Skip to content

Build(deps): Bump node-forge and react-native - #524

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-08e24c0bf0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-08e24c0bf0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Removes node-forge. It's no longer used after updating ancestor dependency react-native. These dependencies need to be updated together.

Removes node-forge

Updates react-native from 0.78.1 to 0.87.1

Release notes

Sourced from react-native's releases.

0.87.1

Added

iOS specific

  • SwiftPM: Added hard fail and clear error message when an autolinking plugin host is referenced as a dependency (90a539c92d by @​chrfalch)

Changed

Fixed

  • Animated: Animated.Value.addListener() types its callback payload as {value: number} rather than any (3eab03df4c by @​huntie)
  • Animated: Animated.event() is typed as an event handler rather than any (3eb330a365 by @​huntie)

iOS specific

  • Cocoapods: Keep the quotes on header search paths containing spaces in add_rn_third_party_dependencies (71c6bfbfdc by @​Kudo)
  • SwiftPM: Reject colliding or invalid spm.modules names instead of silently dropping a module from the build (39cd1dfc4c by @​chrfalch)
  • SwiftPM: Resolve Swift manifest naming collisions (962aeec5e5 by @​chrfalch)
  • SwiftPM: Fixed not reading spm.name from react-native.config.js when scaffolding the Swift manifest (482acee824 by @​chrfalch)
  • SwiftPM: Removed unused field spm.modules.publicHeaderFiles from react-native.config.js's spm section (5168f5f831 by Christian Falch)
  • SwiftPM: SwiftPM pipeline now reads react-native.config.js with default exports correctly (ed76640ba6 by @​chrfalch)
  • SwiftPM: Created constants for internal SwiftPM packages so that we can create guards to avoid collisions (d36aa4961d by @​chrfalch)
  • SwiftPM: Set SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG when injecting SPM (4433cdbe62 by @​radoslawrolka)
  • SwiftPM: Recover React-Core-prebuilt configuration swaps that were interrupted before the marker was updated (a772a7ca16 by @​adityasingh2400)
  • SwiftPM: Fix Hermes runtime/compiler version mismatch causing "Wrong bytecode version" crashes in SwiftPM Release builds (ead93778a1 by @​nduaarte)

Hermes V1 dSYMS:

ReactNativeDependencies dSYMs:

ReactNative Core dSYMs:


You can file issues or pick requests against this release here.


... (truncated)

Changelog

Sourced from react-native's changelog.

Changelog (pre 0.80)

v0.79.7

Fixed

Android specific

v0.79.6

Added

Android specific

iOS specific

  • Cocoapods: Add the ENTERPRISE_REPOSITORY env var to let user consume artifacts from their personal maven mirror (a74d930c93 by @​cipolleschi)

Fixed

Android specific

v0.79.5

Fixed

v0.79.4

Fixed

Android specific

... (truncated)

Commits
  • a59eff6 Release 0.87.1
  • 1a6b526 [0.87] Regenerate ReactNativeApi snapshot with CI toolchain
  • dda5dd3 [0.87] Regenerate ReactNativeApi snapshot
  • 476887c Merge remote-tracking branch 'refs/remotes/origin/pr/58052' into 0.87-stable
  • e6e404e Hold an app's spm.modules names to the same rules as a library's (#58060)
  • c951129 Resolve SwiftPM manifest naming collisions (#58044)
  • 33624ce Honor a library's spm.name when scaffolding its Package.swift (#58033)
  • 617a82f Fail with clear error message when a dep depends on an autolinking plugin hos...
  • 5e24a69 Drop the inert publicHeadersPath from spm.modules (#58059)
  • 40af900 Read both export styles from a library's react-native.config.js (#58034)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native since your current version.


@coderabbitai

coderabbitai Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: fd49dc59-9752-4bcf-baad-def0490580d9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@pubnub-snyk-universal-prd

pubnub-snyk-universal-prd Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Removes [node-forge](https://github.com/digitalbazaar/forge). It's no longer used after updating ancestor dependency [react-native](https://github.com/react/react-native/tree/HEAD/packages/react-native). These dependencies need to be updated together.


Removes `node-forge`

Updates `react-native` from 0.78.1 to 0.87.1
- [Release notes](https://github.com/react/react-native/releases)
- [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG-0.7x.md)
- [Commits](https://github.com/react/react-native/commits/v0.87.1/packages/react-native)

---
updated-dependencies:
- dependency-name: node-forge
  dependency-version:
  dependency-type: indirect
- dependency-name: react-native
  dependency-version: 0.87.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-08e24c0bf0 branch from 2449750 to 6897afb Compare October 12, 2026 11:56

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants