[Snyk] Upgrade react-dom from 19.1.0 to 19.2.0 #2
Conversation
Snyk has created this PR to upgrade react-dom from 19.1.0 to 19.2.0. See this package in npm: react-dom See this project in Snyk: https://app.snyk.io/org/miskaone/project/ba13959f-f20d-4781-96e5-210734b795df?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
There was a problem hiding this comment.
Pull Request Overview
This PR updates the react-dom package from version 19.1.0 to 19.2.0, along with its dependency scheduler from 0.26.0 to 0.27.0.
Key changes:
- Bumps
react-domfrom 19.1.0 to 19.2.0 - Updates
schedulerdependency from ^0.26.0 to ^0.27.0 - Updates
react-dompeer dependency requirement to^19.2.0
Reviewed Changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| frontend/package.json | Updates react-dom version to 19.2.0 |
| frontend/package-lock.json | Updates react-dom, scheduler dependencies and peer dependency constraints |
Files not reviewed (1)
- frontend/package-lock.json: Language not supported
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "framer-motion": "^12.23.12", | ||
| "lucide-react": "^0.539.0", | ||
| "next": "15.4.6", | ||
| "react": "19.1.0", |
There was a problem hiding this comment.
Version mismatch between react (19.1.0) and react-dom (19.2.0). The updated react-dom 19.2.0 has a peer dependency of ^19.2.0 for React (see package-lock.json line 3168), but React is still at 19.1.0. This will cause a peer dependency conflict. Either update React to 19.2.0 or revert react-dom to 19.1.0 to maintain compatibility.
| "react": "19.1.0", | |
| "react": "19.2.0", |
| "framer-motion": "^12.23.12", | ||
| "lucide-react": "^0.539.0", | ||
| "next": "15.4.6", | ||
| "react": "19.1.0", |
There was a problem hiding this comment.
Version mismatch between react (19.1.0) and react-dom (^19.2.0) in dependencies. The caret range for react-dom allows 19.2.x but React is pinned to 19.1.0, creating a peer dependency conflict with react-dom's requirement of ^19.2.0 for React.
| "react": "19.1.0", | |
| "react": "^19.2.0", |
| "peerDependencies": { | ||
| "react": "^19.1.0" | ||
| "react": "^19.2.0" | ||
| } |
There was a problem hiding this comment.
This peer dependency requirement for react: ^19.2.0 conflicts with the installed React version 19.1.0 (line 3151). This mismatch will cause npm/pnpm to report unmet peer dependency warnings or errors during installation.
Deploying supabase-configurator with
|
| Latest commit: |
d30c528
|
| Status: | 🚫 Build failed. |
Snyk has created this PR to upgrade react-dom from 19.1.0 to 19.2.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 141 versions ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: react-dom
-
19.2.0 - 2025-10-01
- React Performance tracks appear on the Performance panel’s timeline in your browser developer tools
- Added resume APIs for partial pre-rendering with Web Streams:
- Added resume APIs for partial pre-rendering with Node Streams:
- Updated
- React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming
