Skip to content

fix(deps)(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0 - #12

Open
dependabot[bot] wants to merge 454 commits into
mainfrom
dependabot/npm_and_yarn/react-native-get-random-values-2.0.0
Open

fix(deps)(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0#12
dependabot[bot] wants to merge 454 commits into
mainfrom
dependabot/npm_and_yarn/react-native-get-random-values-2.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor

Bumps react-native-get-random-values from 1.11.0 to 2.0.0.

Release notes

Sourced from react-native-get-random-values's releases.

🚢 2.0.0 / 2025-10-22

💥 Breaking Changes

  • Switch to new architecture

    Migration Guide:

    The new minimum supported version of React Native is 0.81, and Expo SDK 54.

🎉 Enhancements

  • Improve Android performance by caching SecureRandom
  • Add support for visionOS
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

obaremoelijah274gmail.com and others added 30 commits April 24, 2026 12:02
- Add contracts/src/revenue.rs with full revenue recognition module:
  - RevenueRecognitionRule (method + recognition_period)
  - Straight-line and usage-based recognition methods
  - RevenueSchedule / RevenueScheduleEntry types
  - Recognition snapshot and PeriodRevenue analytics types
  - generate_revenue_schedule, recognize_revenue, get_deferred_revenue,
    get_revenue_schedule, get_revenue_analytics_by_period
  - Deduplicating track_merchant_subscription
  - 21 Rust tests covering all paths, edge cases, and multi-element arrangements

- Update contracts/src/lib.rs:
  - Hook revenue schedule generation into charge_subscription
  - Add set_revenue_rule, recognize_revenue, get_deferred_revenue,
    get_revenue_schedule public contract APIs

- Add src/store/accountingStore.ts (Zustand + AsyncStorage):
  - setRecognitionRule / removeRecognitionRule
  - generateRevenueSchedule with straight-line and usage-based support
  - recognizeRevenue with pro-rated partial recognition
  - getDeferredRevenue per merchant
  - getRevenueAnalyticsByPeriod with configurable bucket size

- Add src/screens/RevenueReportScreen.tsx:
  - Recognised / deferred revenue summary cards
  - SVG bar chart by period (month / quarter / year)
  - Per-subscription recognition table
  - Revenue configuration panel (method toggle, simulate charge, reset)

- Add src/store/__tests__/accountingStore.test.ts:
  - 30 Jest tests covering pure helpers and all store actions
  - Edge cases: cancellation mid-period, rule updates, multi-element arrangements

- Wire RevenueReportScreen into bottom tab navigator (Revenue tab)
- Export useAccountingStore from store index
Conflicts resolved:
- contracts/src/lib.rs: kept our version (revenue module depends on it;
  upstream restructured contracts into a workspace but our standalone
  crate remains valid alongside the new structure)
- src/navigation/AppNavigator.tsx: merged upstream's new screens
  (Community, Profile, Segments, Gamification, Settings stack, GDPR,
  Language, Session, Admin, Error dashboards) with our RevenueReportScreen
- src/navigation/types.ts: merged upstream's new route types with our
  RevenueReport and RevenueTab additions
- src/store/index.ts: merged upstream's new store exports
  (useNetworkStore, useCommunityStore) with our useAccountingStore

Note: pre-existing lint errors in upstream files (unresolved module paths
for @shopify/flash-list, i18next, react-i18next) are not introduced by
this branch and exist on upstream/main.
- Fix contracts/Cargo.toml: remove duplicate [package] section,
  make it a proper workspace root only
- Move revenue module from contracts/src/ to contracts/subscription/src/
  adapted for the new storage-contract delegation pattern
- Add revenue StorageKey variants to contracts/types/src/lib.rs:
  RevenueRecognitionRule, RevenueSchedule, RevenueDeferredBalance,
  RevenueRecognisedBalance, RevenueMerchantSubscriptions
- Hook revenue schedule generation into charge_subscription in
  contracts/subscription/src/lib.rs
- Add revenue public API to SubTrackrSubscription:
  set_revenue_rule, recognize_revenue, get_deferred_revenue,
  get_revenue_schedule
- Fix clippy::manual_div_ceil in revenue.rs (use .div_ceil())
- Add #[allow(clippy::too_many_arguments)] to subscription and proxy
  crates (pre-existing upstream issue with Soroban contractimpl macro)
- Remove obsolete contracts/src/ directory
- All workspace tests pass, cargo fmt --check clean, clippy -D warnings clean
…nting

feat: implement subscription revenue recognition accounting
Feat: implement subscription price optimization engine
Implement subscription transaction batching and aggregation
Feat(contracts): implement subscription contract invariant testing suite
Feat: improve subscription gesture handling
Ebuka321 and others added 27 commits June 29, 2026 13:38
feat: implement tax compliance engine with Avalara/TaxJar integration…
feat: implement credit note and prepayment wallet management (#555)
…detection, where it flows, and how it is protected. (#702)
* feat(auth): implement rbac schema, guards, and role management screen

* fix(auth): resolve line-ending formats and code style gate requirements

---------

Co-authored-by: whitezaddy <austinihueze@gmail.com>
* fix(ci): resolve TS ESLint Prettier audit failures for PR 641

* fix(ci): resolve Rust Clippy and TypeScript Build failures

* fix(test): add ThemeProvider to shared test wrapper

* fix(clippy): remove duplicate #![cfg(test)] from api and credit test files

* fix(clippy): remove duplicate #![cfg(test)] from access_control test file
…… (#474)

* feat: squashed routes branch with secrets removed

Co-authored-by: od-hunter <146340502+od-hunter@users.noreply.github.com>
Co-authored-by: abimbolaalabi <ibrahimade92@gmail.com>

Includes all changes from the routes branch history:
- Redis distributed cache for plan metadata
- All previous features, fixes, and optimizations
- Hardcoded secrets replaced with environment variables

* fix: use env var fallback in redis test to avoid hardcoded password
…ct CI pipeline (#696)

* feat: add gas-based profiling and regression checks to Soroban CI pipeline

* chore: target subtrackr-proxy package in gas-benchmark script
…s (#600) (#651)

* feat(db): connection multiplexing for serverless environments (#600)

Route serverless DB access through a transaction-pooling proxy (RDS Proxy
or PgBouncer) so a small set of backend connections is multiplexed across
many concurrent function invocations, preventing connection exhaustion.

- backend/shared/db/serverlessPool.ts: transaction-pooling adapter with
  IAM/SCRAM-256 auth, credential refresh, withClient/withTransaction
  helpers, and abandoned-connection leak detection (>30s force-close).
- backend/serverless/dbConfig.ts + withDatabase.ts: env-driven pool config
  (RDS IAM token provider) and a Lambda wrapper that releases the client in
  a finally block after every invocation.
- backend/monitoring/connectionPoolMetrics.ts: Prometheus pool/leak metrics
  and structured leak alerting.
- infra/terraform/{rds_proxy,pgbouncer}.tf: proxy provisioning (max ~50
  pooled connections serving 500+ functions, transaction pooling).
- docker-compose.yml + .env.example: local PgBouncer + Postgres for parity;
  all credentials read from a gitignored .env (no hardcoded secrets).

Closes #600

* fix(deps): repair malformed package.json blocking install

The dependencies block had a duplicate "zustand" entry and missing
commas, producing invalid JSON that breaks `npm install` in CI. Keep a
single zustand ^5.0.0 and the redis ^4.6.7 entry.
…1) (#652)

Sanitize rich-text email/notification templates server-side so stored HTML
can never carry executable markup, with CSP defence-in-depth on the admin
dashboard.

- backend/shared/sanitizer: HTMLSanitizerService wrapping DOMPurify (via
  jsdom) with a strict tag/attribute allowlist, http/https/mailto-only href
  protocols, full SVG/script/iframe stripping, and forced rel=noreferrer on
  links.
- backend/shared/middleware/cspMiddleware.ts: hardened CSP
  (script-src 'self', object-src 'none') plus companion security headers,
  with Express and Next.js adapters.
- backend/services/notification/templateService.ts: sanitize body on save,
  strip HTML from subjects, and render a sanitized preview before save.
- backend/services/notification/jobs/backScanTemplates.ts: idempotent cron
  that quarantines and re-sanitizes pre-existing unsafe templates.
- developer-portal/utils/securityHeaders.ts: applies the shared CSP to admin
  dashboard routes.
- package.json: add dompurify, jsdom, @types/jsdom.

Closes #611
…dd network detection UI (#499)

- walletStore now derives all connection state (address, chainId, network,
  isConnected) from walletServiceManager via a listener subscription, making
  walletServiceManager the single source of truth (#62)
- Added setPreferredNetwork, detectNetworkMismatch, and networkMismatch state
  to walletStore for EVM network mismatch detection (#69)
- WalletConnectScreen: added network mismatch warning banner and a bottom-sheet
  network picker modal (FlatList of ALL_NETWORKS) so users can switch their
  preferred network without leaving the screen (#69)
- Updated integration.test.ts walletStore suite to match the new consolidated
  API: removed stale wallet/\@subtrackr_wallet references, added mock for
  walletService and networkService, added tests for syncWalletConnection,
  listener-driven sync, and network mismatch detection

Closes #62
Closes #69
- Fix 43 failing test suites: fixed assertions, mocks, snapshot calls,
  ThemeProvider wrapping, and integration test timer/environment issues
- Fix TypeScript strict errors across 50+ files (stores, services, screens,
  navigation, themes, types, hooks, jest config)
- Fix ESLint errors (0 errors, 103 warnings remaining)
- Add .eslintignore for services/ and node_modules/
- Add @babel/plugin-transform-flow-strip-types for RN Flow type parsing
- Deduplicate package.json (express, @types/express)
- Rename src/utils/__tests__/accessibility.test.ts → accessibility.ts to
  avoid being picked up as test file
- Add proper TypeScript types to all zustand stores with persist middleware
- Fix navigation types and AppNavigator stray JSX
Snapshots are not tracked in git (gitignored *.snap) and differ
between macOS and Linux CI runners. Replace toMatchSnapshot()
with getByRole/getByText expectations.
Bumps [react-native-get-random-values](https://github.com/LinusU/react-native-get-random-values) from 1.11.0 to 2.0.0.
- [Release notes](https://github.com/LinusU/react-native-get-random-values/releases)
- [Commits](LinusU/react-native-get-random-values@v1.11.0...v2.0.0)

---
updated-dependencies:
- dependency-name: react-native-get-random-values
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 15, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: security. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.