From 5ace0cf0f4581aa688bcd433059484fac2be4d9b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Jun 2026 02:04:43 +0000 Subject: [PATCH 1/4] chore(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0 Bumps [react-native-get-random-values](https://github.com/LinusU/react-native-get-random-values) from 1.11.0 to 2.0.0. - [Release notes](https://github.com/LinusU/react-native-get-random-values/releases) - [Commits](https://github.com/LinusU/react-native-get-random-values/compare/v1.11.0...v2.0.0) --- updated-dependencies: - dependency-name: react-native-get-random-values dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- packages/react-native/package.json | 2 +- yarn.lock | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/packages/react-native/package.json b/packages/react-native/package.json index d4ba7c354..986db853a 100644 --- a/packages/react-native/package.json +++ b/packages/react-native/package.json @@ -48,7 +48,7 @@ "dependencies": { "@knocklabs/client": "workspace:^", "@knocklabs/react-core": "workspace:^", - "react-native-get-random-values": "^1.11.0", + "react-native-get-random-values": "^2.0.0", "react-native-render-html": "^6.3.4", "react-native-svg": "~15.15.3" }, diff --git a/yarn.lock b/yarn.lock index dfeee206b..5b296c889 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5082,7 +5082,7 @@ __metadata: react-dom: "npm:^19.2.5" react-native: "npm:^0.85.3" react-native-gesture-handler: "npm:~2.30.0" - react-native-get-random-values: "npm:^1.11.0" + react-native-get-random-values: "npm:^2.0.0" react-native-render-html: "npm:^6.3.4" react-native-svg: "npm:~15.15.3" rimraf: "npm:^6.0.1" @@ -18513,14 +18513,14 @@ __metadata: languageName: node linkType: hard -"react-native-get-random-values@npm:^1.11.0": - version: 1.11.0 - resolution: "react-native-get-random-values@npm:1.11.0" +"react-native-get-random-values@npm:^2.0.0": + version: 2.0.0 + resolution: "react-native-get-random-values@npm:2.0.0" dependencies: fast-base64-decode: "npm:^1.0.0" peerDependencies: - react-native: ">=0.56" - checksum: 10c0/2ce71f1ab7f5b36d4a9dd59cc80b4aa75526f047c6680a7f1a388fa8b9a62efdacaf7b7de3be593c73e882773b2eee74916b00f7c8b158e40b46388998218586 + react-native: ">=0.81" + checksum: 10c0/fd2e10ab3bca54bff8f5844e3314b797e02822e86663bc2dafe00a511b8a8e1c05d96aa0b8dc1ffad428387d44bbf458ce770a429858433d36f58a16e6e52986 languageName: node linkType: hard From 4d08f284f998da1ce762067d76eb82041898ccd8 Mon Sep 17 00:00:00 2001 From: knock-eng-bot Date: Tue, 16 Jun 2026 02:04:58 +0000 Subject: [PATCH 2/4] chore(deps): add changeset for dependency update --- .changeset/dependabot-pr-1013.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/dependabot-pr-1013.md diff --git a/.changeset/dependabot-pr-1013.md b/.changeset/dependabot-pr-1013.md new file mode 100644 index 000000000..37fe713b2 --- /dev/null +++ b/.changeset/dependabot-pr-1013.md @@ -0,0 +1,5 @@ +--- +"@knocklabs/react-native": patch +--- + +chore(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0 From 42f7392eb7f52d6b3d3613bb2053f5c6537bb837 Mon Sep 17 00:00:00 2001 From: Kyle McDonald Date: Tue, 28 Jul 2026 10:32:56 -0500 Subject: [PATCH 3/4] fix(deps): narrow react-native peer range for get-random-values v2 react-native-get-random-values v2 is new architecture only and requires React Native >= 0.81 (Expo SDK >= 54). @knocklabs/react-native imports it for its side effects from src/index.ts, so the floor applies to every consumer of that package and, transitively, to @knocklabs/expo. Narrow the react-native peer from * to >=0.81 on both packages and the expo peer from * to >=54, so unsupported installs surface a peer warning instead of failing at runtime on the missing native module. --- .changeset/dependabot-pr-1013.md | 13 ++++++++++++- packages/expo/package.json | 4 ++-- packages/react-native/package.json | 2 +- yarn.lock | 6 +++--- 4 files changed, 18 insertions(+), 7 deletions(-) diff --git a/.changeset/dependabot-pr-1013.md b/.changeset/dependabot-pr-1013.md index 37fe713b2..35166e8f9 100644 --- a/.changeset/dependabot-pr-1013.md +++ b/.changeset/dependabot-pr-1013.md @@ -1,5 +1,16 @@ --- -"@knocklabs/react-native": patch +"@knocklabs/react-native": minor +"@knocklabs/expo": minor --- chore(deps): bump react-native-get-random-values from 