fix(security): bump @react-navigation/core to 7.22.1 via override #119

Merged
maximus merged 2 commits from issue-117-react-navigation-core-7.22.1 into master 2026-09-26 00:04:07 +00:00
Showing only changes of commit 2117cc5016 - Show all commits

View file

@ -242,6 +242,10 @@ check('every installed metro copy honors the 0.83.x override pin', () => {
// @react-navigation/core <= 7.22.0 pulls query-string -> decode-uri-component
// <= 0.4.2 (GHSA-vcc3-ghjq-m6fr). 7.22.1 parses queries itself, so the deep
// link round trip must still carry query params through.
// Scope: this covers @react-navigation/core's own linking helpers only. The
// app's deep links (simplliste://task/<id>) are resolved by expo-router's fork
// (expo-router/build/fork/getStateFromPath*.js), which still uses
// query-string@7 (see #120) and is not exercised here.
check('@react-navigation/core is >= 7.22.1 and drops query-string', () => {
const core = require('@react-navigation/core/package.json');
const [major, minor, patch] = core.version.split('.').map(Number);