Skip to content

feat(rn): Capgo React Native updater + CLI with file-level delta - #2703

Open
riderx wants to merge 5 commits into
mainfrom
feat/react-native-updater-cli
Open

feat(rn): Capgo React Native updater + CLI with file-level delta#2703
riderx wants to merge 5 commits into
mainfrom
feat/react-native-updater-cli

fix(rn): harden updater against path traversal and encrypted uploads

33939ef
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis failed Jul 16, 2026 in 1m 47s

Quality Gate failed

Failed conditions
B Reliability Rating on New Code (required ≥ A)
C Security Rating on New Code (required ≥ A)

See analysis details on SonarQube Cloud

Catch issues before they fail your Quality Gate with our IDE extension SonarQube for IDE

Annotations

Check warning on line 206 in packages/react-native-updater/android/src/main/java/app/capgo/rnupdater/CapgoDownloader.kt

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Do something with the "Boolean" value returned by "delete". 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTasJLK-707wJCFUm&open=AZ9oTasJLK-707wJCFUm&pullRequest=2703

Check warning on line 0 in packages/react-native-updater/android/build.gradle

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Dependency versions are not predictable if the lock file (gradle.lockfile or gradle/verification-metadata.xml) is missing. 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTaseLK-707wJCFUq&open=AZ9oTaseLK-707wJCFUq&pullRequest=2703

Check warning on line 159 in packages/react-native-updater/android/src/main/java/app/capgo/rnupdater/CapgoDownloader.kt

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Do something with the "Boolean" value returned by "delete". 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTasJLK-707wJCFUn&open=AZ9oTasJLK-707wJCFUn&pullRequest=2703

Check warning on line 156 in packages/react-native-updater/android/src/main/java/app/capgo/rnupdater/CapgoDownloader.kt

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Do something with the "Boolean" value returned by "delete". 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTasJLK-707wJCFUp&open=AZ9oTasJLK-707wJCFUp&pullRequest=2703

Check warning on line 56 in packages/react-native-updater/ios/CapgoZip.swift

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this hard-coded path-delimiter. 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTalRLK-707wJCFUl&open=AZ9oTalRLK-707wJCFUl&pullRequest=2703

Check warning on line 9 in packages/react-native-updater/ios/CapgoUpdater.swift

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor your code to get this URI from a customizable parameter. 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oPoMs4jpPB4hIXI67&open=AZ9oPoMs4jpPB4hIXI67&pullRequest=2703

Check warning on line 10 in packages/react-native-updater/ios/CapgoUpdater.swift

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor your code to get this URI from a customizable parameter. 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oPoMs4jpPB4hIXI68&open=AZ9oPoMs4jpPB4hIXI68&pullRequest=2703

Check warning on line 164 in packages/react-native-updater/android/src/main/java/app/capgo/rnupdater/CapgoDownloader.kt

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Do something with the "Boolean" value returned by "delete". 

See more on https://sonarcloud.io/project/issues?id=Cap-go_capgo&issues=AZ9oTasJLK-707wJCFUo&open=AZ9oTasJLK-707wJCFUo&pullRequest=2703
View more details on SonarQubeCloud