1.11.0 to 2.0.0 + +v2 of the polyfill is new architecture only and requires React Native >= 0.81 +(Expo SDK >= 54). `@knocklabs/react-native` imports it for its side effects from +`src/index.ts`, so that floor now applies to every consumer of the package, and +to `@knocklabs/expo` by way of its dependency on `@knocklabs/react-native`. + +The `react-native` peer range on both packages has been narrowed from `*` to +`>=0.81`, and the `expo` peer on `@knocklabs/expo` from `*` to `>=54`, so +installs on unsupported versions surface a peer warning instead of failing at +runtime when the native module is missing. diff --git a/packages/expo/package.json b/packages/expo/package.json index 838277d99..05af1a2cf 100644 --- a/packages/expo/package.json +++ b/packages/expo/package.json @@ -44,12 +44,12 @@ "url": "https://github.com/knocklabs/javascript/issues" }, "peerDependencies": { - "expo": "*", + "expo": ">=54", "expo-constants": "*", "expo-device": "*", "expo-notifications": "*", "react": "*", - "react-native": "*", + "react-native": ">=0.81", "react-native-gesture-handler": ">=2.0.0" }, "dependencies": { diff --git a/packages/react-native/package.json b/packages/react-native/package.json index 078f7e67f..18c6d8f66 100644 --- a/packages/react-native/package.json +++ b/packages/react-native/package.json @@ -43,7 +43,7 @@ }, "peerDependencies": { "react": "*", - "react-native": "*", + "react-native": ">=0.81", "react-native-gesture-handler": ">=2.0.0" }, "dependencies": { diff --git a/yarn.lock b/yarn.lock index fa3c910bf..c59390deb 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5063,12 +5063,12 @@ __metadata: vite-plugin-no-bundle: "npm:^4.0.0" vitest: "npm:^3.2.4" peerDependencies: - expo: "*" + expo: ">=54" expo-constants: "*" expo-device: "*" expo-notifications: "*" react: "*" - react-native: "*" + react-native: ">=0.81" react-native-gesture-handler: ">=2.0.0" languageName: unknown linkType: soft @@ -5187,7 +5187,7 @@ __metadata: vite-plugin-no-bundle: "npm:^4.0.0" peerDependencies: react: "*" - react-native: "*" + react-native: ">=0.81" react-native-gesture-handler: ">=2.0.0" languageName: unknown linkType: soft From d5efe6754d63bfd8f1329b54bec86a72c6f64ab2 Mon Sep 17 00:00:00 2001 From: Kyle McDonald Date: Tue, 28 Jul 2026 13:08:06 -0500 Subject: [PATCH 4/4] fix(deps): keep the expo peer at * Expo SDK 54 is the release that ships React Native 0.81, so the react-native >=0.81 peer already covers the polyfill's floor. Drop the redundant expo >=54 constraint and let the react-native one do the work. --- .changeset/dependabot-pr-1013.md | 7 ++++--- packages/expo/package.json | 2 +- yarn.lock | 2 +- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.changeset/dependabot-pr-1013.md b/.changeset/dependabot-pr-1013.md index 35166e8f9..458f9794e 100644 --- a/.changeset/dependabot-pr-1013.md +++ b/.changeset/dependabot-pr-1013.md @@ -11,6 +11,7 @@ v2 of the polyfill is new architecture only and requires React Native >= 0.81 to `@knocklabs/expo` by way of its dependency on `@knocklabs/react-native`. The `react-native` peer range on both packages has been narrowed from `*` to -`>=0.81`, and the `expo` peer on `@knocklabs/expo` from `*` to `>=54`, so -installs on unsupported versions surface a peer warning instead of failing at -runtime when the native module is missing. +`>=0.81`, so installs on unsupported versions surface a peer warning instead of +failing at runtime when the native module is missing. Expo SDK 54 is the release +that ships React Native 0.81, so the `expo` peer stays at `*` and the +`react-native` constraint covers both. diff --git a/packages/expo/package.json b/packages/expo/package.json index 05af1a2cf..2c3801d97 100644 --- a/packages/expo/package.json +++ b/packages/expo/package.json @@ -44,7 +44,7 @@ "url": "https://github.com/knocklabs/javascript/issues" }, "peerDependencies": { - "expo": ">=54", + "expo": "*", "expo-constants": "*", "expo-device": "*", "expo-notifications": "*", diff --git a/yarn.lock b/yarn.lock index c59390deb..0eed5591d 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5063,7 +5063,7 @@ __metadata: vite-plugin-no-bundle: "npm:^4.0.0" vitest: "npm:^3.2.4" peerDependencies: - expo: ">=54" + expo: "*" expo-constants: "*" expo-device: "*" expo-notifications: "*"