Skip to content

chore(deps): update dependency react-native-reanimated to v2.10.0 [security]#326

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-react-native-reanimated-vulnerability
Open

chore(deps): update dependency react-native-reanimated to v2.10.0 [security]#326
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/npm-react-native-reanimated-vulnerability

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate Bot commented Apr 15, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
react-native-reanimated (source) 2.0.1 → 2.10.0 age confidence

react-native-reanimated vulnerable to ReDoS

CVE-2022-24373 / GHSA-2j79-8pqc-r7x6

More information

Details

The package react-native-reanimated before 2.10.0 is vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.

Severity

  • CVSS Score: 7.5 / 10 (High)
  • Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

Release Notes

software-mansion/react-native-reanimated (react-native-reanimated)

v2.10.0

Compare Source

🚀 Main changes

  • Added useAnimatedKeyboard() hook
  • Added useFrameCallback() hook
  • Added support for React Native 0.70
  • Added support for react-native-v8 (building from source only)
  • Detect multiple versions of Reanimated.
  • And many different fixes.

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2889631689

Full Changelog: software-mansion/react-native-reanimated@2.9.1...2.10.0

v2.9.1

Compare Source

What's Changed

  • Fix issue with duplicated libfolly_runtime.so - #​3342

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2595830511

🙌 Thank you for your contributions!

v2.9.0

Compare Source

What's Changed

  • Support for react-native@0.69
  • Treeshaking - #​3278
  • Some fixes and improvements

Package contains binaries for react-native in version from 0.65 to 0.69

Build: https://github.com/software-mansion/react-native-reanimated/actions/runs/2590392729

🙌 Thank you for your contributions!

v2.8.0

Compare Source

What's Changed

New Contributors

@​dylmye @​jiulongw @​lukmccall

Full Changelog: software-mansion/react-native-reanimated@2.7.0...2.8.0

🙌 Thank you for your contributions!

v2.7.0

Compare Source

What's Changed

New Contributors

@​AlexanderEggers @​gozdecoban @​jacobarvidsson

Full Changelog: software-mansion/react-native-reanimated@2.6.0...2.7.0

🙌 Thank you for your contributions!

v2.6.0

Compare Source

What's Changed

  • Fix TypeScript definitions
  • Fix building for TvOS
  • Update to react-native@0.68
  • Support for Gradle plugin 7

v2.5.0

Compare Source

🚀 New features

  • useAnimatedSensor() - API for animation based on sensor data #​2868
  • Building from the source - now you can build Reanimated from source directly in your Android project #​2933
  • Handle the "Slow animations" option in simulators #​2931
  • Initial value modifier for predefined layout animations #​2799
  • Support for react-native@0.68 #​2987

🐛 Important Bug fixes

What's Changed

New Contributors

Full Changelog: software-mansion/react-native-reanimated@2.4.1...2.5.0

🙌 Thank you for your contributions!

v2.4.1

Compare Source

What's Changed

  • Fix path for Web (CI build) in #​2962

Full Changelog: software-mansion/react-native-reanimated@2.4.0...2.4.1

v2.4.0

Compare Source

What's Changed

Package build

Full Changelog: software-mansion/react-native-reanimated@2.3.1...2.4.0

v2.3.3

Compare Source

What's Changed

  • Fix path for Web (CI build)

Full Changelog: software-mansion/react-native-reanimated@2.3.2...2.3.3

v2.3.2

Compare Source

What's Changed

  • Fix chrome debugger for iOS

v2.3.1

Compare Source

💡 Main changes

Two fixes for Expo

  • Fix duplicated BuildConfig error in release build #​2713
  • Import react classes from formal react module #​2720

🙌 Thank you for your contributions!

v2.3.0

Compare Source

💡 Main changes

🐛 Bug fixes

👍 Improvements

Full Changelog: software-mansion/react-native-reanimated@2.2.4...2.3.0

⚠️ Please note that we no longer support React Native 0.62. Please upgrade to 0.63+.

