevent open redirect allow list bypass due to encodeurl
  • \r\n
  • 567c9c6\r\nAdd note on how to update docs for new release (#5541)
  • \r\n
  • 69a4cf2\r\ndeps: cookie@0.6.0
  • \r\n
  • Additional commits viewable in compare\r\nview
  • \r\n
\r\n
\r\n
\r\nMaintainer changes\r\n

This version was pushed to npm by wesleytodd, a new releaser\r\nfor express since your current version.

\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=express&package-manager=npm_and_yarn&previous-version=4.18.2&new-version=4.19.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dooboolab-community/react-native-iap/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"build(deps): bump express from 4.18.2 to 4.19.2 in /docs (#2714)"}},{"before":"70a3fbd10d754444f61d14316e3892a83e2c12fd","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/docs/webpack-dev-middleware-5.3.4","pushedAt":"2024-03-31T11:05:23.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"}},{"before":"87e5756ccdbfbaedb30160c46cd5de999d26e9df","after":"ecb8a9a4fbaa09104eca3d1148fd9d1ca166dbee","ref":"refs/heads/main","pushedAt":"2024-03-31T11:05:21.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs (#2709)\n\nBumps\r\n[webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware)\r\nfrom 5.3.3 to 5.3.4.\r\n
\r\nRelease notes\r\n

Sourced from webpack-dev-middleware's\r\nreleases.

\r\n
\r\n

v5.3.4

\r\n

5.3.4\r\n(2024-03-20)

\r\n

Bug Fixes

\r\n
    \r\n
  • security: do not allow to read files above (#1779)\r\n(189c4ac)
  • \r\n
\r\n
\r\n
\r\n
\r\nChangelog\r\n

Sourced from webpack-dev-middleware's\r\nchangelog.

\r\n
\r\n

5.3.4\r\n(2024-03-20)

