Update mobile apps to 1.1.186, fix bundlesize

[dylanjeffers]

Note

Medium Risk
Includes native mobile dependency/version bumps and modifies install-time behavior via a new postinstall script, which can affect CI/build reproducibility if the patch script or dependency resolutions differ across environments.

Overview
Bumps the mobile app release versions (Android versionName to 1.1.518, iOS CFBundleShortVersionString to 1.1.186) and updates iOS CocoaPods lockfile entries, including react-native-netinfo and @react-native-clipboard/clipboard versions and their resolved paths.

Fixes web build tooling by downgrading bundlesize to 0.18.2, adding a postinstall hook to apply a local bundlesize patch, and updating package-lock.json with newly-resolved dependency entries (e.g., bn.js, redux, symbol-observable, @types/bn.js).

^{Written by Cursor Bugbot for commit d593fa2. This will update automatically on new commits. Configure here.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: d593fa2

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[cursor]

Cursor Bugbot has reviewed your changes and found 2 potential issues.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

This is the final PR Bugbot will review for you during this billing cycle

Your free Bugbot reviews will reset on March 5

Details

You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[cursor]

Postinstall references missing patch script file

High Severity

The newly added postinstall script references scripts/apply-bundlesize-patch.js, but this file does not exist anywhere in the repository. Every npm install for the @audius/web package will fail with a "Cannot find module" error, breaking the install process for all developers and CI pipelines.

 

[cursor]

Lock file bundlesize version mismatches package.json

Medium Severity

The package-lock.json entry for packages/web was changed to list bundlesize as 0.18.2, but packages/web/package.json still specifies "bundlesize": "1.0.0-beta.2" in devDependencies. This mismatch will cause npm ci to fail and npm install to regenerate the lock file with unintended changes.