[Snyk] Upgrade realm from 10.19.2 to 10.19.5

[admin-token-bot]

Snyk has created this PR to upgrade realm from 10.19.2 to 10.19.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-07-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NODEFETCH-2964180	554/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: realm

• 10.19.5 - 2022-07-06
  

  Enhancements

  • None.

  Fixed

  • Fixed inadvertent change to minimum Android Gradle plugin version (#4706, since v10.19.4)

  Compatibility

  • Atlas App Services.
  • Realm Studio v12.0.0.
  • APIs are backwards compatible with all previous releases of Realm JavaScript in the 10.5.x series.
  • File format: generates Realms with format v22 (reads and upgrades file format v5 or later for non-synced Realm, upgrades file format v10 or later for synced Realms).

  Internal

  • None
• 10.19.4 - 2022-07-05
  

  Enhancements

  • Allow flexible sync with discard local client resets. (realm/realm-core#5404)

  Fixed

  • Setting up a clientResetAfter callback could lead to a fatal error with the message Realm accessed from incorrect thread. (#4410, since v10.11.0)
  • Improved performance of sync clients during integration of changesets with many small strings (totalling > 1024 bytes per changeset) on iOS 14, and devices which have restrictive or fragmented memory. (realm/realm-core#5614)
  • Fixed a bug that prevented the detection of tables being changed to or from asymmetric during migrations. (realm/realm-core#5603, since v10.19.3)
  • Fixed a bug with handling null values in toJSON ([#4682, since 10.19.3)

  Compatibility

  • Atlas App Services.
  • Realm Studio v12.0.0.
  • APIs are backwards compatible with all previous releases of Realm JavaScript in the 10.5.x series.
  • File format: generates Realms with format v22 (reads and upgrades file format v5 or later for non-synced Realm, upgrades file format v10 or later for synced Realms).

  Internal

  • Upgraded Realm Core from v12.2.0 to v12.3.0. (#4689)
  • Fixed analytics tests to reflect the fact that framework versions are read from node_modules, not package.json. (#4687)
  • Adding response type checking to the realm-app-importer. (#4688)
  • Updated integration test app to target Android SDK 31 (#4686)
  • Enabled debugging Realm C++ code in integration test app (#4696)
  • Fixed types for flexible sync client reset and added a test (#4702)
• 10.19.3 - 2022-06-27
  

  Enhancements

  • None.

  Fixed

  • Realm JS can now be installed in environments using npm binary mirroring (#4672, since v10.0.0).
  • Asymmetric sync now works with embedded objects. (realm/realm-core#5565, since 10.19.0)
  • Fixed an issue on Windows that would cause high CPU usage by the sync client when there are no active sync sessions. (realm/realm-core#5591, since v1.1.1)
  • Fixed an issue setting a Mixed from an object to null or any other non-link value. Users may have seen exception of key not found or assertion failures such as mixed.hpp:165: [realm-core-12.1.0] Assertion failed: m_type when removing the destination link object. (realm/realm-core#5574, since v10.5.0)
  • Fixed a data race when opening a flexible sync Realm. (realm/realm-core#5573, since v10.19.0)

  Compatibility

  • Atlas App Services.
  • Realm Studio v12.0.0.
  • APIs are backwards compatible with all previous releases of Realm JavaScript in the 10.5.x series.
  • File format: generates Realms with format v22 (reads and upgrades file format v5 or later for non-synced Realm, upgrades file format v10 or later for synced Realms).

  Internal

  • Upgraded Realm Core from v12.1.0 to v12.2.0. (#4679)
  • Enabled testNoMigrationOnSync. (#3312)
• 10.19.2 - 2022-06-20
  

  Enhancements

  • None.

  Fixed

  • Fixed incorrect @ realm.io/common version in package.json causing install issues for users upgrading from older version of the realm npm package ([#4657, since v10.18.0])

  Compatibility

  • Atlas App Services.
  • Realm Studio v12.0.0.
  • APIs are backwards compatible with all previous releases of Realm JavaScript in the 10.5.x series.
  • File format: generates Realms with format v22 (reads and upgrades file format v5 or later for non-synced Realm, upgrades file format v10 or later for synced Realms).

  Internal

  • Upgrade Example to RN v0.68.2
  • Upgrade dependencies of the Realm Web integration tests
  • Throw instances of Error instead of plain objects on app errors.
  • Make integration tests on React Native Android connect to host machine by default

from realm GitHub release notes

Commit messages

Package name: realm

• dbb6af3 [10.19.5] Bump version
• 67c6559 Add fix for older Android Gradle plugin (#4707)
• 1d2cdc9 Update RealmProvider.test.tsx (#4701)
• ee95890 Update how-to-release.md (#4705)
• fed6199 Adding changelog template
• 460a6ba [10.19.4] Bump version
• 8261202 Fix types and add a test for flexible sync client reset (#4703)
• 223178b Releasing Realm Web v1.7.1
• 56a07df Closing connections after calling `return` on `AsyncIntegrator` returned from `watch` (#4700)
• 43fc99c Fix CanonicalObjectSchemaProperty types (#4652)
• 04d7b2c Document how to debug Realm C++ code in Android studio and add to the integration test app (#4697)
• 9462a5e Delete leftover `package.json` files (#4695)
• 0508ead Client reset: Realm accessed from incorrect thread (#4651)
• 3a6eece Fix android test app failing to build (#4686)
• a6c17fe Adding type checking to the realm-app-importer (#4688)
• d7c53e0 Fixing analytics tests (#4687)
• c60d10e Downgrade expo templates to sdk 44 (#4683)
• 217a5c7 Fix null handling in toJSON (fixes #4682) (#4684)
• 9c43a2b Adding changelog template
• e82afde [10.19.3] Bump version
• 7372baa Update to Realm Core v12.2.0 (#4680)
• 8134e68 Documentation: useMemo expects a function (#4670)
• 419d7ca Fix toJSON behaviour for Dictionary on JSC pre-v11 (fixes #4658) (#4674)
• 6cf95fe Update package.json to discard tag_prefix to make npm binary mirroring work (#4672)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[github-actions]

Flesch Reading Ease scores for changed documents:

The following table can be helpful in assessing the readability score of a document.

Score	Difficulty
90-100	Very Easy
80-89	Easy
70-79	Fairly Easy
60-69	Medium
50-59	Fairly Hard
30-49	Hard
0-29	Very Hard