[dependabot]

Bumps react-native-app-auth from 6.4.3 to 9.0.0.

Release notes

Sourced from react-native-app-auth's releases.

react-native-app-auth@9.0.0

Major Changes

• Require React Native 0.86+, iOS 15.1+, Android API 24+, and Expo SDK 57+ for the config plugin. Update the CLI example to React Native 0.87 and update the Expo development-build example to SDK 57. Applications on older React Native versions should remain on the 8.x release line. (#1150)

Patch Changes

• Configure the Android redirect scheme in defaultConfig while preserving build-type-specific manifest placeholders, and recognize Kotlin imports with inline comments. (#1150)

• Preserve existing Kotlin imports when configuring Android authorization recovery, including imports with inline comments. (#1150)

• Respect configured Swift bridging headers, including inherited and configuration-specific paths, and use a fallback header when inheritance is empty. Preserve Gradle comments and ignore commented-out declarations and keys when adding Android redirect placeholders. Keep repeated plugin application idempotent. (#1150)

• Fix an iOS crash ("An OAuth redirect was sent to a OIDExternalUserAgentSession after it already completed") by not keeping an authorization or logout session that completed synchronously, and by forwarding at most one redirect to each session. (#1152)

• Set the Android Expo redirect placeholder without rewriting existing Gradle maps. Preserve empty maps, additive assignments, expression values, and unrelated placeholders, and keep repeated plugin application idempotent. (#1150)

• Register the iOS OAuth callback scheme in the generated Info.plist mod result, including when another Expo mod supplies a separate plist object. (#1150)

• Detect existing Kotlin activity-result callbacks regardless of whitespace or comments, ignore commented-out integration, and preserve formatted AppAuth forwarding calls. (#1150)

• Form-encode tokens and optional client IDs in revocation requests so special characters are sent unchanged to the provider. (#1150)

react-native-app-auth@8.5.1

Patch Changes

• Fix an iOS crash ("An OAuth redirect was sent to a OIDExternalUserAgentSession after it already completed") by not keeping an authorization or logout session that completed synchronously, and by forwarding at most one redirect to each session. (#1154)

react-native-app-auth@8.5.0

Minor Changes

• Add resumePendingAuthorize to recover Android browser authorization after process termination, preserving client authentication and skipped code exchanges. Move Custom Tab preparation off the UI thread. (#1146)

Patch Changes

• Prevent a delayed or repeated Android activity callback from replaying an already consumed authorization result, and preserve the completed flow's exchange options when another login starts concurrently. (#1146)

• Support scene-based iOS authorization and logout presentation while preserving legacy app windows and older iOS versions. (#1148)

react-native-app-auth@8.4.1

Patch Changes

• Fix Expo config plugin support for Swift AppDelegate templates that omit public before the AppDelegate class declaration, and correctly extract URL schemes from AppAuth redirect URLs that use a single slash. (#1123)

react-native-app-auth@8.4.0

Minor Changes

• Add androidPrefersEphemeralSession to request ephemeral Custom Tabs on Android when supported. (#1100)

  This also updates AndroidX Browser to 1.9.0, so Android projects now need min SDK 21+, compile SDK 36+, and Android Gradle Plugin 8.9.1+.

... (truncated)

Commits

• ed4a3fa Version Packages (#1156)
• a5fda27 fix: do not forward redirects to a completed session on iOS (#1152)
• 9255757 fix(ci): restore compatible Changesets release action (#1153)
• b3993f6 feat!: modernize examples and require React Native 0.86+ (#1150)
• 93d06bc [LOW] security(ci): pin actions to immutable revisions (#1143)
• e8ee66c Version Packages (#1149)
• 5b971ef feat: allow to resume the request if androdi OS kills the process (#1146)
• ea4648a fix: support scene based lifecycle for ios 27 (#1148)
• 659f398 [LOW] security(ci): limit workflow token permissions (#1144)
• 2bc3009 [LOW] security(ci): pin the release npm version (#1145)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-native-app-auth since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)