Import React Native package into monorepo (v4.0.0)#31
Merged
Conversation
🔍 Denylist Analysis ResultsDiscovered 1080 packages. These include both those that are net-new and those that have been explicitly approved or denied for use. platforms/react-native/pnpm-lock.yaml🔄 New Packages Entering the Supply Chain (54)
✅ Known Packages - Approved for Use (975)
platforms/react-native/sample/Gemfile.lock✅ Known Packages - Approved for Use (46)
platforms/react-native/sample/package.json✅ Known Packages - Approved for Use (4)
platforms/react-native/sample/ios/ReactNative.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved✅ Known Packages - Approved for Use (1)
For any questions or to provide feedback, please reach out to #help-bumperbot. Generated by Bumperbot. |
kiftio
approved these changes
May 8, 2026
Juanita-Dash
added a commit
that referenced
this pull request
May 8, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This was referenced May 8, 2026
Juanita-Dash
added a commit
to Shopify/checkout-sheet-kit-react-native
that referenced
this pull request
May 8, 2026
## Why Dependabot PR #462 was titled as a fast-xml-parser bump (4.5.3 → 4.5.6) and merged green, but inspection of the merged commit (86fb324) shows the patch did not actually update fast-xml-parser in `pnpm-lock.yaml` — only unrelated transitive deps (`@babel/parser`, `@jridgewell/trace-mapping`, `debug`, `jsesc`) moved. All four `fast-xml-parser@4.5.3` references remained on `main` post-merge. This appears related to bumperbot bug [Shopify/infrasec-bumper#673](Shopify/infrasec-bumper#673) — "Bumper handle nested manifests correctly". The infrasec deep-dive (Mar 11, Rune Madsen) flagged the same class of issue with fast-xml-parser specifically. ## What Reproduces the bump dependabot intended, by running: ``` pnpm update fast-xml-parser --lockfile-only --recursive ``` Result: 5 insertions / 5 deletions in `pnpm-lock.yaml`, all four references updated to 4.5.6 (package definitions + snapshot entries for `@react-native-community/cli-platform-android@19.1.1` and `cli-platform-ios@19.1.1`). No `package.json` change — fast-xml-parser is purely transitive here. ## Context This unblocks the `multirepo-denylist-check` failure on [Shopify/checkout-kit#31](Shopify/checkout-kit#31), which imports this lockfile verbatim under `react-native/`. Once this merges, that import PR will be re-synced from the new source `main` and the denylist check should clear. cc @kieran-osgood-shopify @markmur @danielkift
00112e2 to
b82a603
Compare
Juanita-Dash
added a commit
that referenced
this pull request
May 8, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
b82a603 to
762a09c
Compare
Juanita-Dash
commented
May 8, 2026
| @@ -1,3 +1,1040 @@ | |||
| # Checkout Kit — React Native | |||
| # Shopify Checkout Kit - React Native | |||
|
|
|||
Contributor
Author
There was a problem hiding this comment.
Note on the 2 deletions: the existing 2-line placeholder is replaced by the source repo's full README, since the verbatim git archive import lands at the same path. No code is removed anywhere in this PR.
Juanita-Dash
added a commit
that referenced
this pull request
May 8, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
kyle-schellen
approved these changes
May 8, 2026
Contributor
|
@Juanita-Dash heads up that the react native content now lives under |
Verbatim snapshot of Shopify/checkout-sheet-kit-react-native@a349b97 extracted via `git archive` into platforms/react-native/. No code edits. .github/ excluded; CI to be re-authored at the monorepo root. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
762a09c to
e7c2c9c
Compare
Contributor
Author
|
Re-cut 2026-05-11 — addressing review feedback to land under the new
|
Juanita-Dash
added a commit
that referenced
this pull request
May 11, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 11, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 11, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Juanita-Dash
added a commit
that referenced
this pull request
May 12, 2026
Renames the React Native bridge in react-native/ from Shopify Checkout Sheet Kit to Shopify Checkout Kit. Mirrors the parallel rename in the source repo (Shopify/checkout-sheet-kit-react-native#483) applied to the v4.0.0 import (#31). Stacked on rn-import-source-v4 (PR #31). When #31 merges, this will be auto-retargeted onto main with the rename diff intact. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Part of https://github.com/shop/issues-checkout-kit/issues/883
Supersedes #28 — re-cut on current source
mainper @kieran-osgood-shopify's review. Re-cut again on top of #41 (which moved platforms underplatforms/) and re-synced to current sourcemain(a349b97), which includes the fast-xml-parser bump that was previously called out as a blocker.Summary
Imports the source of
Shopify/checkout-sheet-kit-react-nativeat commita349b97— current sourcemain, the v4.0.0 (New Architecture) release with thefast-xml-parser4.5.3 → 4.5.6 bump applied — underplatforms/react-native/, alongside the existingplatforms/android/andplatforms/swift/. No code changes — this is a verbatim snapshot taken viagit archive.Note on the 2 deletions: only
platforms/react-native/README.mdis modified; the existing 2-line placeholder (from #41) is replaced by the source repo's full README, since the verbatim git archive import lands at the same path. No code is removed anywhere in this PR.The Checkout Sheet Kit → Checkout Kit rename will be applied on top in #27 (rebased onto this import once it merges).
What's in / out of scope
In scope (this PR)
platforms/react-native/fromShopify/checkout-sheet-kit-react-native@a349b97(verbatim)platforms/react-native/README.mdplaceholder replaced with the real RN README from the source repoOut of scope (deferred to follow-ups)
.github/was intentionally not imported — CI workflows will be re-authored at the monorepo root withrn-*prefixes (matching the existingswift-*/android-*convention) in a separate migration-plumbing PRPreviously-flagged blocker — now resolved
The
multirepo-denylist-checkfailure onfast-xml-parser@4.5.3(called out in #28 and earlier revisions of this PR) is resolved by re-syncing toa349b97, which isd0cd665+ commits #462 and #484 from the source repo bumpingfast-xml-parserto 4.5.6 inpnpm-lock.yaml.How to test
Pure file import (no edits, no renames). Verify the file tree matches
Shopify/checkout-sheet-kit-react-native@a349b97modulo the excluded.github/.🤖 Generated with Claude Code