[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: expo

The new version differs by 250 commits.

• f84d584 Publish packages
• b64a850 Publish packages
• 6a36832 [expo-firebase-analytics][docs] add setClientId method for Expo Go (#12520)
• c6120c8 [android] Add changelog for new versionCode
• 6d34432 [github] Install node_modules also
• bf8ac58 [github] Always install pods in ad-hoc-client-shell-app-ios for now
• 727a270 [ios] Bump Expo Go version
• 14cce96 [home][ios][android] Update dev and prod home
• 78bf2c9 [home] Only disable screens in home on Android
• e3cafc5 [bare-expo] Update lockfile for expo-facebook changes
• 9c6693e Publish packages
• 5946ef1 [permissions] guard mounted state (#12482)
• d7881c0 [app-loading] Fix dependency on expo-splash-screen to match bundledNativeModules.json
• 0f00ae9 Update yarn.lock
• 50e4ad7 [expo] tree-shake Logs module in production bundles (#12511)
• d2af218 [expo] Remove lodash (#12507)
• 1ea8564 [android][ios] Bump versions
• f6222ee [ios][android] Update prod home
• 87fc3a6 [home] Publish dev-home
• 57bcb87 [home] Disable screens
• 79b3b9f [expo-sensors] Added permissions (#12501)
• ba03b0c [native-component-list] fix Pedometer type (#12518)
• 99fd234 [expo-sensors] Pedometer: replace custom listener return type with unimodules Subscription (#12497)
• 8c33135 [sensors] add doc comments in Pedometer source (#12335)

See the full diff

Package name: expo-constants

The new version differs by 250 commits.

• e362887 Publish packages
• 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
• 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
• 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
• 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
• 66808c0 created ads-admob plugin (#11636)
• eff6a5b created splash-screen plugin (#11634)
• 4f897b4 created expo-notifications plugin (#11633)
• 199a7a5 created expo-facebook plugin (#11624)
• 149c954 created expo-branch plugin (#11623)
• 4cc9d1b Publish expo-av
• 4cf0936 Standardize gitignore files in templates (#11622)
• ec4c554 [EMS] Create dev tooling for config plugins (#11574)
• aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
• c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
• d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
• 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
• fe2d848 [docs] fix personal access tokens link
• c0afa77 [android] remove OkHttp interceptors (#11599)
• f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
• b655ff2 [docs] grey android notification icons
• af449a8 [docs] consolidate push notification FAQ to one page
• 9910dab [docs] replace expo-permissions calls with expo-notifications calls
• 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-font

The new version differs by 250 commits.

• e362887 Publish packages
• 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
• 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
• 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
• 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
• 66808c0 created ads-admob plugin (#11636)
• eff6a5b created splash-screen plugin (#11634)
• 4f897b4 created expo-notifications plugin (#11633)
• 199a7a5 created expo-facebook plugin (#11624)
• 149c954 created expo-branch plugin (#11623)
• 4cc9d1b Publish expo-av
• 4cf0936 Standardize gitignore files in templates (#11622)
• ec4c554 [EMS] Create dev tooling for config plugins (#11574)
• aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
• c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
• d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
• 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
• fe2d848 [docs] fix personal access tokens link
• c0afa77 [android] remove OkHttp interceptors (#11599)
• f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
• b655ff2 [docs] grey android notification icons
• af449a8 [docs] consolidate push notification FAQ to one page
• 9910dab [docs] replace expo-permissions calls with expo-notifications calls
• 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Package name: expo-linking

The new version differs by 250 commits.

• e362887 Publish packages
• 8094edf [iOS][detox][bare-expo] Fix detox builds (#11645)
• 677d5e9 [dev-menu] Fix typo `CRAETE` -> `CREATE` (#11639)
• 377f169 [docs] Fix a few typos in iOS distribution docs (#11643)
• 7f5de0b [expo-dev-launcher] Add installation guide (#11223)
• 66808c0 created ads-admob plugin (#11636)
• eff6a5b created splash-screen plugin (#11634)
• 4f897b4 created expo-notifications plugin (#11633)
• 199a7a5 created expo-facebook plugin (#11624)
• 149c954 created expo-branch plugin (#11623)
• 4cc9d1b Publish expo-av
• 4cf0936 Standardize gitignore files in templates (#11622)
• ec4c554 [EMS] Create dev tooling for config plugins (#11574)
• aa910fa [android] migrate OkHttp cache to application cache directory (#11600)
• c9f792a [network] fix: ip address not retrieved if using cellular data (#11534)
• d939464 [expo-updates] stop expecting data and publicManifest root level keys for EAS manifests (#11613)
• 1887a37 [expo-updates] fix origin-relative URL support in assetUrlOverride (#11601)
• fe2d848 [docs] fix personal access tokens link
• c0afa77 [android] remove OkHttp interceptors (#11599)
• f97ddd0 [expo-updates] add unit tests for manifest classes (#11562)
• b655ff2 [docs] grey android notification icons
• af449a8 [docs] consolidate push notification FAQ to one page
• 9910dab [docs] replace expo-permissions calls with expo-notifications calls
• 9713a7b [docs] Import missing install section on app-loading (#11595)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic