[Snyk] Upgrade react-native from 0.63.2 to 0.78.1

[rayston92]

Snyk has created this PR to upgrade react-native from 0.63.2 to 0.78.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 798 versions ahead of your current version.

• The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	696	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	696	No Known Exploit
	Prototype Pollution SNYK-JS-XMLDOM-3042242	696	No Known Exploit
	Use After Free SNYK-JS-HERMESENGINE-1309667	696	No Known Exploit
	Prototype Pollution SNYK-JS-ASYNC-2441827	696	Proof of Concept
	Out-of-Bounds SNYK-JS-HERMESENGINE-1727253	696	No Known Exploit
	Prototype Pollution SNYK-JS-PLIST-2405644	696	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-REACTNATIVE-1298632	696	No Known Exploit
	Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	696	Proof of Concept
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	696	No Known Exploit
	Prototype Pollution SNYK-JS-Y18N-1021887	696	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-HERMESENGINE-1015406	696	No Known Exploit
	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	696	No Known Exploit
	Improper Input Validation SNYK-JS-XMLDOM-1534562	696	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-2342071	696	No Known Exploit
	Prototype Pollution SNYK-JS-HERMESENGINE-608850	696	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HERMESENGINE-629268	696	No Known Exploit
	Out-of-Bounds SNYK-JS-HERMESENGINE-629748	696	No Known Exploit
	Improper Authorization SNYK-JS-REACTDEVTOOLSCORE-6023999	696	Proof of Concept
	Cross-site Scripting SNYK-JS-SEND-7926862	696	No Known Exploit
	Cross-site Scripting SNYK-JS-SERVESTATIC-7926865	696	No Known Exploit
	Improper Input Validation SNYK-JS-XMLDOM-3092935	696	Proof of Concept

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Generate unit testing code for this file.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai generate unit testing code for this file.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and generate unit testing code.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate docstrings to generate docstrings for this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary or Summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​babel/​traverse@​7.11.0 ⏵ 7.18.6	+1		+1
	node-releases@​2.0.5
	path-parse@​1.0.6 ⏵ 1.0.7		+5	-1
	has-symbols@​1.0.1 ⏵ 1.1.0			+2	+1
	function-bind@​1.1.1 ⏵ 1.1.2			-1
	@​babel/​plugin-transform-unicode-regex@​7.10.4 ⏵ 7.25.9	+1		+1	+1
	@​babel/​plugin-syntax-export-default-from@​7.10.4 ⏵ 7.25.9	+1		+1	+1
	@​babel/​helper-annotate-as-pure@​7.10.4 ⏵ 7.25.9	+1		+1	+1
	@​babel/​plugin-syntax-jsx@​7.10.4 ⏵ 7.25.9	+1		+2	+1
	core-util-is@​1.0.2 ⏵ 1.0.3			-1
	@​babel/​plugin-transform-class-properties@​7.25.9
	@​babel/​plugin-transform-private-methods@​7.25.9
	@​babel/​plugin-transform-named-capturing-groups-regex@​7.25.9
	@​babel/​plugin-transform-optional-catch-binding@​7.25.9
	@​babel/​plugin-transform-sticky-regex@​7.10.4 ⏵ 7.25.9	+1			+1
	@​babel/​plugin-transform-arrow-functions@​7.10.4 ⏵ 7.25.9	+1		+2	+1
	@​babel/​helper-skip-transparent-expression-wrappers@​7.11.0 ⏵ 7.25.9			+4	+1
	@​babel/​plugin-transform-numeric-separator@​7.25.9
	@​babel/​plugin-transform-literals@​7.10.4 ⏵ 7.25.9	+1		+1	+1
	domelementtype@​1.3.1 ⏵ 2.3.0			+13
	@​babel/​helper-optimise-call-expression@​7.10.4 ⏵ 7.25.9			+3	+1
	@​babel/​plugin-syntax-import-attributes@​7.26.0
	@​babel/​plugin-proposal-export-default-from@​7.10.4 ⏵ 7.25.9	+1			+1
See 155 more rows in the dashboard

View full report