Skip to content

Bump image-size and react-native - #3494

Merged
Crabcyborg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-578f8dd0f9
Oct 29, 2026
Merged

Crabcyborg merged 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-578f8dd0f9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Removes image-size. It's no longer used after updating ancestor dependency react-native. These dependencies need to be updated together.

Removes image-size

Updates react-native from 0.80.3 to 0.87.1

Release notes

Sourced from react-native's releases.

0.87.1

Added

iOS specific

  • SwiftPM: Added hard fail and clear error message when an autolinking plugin host is referenced as a dependency (90a539c92d by @​chrfalch)

Changed

Fixed

  • Animated: Animated.Value.addListener() types its callback payload as {value: number} rather than any (3eab03df4c by @​huntie)
  • Animated: Animated.event() is typed as an event handler rather than any (3eb330a365 by @​huntie)

iOS specific

  • Cocoapods: Keep the quotes on header search paths containing spaces in add_rn_third_party_dependencies (71c6bfbfdc by @​Kudo)
  • SwiftPM: Reject colliding or invalid spm.modules names instead of silently dropping a module from the build (39cd1dfc4c by @​chrfalch)
  • SwiftPM: Resolve Swift manifest naming collisions (962aeec5e5 by @​chrfalch)
  • SwiftPM: Fixed not reading spm.name from react-native.config.js when scaffolding the Swift manifest (482acee824 by @​chrfalch)
  • SwiftPM: Removed unused field spm.modules.publicHeaderFiles from react-native.config.js's spm section (5168f5f831 by Christian Falch)
  • SwiftPM: SwiftPM pipeline now reads react-native.config.js with default exports correctly (ed76640ba6 by @​chrfalch)
  • SwiftPM: Created constants for internal SwiftPM packages so that we can create guards to avoid collisions (d36aa4961d by @​chrfalch)
  • SwiftPM: Set SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG when injecting SPM (4433cdbe62 by @​radoslawrolka)
  • SwiftPM: Recover React-Core-prebuilt configuration swaps that were interrupted before the marker was updated (a772a7ca16 by @​adityasingh2400)
  • SwiftPM: Fix Hermes runtime/compiler version mismatch causing "Wrong bytecode version" crashes in SwiftPM Release builds (ead93778a1 by @​nduaarte)

Hermes V1 dSYMS:

ReactNativeDependencies dSYMs:

ReactNative Core dSYMs:


You can file issues or pick requests against this release here.


... (truncated)

Changelog

Sourced from react-native's changelog.

v0.87.1

Added

iOS specific

  • SwiftPM: Added hard fail and clear error message when an autolinking plugin host is referenced as a dependency (90a539c92d by @​chrfalch)

Changed

Fixed

  • Animated: Animated.Value.addListener() types its callback payload as {value: number} rather than any (3eab03df4c by @​huntie)
  • Animated: Animated.event() is typed as an event handler rather than any (3eb330a365 by @​huntie)

iOS specific

  • Cocoapods: Keep the quotes on header search paths containing spaces in add_rn_third_party_dependencies (71c6bfbfdc by @​Kudo)
  • SwiftPM: Reject colliding or invalid spm.modules names instead of silently dropping a module from the build (39cd1dfc4c by @​chrfalch)
  • SwiftPM: Resolve Swift manifest naming collisions (962aeec5e5 by @​chrfalch)
  • SwiftPM: Fixed not reading spm.name from react-native.config.js when scaffolding the Swift manifest (482acee824 by @​chrfalch)
  • SwiftPM: Removed unused field spm.modules.publicHeaderFiles from react-native.config.js's spm section (5168f5f831 by Christian Falch)
  • SwiftPM: SwiftPM pipeline now reads react-native.config.js with default exports correctly (ed76640ba6 by @​chrfalch)
  • SwiftPM: Created constants for internal SwiftPM packages so that we can create guards to avoid collisions (d36aa4961d by @​chrfalch)
  • SwiftPM: Set SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG when injecting SPM (4433cdbe62 by @​radoslawrolka)
  • SwiftPM: Recover React-Core-prebuilt configuration swaps that were interrupted before the marker was updated (a772a7ca16 by @​adityasingh2400)
  • SwiftPM: Fix Hermes runtime/compiler version mismatch causing "Wrong bytecode version" crashes in SwiftPM Release builds (ead93778a1 by @​nduaarte)

