[Snyk] Security upgrade react-native from 0.69.4 to 0.73.0

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	141/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 7, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.35, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-native

The new version differs by 250 commits.

• 1eb4bf0 [0.73.0] Bump version numbers
• 6a4b434 [0.73.0-rc.8] Bump version numbers
• 0b3a811 Revert D49509633: Multisect successfully blamed "D49509633: [react-native][PR] fix: Text cut off issues when adjusting text size and font weight in system settings" for test or build failures
• d2517af Update Podfile.lock
• bb989e9 [0.73.0-rc.7] Bump version numbers
• d97e8e6 Update Podfile.lock
• cd43de6 Fix android root view group removal during instance re-creation (Set Default state to media library for library button in image block WordPress/gutenberg#41678)
• 0d5e678 [0.73.0-rc.6] Bump version numbers
• 61867e2 Bump package versions
• dcdea80 Fix `build_codegen!` not finding `@ react-native/codegen` in pnpm setups (Template editing: List existing template parts in the Inserter Patterns tab WordPress/gutenberg#41399)
• c32064c Correctly declare runtime dependencies
• e03137e Bump package versions
• f3f75e8 Fix projects being broken on dependencies starting with `a..` (Comment Date Block: Editor markup is wrapped in a paragraph block WordPress/gutenberg#41621)
• 830c2e7 [RN][iOS] Fix React-ImageManager dependencies
• 9dfb0ff Revert "RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag ([iOS] Block Vidéo with autoplay not working WordPress/gutenberg#41573)"
• 3bb7a70 [LOCAL] Update Podfile.lock
• 154a81a FP Tolerance in iOS Paper SafeAreaView debouncing (Non-core block styles defined in theme.json currently being filtered-out before rendering WordPress/gutenberg#41614)
• a66cda9 Remove "Open Debugger" action under JSC (In site title block, background color adding padding in Full Site Editing Editor. WordPress/gutenberg#41535)
• 02a411e RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag ([iOS] Block Vidéo with autoplay not working WordPress/gutenberg#41573)
• 3da0959 Update CLI to v12.1.1
• 4cd4b39 [0.73.0-rc.5] Bump version numbers
• 2896a57 bumped packages versions
• 5a3bcea Update podfile.lock
• 3efabb6 bumped packages versions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
gutenberg	❌ Failed (Inspect)			Dec 8, 2023 7:50am
gutenberg-wd9x	❌ Failed (Inspect)			Dec 8, 2023 7:50am

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
react-native	0.73.0	environment	+225	292 MB	react-native-bot

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue	Package	Version	Note	Source
Chronological version anomaly	@react-native/gradle-plugin	0.73.4	Previous Chronological: @react-native/[email protected] (11/26/2023, 9:37:23 PM) Previous Semver: @react-native/[email protected] (11/6/2023, 10:27:45 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Empty package	@react-native/gradle-plugin	0.73.4	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/gradle-plugin	0.73.4	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	@react-native/debugger-frontend	0.73.2	Previous Chronological: @react-native/[email protected] (10/1/2023, 9:34:33 PM) Previous Semver: @react-native/[email protected] (9/26/2023, 2:35:06 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Long strings	@react-native/debugger-frontend	0.73.2	Location: dist/third-party/front_end/entrypoints/node_app/node_app.js +178 more instances...	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Network access	@react-native/debugger-frontend	0.73.2	Module: globalThis["fetch"] Location: dist/third-party/front_end/core/host/host.js +8 more instances...	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/debugger-frontend	0.73.2	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	react-refresh	0.14.0	Previous Chronological: [email protected] (6/14/2022, 4:14:20 PM) Previous Semver: [email protected] (6/10/2022, 4:12:38 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
New author	react-refresh	0.14.0	New Author: gnoff Previous Author: acdlite	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	@react-native/assets-registry	0.73.1	Previous Chronological: @react-native/[email protected] (9/26/2023, 2:42:55 AM) Previous Semver: @react-native/[email protected] (3/30/2023, 11:02:08 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/assets-registry	0.73.1	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	jsc-android	250231.0.0	Previous Chronological: [email protected] (7/13/2022, 8:05:31 AM) Previous Semver: [email protected] (3/21/2021, 1:06:55 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	@react-native/normalize-colors	0.73.2	Previous Chronological: @react-native/[email protected] (9/26/2023, 9:37:37 PM) Previous Semver: @react-native/[email protected] (9/26/2023, 2:35:29 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/normalize-colors	0.73.2	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	@react-native/community-cli-plugin	0.73.10	Previous Chronological: @react-native/[email protected] (11/26/2023, 9:36:50 PM) Previous Semver: @react-native/[email protected] (11/20/2023, 4:34:50 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Dynamic require	@react-native/community-cli-plugin	0.73.10	Location: dist/commands/start/runServer.js +4 more instances...	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Filesystem access	@react-native/community-cli-plugin	0.73.10	Module: fs Location: dist/commands/bundle/assetCatalogIOS.js +1 more instances...	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/community-cli-plugin	0.73.10	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
Chronological version anomaly	@react-native/virtualized-lists	0.73.3	Previous Chronological: @react-native/[email protected] (11/6/2023, 9:38:47 PM) Previous Semver: @react-native/[email protected] (10/19/2023, 2:48:22 PM)	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/[email protected], [email protected] via packages/react-native-bridge/package.json @wordpress/[email protected], @wordpress/[email protected], [email protected] via packages/react-native-editor/package.json
No v1	@react-native/virtualized-lists	0.73.3	Location: Package overview	@emotion/[email protected], @testing-library/[email protected], @wordpress/[email protected], @wordpress/[email protected], @wordpress/[email protected], [email protected], [email protected] via package.json [email protected] via packages/react-native-aztec/package.json @wordpress/react-native-a