Skip to content

Bump Metro minimum to 0.87.2 - #59509

Closed
robhogan wants to merge 1 commit into
mainfrom
robhogan/metro-0.87.2
Closed

robhogan wants to merge 1 commit into
mainfrom
robhogan/metro-0.87.2

Conversation

@robhogan

@robhogan robhogan commented Oct 26, 2026 •

Copy link
Copy Markdown
Collaborator

Summary:

Bump minimum Metro version to 0.87.2, within the same semver range, to ensure upgraders get the same version as fresh projects would. This supersedes #58506 (0.87.1).

Mostly fixes, to file watching, resolution and source maps, plus faster resolution and source map composition. It removes micromatch to clear a CVE alert. Assets outside projectRoot now get [metro-watchFolders]/N/ URLs, which also moves them in release builds.

Metro release notes:

Changelog:

[General] [Changed] - Bump Metro minimum to 0.87.2

Test Plan:

yarn install --frozen-lockfile --ignore-scripts
yarn flow-check
yarn test packages/metro-config packages/community-cli-plugin packages/dev-middleware

## Summary:

Bump minimum Metro version to 0.87.2, within the same semver range, to ensure upgraders get the same version as fresh projects would. This supersedes #58506 (0.87.1).

Mostly fixes, to file watching, resolution and source maps, plus faster resolution and source map composition. It removes `micromatch` to clear a CVE alert. Assets outside `projectRoot` now get `[metro-watchFolders]/N/` URLs, which also moves them in release builds.

Metro release notes:
- https://github.com/react/metro/releases/tag/v0.87.1
- https://github.com/react/metro/releases/tag/v0.87.2

## Changelog:

[General] [Changed] - Bump Metro minimum to 0.87.2

## Test Plan:

```
yarn install --frozen-lockfile --ignore-scripts
yarn flow-check
yarn test packages/metro-config packages/community-cli-plugin packages/dev-middleware
```

Flow passes. Jest passes except `InspectorProxyCdpRewritingHacks-test.js` › "fetches source from server" over HTTPS, which fails the same way on `main` (Metro 0.87.0) in my environment.
@meta-cla meta-cla Bot added the CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. label Oct 26, 2026
@robhogan
robhogan requested a review from cortinico October 26, 2026 15:52
@facebook-github-tools facebook-github-tools Bot added the Shared with Meta Applied via automation to indicate that an Issue or Pull Request has been shared with the team. label Oct 26, 2026
@meta-codesync

meta-codesync Bot commented Oct 26, 2026

Copy link
Copy Markdown

@javache has imported this pull request. If you are a Meta employee, you can view this in D127624345.

@cortinico cortinico left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review automatically exported from Phabricator review in Meta.

@meta-codesync meta-codesync Bot closed this in b5c65ce Oct 27, 2026
@react-native-bot

Copy link
Copy Markdown
Collaborator

This pull request was successfully merged by @robhogan in b5c65ce

When will my fix make it into a release? | How to file a pick request?

@react-native-bot react-native-bot added the Merged This PR has been merged. label Oct 27, 2026
@react-native-bot

Copy link
Copy Markdown
Collaborator

This pull request was successfully merged by @robhogan in b5c65ce

When will my fix make it into a release? | How to file a pick request?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed This label is managed by the Facebook bot. Authors need to sign the CLA before a PR can be reviewed. Merged This PR has been merged. Shared with Meta Applied via automation to indicate that an Issue or Pull Request has been shared with the team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants