[saseungmin]

Summary

Update vulnerable dependency trees through supported upstream releases and align the library's development environment and example with Expo 58.0.19 / React Native 0.88.0.

• Remove versions flagged by the 50 active, non-withdrawn Dependabot alerts; update Oxfmt, Rspress, and affected transitive dependencies without dependency overrides.
• Align React 19.3.0, Gesture Handler 3.3.0, Reanimated 4.7.1, Worklets 0.13.0, and the RN Babel/Jest/Metro presets. Keep the published library API and peer dependency minimums unchanged.
• Migrate the example's splash configuration to the SDK 58 plugin, use Expo's supported Metro entrypoint, and declare the Babel preset and matching peers needed by isolated pnpm installs.
• Update React 19.3-compatible testing tools, preserve native module resolution under pnpm, and provide the Gesture Handler root context in integration tests.

Validation

Rebased onto the latest main, retaining release 1.5.0 and its runtime fixes.

• Frozen-lockfile install, formatting, lint, root/example/docs typechecks, and library/docs builds passed.
• 16 test suites / 216 tests passed.
• Expo Doctor: 20/20 passed; Expo dependency check passed; no peer dependency issues.
• iOS and Android JavaScript exports passed.
• iOS simulator Release build and Android arm64 Debug APK build passed.
• Installed and launched the Release app in the iOS simulator.

Remaining security advisory

pnpm audit reports one high-severity finding in Expo CLI's Zod 3 dependency: GHSA-mrhx-c7xc-m3w5. The advisory is left visible rather than forcing an incompatible Zod 4 override. The withdrawn sprintf-js advisory is excluded from the 50 active alerts above.

[changeset-bot]

⚠️ No Changeset found

Latest commit: bcbd3c1

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T07:24:15.603371Z	bcbd3c1	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.