iOS application to rate songs in Spotify playlists

Last update: May 11, 2022

Overview

Description

Reviewery is an iOS application to rate songs in Spotify playlists. It's a hobby project built in React Native. Read more in my Medium article.

Server side code in located here.

Functionality

Facebook login
Profile screen with the possibility to logout
A list of charts
Chart detail screen with a list of attached playlists
Playlist detail screen with a list of songs
Review popup to rate songs
Result screen with a list of songs sorted by rating. It should be accessible only when the chart is marked as completed.

Installation

Assuming you’ve already installed Node.js, CocoaPods and React Native CLI

git clone https://github.com/vadymmarkov/reviewery-mobile.git
cd reviewery-mobile/ios
pod install
cd ..
npm install
react-native run-ios

Read more about React Native setup in official getting started guide.

Author

Vadym Markov, [email protected]

Contributing

Check the CONTRIBUTING file for more info.

License

Reviewery is available under the MIT license. See the LICENSE file for more info.

Comments

Bump y18n from 3.2.1 to 3.2.2
Bumps y18n from 3.2.1 to 3.2.2.

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by oss-bot, a new releaser for y18n since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump lodash from 4.17.15 to 4.17.19
Bumps lodash from 4.17.15 to 4.17.19.

Release notes

Sourced from lodash's releases.

4.17.16

Commits

d7fbc52 Bump to v4.17.19

2e1c0f2 Add npm-package

1b6c282 Bump to v4.17.18

a370ac8 Bump to v4.17.17

1144918 Rebuild lodash and docs

3a3b0fd Bump to v4.17.16

c84fe82 fix(zipObjectDeep): prototype pollution (#4759)

e7b28ea Sanitize sourceURL so it cannot affect evaled code (#4518)

0cec225 Fix lodash.isEqual for circular references (#4320) (#4515)

94c3a81 Document matches* shorthands for over* methods (#4510) (#4514)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by mathias, a new releaser for lodash since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump acorn from 5.7.3 to 5.7.4
Bumps acorn from 5.7.3 to 5.7.4.

Commits

6370e90 Mark version 5.7.4

fbc15b1 More rigorously check surrogate pairs in regexp validator

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump lodash from 4.17.11 to 4.17.15
Bumps lodash from 4.17.11 to 4.17.15.

Commits

ddfd9b1 Bump to v4.17.15.

b185fce Rebuild lodash and docs.

be87d30 Bump to v4.17.14.

a6fe6b1 Rebuild lodash and docs.

e371828 Bump to v4.17.13.

357e899 Rebuild lodash and docs.

fd9a062 Bump to v4.17.12.

e77d681 Rebuild lodash and docs.

629d186 Update OpenJS references.

2406eac Fix minified build.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump js-yaml from 3.12.0 to 3.13.1
Bumps js-yaml from 3.12.0 to 3.13.1.

Changelog

Sourced from js-yaml's changelog.

[3.13.1] - 2019-04-05

Security

Fix possible code execution in (already unsafe) .load(), #480.

[3.13.0] - 2019-03-20

Security

Security fix: safeLoad() can hang when arrays with nested refs used as key. Now throws exception for nested arrays. #475.

[3.12.2] - 2019-02-26

Fixed

Fix noArrayIndent option for root level, #468.

[3.12.1] - 2019-01-05

Added

Added noArrayIndent option, #432.

Commits

665aadd 3.13.1 released

da8ecf2 Browser files rebuild

b2f9e88 Merge pull request #480 from nodeca/toString

e18afbf Fix possible code execution in (already unsafe) load()

9d4ce5e 3.13.0 released

f64c673 Browser files rebuild

a567ef3 Restrict data types for object keys

59b6e76 Fix test name

e4267fc 3.12.2 released

7231a49 Browser files rebuild

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump mixin-deep from 1.3.1 to 1.3.2
Bumps mixin-deep from 1.3.1 to 1.3.2.

Commits

754f0c2 1.3.2

90ee1fa ensure keys are valid when mixing in values

See full diff in compare view

Maintainer changes

This version was pushed to npm by doowb, a new releaser for mixin-deep since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump handlebars from 4.0.12 to 4.5.3
Bumps handlebars from 4.0.12 to 4.5.3.

Changelog

Sourced from handlebars's changelog.

v4.5.3 - November 18th, 2019

Bugfixes:

fix: add "no-prototype-builtins" eslint-rule and fix all occurences - f7f05d7

fix: add more properties required to be enumerable - 1988878

Chores / Build:

fix: use !== 0 instead of != 0 - c02b05f

add chai and dirty-chai and sinon, for cleaner test-assertions and spies, deprecate old assertion-methods - 93e284e, 886ba86, 0817dad, 93516a0

Security:

The properties __proto__, __defineGetter__, __defineSetter__ and __lookupGetter__ have been added to the list of "properties that must be enumerable". If a property by that name is found and not enumerable on its parent, it will silently evaluate to undefined. This is done in both the compiled template and the "lookup"-helper. This will prevent new Remote-Code-Execution exploits that have been published recently.

Compatibility notes:

Due to the security-fixes. The semantics of the templates using __proto__, __defineGetter__, __defineSetter__ and __lookupGetter__ in the respect that those expression now return undefined rather than their actual value from the proto.

The semantics have not changed in cases where the properties are enumerable, as in:

{ __proto__: 'some string' }

The change may be breaking in that respect, but we still only increase the patch-version, because the incompatible use-cases are not intended, undocumented and far less important than fixing Remote-Code-Execution exploits on existing systems.

Commits

v4.5.2 - November 13th, 2019

Bugfixes

fix: use String(field) in lookup when checking for "constructor" - d541378

test: add fluent API for testing Handlebars - c2ac79c

Compatibility notes:

no incompatibility are to be expected

... (truncated)

Commits

c819c8b v4.5.3

827c9d0 Update release notes

f7f05d7 fix: add "no-prototype-builtins" eslint-rule and fix all occurences

1988878 fix: add more properties required to be enumerable

886ba86 test/chore: add chai/expect and sinon to "runtime"-environment

0817dad test: add sinon as global variable to eslint in the specs

93516a0 test: add sinon.js for spies, deprecate current assertions

93e284e chore: add chai and dirty-chai for better test assertions

c02b05f fix: use !== 0 instead of != 0

8de121d v4.5.2

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump json5 and jest
Bumps json5 to 2.2.3 and updates ancestor dependency jest. These dependencies need to be updated together.

Updates json5 from 2.1.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, [diff][d2.1.1]]

... (truncated)

Commits

c3a7524 2.2.3

94fd06d docs: update CHANGELOG for v2.2.3

3b8cebf docs(security): use GitHub security advisories

f0fd9e1 docs: publish a security policy

6a91a05 docs(template): bug -> bug report

14f8cb1 2.2.2

10cc7ca docs: update CHANGELOG for v2.2.2

7774c10 fix: add proto to objects and arrays

edde30a Readme: slight tweak to intro

97286f8 Improve example in readme

Additional commits viewable in compare view

Updates jest from 23.6.0 to 29.3.1

Release notes

Sourced from jest's releases.

v29.3.1

Fixes

[jest-config] Do not warn about preset in ProjectConfig (#13583)

Performance

[jest-transform] Defer creation of cache directory (#13420)

v29.3.0

Features

[jest-runtime] Support WebAssembly (Wasm) imports in ESM modules (#13505)

Fixes

[jest-config] Add config validation for projects option (#13565)

[jest-mock] Treat cjs modules as objects so they can be mocked (#13513)

[jest-worker] Throw an error instead of hanging when jest workers terminate unexpectedly (#13566)

Chore & Maintenance

[@jest/transform] Update convert-source-map (#13509)

[docs] Mention toStrictEqual in UsingMatchers docs. (#13560)

New Contributors

@Tofandel made their first contribution in facebook/jest#13513

@RyWilliams made their first contribution in facebook/jest#13520

@waikoo made their first contribution in facebook/jest#13447

@kachkaev made their first contribution in facebook/jest#13505

@ibuibu made their first contribution in facebook/jest#13565

@necipallef made their first contribution in facebook/jest#13560

@ravshansbox made their first contribution in facebook/jest#13533

Full Changelog: https://github.com/facebook/jest/compare/v29.2.2...v29.3.0

v29.2.2

Fixes

[@jest/test-sequencer] Make sure sharding does not produce empty groups (#13476)

[jest-circus] Test marked as todo are shown as todo when inside a focussed describe (#13504)

[jest-mock] Ensure mock resolved and rejected values are promises from correct realm (#13503)

[jest-snapshot] Don't highlight passing asymmetric property matchers in snapshot diff (#13480)

Chore & Maintenance

[docs] Update link to Jest 28 upgrade guide in error message (#13483)

[jest-runner, jest-watcher] Update emittery (#13490)

New Contributors

... (truncated)

Changelog

Sourced from jest's changelog.

29.3.1

Fixes

[jest-config] Do not warn about preset in ProjectConfig (#13583)

Performance

[jest-transform] Defer creation of cache directory (#13420)

29.3.0

Features

[jest-runtime] Support WebAssembly (Wasm) imports in ESM modules (#13505)

Fixes

[jest-config] Add config validation for projects option (#13565)

[jest-mock] Treat cjs modules as objects so they can be mocked (#13513)

[jest-worker] Throw an error instead of hanging when jest workers terminate unexpectedly (#13566)

Chore & Maintenance

[@jest/transform] Update convert-source-map (#13509)

[docs] Mention toStrictEqual in UsingMatchers docs. (#13560)

29.2.2

Fixes

[@jest/test-sequencer] Make sure sharding does not produce empty groups (#13476)

[jest-circus] Test marked as todo are shown as todo when inside a focussed describe (#13504)

[jest-mock] Ensure mock resolved and rejected values are promises from correct realm (#13503)

[jest-snapshot] Don't highlight passing asymmetric property matchers in snapshot diff (#13480)

Chore & Maintenance

[docs] Update link to Jest 28 upgrade guide in error message (#13483)

[jest-runner, jest-watcher] Update emittery (#13490)

29.2.1

Features

[@jest/globals, jest-mock] Add jest.Spied* utility types (#13440)

Fixes

[jest-environment-node] make globalThis.performance writable for Node 19 and fake timers (#13467)

... (truncated)

Commits

05deb83 v29.3.1

84b8de9 v29.3.0

0a8edbe v29.2.2

4551c0f v29.2.1

ee5b37a v29.2.0

22322c9 refactor: use a single root tsconfig for type tests (#13358)

3c31dd6 v29.1.2

fd9cd90 v29.1.1

51f1030 v29.1.0

77f865d v29.0.3

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by simenb, a new releaser for jest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump qs from 6.5.2 to 6.5.3
Bumps qs from 6.5.2 to 6.5.3.

Changelog

Sourced from qs's changelog.

6.5.3

[Fix] parse: ignore __proto__ keys (#428)

[Fix] utils.merge: avoid a crash with a null target and a truthy non-array source

[Fix] correctly parse nested arrays

[Fix] stringify: fix a crash with strictNullHandling and a custom filter/serializeDate (#279)

[Fix] utils: merge: fix crash when source is a truthy primitive & no options are provided

[Fix] when parseArrays is false, properly handle keys ending in []

[Fix] fix for an impossible situation: when the formatter is called with a non-string value

[Fix] utils.merge: avoid a crash with a null target and an array source

[Refactor] utils: reduce observable [[Get]]s

[Refactor] use cached Array.isArray

[Refactor] stringify: Avoid arr = arr.concat(...), push to the existing instance (#269)

[Refactor] parse: only need to reassign the var once

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] Clean up license text so it’s properly detected as BSD-3-Clause

[Docs] Clarify the need for "arrayLimit" option

[meta] fix README.md (#399)

[meta] add FUNDING.yml

[actions] backport actions from main

[Tests] always use String(x) over x.toString()

[Tests] remove nonexistent tape option

[Dev Deps] backport from main

Commits

298bfa5 v6.5.3

ed0f5dc [Fix] parse: ignore __proto__ keys (#428)

691e739 [Robustness] stringify: avoid relying on a global undefined (#427)

1072d57 [readme] remove travis badge; add github actions/codecov badges; update URLs

12ac1c4 [meta] fix README.md (#399)

0338716 [actions] backport actions from main

5639c20 Clean up license text so it’s properly detected as BSD-3-Clause

51b8a0b add FUNDING.yml

45f6759 [Fix] fix for an impossible situation: when the formatter is called with a no...

f814a7f [Dev Deps] backport from main

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump xmldom, react-native and react-native-fbsdk
Removes xmldom. It's no longer used after updating ancestor dependencies xmldom, react-native and react-native-fbsdk. These dependencies need to be updated together.

Removes xmldom

Updates react-native from 0.57.5 to 0.70.2

Release notes

Sourced from react-native's releases.

0.70.2

Added

iOS specific

Add support for "Prefer Cross-Fade Transitions" into AccessibilityInfo (be7c50fefd by @gabrieldonadel)

Changed

Bump CLI to 9.1.3 and Metro to 0.72.3 (f164556037 by @kelset)

Fixed

Inform ScrollView of Keyboard Events Before Mount (26d148029c by @NickGerleman)

Android specific

Fix port as -1 if dev server without specifying port on Android (3d7e1380b4 by @Kudo)

You can participate in the conversation on the status of this release in this discussion.

