| 2a35907e | 26-Jun-2023 |
Felipe S. Santos <[email protected]> |
Upgrade semver and json5 for remove security vulnerabilities (#23113)
# Why
Integrate Expo SDK in a bare flow project, creates new security
vulnerabilities.
This PR upgrade the Libs to remove those vulnerabilities
[CVE-2022-46175](https://www.mend.io/vulnerability-database/CVE-2022-46175)
[CVE-2023-0842](https://www.mend.io/vulnerability-database/CVE-2023-0842)
- It's already up to date
[CVE-2022-25883](https://www.mend.io/vulnerability-database/CVE-2022-25883)
[CVE-2022-25883](https://www.mend.io/vulnerability-database/CVE-2022-25883)
<!--
Please describe the motivation for this PR, and link to relevant GitHub
issues, forums posts, or feature requests.
-->
# How
It's a simple non-break changes lib upgrades
<!--
How did you build this feature or fix this bug and why?
-->
# Test Plan
CI should pass
<!--
Please describe how you tested this change and how a reviewer could
reproduce your test, especially if this PR does not include automated
tests! If possible, please also provide terminal output and/or
screenshots demonstrating your test/reproduction.
-->
# Checklist
<!--
Please check the appropriate items below if they apply to your diff.
This is required for changes to Expo modules.
-->
- [x] Documentation is up to date to reflect these changes (eg:
https://docs.expo.dev and README.md).
- [x] Conforms with the [Documentation Writing Style
Guide](https://github.com/expo/expo/blob/main/guides/Expo%20Documentation%20Writing%20Style%20Guide.md)
- [x] This diff will work correctly for `npx expo prebuild` & EAS Build
(eg: updated a module plugin).
---------
Co-authored-by: Brent Vatne <[email protected]>
show more ...
|