Upgrading react-native 0.63 to 0.64
Breaking0.63.5 → 0.64.4Security1Platform1New2Changed4Fixed4Other12
SecurityHighUpdate validateBaseUrl to use latest regex (commit) which fixes CVE-2020-1920, GHSL-2020-293.GHSA-7f53-fmmv-mfjv · CVE-2020-1920 ↗
BreakingUpgrade verdict
A platform requirement change and a security fix.
In plain terms
- Remove support of Android API levels 16 through 20.
- Update validateBaseUrl to use latest regex (commit) which fixes CVE-2020-1920, GHSL-2020-293.
Must act 2 items need code or config changes
react-native publishes official migration guides for versions 0.64, 0.64. They cover more than the release notes do.
Upgrade helper webtool ↗Upgrade Support ↗Node.js requirement changed in 0.64.0-rc.0: >=10 → >=12.
Adds @jest/create-cache-key-function ^26.5.0, @react-native/assets 1.0.0, @react-native/normalize-color 1.0.0, @react-native/polyfills 1.0.0, metro-runtime 0.64.0, react-native-codegen ^0.0.6, shelljs ^0.8.4, ws ^6.1.4.
Drops @babel/runtime, fbjs, fbjs-scripts.
Installs 609 packages in all (was 731).
What you must change
Security1
Update validateBaseUrl to use latest regex (commit) which fixes CVE-2020-1920, GHSL-2020-293.
HighPlatform1
Remove support of Android API levels 16 through 20.