\r\n

Bug Fixes

\r\n
    \r\n
  • security: do not allow to read files above (#1779)\r\n(189c4ac)
  • \r\n
\r\n
\r\n
\r\n
\r\nCommits\r\n
    \r\n
  • 86071ea\r\nchore(release): 5.3.4
  • \r\n
  • 189c4ac\r\nfix(security): do not allow to read files above (#1779)
  • \r\n
  • See full diff in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack-dev-middleware&package-manager=npm_and_yarn&previous-version=5.3.3&new-version=5.3.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dooboolab-community/react-native-iap/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs ("}},{"before":"b3499223f0d897d8bd83c066087beb96a23efe61","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/docs/follow-redirects-1.15.6","pushedAt":"2024-03-31T11:05:08.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"}},{"before":"3fe90427ab8cf1d3531d5be5cc9189b70ba16641","after":"87e5756ccdbfbaedb30160c46cd5de999d26e9df","ref":"refs/heads/main","pushedAt":"2024-03-31T11:05:05.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"build(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /docs (#2704)\n\nBumps\r\n[follow-redirects](https://github.com/follow-redirects/follow-redirects)\r\nfrom 1.15.4 to 1.15.6.\r\n
\r\nCommits\r\n
    \r\n
  • 35a517c\r\nRelease version 1.15.6 of the npm package.
  • \r\n
  • c4f847f\r\nDrop Proxy-Authorization across hosts.
  • \r\n
  • 8526b4a\r\nUse GitHub for disclosure.
  • \r\n
  • b1677ce\r\nRelease version 1.15.5 of the npm package.
  • \r\n
  • d8914f7\r\nPreserve fragment in responseUrl.
  • \r\n
  • See full diff in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=follow-redirects&package-manager=npm_and_yarn&previous-version=1.15.4&new-version=1.15.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dooboolab-community/react-native-iap/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"build(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /docs (#2704"}},{"before":"491850343671bccd361e60dac5d52f259d97a831","after":"3fe90427ab8cf1d3531d5be5cc9189b70ba16641","ref":"refs/heads/main","pushedAt":"2024-03-31T11:04:48.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"Update get-started.mdx to avoid crashing when app launching on iOS 12 (#2702)\n\n## Summary:\r\n\r\nAfter the ipa package generated by Xcode archive was installed on on\r\niPhone 6 / iOS 12. It crashed every time I opened the app.\r\n\r\nMore information can be found here\r\n[#2701](https://github.com/dooboolab-community/react-native-iap/issues/2701)\r\n\r\n\r\n## What was done:\r\n\r\nAdd a note in get-started.mdx. So developers know to do extra\r\nconfiguration on iOS 12 to avoid crashes","shortMessageHtmlLink":"Update get-started.mdx to avoid crashing when app launching on iOS 12 ("}},{"before":null,"after":"54b4f324978ea58c1f93b36cbbe46351882b6f9d","ref":"refs/heads/dependabot/npm_and_yarn/docs/express-4.19.2","pushedAt":"2024-03-27T09:00:01.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps): bump express from 4.18.2 to 4.19.2 in /docs\n\nBumps [express](https://github.com/expressjs/express) from 4.18.2 to 4.19.2.\n- [Release notes](https://github.com/expressjs/express/releases)\n- [Changelog](https://github.com/expressjs/express/blob/master/History.md)\n- [Commits](https://github.com/expressjs/express/compare/4.18.2...4.19.2)\n\n---\nupdated-dependencies:\n- dependency-name: express\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps): bump express from 4.18.2 to 4.19.2 in /docs"}},{"before":null,"after":"70a3fbd10d754444f61d14316e3892a83e2c12fd","ref":"refs/heads/dependabot/npm_and_yarn/docs/webpack-dev-middleware-5.3.4","pushedAt":"2024-03-23T01:57:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs\n\nBumps [webpack-dev-middleware](https://github.com/webpack/webpack-dev-middleware) from 5.3.3 to 5.3.4.\n- [Release notes](https://github.com/webpack/webpack-dev-middleware/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-middleware/blob/v5.3.4/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-dev-middleware/compare/v5.3.3...v5.3.4)\n\n---\nupdated-dependencies:\n- dependency-name: webpack-dev-middleware\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps): bump webpack-dev-middleware from 5.3.3 to 5.3.4 in /docs"}},{"before":null,"after":"b3499223f0d897d8bd83c066087beb96a23efe61","ref":"refs/heads/dependabot/npm_and_yarn/docs/follow-redirects-1.15.6","pushedAt":"2024-03-15T07:18:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"build(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /docs\n\nBumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.4 to 1.15.6.\n- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)\n- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.4...v1.15.6)\n\n---\nupdated-dependencies:\n- dependency-name: follow-redirects\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"build(deps): bump follow-redirects from 1.15.4 to 1.15.6 in /docs"}},{"before":"3908d4c730b37f840ee26f2f5e76bdf734211c00","after":"491850343671bccd361e60dac5d52f259d97a831","ref":"refs/heads/main","pushedAt":"2024-03-01T08:03:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"12.13.0","shortMessageHtmlLink":"12.13.0"}},{"before":"150aa7575c1dc53460f88ed404c1565bbf9a7db6","after":"3908d4c730b37f840ee26f2f5e76bdf734211c00","ref":"refs/heads/main","pushedAt":"2024-03-01T07:59:58.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"chore: Update Expo Config Plugins (#2695)\n\n# Why?\r\n\r\n`@expo/config-plugins` at version 6.0.1 contains the deep dependency\r\n`xml2js` at version 0.4.23.