Skip to content

Commit 9915a14

Browse files
snyk-io[bot]RhysAtBoltclaude
authored
[Snyk] Security upgrade react-native from 0.84.0 to 0.85.0 (#50)
### Description Bumps `react-native` from `0.84.0` to `0.85.0` in the example app to fix a medium-severity vulnerability ([SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116): Missing Release of Resource after Effective Lifetime in the transitive \`inflight\` dependency). This PR was originally created by Snyk. The \`yarn.lock\` has been updated to match. ### Testing - Dependency-only change in the example app; no behaviour changes. - CI lint, typecheck, and test suite pass. ### Security Review > [!IMPORTANT] > A security review is required for every PR in this repository to comply with PCI requirements. - [x] I have considered and reviewed security implications of this PR and included the summary below. #### Security Impact Summary This PR upgrades a transitive dependency (`inflight`) that had a resource leak vulnerability. No payment flows, authentication logic, user data handling, or external integrations are changed. The upgrade only affects the example app's dependency tree, not the SDK itself. --------- Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> Co-authored-by: RhysAtBolt <rstewart@bolt.com> Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 2fd9eae commit 9915a14

2 files changed

Lines changed: 438 additions & 2 deletions

File tree

example/package.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
},
1212
"dependencies": {
1313
"react": "19.2.3",
14-
"react-native": "0.84.0",
14+
"react-native": "0.85.0",
1515
"react-native-webview": "^13.16.0"
1616
},
1717
"devDependencies": {

0 commit comments

Comments
 (0)