Issues

• Title: Supported fix needed for vulnerable braces@3.0.3 in Metro Hello Metro team, I’m maintaining HARLO AI, and our release is blocked by a HIGH-severity security advisory affecting braces@3.0.3. Advisory: GHSA-vfj7-8cjw-p6xm Repository: https://github.com/harloaisupport-lgtm/harlo-ai-1 Our current dependency audit reports this path: @react-native/metro-config → metro-config → metro@0.84.6 → metro-file-map@0.84.6 → micromatch@4.0.8 → braces@3.0.3 I found the Metro change that removes micromatch from the metro-file-map dependency path: https://github.com/react/metro/pull/2000 Could you please confirm: 1. Which published Metro version includes this fix? 2. What is the officially supported upgrade path from Metro 0.84.6? 3. Will the upgrade remove braces@3.0.3 from the actual dependency tree, or are additional fixes needed? We do not want to suppress the alert or use unsupported dependency overrides. We need a safe, verifiable fix compatible with our project. Thank you.

  react/metro#2076 · Filter by author harloaisupport-lgtm opened on Oct 18, 2026

• [DevTools] Network panel truncates response bodies containing multibyte UTF-8 characters

  react/metro#2062 · Filter by author RafaelOteroVisma opened on Oct 13, 2026
  1

• [0.83.x] Backport micromatch removal and dotfile/multipart watcher fix together

  react/metro#2027 · Filter by author gogulapatipavani212 opened on Oct 5, 2026

• dependencies is not iterable / Cannot read property 'reduce' of undefined: FileStore serves zero-prefixed cache files as hits

  react/metro#1961 · Filter by author robhogan opened on Sep 22, 2026
  1

• Async chunk URLs drop the file extension, so .cjs async imports fail with "Requiring unknown module"

  react/metro#1959 · Filter by author matejkriz opened on Sep 22, 2026
  2

• Please support Yarn PnP

  react/metro#1928 · Filter by author Nantris opened on Sep 12, 2026
  2

• constant-folding-plugin emits 0/0 (NaN) for arithmetic on destructured bindings

  react/metro#1927 · Filter by author jormaj opened on Sep 12, 2026
  1

• FallbackWatcher: #unregisterDir rescans the whole directory registry per unlink, stalling the dev server on Windows

  react/metro#1915 · Filter by author mraap opened on Sep 8, 2026
  1

• Feature: support cross-file transform inputs with cache and watch invalidation

  react/metro#1902 · Filter by author mfkrause opened on Sep 4, 2026
  2

• Dev bundle with source maps crashes: "Unexpected module with full source map found"

  react/metro#1779 · Filter by author singh-sukhmanjit opened on Jul 15, 2026
  2

• Support Node native modules (.node) and __non_webpack_require__ in Expo API Routes / Metro server environment

  react/metro#1761 · Filter by author ensalada-de-pollo opened on Jul 6, 2026

• Rerunning Metro: Another process is running on port 8081. ? Use port 8082 instead?

  react/metro#1735 · Filter by author JustASillyDude opened on Jun 15, 2026
  1

• [IOS] Can't connect to metro on a real device

  react/metro#1637 · Filter by author bogomilrusevvegt opened on Jan 9, 2026
  1

• Metro can't resolve transitive dependencies when using bun as package manager

  react/metro#1636 · Filter by author marcospgp opened on Jan 7, 2026

• React Native DevTools not working on iOS physical device - Shows "Connect to Metro to debug JavaScript" Description

  react/metro#1626 · Filter by author NikhilMasurkar opened on Nov 28, 2025
  1

• @babel/runtime/ helpers/interopRequireDefault after upgrade from 0.72.3 to 0.82.1

  react/metro#1624 · Filter by author mittalkamal29 opened on Nov 24, 2025
  2

• creating isolated bundles

  react/metro#1618 · Filter by author Niryo opened on Nov 18, 2025

• EXPO iOS Bundling failed 6832ms index.tsx (2181 modules) ERROR SyntaxError in node_modules/react-native/src/private/components/virtualview/VirtualView.js: ';' expected (93:19) match (mode) {

  react/metro#1602 · Filter by author francescoerricodev opened on Oct 13, 2025
  6

• [metro-resolver] Import resolution package.json lookup for ESM is not Node module resolution compliant

  bug
  react/metro#1582 · Filter by author kitten opened on Sep 14, 2025
  3

• Tree Shaking Support

  react/metro#1561 · Filter by author ArrayZoneYour opened on Aug 19, 2025
  4

• Rust/swc migration

  react/metro#1551 · Filter by author brrock opened on Aug 12, 2025
  1

• All imports are undefined in new metro config (react-native 0.72 and higher)

  react/metro#1544 · Filter by author LueKedowsky opened on Jul 31, 2025
  6

• Metro Resolver and Node.js Resolve Different package.json Files for the Same Package

  Bug

  react/metro#1517 · Filter by author algoORgoal opened on Jun 10, 2025
  6

• Module Federation Support

  react/metro#1480 · Filter by author zackarychapple opened on Mar 31, 2025
  22

• Different refresh behavior across Android and iOS on Metro 0.81.1

  react/metro#1440 · Filter by author coolsoftwaretyler opened on Feb 23, 2025
  4