RepoJournal
Meta

Meta

React, React Native, and Jest - the open source under what Meta ships

Keep up with Meta in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: JavaScript AI / ML Full archive →

The Wire · Showcase

REACT HARDENS RELEASE PIPELINE, JEST PLUGS SUPPLY CHAIN RISK

By RepoJournal · Filed · About Meta

1 person shipped this

React now signs artifacts across all release branches, closing a gap that could have left older versions unverified in production.

React's CI pipeline expanded artifact attestation beyond main to all release branches [1], meaning backport releases and older version patches now ship with the same cryptographic proof as cutting-edge builds. This matters because unverified artifacts create supply chain exposure, and older versions often run in enterprise environments that can't upgrade quickly. On the same front, Jest disabled build scripts in its own pipeline [2], a direct move to cut off one vector for supply chain attacks. React Native is grinding through internal consistency fixes across codegen fixtures [3] and manually patching files that codemods missed [4], cleanup work tied to broader infrastructure changes landing in Metro and Relay. The trio of moves signals coordinated hardening: React securing its release gates, Jest tightening its build process, and Native cleaning up after structural shifts.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] [ci] Create artifact attestations for builds on backport branches ↗ facebook/react
  2. [2] chore: disable build scripts ↗ facebook/jest
  3. [3] Fix variance in react-native-github/packages/react-native-codegen/e2e/deep_imports/__test_fixtures__/modules/ (#56992) facebook/react-native
  4. [4] manually fix a few more files (#56983) facebook/react-native

Quick answers

What shipped in Meta on May 29, 2026?
React now signs artifacts across all release branches, closing a gap that could have left older versions unverified in production. In total, 4 commits and 2 pull requests landed.
Who contributed to Meta on May 29, 2026?
1 developer shipped this update, including SimenB.
What were the notable Meta updates?
[ci] Create artifact attestations for builds on backport branches, chore: disable build scripts, and Fix variance in react-native-github/packages/react-native-codegen/e2e/deep_imports/__test_fixtures__/modules/ (#56992).

More from Meta

Daily updates, in your inbox

Follow Meta

Keep up with Meta in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?