Upgrading react-native 0.61 to 0.62
Review needed0.61.5 → 0.62.3Security1New9Changed2Fixed1
SecurityHighUpdates validateBaseUrl to use the latest regex, fixing CVE-2020-1920 and GHSL-2020-293.GHSA-7f53-fmmv-mfjv · CVE-2020-1920 ↗
Review neededUpgrade verdict
2 changed defaults and a security fix.
In plain terms
- A security check on URLs was too loose and is now stricter, closing a known security hole.
Must act 1 item needs code or config changes
react-native publishes official migration guides for versions 0.62, 0.62. They cover more than the release notes do.
Upgrade helper webtool ↗Upgrade Support ↗Adds anser ^1.4.9, eslint-plugin-relay 1.4.1, use-subscription ^1.0.0.
Drops art.
Installs 749 packages in all (was 689).
What you must change
Security1
Updates validateBaseUrl to use the latest regex, fixing CVE-2020-1920 and GHSL-2020-293.
validateBaseUrlHigh