React Native: A Security Sweep and a Quiet Concurrency Fix
A single contributor pushed a dozen dependency security patches across the toolchain, while a deeper fix landed in bridgeless native-to-JS call ordering. Several smaller correctness fixes touched Image, Text, and layout behavior that developers should know about even though each looks minor on its own.
Duration: PT2M29S
Episode overview
This episode is a short developer briefing from React Native.
It explains recent repository work in plain language.
- Show: React Native
- Published: 2026-09-05T13:04:14Z
- Audio duration: PT2M29S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good day. It's September 5th, and here's what mattered in React Native.
The dominant pattern today is a coordinated security cleanup. Oskar Eichler filed roughly a dozen pull requests pinning vulnerable packages: A-J-V, js-yaml, ws, tmp, fast-uri, uuid, xmldom, and both Babel core and Babel runtime. These close real advisories — denial-of-service risks in A-J-V and js-yaml, a…
Second theme: correctness fixes in how React Native talks to itself, at two different layers. At the native bridge level, Pieter De Baets's commit 3ca6ea3 fixes an ordering bug in bridgeless mode — async CallInvoker work could reach the JS runtime before earlier module calls had flushed, because the two channels…
At the component level, two related fixes prevent state corruption from shared objects. Maximilian Krause's commit c300f84 stops Text from mutating a caller's accessibility state object in place, and his commit 08c7781 fixes Image losing custom headers like Authorization when crossOrigin or referrerPolicy are set.…
Also notable: PR 58351 adds longest-line sizing for wrapped Text, a new layout option that avoids an extra text-layout round trip. And Rubén Norte's five-commit series continues moving…
What's…
Nearby episodes from React Native
- Locking Down the C++ API Surface
- Locking Down the C++ API Surface
- Locking Down the C++ API Surface
- Locking Down the C++ API Surface
- Babel Preset Correctness Sweep and C++ API Guard Rollout
- Weekly Recap - Hardening the Edges: Security, Standards Compliance, and Stable APIs
- Web Standards Hardening Sprint
- Cleaning Up After the Old Architecture