v0.87.0

Breaking

  • Appearance: Fix return type of useColorScheme() hook (now ColorSchemeName | null) (ef6463c25d by @​huntie)
  • Appearance: useColorScheme() no longer returns 'unspecified' (this was always the case, but is a breaking type change) (8ac88f481a by @​huntie)
  • CLI: The react-native/core-cli-utils package is no longer published. It remains available in the React Native repo as a reference implementation. (9c3fddf9cd by @​huntie)
  • Hermes: Remove Legacy Hermes from C++ code (f9476256bd by @​cipolleschi)
  • JavaScript API: Deep imports to 'react-native/src/private/...' have been restricted, and are no longer visible to TypeScript. These subpaths still exist, but do not have type coverage. (142b6172a9 by @​huntie)
  • JavaScript API: The NativeDialogManagerAndroid export is removed. (a793d21a7e by @​huntie)
  • JavaScript API: The Touchable root export (undocumented) is removed. If you are extending Touchable as a type, please use ViewProps instead. (6fbf3062f9 by @​huntie)
  • JavaScript API: react-native/rn-get-polyfills is removed — please use react-native/js-polyfills (package) (b6a535afee by @​huntie)
  • Jest: react-native/jest-preset is removed — all projects must now migrate to react-native/jest-preset (package) (9ee21ddd9b by @​huntie)
  • Legacy Architecture: Compile out RuntimeScheduler_Legacy under RCT_REMOVE_LEGACY_ARCH (d205267a5f by @​christophpurrer)
  • LogBox: Set max font scaling in LogBox to avoid layout breaking (4aef2b0126 by @​pchalupa)
  • Node: Require Node.js >= 22.13.0 (a0d39e7a9c by @​huntie)
  • React Native DevTools: Remove support for connecting to the standalone react-devtools package via WebSocket. Use React Native DevTools instead. (f1971caa44 by @​huntie)
  • Renderer: Remove RawPropsKey prefix and suffix (67381e157f by @​javache)
  • Runtime: Remove the SceneTracker module from Libraries/Utilities, stop setting the active scene from AppRegistry.runApplication, and pass the app key as an optional second argument to WrapperComponentProvider (bbb5be9b41 by @​rubennorte)
  • ScrollView: Remove deprecated boolean values support for ScrollView keyboardShouldPersistTaps (5bf3e38db2 by @​zoontek)

... (truncated)

Commits
  • a59eff6 Release 0.87.1
  • 1a6b526 [0.87] Regenerate ReactNativeApi snapshot with CI toolchain
  • dda5dd3 [0.87] Regenerate ReactNativeApi snapshot
  • 476887c Merge remote-tracking branch 'refs/remotes/origin/pr/58052' into 0.87-stable
  • e6e404e Hold an app's spm.modules names to the same rules as a library's (#58060)
  • c951129 Resolve SwiftPM manifest naming collisions (#58044)
  • 33624ce Honor a library's spm.name when scaffolding its Package.swift (#58033)
  • 617a82f Fail with clear error message when a dep depends on an autolinking plugin hos...
  • 5e24a69 Drop the inert publicHeadersPath from spm.modules (#58059)
  • 40af900 Read both export styles from a library's react-native.config.js (#58034)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026
@coderabbitai

coderabbitai Bot commented Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: Strategy11/formidable-forms/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 4589224a-2789-49bc-87c9-28b8fe6a6944

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Removes [image-size](https://github.com/image-size/image-size). It's no longer used after updating ancestor dependency [react-native](https://github.com/react/react-native/tree/HEAD/packages/react-native). These dependencies need to be updated together.


Removes `image-size`

Updates `react-native` from 0.80.3 to 0.87.1
- [Release notes](https://github.com/react/react-native/releases)
- [Changelog](https://github.com/react/react-native/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react-native/commits/v0.87.1/packages/react-native)

---
updated-dependencies:
- dependency-name: image-size
  dependency-version:
  dependency-type: indirect
- dependency-name: react-native
  dependency-version: 0.87.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-578f8dd0f9 branch from 69a47b3 to db87c24 Compare October 6, 2026 15:04
@deepsource-io

deepsource-io Bot commented Oct 6, 2026 •

Copy link
Copy Markdown

DeepSource Code Review

We reviewed changes in 9d75987...db87c24 on this pull request. Below is the summary for the review, and you can see the individual issues we found as inline review comments.

See full review on DeepSource ↗

PR Report Card

Overall Grade   Security  

Reliability  

Complexity  

Hygiene  

Code Review Summary

Analyzer Status Updated (UTC) Details
PHP Oct 6, 2026 3:04p.m. Review ↗
JavaScript Oct 6, 2026 3:04p.m. Review ↗

Important

AI Review is run only on demand for your team. We're only showing results of static analysis review right now. To trigger AI Review, comment @deepsourcebot review on this thread.

@Crabcyborg Crabcyborg added the full automated qa Run analysis, PHPUnit, and Cypress E2E workflows label Oct 29, 2026
@Crabcyborg
Crabcyborg merged commit 9e3a2bc into master Oct 29, 2026
33 of 40 checks passed
@Crabcyborg
Crabcyborg deleted the dependabot/npm_and_yarn/multi-578f8dd0f9 branch October 29, 2026 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file full automated qa Run analysis, PHPUnit, and Cypress E2E workflows javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant