Skip to content

[Snyk] Security upgrade react-native from 0.73.7 to 0.74.0 #709

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
revan-zhang wants to merge 1 commit into
base: onekey
Choose a base branch
from
Open

[Snyk] Security upgrade react-native from 0.73.7 to 0.74.0 #709

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/connect-examples/expo-example/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@
"react": "18.2.0",
"react-dom": "18.2.0",
"react-intl": "^6.6.2",
"react-native": "0.73.7",
"react-native": "0.74.0",
Copy link
Copy Markdown

@cursor cursor bot Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

React Native 0.74 incompatible with Expo SDK 50

High Severity

Upgrading react-native to 0.74.0 while expo remains at ^50.0.20 will break the build. Expo SDK 50 only supports React Native 0.73.x; React Native 0.74 requires Expo SDK 51. Additionally, react-native-reanimated at ~3.6.2 does not support React Native 0.74 — its compatibility range tops out at 0.73. These version mismatches will cause build or runtime failures.

Additional Locations (1)
Fix in Cursor Fix in Web

Copy link
Copy Markdown

@devin-ai-integration devin-ai-integration bot Mar 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 @types/react-native not updated to match new react-native version

The PR bumps react-native from 0.73.7 to 0.74.0 (line 68) but does not update @types/react-native which remains at ~0.73.0 (line 95). This version mismatch means the type definitions will correspond to the 0.73.x API surface rather than 0.74.x, potentially causing incorrect type checking — either missing new APIs or referencing removed/changed ones.

Prompt for agents 
In packages/connect-examples/expo-example/package.json, update the @types/react-native version in devDependencies (line 95) from ~0.73.0 to ~0.74.0 to match the react-native runtime version being bumped to 0.74.0 on line 68. Note: React Native 0.74 may ship its own types, in which case the @types/react-native dependency may no longer be needed at all — check whether the built-in types from react-native 0.74.0 are sufficient and remove the @types/react-native devDependency if so.
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

"react-native-ble-plx": "3.5.1",
"react-native-crypto": "^2.2.0",
"react-native-get-random-values": "^1.10.0",
Expand Down
Loading