Bump node-fetch and react-native in /example#48
Conversation
Removes [node-fetch](https://github.com/node-fetch/node-fetch). It's no longer used after updating ancestor dependency [react-native](https://github.com/facebook/react-native/tree/HEAD/packages/react-native). These dependencies need to be updated together. Removes `node-fetch` Updates `react-native` from 0.58.4 to 0.86.0 - [Release notes](https://github.com/facebook/react-native/releases) - [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG-0.5x.md) - [Commits](https://github.com/facebook/react-native/commits/v0.86.0/packages/react-native) --- updated-dependencies: - dependency-name: node-fetch dependency-version: dependency-type: indirect - dependency-name: react-native dependency-version: 0.86.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 3 potential issues.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 8e53afc. Configure here.
| "@twotalltotems/react-native-otp-input": "^1.3.7", | ||
| "react": "16.6.3", | ||
| "react-native": "0.58.4" | ||
| "react-native": "0.86.0" |
There was a problem hiding this comment.
React version incompatible with RN
High Severity
react-native 0.86.0 declares a peer dependency on react ^19.2.3, but the example app still pins react at 16.6.3. After this bump, installs and runtime can fail or behave unpredictably because the renderer and React Native versions are not paired.
Reviewed by Cursor Bugbot for commit 8e53afc. Configure here.
| "@twotalltotems/react-native-otp-input": "^1.3.7", | ||
| "react": "16.6.3", | ||
| "react-native": "0.58.4" | ||
| "react-native": "0.86.0" |
There was a problem hiding this comment.
Start script uses removed CLI
High Severity
The start script still invokes react-native/local-cli/cli.js, which is not present in React Native 0.86.0. The CLI entry is now cli.js via the react-native binary, so npm start / yarn start fails after this upgrade.
Reviewed by Cursor Bugbot for commit 8e53afc. Configure here.
| "@twotalltotems/react-native-otp-input": "^1.3.7", | ||
| "react": "16.6.3", | ||
| "react-native": "0.58.4" | ||
| "react-native": "0.86.0" |
There was a problem hiding this comment.
Babel preset mismatches Metro version
Medium Severity
metro-react-native-babel-preset remains at 0.51.1 while react-native 0.86.0 pulls Metro ^0.84.x. Bundling with a preset that far behind Metro often causes transform errors or subtle build failures once the app starts.
Reviewed by Cursor Bugbot for commit 8e53afc. Configure here.
|
No reviewers assigned, converting to draft |
1 participant
Removes node-fetch. It's no longer used after updating ancestor dependency react-native. These dependencies need to be updated together.
Removes
node-fetchUpdates
react-nativefrom 0.58.4 to 0.86.0Release notes
Sourced from react-native's releases.
... (truncated)
Changelog
Sourced from react-native's changelog.
... (truncated)
Commits
a632f9eRelease 0.86.0012be3bRelease 0.86.0-rc.3cd5b3b5Bump Hermes V1 version to 250829098.0.1419da7bbRelease 0.86.0-rc.2cc27962fix(cocoapods): escape local file URIs for unicode paths (#56907)6c6511cfeat(Pressable): add support for PlatformColor and alpha (#56395)f2880fdCache prebuilt iOS binaries in ~/Library/Caches/ReactNative (#56847)443ac40fix(cocoapods) Podfile.lock SPEC CHECKSUMS drift for React XCFrameworks (#56803)ff2562efix(ios): load RCTDefines.h first in React umbrella + drop submodule wildcard...94b6bcbRelease 0.86.0-rc.1Maintainer changes
This version was pushed to npm by react-native-bot, a new releaser for react-native since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
High Risk
Jumping React Native by many major versions in the example app can break builds and runtime without matching native/tooling upgrades, even though the diff is limited to lockfiles and one dependency line.
Overview
Updates the example app’s dependency tree by bumping
react-nativefrom 0.58.4 to 0.86.0 (with the correspondingpackage-lock.jsonrefresh, including lockfile format v3 and the new@react-native/*packages Metro/Hermes stack).Removes
node-fetchfrom the lockfile as a transitive dependency that is no longer pulled in after the React Native upgrade.example/package.jsononly changes the directreact-nativeversion; other pins (e.g.react16.6.3, old Jest/Metro dev tooling) are unchanged in this PR.Reviewed by Cursor Bugbot for commit 8e53afc. Bugbot is set up for automated code reviews on this repo. Configure here.