\r\n\r\nThis package contains a vulnerability as described here:\r\nhttps://security.snyk.io/vuln/SNYK-JS-XML2JS-5414874.\r\n\r\nThis PR updates `@expo/config-plugins` to version 7.8.4 which is the\r\nlatest version and contains the `xml2js` at version 0.6.0. As defined in\r\nthe link above, as this version is greater than 0.5.0, it has the\r\nvulnerability fixed.\r\n\r\n# Changes made\r\n\r\n- Updated the `package.json` and `yarn`.\r\n- Smoke tested the app in iOS\r\n- Ran the tests and linting, all seems to be passing","shortMessageHtmlLink":"chore: Update Expo Config Plugins (#2695)"}},{"before":"f97357deb5dc4dccc0d20ddbc6b65cdb802ec130","after":"20a0827ddfe2e533662526e6e140d48a7fb3d789","ref":"refs/heads/gh-pages","pushedAt":"2024-03-01T07:44:58.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"github-actions[bot]","name":null,"path":"/apps/github-actions","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/15368?s=80&v=4"},"commit":{"message":"deploy: dffa863d2ba8e8de918df3ceb26992cdeaebffdc","shortMessageHtmlLink":"deploy: dffa863"}},{"before":"dffa863d2ba8e8de918df3ceb26992cdeaebffdc","after":"150aa7575c1dc53460f88ed404c1565bbf9a7db6","ref":"refs/heads/main","pushedAt":"2024-03-01T07:43:22.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"docs: Improving IapExample Readme.md (#2692)\n\nAdded Steps for installing node_modules and IOS pods in README.md of\r\nIapExample.","shortMessageHtmlLink":"docs: Improving IapExample Readme.md (#2692)"}},{"before":"b5eb38d538040a7681c3819dd593dc28b4e88010","after":"dffa863d2ba8e8de918df3ceb26992cdeaebffdc","ref":"refs/heads/main","pushedAt":"2024-03-01T07:42:43.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"Update hooks.md documentation (#2687)\n\nThe documentation of getProducts hook was outdated.\r\n\r\nIf you agree, I'd also add more comprehensive documentation when it\r\ncomes to handling errors. I was getting an empty products list and\r\nwithout adding the `.catch` statement to the `getProducts` and seeing\r\nthat I was missing the `skus` property, I couldn't figure it out. I\r\nthink it should be clear from the documentation that `getProducts`\r\nreturns a promise.","shortMessageHtmlLink":"Update hooks.md documentation (#2687)"}},{"before":"3f0098ecb779c14746a0ab632ea56dbdd240c817","after":null,"ref":"refs/heads/dependabot/npm_and_yarn/IapExample/ip-1.1.9","pushedAt":"2024-03-01T07:41:53.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"}},{"before":"8510fe5205a62bba24b4529470bc2ac048608e38","after":"b5eb38d538040a7681c3819dd593dc28b4e88010","ref":"refs/heads/main","pushedAt":"2024-03-01T07:41:50.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"hyochan","name":"Hyo","path":"/hyochan","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/27461460?s=80&v=4"},"commit":{"message":"build(deps): bump ip from 1.1.8 to 1.1.9 in /IapExample (#2691)\n\nBumps [ip](https://github.com/indutny/node-ip) from 1.1.8 to 1.1.9.\r\n
\r\nCommits\r\n
    \r\n
  • 1ecbf2f\r\n1.1.9
  • \r\n
  • 6a3ada9\r\nlib: fixed CVE-2023-42282 and added unit test
  • \r\n
  • See full diff in compare\r\nview
  • \r\n
\r\n
\r\n
\r\n\r\n\r\n[![Dependabot compatibility\r\nscore](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ip&package-manager=npm_and_yarn&previous-version=1.1.8&new-version=1.1.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\r\n\r\nDependabot will resolve any conflicts with this PR as long as you don't\r\nalter it yourself. You can also trigger a rebase manually by commenting\r\n`@dependabot rebase`.\r\n\r\n[//]: # (dependabot-automerge-start)\r\n[//]: # (dependabot-automerge-end)\r\n\r\n---\r\n\r\n
\r\nDependabot commands and options\r\n
\r\n\r\nYou can trigger Dependabot actions by commenting on this PR:\r\n- `@dependabot rebase` will rebase this PR\r\n- `@dependabot recreate` will recreate this PR, overwriting any edits\r\nthat have been made to it\r\n- `@dependabot merge` will merge this PR after your CI passes on it\r\n- `@dependabot squash and merge` will squash and merge this PR after\r\nyour CI passes on it\r\n- `@dependabot cancel merge` will cancel a previously requested merge\r\nand block automerging\r\n- `@dependabot reopen` will reopen this PR if it is closed\r\n- `@dependabot close` will close this PR and stop Dependabot recreating\r\nit. You can achieve the same result by closing it manually\r\n- `@dependabot show ignore conditions` will show all\r\nof the ignore conditions of the specified dependency\r\n- `@dependabot ignore this major version` will close this PR and stop\r\nDependabot creating any more for this major version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this minor version` will close this PR and stop\r\nDependabot creating any more for this minor version (unless you reopen\r\nthe PR or upgrade to it yourself)\r\n- `@dependabot ignore this dependency` will close this PR and stop\r\nDependabot creating any more for this dependency (unless you reopen the\r\nPR or upgrade to it yourself)\r\nYou can disable automated security fix PRs for this repo from the\r\n[Security Alerts\r\npage](https://github.com/dooboolab-community/react-native-iap/network/alerts).\r\n\r\n
\r\n\r\nSigned-off-by: dependabot[bot] \r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>","shortMessageHtmlLink":"build(deps): bump ip from 1.1.8 to 1.1.9 in /IapExample (#2691)"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEKGwL4AA","startCursor":null,"endCursor":null}},"title":"Activity · dooboolab-community/react-native-iap"}