To help you upgrade to this version, you can use the upgrade helper ⚛️

You can find the whole changelog history in the changelog.md file.

0.70.1

Added

Add more debugging settings for HermesExecutorFactory (32d12e89f8 by @Kudo)

Support TypeScript array types for turbo module (component only) (33d1291e1a by @ZihanChen-MSFT)

Changed

Accept TypeScript type T | null | undefined as a maybe type of T in turbo module. (9ecd203eec by @ZihanChen-MSFT)

Bump react-native-gradle-plugin to 0.70.3 (e33633644c by @dmytrorykun)

Bump react-native-codegen to 0.70.5 (6a8c38eef2 by @dmytrorykun)

Hermes version bump for 0.70.1 (5132211228 by @dmytrorykun)

Fixed

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.70.2

Added

iOS specific

Add support for "Prefer Cross-Fade Transitions" into AccessibilityInfo (be7c50fefd by @gabrieldonadel)

Changed

Bump CLI to 9.1.3 and Metro to 0.72.3 (f164556037 by @kelset)

Fixed

Inform ScrollView of Keyboard Events Before Mount (26d148029c by @NickGerleman)

Android specific

Fix port as -1 if dev server without specifying port on Android (3d7e1380b4 by @Kudo)

v0.70.1

Added

Add more debugging settings for HermesExecutorFactory (32d12e89f8 by @Kudo)

Support TypeScript array types for turbo module (component only) (33d1291e1a by @ZihanChen-MSFT)

Changed

Accept TypeScript type T | null | undefined as a maybe type of T in turbo module. (9ecd203eec by @ZihanChen-MSFT)

Bump react-native-gradle-plugin to 0.70.3 (e33633644c by @dmytrorykun)

Bump react-native-codegen to 0.70.5 (6a8c38eef2 by @dmytrorykun)

Hermes version bump for 0.70.1 (5132211228 by @dmytrorykun)

Fixed

Fix hermes profiler (81564c1a3d by @janicduplessis)

Android specific

Support PlatformColor in borderColor (2d5db284b0 by @danilobuerger)

Avoid crash in ForwardingCookieHandler if webview is disabled (5451cd48bd by @Pajn)

Correctly resolve classes with FindClass(..) (361b310bcc by @evancharlton)

iOS specific

Fix KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enabled (4b9382c250 by @gabrieldonadel)

Fix React module build error with swift integration on new architecture mode (3afef3c167 by @Kudo)

Fix ios pod install error (0cae4959b7 by @Romick2005)

... (truncated)

Commits

b9c2975 [0.70.2] Bump version numbers

13a2b11 Minor: Rename AccessibilityInfo.sendAccessibilityEvent_unstable to sendAccess...

2de4cf0 chore(deps): bump CLI to 9.1.3 and Metro to 0.72.3 (#34803)

7b53a24 Fix port as -1 if dev server without specifying port on Android (#34705)

b03f536 fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions" is enab...

764f584 Let ScrollView Know About Keyboard Opened Before Mount

75d5679 feat: Add support for "Prefer Cross-Fade Transitions" into AccessibilityInfo ...

73e5533 Add a pseudo flow declaration for AccessibilityInfo

9fd7643 Revert "fix: KeyboardAvoidingView height when "Prefer Cross-Fade Transitions"...

a54ba33 [0.70.1] Bump version numbers

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by fb, a new releaser for react-native since your current version.

Updates react-native-fbsdk from 0.8.0 to 3.0.0

Release notes

Sourced from react-native-fbsdk's releases.

v3.0.0

Update native sdks to 8.0+ and add API for CCPA compliance and iOS 14 ATE (#804) by @dreamolight

Implement fetch deferred app link (#813) by @yum650350

Add getters for anonymousID, attributionID and advertiserID (#805) by @VEnom42

Avoid app crashing on access token change (#744) by @syaau

v2.0.0

Improvements

Update facebook sdk to 7.0.0 on iOS and Android

Breaking

Some apis were removed from the facebook sdk so also removed here.

Removed the loginBehaviorIOS from <LoginButton />

Removed ShareApi

v1.1.2

Fix crash for AccessToken tracker (#699)

v1.1.0

Add method to listen for changes to the access token (#666)

update facebook sdks to 5.8.0 for ios (#659)

v1.0.4

Bump minimum sdk version on iOS to support iOS 13 (#643)

v1.0.2

Bug fixes

This releases fix crashes when passing null values on iOS and callbacks not getting called on Android.

Remove NSNull values from params dictionaries (#628) by @janicduplessis

Fix sharing callback doesn't get called on Android. (#617) by @HelloCore

v1.0.1

Breaking changes

Update to androidx libraries

You no longer have to pass a CallbackManager to FBSDKPackage

v1.0.0-rc.4

Breaking changes

You no longer have to pass a CallbackManager to FBSDKPackage

v1.0.0-rc.0

Breaking changes

Minimum React Native version is now 0.60.0

... (truncated)

Commits

5f2e9f4 3.0.0

d04b67b Update deps

85a984d Implement fetch deferred app link (#813)

c4479dd Expose API for CCPA compliance and iOS 14 ATE (#804)

fd54d9f Add getters for anonymousID, attributionID and advertiserID (#805)

b791efe facebook-ios-sdk v7 need a swift file (#767)

17af77b Fix react native peer dependencies (#700)

09ab122 Update README.md (#731)

b915ee7 Update Android Gradle plugin to 3.6.3 (#703)

0cb402c Update podspec for tvos (#745)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by janicduplessis, a new releaser for react-native-fbsdk since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump async from 2.6.1 to 2.6.4
Bumps async from 2.6.1 to 2.6.4.

Changelog

Sourced from async's changelog.

v2.6.4

Fix potential prototype pollution exploit (#1828)

v2.6.3

Updated lodash to squelch a security warning (#1675)

v2.6.2

Updated lodash to squelch a security warning (#1620)

Commits

c6bdaca Version 2.6.4

8870da9 Update built files

4df6754 update changelog

8f7f903 Fix prototype pollution vulnerability (#1828)

f1d8383 Version 2.6.3

2b674c1 update changelog

eab740f fix: udpate lodash. closes #1675

eaf32be Version 2.6.2

684b42e Update built files

e1bd3da update changelog

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by hargasinski, a new releaser for async since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump ajv from 6.5.5 to 6.12.6
Bumps ajv from 6.5.5 to 6.12.6.

Release notes

Sourced from ajv's releases.

v6.12.6

Fix performance issue of "url" format.

v6.12.5

Fix uri scheme validation (@ChALkeR). Fix boolean schemas with strictKeywords option (#1270)

v6.12.4

Fix: coercion of one-item arrays to scalar that should fail validation (failing example).

v6.12.3

Pass schema object to processCode function Option for strictNumbers (@issacgerges, #1128) Fixed vulnerability related to untrusted schemas (CVE-2020-15366)

v6.12.2

Removed post-install script

v6.12.1

Docs and dependency updates

v6.12.0

Improved hostname validation (@sambauers, #1143) Option keywords to add custom keywords (@franciscomorais, #1137) Types fixes (@boenrobot, @MattiAstedrone) Docs:

error logging example (@RadiationSickness)

TypeScript usage notes (@thetric)

v6.11.0

Time formats support two digit and colon-less variants of timezone offset (#1061 , @cjpillsbury) Docs: RegExp related security considerations Tests: Disabled failing typescript test

v6.10.2

Fix: the unknown keywords were ignored with the option strictKeywords: true (instead of failing compilation) in some sub-schemas (e.g. anyOf), when the sub-schema didn't have known keywords.

v6.10.1

Fix types Fix addSchema (#1001) Update dependencies

v6.10.0

Option strictDefaults to report ignored defaults (#957, @not-an-aardvark) Option strictKeywords to report unknown keywords (#781)

v6.9.0

OpenAPI keyword nullable can be any boolean (and not only true). Custom keyword definition changes:

dependencies option in to require the presence of keywords in the same schema.

... (truncated)

Commits

fe59143 6.12.6

d580d3e Merge pull request #1298 from ajv-validator/fix-url

fd36389 fix: regular expression for "url" format

490e34c docs: link to v7-beta branch

9cd93a1 docs: note about v7 in readme

877d286 Merge pull request #1262 from b4h0-c4t/refactor-opt-object-type

f1c8e45 6.12.5

764035e Merge branch 'ChALkeR-chalker/fix-comma'

3798160 Merge branch 'chalker/fix-comma' of git://github.com/ChALkeR/ajv into ChALkeR...

a3c7eba Merge branch 'refactor-opt-object-type' of github.com:b4h0-c4t/ajv into refac...

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0