RepoJournal
Meta

Meta

React, React Native, and Jest - the open source under what Meta ships

Keep up with Meta in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: JavaScript AI / ML Full archive →

The Wire · Showcase

REACT NATIVE HARDENS BUILD PIPELINE WHILE FIXING ANDROID TEXT RENDERING

By RepoJournal · Filed · About Meta

React Native shipped critical infrastructure upgrades overnight: OIDC token replacement for npm publishing, AGP v9 adoption across the stack, and a text decoration rendering fix that restores native Android behavior.

The biggest story is npm publishing security [1]. React Native replaced long-lived `GHA_NPM_TOKEN` automation tokens with OIDC Trusted Publishing via a reusable workflow, eliminating a critical attack surface for package compromises. Alongside that, the team adopted Android Gradle Plugin v9 repository-wide [2], deprecating legacy APIs and modernizing the entire build graph. That same modernization work includes removing the folly::Endian dependency from JSIndexedRAMBundle [4], cutting unnecessary build overhead by inlining a simple little-endian decoder. On the stability front, a recent change that switched Android text decoration to custom canvas drawing inadvertently increased stroke thickness by 1.5dp [3]. The fix removes the minimum thickness enforcement, restoring native Android behavior. A minor CI fix landed for gradle.properties templating [5], but it's a cleanup that unblocks template testing.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Migrate npm publish to OIDC Trusted Publishing via a reusable workflow (#57099) facebook/react-native
  2. [2] feat: adopt AGP v9 (#57038) facebook/react-native
  3. [3] Fix text decoration line thickness regression on Android (#57111) facebook/react-native
  4. [4] Remove folly::Endian::little from JSIndexedRAMBundle (#57109) facebook/react-native
  5. [5] fix: add line break to gradle.properties for template testing (#57107) facebook/react-native

Quick answers

What shipped in Meta on June 9, 2026?
React Native shipped critical infrastructure upgrades overnight: OIDC token replacement for npm publishing, AGP v9 adoption across the stack, and a text decoration rendering fix that restores native Android behavior. In total, 10 commits landed.
What were the notable Meta updates?
Migrate npm publish to OIDC Trusted Publishing via a reusable workflow (#57099), feat: adopt AGP v9 (#57038), and Fix text decoration line thickness regression on Android (#57111).

More from Meta

Daily updates, in your inbox

Follow Meta

Keep up with Meta in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?