🙌 Thank you for your contributions!

v2.2.4

Compare Source

🔑 Key changes

  • Added support for react-native@0.67 - #​2579
  • Fix problem with flavor names in Gradle - #​2564
  • Fix setNativeProps for web - #​2280
  • Add fallback for not yet supported RN versions - #​2553

All changes: compare 2.2.3 - 2.2.4

🙌 Thank you for your contributions!

v2.2.3

Compare Source

🔑 Key changes

  • Added support for react-native@0.66
  • Fix problem with flavor names in Gradle
  • Removed binary for react-native@0.62 from package

⚠️ JS part of 2.2.3 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.2

Compare Source

🔑 Key changes

  • Patch release to fix build issues people using Expo EAS

⚠️ JS part of 2.2.2 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.1

Compare Source

🔑 Key changes

  • Added support for react-native@0.65
  • Simplified internal installation for jsExecutorFactoryForBridge on iOS #​2223
  • Fix problem with libfbjni.so #​2209
  • Adjustment for the new Hermes version
  • Fix for crash in UserStore

⚠️ JS part of 2.2.1 is fully compatible with 2.2.0

🙌 Thank you for your contributions!

v2.2.0

Compare Source

🔑 Key changes

🐛 Bug fixes

👍 Improvements

  • Speeded up building on Android (Example App) 7aebe68
  • Named exported animation functions 462e21e
  • Possibility to set custom globals in our babel plugin 11250a0
  • Made shared values more aware of multithreading c511a5d

📓 Docs improvements

  • Broken links fixes 85e5705, ee5e557
  • Docs appearance update 5b0e39f
  • Add information about JSC support to the docs 22bbc3a
  • Clarify iOS installation steps b8b7da8
  • Update testing related doc ab6afd1
  • Added info about Webpack configuration to docs ee11c63

🙌 Thank you for your contributions!

📢 Keep watching! We will back with new features soon! 🤗

v2.1.0

Compare Source

🔑 Key changes

🐛 Bug fixes

  • Fixed problem with full reload on Android. #​1839
  • Fixed wrapped worklet. #​1844
  • Fixed bug in react-native-web affected on the web version of reanimated. RNW Issue
  • Added missing viewRef for animatedProps #​1819
  • Fixed problem with hidden headers for Swift applications. #​1810

👍 Improvements

  • Added possibility to use Reanimated 2 without configuration if you use only API v1. #​1845
  • Add more descriptive error messages. #​1845 #​1832
  • Reorganized structure of files in the project: #​1789
  • Migration codebase to TypeScript. #​1807 #​1872

📓 Docs improvements

  • Updated information about debugging. #​1876

🙌 Thank you for your contributions!

📢 Keep watching! We will back with new features soon! 🤗

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Author

renovate Bot commented Apr 15, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: @nartc/react-native-barcode-mask@0.0.0-development
npm ERR! Found: react@16.13.1
npm ERR! node_modules/react
npm ERR!   dev react@"16.13.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer react@"17.0.1" from react-native@0.64.1
npm ERR! node_modules/react-native
npm ERR!   dev react-native@"0.64.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-05-18T11_02_20_329Z-debug-0.log

@renovate renovate Bot changed the title chore(deps): update dependency react-native-reanimated to v2.10.0 [security] chore(deps): update dependency react-native-reanimated to v2.10.0 [security] - autoclosed Apr 27, 2026
@renovate renovate Bot closed this Apr 27, 2026
@renovate renovate Bot deleted the renovate/npm-react-native-reanimated-vulnerability branch April 27, 2026 17:26
@renovate renovate Bot changed the title chore(deps): update dependency react-native-reanimated to v2.10.0 [security] - autoclosed chore(deps): update dependency react-native-reanimated to v2.10.0 [security] Apr 27, 2026
@renovate renovate Bot reopened this Apr 27, 2026
@renovate renovate Bot force-pushed the renovate/npm-react-native-reanimated-vulnerability branch 2 times, most recently from ce86446 to c8236a5 Compare April 27, 2026 22:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants