[Snyk] Fix for 1 vulnerabilities

[gusreyes01]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	141/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 15, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.35, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-native

The new version differs by 250 commits.

• 1eb4bf0 [0.73.0] Bump version numbers
• 6a4b434 [0.73.0-rc.8] Bump version numbers
• 0b3a811 Revert D49509633: Multisect successfully blamed "D49509633: [react-native][PR] fix: Text cut off issues when adjusting text size and font weight in system settings" for test or build failures
• d2517af Update Podfile.lock
• bb989e9 [0.73.0-rc.7] Bump version numbers
• d97e8e6 Update Podfile.lock
• cd43de6 Fix android root view group removal during instance re-creation (#41678)
• 0d5e678 [0.73.0-rc.6] Bump version numbers
• 61867e2 Bump package versions
• dcdea80 Fix `build_codegen!` not finding `@ react-native/codegen` in pnpm setups (#41399)
• c32064c Correctly declare runtime dependencies
• e03137e Bump package versions
• f3f75e8 Fix projects being broken on dependencies starting with `a..` (#41621)
• 830c2e7 [RN][iOS] Fix React-ImageManager dependencies
• 9dfb0ff Revert "RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)"
• 3bb7a70 [LOCAL] Update Podfile.lock
• 154a81a FP Tolerance in iOS Paper SafeAreaView debouncing (#41614)
• a66cda9 Remove "Open Debugger" action under JSC (#41535)
• 02a411e RNTester-ios / RCTAppDelegate > correctly check for USE_HERMES Flag (#41573)
• 3da0959 Update CLI to v12.1.1
• 4cd4b39 [0.73.0-rc.5] Bump version numbers
• 2896a57 bumped packages versions
• 5a3bcea Update podfile.lock
• 3efabb6 bumped packages versions

See the full diff

Package name: react-native-blob-util

The new version differs by 243 commits.

• ed20986 version
• 14104f9 fixing in check
• 5dd72a1 implementing delta from #261 with small changes
• 8df0134 update glob
• 41cd57a Merge pull request #317 from Alza-app/master
• 1851dfb fix: RN 73 remove package from AndroidManifest
• d2c8497 version
• c46b369 Merge pull request #316 from seratonik/fix-gradle-namespace
• 107f55d Enable buildConfig feature for gradle
• a89606f Corrected namespace to match package name in .java files
• 54e883b version
• 06e91b2 Merge pull request #314 from Alza-app/master
• 9ab918c remove yarn lockfile
• 02c47b1 fix: RN 73 compatibility
• b845ef0 Merge pull request #308 from tszheichoi/patch-1
• c320d98 follow existing style
• 199e4a5 remove extra lines
• c28ccef prevent returning dirty buffer in readStream
• 0e8b81e fix workflow
• 8db3f9d Merge branch 'develop'
• 0065475 fixes: #307
• 0c9b503 publish script and changes to android manifest
• 2568a62 Merge pull request #298 from ammarahm-ed/patch-1
• 58eb6ab Merge pull request #290 from UNIDY2002/master-1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.