Skip to content

[Snyk] Security upgrade react-native from 0.72.6 to 0.74.0 #26

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
revan-zhang wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Security upgrade react-native from 0.72.6 to 0.74.0 #26

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion example/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
},
"dependencies": {
"react": "18.2.0",
"react-native": "0.72.6"
"react-native": "0.74.0"
Copy link
Copy Markdown

@devin-ai-integration devin-ai-integration Bot Mar 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Incomplete version upgrade: @react-native/metro-config left at 0.72.x after react-native bumped to 0.74.0

The PR bumps react-native from 0.72.6 to 0.74.0 but leaves @react-native/metro-config at ^0.72.11 (line 20). These packages are versioned in lockstep with React Native (note both were previously aligned at 0.72.x). Using the 0.72.x metro-config with react-native@0.74.0 is a version mismatch that can cause build or bundling failures in the example app. The metro-react-native-babel-preset at 0.76.8 (line 22) also likely needs updating for RN 0.74 compatibility.

Prompt for agents 
In example/package.json, update the devDependencies to match react-native 0.74.0. Specifically:
1. At line 20, change @react-native/metro-config from ^0.72.11 to ^0.74.0
2. At line 22, update or replace metro-react-native-babel-preset 0.76.8 with the appropriate version for RN 0.74 (likely @react-native/babel-preset ^0.74.0)

These packages are versioned in lockstep with React Native and should be kept aligned.
Open in Devin Review

Was this helpful? React with 👍 or 👎 to provide feedback.

Copy link
Copy Markdown

@cursor cursor Bot Mar 19, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Incompatible @react-native/metro-config version after upgrade

High Severity

Upgrading react-native to 0.74.0 without updating @react-native/metro-config from ^0.72.11 breaks the build. The ^0.72.11 semver range only resolves to >=0.72.11 <0.73.0, which is incompatible with react-native 0.74.0. The metro-config package is versioned in lockstep with react-native and needs to be ^0.74.0. Similarly, metro-react-native-babel-preset at 0.76.8 may need updating to match the metro version bundled with react-native 0.74.

Additional Locations (1)
Fix in Cursor Fix in Web

},
"devDependencies": {
"@babel/core": "^7.20.0",
Expand Down
Loading