4893c0ffb7
Summary: allow-large-files Bumps [react-native](https://github.com/facebook/react-native) from 0.64.0 to 0.64.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/facebook/react-native/releases">react-native's releases</a>.</em></p> <blockquote> <h2>v0.64.1</h2> <p>This patch release is specifically targetted towards fixing iOS build problems in Xcode 12.5. If it doesn't help, please refer to <a href="https://github-redirect.dependabot.com/facebook/react-native/issues/31480">this issue</a>.</p> <p>Aside from bumping your version from 0.64.0 to 0.64.1, please check your podfile.lock and make sure that Flipper is on 0.75 or higher, and Flipper-Folly is 2.5.3 or higher; if not, add this line to your podfile (or modify it if you already had it):</p> <pre><code>use_flipper!('Flipper' => '0.75.1', 'Flipper-Folly' => '2.5.3', 'Flipper-RSocket' => '1.3.1') </code></pre> <p>After which, do all the classic necessary cleans (node_modules, caches, pod folders, etc)(<a href="https://github.com/pmadruga/react-native-clean-project">react-native-clean-project</a> is your ally) then do <code>yarn install</code> and a <code>pod install --repo-update</code> (if pod install fails on an error about a Flipper package, just remove the relevant lines from the podfile.lock and run the pod install again).</p> <p>The only other commit picked & released along the Xcode 12.5 fixes is:</p> <ul> <li>Update validateBaseUrl to use latest regex (<a href="ca09ae8271">commit</a>) which fixes CVE-2020-1920, GHSL-2020-293.</li> </ul> <hr /> <p>You can participate in the conversation on the status of this release at <a href="https://github-redirect.dependabot.com/react-native-community/releases/issues/224">this issue</a>.</p> <hr /> <p>To help you upgrade to this version, you can use the <a href="https://react-native-community.github.io/upgrade-helper/">upgrade helper</a> {emoji:269b}</p> <hr /> <p>You can find the whole <a href="https://github.com/react-native-community/react-native-releases/blob/master/CHANGELOG.md">changelog history</a> over at <code>react-native-releases</code>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="787567a150"><code>787567a</code></a> [0.64.1] Bump version numbers</li> <li><a href="cf8a364767"><code>cf8a364</code></a> [local] change post-install to patch RTC-Folly</li> <li><a href="1c4ac48a55"><code>1c4ac48</code></a> [local] yarn lock update (?)</li> <li><a href="76f45d35e7"><code>76f45d3</code></a> [local] update RNTester files for 0.64</li> <li><a href="3912fef6bf"><code>3912fef</code></a> Update validateBaseUrl to use latest regex</li> <li>See full diff in <a href="https://github.com/facebook/react-native/compare/v0.64.0...v0.64.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `dependabot rebase` will rebase this PR - `dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `dependabot merge` will merge this PR after your CI passes on it - `dependabot squash and merge` will squash and merge this PR after your CI passes on it - `dependabot cancel merge` will cancel a previously requested merge and block automerging - `dependabot reopen` will reopen this PR if it is closed - `dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Pull Request resolved: https://github.com/facebook/flipper/pull/2291 Reviewed By: passy Differential Revision: D28323822 Pulled By: cekkaewnumchai fbshipit-source-id: 85f9c195d0ad53b6497be6701e29c8556ac19e64
276 KiB
276 KiB