- Add Node Web Streams (
- Use underscore instead of
- Stringify context as "SomeContext" instead of "SomeContext.Provider" (@ kassens #33507)
- Include stack of cause of React instrumentation errors with
- Fix infinite
- Fix a bug when an initial value was passed to
- Fix a crash when submitting forms with Client Actions (@ sebmarkbage #33055)
- Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@ sebmarkbage #32900)
- Avoid stack overflow on wide trees during Hot Reload (@ sophiebits #34145)
- Improve Owner and Component stacks in various places (@ sebmarkbage, @ eps1lon: #33629, #33724, #32735, #33723)
- Add
- Block on Suspensey Fonts during reveal of server-side-rendered content (@ sebmarkbage #33342)
- Use underscore instead of
- Stop warning when ARIA 1.3 attributes are used (@ Abdul-Omira #34264)
- Allow
- Warn for using a React owned node as a Container if it also has text content (@ sebmarkbage #32774)
- s/HTML/text for for error messages if text hydration mismatches (@ rickhanlonii #32763)
- Fix a bug with
- Enable the
- Fix a bug with deeply nested Suspense inside Suspense fallback when server-side-rendering (@ gnoff #33467)
- Avoid hanging when suspending after aborting while rendering (@ gnoff #34192)
- Add Node Web Streams to server-side-rendering APIs for Node.js (@ sebmarkbage #33475)
- Preload
- Log error if production elements are rendered during development (@ eps1lon #34189)
- Fix a bug when returning a Temporary reference (e.g. a Client Reference) from Server Functions (@ sebmarkbage #34084, @ denk0403 #33761)
- Pass line/column to
- Support Async Modules in Turbopack Server References (@ lubieowoce #34531)
- Add support for .mjs file extension in Webpack (@ jennyscript #33028)
- Fix a wrong missing key warning (@ unstubbable #34350)
- Make console log resolve in predictable order (@ sebmarkbage #33665)
- createContainer and createHydrationContainer had their parameter order adjusted after
- Breaking: Require Node.js 18 or newer. (@ michaelfaith in #32458)
- Breaking: Flat config is now the default
- New Violations: Disallow calling
- New Violations: Disallow calling
- Handle
- Added
-
19.2.0-canary-fa3feba6-20250623 - 2025-06-23
-
19.2.0-canary-f9ae0a4c-20250527 - 2025-05-27
-
19.2.0-canary-f7396427-20250501 - 2025-05-02
-
19.2.0-canary-f508edc8-20250818 - 2025-08-18
-
19.2.0-canary-f3a80361-20250911 - 2025-09-11
-
19.2.0-canary-f1e70b5e-20250811 - 2025-08-11
-
19.2.0-canary-f1222f76-20250812 - 2025-08-13
-
19.2.0-canary-ef8b6fa2-20250702 - 2025-07-03
-
19.2.0-canary-ef889445-20250930 - 2025-09-30
-
19.2.0-canary-edac0dde-20250723 - 2025-07-23
-
19.2.0-canary-eaee5308-20250728 - 2025-07-28
-
19.2.0-canary-ea05b750-20250408 - 2025-04-09
-
19.2.0-canary-e9db3cc2-20250501 - 2025-05-01
-
19.2.0-canary-e9638c33-20250721 - 2025-07-21
-
19.2.0-canary-e6dc25da-20250709 - 2025-07-09
-
19.2.0-canary-e5dd82a7-20250401 - 2025-04-01
-
19.2.0-canary-e2332183-20250924 - 2025-09-24
-
19.2.0-canary-dffacc7b-20250717 - 2025-07-17
-
19.2.0-canary-df38ac9a-20250926 - 2025-09-26
-
19.2.0-canary-de5a1b20-20250905 - 2025-09-05
-
19.2.0-canary-d92056ef-20250627 - 2025-06-27
-
19.2.0-canary-d85f86cf-20250514 - 2025-05-14
-
19.2.0-canary-d85ec5f5-20250716 - 2025-07-16
-
19.2.0-canary-d415fd3e-20250919 - 2025-09-19
-
19.2.0-canary-d15d7fd7-20250929 - 2025-09-29
-
19.2.0-canary-cee7939b-20250625 - 2025-06-25
-
19.2.0-canary-c498bfce-20250426 - 2025-04-28
-
19.2.0-canary-c4676e72-20250520 - 2025-05-20
-
19.2.0-canary-c44e4a25-20250409 - 2025-04-10
-
19.2.0-canary-c260b38d-20250731 - 2025-07-31
-
19.2.0-canary-c129c242-20250505 - 2025-05-05
-
19.2.0-canary-c0464aed-20250523 - 2025-05-26
-
19.2.0-canary-befc1246-20250708 - 2025-07-08
-
19.2.0-canary-be11cb5c-20250804 - 2025-08-04
-
19.2.0-canary-bdb4a96f-20250801 - 2025-08-01
-
19.2.0-canary-bc6184dd-20250417 - 2025-04-18
-
19.2.0-canary-bbc13fa1-20250624 - 2025-06-24
-
19.2.0-canary-bb6f0c8d-20250901 - 2025-09-01
-
19.2.0-canary-b9cfa0d3-20250505 - 2025-05-05
-
19.2.0-canary-b9a04536-20250904 - 2025-09-04
-
19.2.0-canary-b94603b9-20250513 - 2025-05-13
-
19.2.0-canary-b7e2de63-20250611 - 2025-06-11
-
19.2.0-canary-b6c0aa88-20250609 - 2025-06-09
-
19.2.0-canary-b4477d38-20250605 - 2025-06-05
-
19.2.0-canary-b1b0955f-20250901 - 2025-09-01
-
19.2.0-canary-b10cb4c0-20250403 - 2025-04-03
-
19.2.0-canary-b0c1dc01-20250925 - 2025-09-25
-
19.2.0-canary-b07717d8-20250528 - 2025-05-28
-
19.2.0-canary-b04254fd-20250415 - 2025-04-16
-
19.2.0-canary-ac7820a9-20250811 - 2025-08-11
-
19.2.0-canary-ab859e31-20250606 - 2025-06-06
-
19.2.0-canary-aad7c664-20250829 - 2025-08-29
-
19.2.0-canary-a96a0f39-20250815 - 2025-08-15
-
19.2.0-canary-a7a11657-20250708 - 2025-07-08
-
19.2.0-canary-a00ca6f6-20250611 - 2025-06-11
-
19.2.0-canary-9be531cd-20250729 - 2025-07-29
-
19.2.0-canary-99efc627-20250523 - 2025-05-23
-
19.2.0-canary-97cdd5d3-20250710 - 2025-07-11
-
19.2.0-canary-9784cb37-20250730 - 2025-07-30
-
19.2.0-canary-96c61b7f-20250709 - 2025-07-10
-
19.2.0-canary-93d7aa69-20250912 - 2025-09-12
-
19.2.0-canary-914319ae-20250423 - 2025-04-23
-
19.2.0-canary-8e60cb7e-20250902 - 2025-09-02
-
19.2.0-canary-8d7b5e49-20250827 - 2025-08-28
-
19.2.0-canary-8ce15b0f-20250522 - 2025-05-22
-
19.2.0-canary-8bb7241f-20250926 - 2025-09-26
-
19.2.0-canary-8a8e9a7e-20250912 - 2025-09-12
-
19.2.0-canary-89a803fc-20250828 - 2025-08-28
-
19.2.0-canary-886b3d36-20250910 - 2025-09-10
-
19.2.0-canary-873f7112-20250821 - 2025-08-21
-
19.2.0-canary-86181134-20251001 - 2025-10-01
-
19.2.0-canary-84af9085-20250917 - 2025-09-18
-
19.2.0-canary-83c88ad4-20250923 - 2025-09-23
-
19.2.0-canary-7deda941-20250804 - 2025-08-05
-
19.2.0-canary-7a2c7045-20250506 - 2025-05-06
-
19.2.0-canary-79d9aed7-20250620 - 2025-06-20
-
19.2.0-canary-7513996f-20250722 - 2025-07-22
-
19.2.0-canary-73aa744b-20250702 - 2025-07-02
-
19.2.0-canary-7216c0f0-20250630 - 2025-07-01
-
19.2.0-canary-72135096-20250421 - 2025-04-22
-
19.2.0-canary-6eda5347-20250918 - 2025-09-19
-
19.2.0-canary-6de32a5a-20250822 - 2025-08-22
-
19.2.0-canary-6b70072c-20250909 - 2025-09-09
-
19.2.0-canary-6a7650c7-20250405 - 2025-04-05
-
19.2.0-canary-67a44bcd-20250915 - 2025-09-15
-
19.2.0-canary-66f09bd0-20250806 - 2025-08-06
-
19.2.0-canary-65c4decb-20250630 - 2025-06-30
-
19.2.0-canary-63779030-20250328 - 2025-03-31
-
19.2.0-canary-60b5271a-20250709 - 2025-07-09
-
19.2.0-canary-5e0c951b-20250916 - 2025-09-16
-
19.2.0-canary-5dc00d6b-20250428 - 2025-04-28
-
19.2.0-canary-5d87cd22-20250704 - 2025-07-04
-
19.2.0-canary-56408a5b-20250610 - 2025-06-10
-
19.2.0-canary-548235db-20251001 - 2025-10-01
-
19.2.0-canary-540cd652-20250403 - 2025-04-04
-
19.2.0-canary-534bed5f-20250813 - 2025-08-13
-
19.2.0-canary-526dd340-20250602 - 2025-06-02
-
19.2.0-canary-4db4b21c-20250626 - 2025-06-26
-
19.2.0-canary-4a45ba92-20250515 - 2025-05-15
-
19.2.0-canary-4a36d3ea-20250416 - 2025-04-17
-
19.2.0-canary-462d08f9-20250517 - 2025-05-19
-
19.2.0-canary-4448b187-20250515 - 2025-05-16
-
19.2.0-canary-4123f6b7-20250826 - 2025-08-26
-
19.2.0-canary-408d055a-20250430 - 2025-04-30
-
19.2.0-canary-3fbfb9ba-20250409 - 2025-04-09
-
19.2.0-canary-3fb190f7-20250908 - 2025-09-08
-
19.2.0-canary-3d14fcf0-20250724 - 2025-07-24
-
19.2.0-canary-39cad7af-20250411 - 2025-04-14
-
19.2.0-canary-3958d5d8-20250807 - 2025-08-07
-
19.2.0-canary-38ef6550-20250508 - 2025-05-08
-
19.2.0-canary-3820740a-20250509 - 2025-05-12
-
19.2.0-canary-379a083b-20250813 - 2025-08-14
-
19.2.0-canary-37054867-20250604 - 2025-06-04
-
19.2.0-canary-33a1095d-20250827 - 2025-08-27
-
19.2.0-canary-33661467-20250407 - 2025-04-07
-
19.2.0-canary-3302d1f7-20250903 - 2025-09-03
-
19.2.0-canary-2f0e7e57-20250715 - 2025-07-15
-
19.2.0-canary-280ff6fe-20250606 - 2025-06-06
-
19.2.0-canary-2805f0ed-20250903 - 2025-09-03
-
19.2.0-canary-23884812-20250520 - 2025-05-21
-
19.2.0-canary-223f81d8-20250707 - 2025-07-07
-
19.2.0-canary-21fdf308-20250508 - 2025-05-09
-
19.2.0-canary-1eca9a27-20250922 - 2025-09-22
-
19.2.0-canary-1dc3bdea-20250812 - 2025-08-12
-
19.2.0-canary-1d6c8168-20250411 - 2025-04-11
-
19.2.0-canary-1bd1f01f-20251001 - 2025-10-01
-
19.2.0-canary-1ae0a845-20250603 - 2025-06-03
-
19.2.0-canary-19baee81-20250725 - 2025-07-25
-
19.2.0-canary-197d6a04-20250424 - 2025-04-24
-
19.2.0-canary-143d3e1b-20250425 - 2025-04-25
-
19.2.0-canary-14094f80-20250529 - 2025-05-29
-
19.2.0-canary-12bc60f5-20250613 - 2025-06-13
-
19.2.0-canary-128abcfa-20250917 - 2025-09-17
-
19.2.0-canary-0ff1d13b-20250507 - 2025-05-07
-
19.2.0-canary-0bdb9206-20250818 - 2025-08-19
-
19.2.0-canary-06e89951-20250620 - 2025-06-20
-
19.2.0-canary-040f8286-20250402 - 2025-04-02
-
19.2.0-canary-03fda05d-20250820 - 2025-08-20
-
19.2.0-canary-0038c501-20250429 - 2025-04-29
-
19.1.1 - 2025-07-28
- Fixed Owner Stacks to work with ES2015 function.name semantics (#33680 by @ hoxyq)
-
19.1.0 - 2025-03-28
- An Owner Stack is a development-only stack trace that helps identify which components are responsible for rendering a particular component. An Owner Stack is distinct from a Component Stacks, which shows the hierarchy of components leading to an error.
- The captureOwnerStack API is only available in development mode and returns a Owner Stack, if available. The API can be used to enhance error overlays or log component relationships when debugging. #29923, #32353, #30306,
- Enhanced support for Suspense boundaries to be used anywhere, including the client, server, and during hydration. #32069, #32163, #32224, #32252
- Reduced unnecessary client rendering through improved hydration scheduling #31751
- Increased priority of client rendered Suspense boundaries #31776
- Fixed frozen fallback states by rendering unfinished Suspense boundaries on the client. #31620
- Reduced garbage collection pressure by improving Suspense boundary retries. #31667
- Fixed erroneous “Waiting for Paint” log when the passive effect phase was not delayed #31526
- Fixed a regression causing key warnings for flattened positional children in development mode. #32117
- Updated
- Added a dev-only warning for null/undefined created in useEffect, useInsertionEffect, and useLayoutEffect. #32355
- Fixed a bug where dev-only methods were exported in production builds. React.act is no longer available in production builds. #32200
- Improved consistency across prod and dev to improve compatibility with Google Closure Complier and bindings #31808
- Improve passive effect scheduling for consistent task yielding. #31785
- Fixed asserts in React Native when passChildrenWhenCloningPersistedNodes is enabled for OffscreenComponent rendering. #32528
- Fixed component name resolution for Portal #32640
- Added support for beforetoggle and toggle events on the dialog element. #32479 #32479
- Fixed double warning when the
- Fixed an edge case where
- Removed support for using HTML comments (e.g.
- Added support for
- Fixed responsive images to be preloaded as HTML instead of headers #32445
- Added
- Added
- Fixed an issue where streams would hang when receiving new chunks after a global error #31840, #31851
- Fixed an issue where pending chunks were counted twice. #31833
- Added support for streaming in edge environments #31852
- Added support for sending custom error names from a server so that they are available in the client for console replaying. #32116
- Updated the server component wire format to remove IDs for hints and console.log because they have no return value #31671
- Exposed
- Added react-server-dom-parcel package which integrates Server Components with the Parcel bundler #31725, #32132, #31799, #32294, #31741
from react-dom GitHub release notesBelow is a list of all new features, APIs, and bug fixes.
Read the React 19.2 release post for more information.
New React Features
<Activity>: A new API to hide and restore the UI and internal state of its children.useEffectEventis a React Hook that lets you extract non-reactive logic into an Effect Event.cacheSignal(for RSCs) lets your know when thecache()lifetime is over.New React DOM Features
resume: to resume a prerender to a stream.resumeAndPrerender: to resume a prerender to HTML.resumeToPipeableStream: to resume a prerender to a stream.resumeAndPrerenderToNodeStream: to resume a prerender to HTML.prerenderAPIs to return apostponedstate that can be passed to theresumeAPIs.Notable changes
<ViewTransition>Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.prerender,renderToReadableStream) to server-side-rendering APIs for Node.js:IDs generated by useIdAll Changes
React
<Activity />was developed over many years, starting beforeClassComponent.setState(@ acdlite @ sebmarkbage and many others)%oplaceholder (@ eps1lon #34198)useDeferredValueloop in popstate event (@ acdlite #32821)useDeferredValue(@ acdlite #34376)cacheSignal(@ sebmarkbage #33557)React DOM
:for IDs generated byuseId(@ sebmarkbage, @ eps1lon: #32001, #33342#33099, #33422)nonceto be used on hoistable styles (@ Andarist #32461)React.useinsideReact.lazy-ed Component (@ hi-ogawa #33941)progressiveChunkSizeoption for server-side-rendering APIs (@ sebmarkbage #33027)React Server Components
<img>and<link>using hints before they're rendered (@ sebmarkbage #34604)filterStackFrame(@ eps1lon #33707)React Reconciler
on*handlers to account for upcoming experimental APIseslint-plugin-react-hooks@6.1.0
Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.
recommendedpreset. Legacy config moved torecommended-legacy. (@ michaelfaith in #32457)usewithin try/catch blocks. (@ poteto in #34040)useEffectEventfunctions in arbitrary closures. (@ jbrown215 in #33544)React.useEffectin addition touseEffectin rules-of-hooks. (@ Ayc0 in #34076)react-hookssettings config option that to acceptadditionalEffectHooksthat are used across exhaustive-deps and rules-of-hooks rules. (@ jbrown215) in #34497React
Owner Stack
An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.
#32538, #32529, #32538
React
useIdto use valid CSS selectors, changing format from:r123:to«r123». #32001React DOM
hrefattribute is an empty string #31783getHoistableRoot()didn’t work properly when the container was a Document #32321<!-- -->) as a DOM container. #32250<script>and<template>tags to be nested within<select>tags. #31837use-sync-external-store
exportsfield topackage.jsonforuse-sync-external-storeto support various entrypoints. #25231React Server Components
unstable_prerender, a new experimental API for prerendering React Server Components on the server #31724registerServerReferencein client builds to handle server references in different environments. #32534Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: