Skip to content

chore(expo): Update [DEV] minor & patch dependencies#8572

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/expo-dev-minor
Open

chore(expo): Update [DEV] minor & patch dependencies#8572
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/expo-dev-minor

Conversation

@renovate

@renovate renovate Bot commented May 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
esbuild ^0.28.0 → ^0.28.1 age adoption passing confidence
react-native (source, changelog) ^0.85.2 → ^0.86.0 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

evanw/esbuild (esbuild)

v0.28.1

Compare Source

  • Disallow \ in local development server HTTP requests (GHSA-g7r4-m6w7-qqqr)

    This release fixes a security issue where HTTP requests to esbuild's local development server could traverse outside of the serve directory on Windows using a \ backslash character. It happened due to the use of Go's path.Clean() function, which only handles Unix-style / characters. HTTP requests with paths containing \ are no longer allowed.

    Thanks to @​dellalibera for reporting this issue.

  • Add integrity checks to the Deno API (GHSA-gv7w-rqvm-qjhr)

    The previous release of esbuild added integrity checks to esbuild's npm install script. This release also adds integrity checks to esbuild's Deno install script. Now esbuild's Deno API will also fail with an error if the downloaded esbuild binary contains something other than the expected content.

    Note that esbuild's Deno API installs from registry.npmjs.org by default, but allows the NPM_CONFIG_REGISTRY environment variable to override this with a custom package registry. This change means that the esbuild executable served by NPM_CONFIG_REGISTRY must now match the expected content.

    Thanks to @​sondt99 for reporting this issue.

  • Avoid inlining using and await using declarations (#​4482)

    Previously esbuild's minifier sometimes incorrectly inlined using and await using declarations into subsequent uses of that declaration, which then fails to dispose of the resource correctly. This bug happened because inlining was done for let and const declarations by avoiding doing it for var declarations, which no longer worked when more declaration types were added. Here's an example:

    // Original code
{
  using x = new Resource()
  x.activate()
}

// Old output (with --minify)
new Resource().activate();

// New output (with --minify)
{using e=new Resource;e.activate()}

  • Fix module evaluation when an error is thrown (#​4461, #​4467)

    If an error is thrown during module evaluation, esbuild previously didn't preserve the state of the module for subsequent module references. This was observable if import() or require() is used to import a module multiple times. The thrown error is supposed to be thrown by every call to import() or require(), not just the first. With this release, esbuild will now throw the same error every time you call import() or require() on a module that throws during its evaluation.

  • Fix some edge cases around the new operator (#​4477)

    Previously esbuild incorrectly printed certain edge cases involving complex expressions inside the target of a new expression (specifically an optional chain and/or a tagged template literal). The generated code for the new target was not correctly wrapped with parentheses, and either contained a syntax error or had different semantics. These edge cases have been fixed so that they now correctly wrap the new target in parentheses. Here is an example of some affected code:

    // Original code
new (foo()`bar`)()
new (foo()?.bar)()

// Old output
new foo()`bar`();
new (foo())?.bar();

// New output
new (foo())`bar`();
new (foo()?.bar)();

  • Fix renaming of nested var declarations (#​4471)

    This release fixes a bug where var declarations in nested scopes that are hoisted up to module scope were not correctly being renamed during bundling. That could previously lead to name collisions when minification was disabled, which could potentially cause a behavior change. The bug has been fixed so that these hoisted declarations are now considered to be module-level symbols during the name collision avoidance pass.

  • Emit var instead of const for certain TypeScript-only constructs for ES5 (#​4448)

    While esbuild doesn't generally support converting const to var for ES5 due to nested scoping rules (which is currently a build-time error), esbuild previously incorrectly converted TypeScript-only import assignment constructs into a const declaration even when targeting ES5. With this release, esbuild will now use var for this case instead:

    // Original code
import x = require('y')

// Old output (with --target=es5)
const x = require("y");

// New output (with --target=es5)
var x = require("y");
facebook/react-native (react-native)

v0.86.0: 0.86.0

Compare Source

Added
  • Accessibility: AccessibilityInfo: added missing tests for Promise based methods, align null checks and error message code style (8fc503d780 by @​chicio)
  • Animated: Suspense tests for the Animation Backend (8101fc776d by Bartlomiej Bloniarz)
  • Animated: Use weak_ptr when calling pullAnimationMutations in a callback scheduled with the Animation Backend (42d98b5830 by Bartlomiej Bloniarz)
  • Dev Server: Call methods on global.__BUNDLE_LOADER_REPORTER__, if given, during dev-mode bundler loads from Metro (1e0c1f886b by @​robhogan)
  • React Native DevTools: Add new custom track for React Native Renderer operations in React Native DevTools performance traces (0b1def9ce5, 29bc8f1acb, 9130df6773, c26a4875ea by @​rubennorte)
  • React Native DevTools: Add support for light/dark mode emulation via Emulation.setEmulatedMedia (11a5432cb2 by @​huntie)
  • Runtime: Add unstable_getViewTransitionInstance to UIManagerBinding (d8820a403b by @​zeyap)
  • Runtime: Add UIManagerViewTransitionDelegate interface and View Transition APIs (cdad57d8f1 by @​zeyap)
  • Runtime: Add viewport size to LayoutContext (d38c756529 by @​paradowstack)
  • Runtime: ViewTransitionModule for React Native View Transitions (f81f73e5a0 by @​zeyap)
  • Text: Add E2E tests for Text boxShadow and textWithLinkRole (b172f46f0d by @​NickGerleman)
  • View: Add E2E tests for Filter blur-with-overflow, drop-shadow, and animated-blur (66975aa3d5 by @​NickGerleman)
  • View: Add mixBlendMode plus-lighter (aaa0684045 by @​bigcupcoffee)
Android specific
iOS specific
  • Build: Add privacy manifest to declare the use of mach_absolute_time() API in the React-timing module (2ae6c8940d by @​rubennorte)
  • Dev Server: Introduce isPackagerRunningAsync that does not block the UI thread waiting on the request to DevServer ("Packager") validating that it is running (dd056d9b4c by @​vzaidman)
  • Image: Add E2E tests for Image visual examples (48b6f2dcc9 by @​NickGerleman)
  • Networking: Add RCTSetCustomMultipartDataTaskRequestInterceptor API to allow custom modification of multipart data task requests before they are sent (59b8886bb8 by @​cipolleschi)
Changed
  • Build: Update Metro to ^0.84.2 (57d4b6b350 by @​robhogan)
  • Dev Server: LoadBundleFromServer test: remove legacy Jest timers, increased coverage and improved assertions (a19d98e542 by @​chicio)
  • Hermes: Bump hermes-compiler dependency (031168013e by @​robhogan)
  • Hermes: Bump hermes version (89a2a20739 by @​robhogan)
  • LogBox: Migrated LogBoxData tests to Jest modern timers (dea2136a49 by @​chicio)
  • React: Make React Native consume 2508290.0.11 (26953d8343 by @​alanleedev)
  • React Native DevTools: Derive WebSocket scheme and port from dev server URL for React DevTools connections, supporting HTTPS dev servers (ca4173701d by @​cipolleschi)
  • Runtime: Measure node instance during applyViewTransitionName (d17ecca3c9 by @​zeyap)
  • Runtime: Move ViewTransition APIs not for react reconciler to its own TurboModule (0e65df9152 by @​zeyap)
  • Runtime: Setting reportErrorsAsExceptions to anything other than false no longer does anything. (Previously, setting it to a falsey value would be similar to setting it to false.) (f0748a6387 by @​yungsters)
  • Runtime: Use getNullableViewState in SurfaceMountingManager::updateProps and log a soft exception instead (bbf7004935 by Bartlomiej Bloniarz)
  • TurboModules: Move DefaultTurboModules::get to end of TurboModuleManager (6b32971f46 by @​zeyap)
Android specific
  • Animated: AnimationBackendChoreographer doesn't guard the ReactChoreographer post/remove with synchronized(paused) (22d327595d by Bartlomiej Bloniarz)
  • Build: Changed foojay-resolver-convention version to 1.0.0 (664acaf441 by @​TheNerdGuyLulu)
  • NavigationBar: Respect theme enforceNavigationBarContrast attribute (dfddcc9796 by @​zoontek)
iOS specific
Deprecated
  • JavaScript API: Deprecated second argument for hook function passed to AppRegistry.setComponentProviderInstrumentationHook as it's not usable by apps. Passed stub that warns when used. (64116117c0 by @​rubennorte)
Fixed
  • Accessibility: Fix AccessibilityInfo.isDarkerSystemColorsEnabled unresolved (never ending) promise (8fbf2fab47 by @​chicio)
  • Accessibility: Fix AccessibilityInfo.isHighTextContrastEnabled unresolved (never ending) promise (5c9a5717c1 by @​chicio)
  • Accessibility: Fix AccessibilityInfo.prefersCrossFadeTransitions unresolved (never ending) promise (57c073f0d7 by @​chicio)
  • Animated: Fix 1-frame latency in C++ NativeAnimatedNodesManager for event-driven animations by processing the animation graph synchronously on every scroll event, matching the Java implementation behavior (0517fb552d by Mark Verlingieri)
  • Animated: Fix typo "interpolation" to "interpolate" and add missing space in AnimatedInterpolation error messages (a8b39a237c by @​Nedunchezhiyan-M)
  • Babel: Prevent errors by handling contexts where the Babel API object is not provided (63796a9160 by On Saint Tiong)
  • Build: Fix incorrect package name and output filename in scripts/js-api/README.md (d823f5b1cc by @​Nedunchezhiyan-M)
  • Codegen: Respect enum values for TurboModule c++ codegen (56129fedcb by @​akawrykow)
  • Documentation: Correct the v0.85.0 changelog entry for the removal of StyleSheet.absoluteFillObject. (fdbe0d0b63 by @​jingjing2222)
  • Modal: Forward style prop to Modal's inner container View with correct precedence so consumer styles are applied without overriding transparent or backdropColor (f8fa76f94c by @​AnuMessi10)
  • React Native DevTools: Add exponential backoff and exception handling to InspectorPackagerConnection reconnect loop to prevent heap fragmentation crashes (32d3eafdc4 by @​shubhamksavita)
  • React Native DevTools: Bump Hermes V1 to 2508290.0.14 to fix missing JavaScript samples in the Performance panel timeline on Apple platforms (cd5b3b5fa5 by @​fabriziocucci)
  • Runtime: Add missing VIEW_EVENT_CASE entries in BaseViewProps::setProp for Click, PointerDown, PointerUp, GotPointerCapture, LostPointerCapture and their Capture variants (offsets 30-37) (8d5482dd94 by Harini Malothu)
  • Runtime: Fix crash in Performance API when sorting entries (81c99682a4 by @​Abbondanzo)
  • Runtime: Fix event timestamp injection overriding native timestamps with lowercase property name (68debb27ff by @​fkgozali)
  • Runtime: Fix event timestamp propagation from host platforms to JS (aa51746b87 by @​rubennorte)
  • Runtime: Link VirtualView component (de78906391 by @​j-piasecki)
  • Runtime: PerformanceObserver: observe({type: 'event'}) now correctly defaults durationThreshold to 104ms per the W3C Event Timing spec instead of reporting all events. (65c561e195 by @​rubennorte)
  • Runtime: Prevent Scheduler use-after-free crash when surfaces tear down with pending rendering updates (aadbe96579 by @​fkgozali)
  • Runtime: Prevent updates to mounted flag on the React revision (7ee893d3be by @​j-piasecki)
  • Runtime: Support multiple old pseudo elements for same name but different source node (370606dc5b by @​zeyap)
  • Runtime: Use relevant revision as base for mounted flag updates (4b954e14c8 by @​j-piasecki)
  • Runtime: Views with a non-invertible transform (e.g. scaleX: 0 or scaleY: 0) no longer receive touches on Android or iOS. (1e8e182410 by @​qflen)
  • TurboModules: Bring back C++ Turbo Module example in RN Tester (1c2cddad1a by @​christophpurrer)
  • VirtualizedList: Improve render area change with initialScrollIndex non zero test in VirtualizedList to avoid magic numbers timers (9b966d1d8f by @​chicio)
  • Yoga: Fixed Yoga node ownership when display: contents is used in absolutely positioned subtrees (f2f92098dd by @​j-piasecki)
Android specific
  • Accessibility: Guard ReactViewGroup.addChildrenForAccessibility against transient non-descendant accessibility traversal crashes. (e681736e18 by @​erickreutz)
  • Build: Fix build regression by using rootProject.file (8a8f1b801c by @​etodanik)
  • Hermes: Fix HermesSamplingProfiler.disable() JNI registration calling enable() instead of disable() (7f2a58e46c by @​elirangoshen)
  • Hermes: Use Hermes V1 stable release instead of legacy nightly to fix startup crash caused by JSI ABI mismatch (45ceacc08f by @​cipolleschi)
  • Image: Fix image content disappearing on API 24 (Nougat) when antialiased border radius clipping is applied (fdd6ca5bb1 by @​Abbondanzo)
  • Image: Image.getSize and Image.getSizeWithHeaders now return the true source dimensions instead of Fresco's downsampled values (8823a8009b by @​zoontek)
  • Image: Make sure view width and height are non 0 before calling createBitmap() (c20a58ab6b by @​zeyap)
  • Legacy Architecture: Fix onHostPause crash in ReactInstanceManager without feature flag (3aa8a043de by @​shubhamksavita)
  • LogBox: Fixed activity context memory leak in LogBoxDialogSurfaceDelegate when using bridgeless mode (f10cded1f8 by Ilya Kovalyov)
  • Networking: Blob content provider did not work in new arch (05ea94c441 by @​javache)
  • Networking: Catch OutOfMemoryError in NetworkingModule response processing to prevent app crashes (0c153e2971 by @​shubhamksavita)
  • Networking: WebSocketModule no longer strips a Cookie header passed via the WebSocket constructor's headers option (24b51db75b by @​psjostrom)
  • Runtime: Fix Dimensions window values on Android < 15 when edge-to-edge is enabled (44a4b1ba5d by @​zoontek)
  • Runtime: Fix KeyboardAvoidingView on Android 15+ / with edgeToEdgeEnabled (4a6c933cce by @​zoontek)
  • Runtime: Fix measureInWindow returning incorrect coordinates when edge-to-edge is enabled (9d183675e9 by @​zoontek)
  • Runtime: Fix crash from stale preallocated view registry after concurrent render cancellation (97cf2202ee by @​javache)
  • Runtime: Gate diagnostic printMountItem calls in MountItemDispatcher error handlers behind enableFabricLogs() to prevent OOM crash (7a546f98a7 by @​JakobFelixJulius)
  • Runtime: Handle edge-to-edge when it's not enabled by the edgeToEdgeEnabled gradle property but enforced by the OS (Android 15+) (c2280e3201 by @​zoontek)
  • Runtime: Register HeadlessJsTaskSupportModule in CoreReactPackage (2d78a39b3e by 贾太滨)
  • Runtime: Schedule React revision merge to happen on DISPATCH_UI choreographer queue, before dispatching events (b63efbfc6b by @​j-piasecki)
  • ScrollView: Dispatch FPS performance events for mouse wheel and trackpad scroll interactions in ScrollView (e0a453c603 by @​Abbondanzo)
  • ScrollView: Fix FPS performance listener being cleared on ScrollView recycle (59ac1db76e by @​Abbondanzo)
  • StatusBar: StatusBar configuration now applies to Modal windows, fixing visual inconsistencies (6614fe7f2b by @​zoontek)
  • Text: Fix 1px text wrapping in absolutely positioned elements caused by fractional Yoga widths (90c2c595da by @​clocksarestupid)
  • Text: Fix BoringLayout crash when isBoring() returns negative width (d527f2d663 by @​NickGerleman)
  • Text: Fix crash when measuring text in a stopped surface (f71ec1a24e by @​NickGerleman)
  • TextInput: Fix setAutoCapitalize stripping numeric TextInput flags (TYPE_NUMBER_FLAG_SIGNED/DECIMAL), affecting minus sign input on Samsung keyboards (863f76bd49 by @​lukeharvey)
  • TextInput: KeyboardAvoidingView and TextInput auto-scroll not responding to IME height changes (e.g., when toggling emoji panel or predictive bar) (ee1d067692 by @​alanleedev)
  • View: Fixed a crash when clearing zIndex with props 2.0 enabled (93b37350af by @​hannojg)
  • View: Fixed crash when enabling props 2.0 and setting borderStyle to undefined (9e058db4c8 by @​hannojg)
  • View: Unsupported background size value leading to crash (fe046dc782 by @​intergalacticspacehighway)
iOS specific
Security

Hermes dSYMS:

Hermes V1 dSYMS:

ReactNativeDependencies dSYMs:

ReactNative Core dSYMs:

You can file issues or pick requests against this release here.

To help you upgrade to this version, you can use the Upgrade Helper ⚛️.

View the whole changelog in the CHANGELOG.md file.

Configuration

📅 Schedule: (in timezone GMT)

  • Branch creation
    • "before 7am on the first day of the week"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 17, 2026
@vercel

vercel Bot commented May 17, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
clerk-js-sandbox Ready Ready Preview, Comment Jun 21, 2026 12:34am
swingset Ready Ready Preview, Comment Jun 21, 2026 12:34am

Request Review

@changeset-bot

changeset-bot Bot commented May 17, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 9f0fcbe

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot added the expo label May 17, 2026
@pkg-pr-new

pkg-pr-new Bot commented May 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8572

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8572

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8572

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8572

@clerk/eslint-plugin

npm i https://pkg.pr.new/@clerk/eslint-plugin@8572

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8572

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8572

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8572

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8572

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8572

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8572

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8572

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8572

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8572

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8572

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8572

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8572

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8572

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8572

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8572

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8572

commit: 9f0fcbe

@renovate renovate Bot force-pushed the renovate/expo-dev-minor branch from 8d8d059 to 129523a Compare May 24, 2026 00:41
@renovate renovate Bot force-pushed the renovate/expo-dev-minor branch from 129523a to 8c8e5b1 Compare May 31, 2026 00:42
@renovate renovate Bot force-pushed the renovate/expo-dev-minor branch from 8c8e5b1 to b4d80f4 Compare June 7, 2026 01:12
@renovate renovate Bot changed the title chore(expo): Update dependency react-native to ^0.85.3 chore(expo): Update [DEV] minor & patch dependencies to ^0.85.3 Jun 7, 2026
@github-actions

github-actions Bot commented Jun 7, 2026

Copy link
Copy Markdown
Contributor

Break Check: no API changes detected across the tracked packages.

Last ran on b4d80f4. Pushes that change no tracked declarations (no API surface change vs. base) are skipped and don't update this comment.

@renovate renovate Bot force-pushed the renovate/expo-dev-minor branch from b4d80f4 to 86c5611 Compare June 14, 2026 02:02
@renovate renovate Bot changed the title chore(expo): Update [DEV] minor & patch dependencies to ^0.85.3 chore(expo): Update [DEV] minor & patch dependencies to ^0.86.0 Jun 14, 2026
@github-actions

github-actions Bot commented Jun 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

API Changes Report

Generated by Break Check on 2026-06-21T00:36:08.654Z

Summary

Metric Count
Packages analyzed 19
Packages with changes 0
🔴 Breaking changes 0
🟡 Non-breaking changes 0
🟢 Additions 0

No API Changes Detected

All packages have stable APIs with no detected changes.

Report generated by Break Check

Last ran on 9f0fcbe.

@renovate renovate Bot force-pushed the renovate/expo-dev-minor branch from 86c5611 to 9f0fcbe Compare June 21, 2026 00:31
@renovate renovate Bot changed the title chore(expo): Update [DEV] minor & patch dependencies to ^0.86.0 chore(expo): Update [DEV] minor & patch dependencies Jun 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file expo

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants