chore(deps): update react dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/react (source)	^19.1.10 → ^19.2.14
@types/react-dom (source)	^19.1.7 → ^19.2.3
react (source)	^19.1.1 → ^19.2.5
react-dom (source)	^19.1.1 → ^19.2.5

---

Release Notes

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

v19.2.3: 19.2.3 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.2.2: 19.2.2 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289)

v19.2.1: 19.2.1 (December 3rd, 2025)

Compare Source

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #​35277)

v19.2.0

Compare Source

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

• <Activity>: A new API to hide and restore the UI and internal state of its children.
• useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
• cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
• React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

• Added resume APIs for partial pre-rendering with Web Streams:
  • resume: to resume a prerender to a stream.
  • resumeAndPrerender: to resume a prerender to HTML.
• Added resume APIs for partial pre-rendering with Node Streams:
  • resumeToPipeableStream: to resume a prerender to a stream.
  • resumeAndPrerenderToNodeStream: to resume a prerender to HTML.
• Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

• React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
• Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
• Use underscore instead of : IDs generated by useId

All Changes

React

• <Activity /> was developed over many years, starting before ClassComponent.setState (@​acdlite @​sebmarkbage and many others)
• Stringify context as "SomeContext" instead of "SomeContext.Provider" (@​kassens #​33507)
• Include stack of cause of React instrumentation errors with %o placeholder (@​eps1lon #​34198)
• Fix infinite useDeferredValue loop in popstate event (@​acdlite #​32821)
• Fix a bug when an initial value was passed to useDeferredValue (@​acdlite #​34376)
• Fix a crash when submitting forms with Client Actions (@​sebmarkbage #​33055)
• Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@​sebmarkbage #​32900)
• Avoid stack overflow on wide trees during Hot Reload (@​sophiebits #​34145)
• Improve Owner and Component stacks in various places (@​sebmarkbage, @​eps1lon: #​33629, #​33724, #​32735, #​33723)
• Add cacheSignal (@​sebmarkbage #​33557)

React DOM

• Block on Suspensey Fonts during reveal of server-side-rendered content (@​sebmarkbage #​33342)
• Use underscore instead of : for IDs generated by useId (@​sebmarkbage, @​eps1lon: #​32001, #​33342#​33099, #​33422)
• Stop warning when ARIA 1.3 attributes are used (@​Abdul-Omira #​34264)
• Allow nonce to be used on hoistable styles (@​Andarist #​32461)
• Warn for using a React owned node as a Container if it also has text content (@​sebmarkbage #​32774)
• s/HTML/text for for error messages if text hydration mismatches (@​rickhanlonii #​32763)
• Fix a bug with React.use inside React.lazy-ed Component (@​hi-ogawa #​33941)
• Enable the progressiveChunkSize option for server-side-rendering APIs (@​sebmarkbage #​33027)
• Fix a bug with deeply nested Suspense inside Suspense fallback when server-side-rendering (@​gnoff #​33467)
• Avoid hanging when suspending after aborting while rendering (@​gnoff #​34192)
• Add Node Web Streams to server-side-rendering APIs for Node.js (@​sebmarkbage #​33475)

React Server Components

• Preload <img> and <link> using hints before they're rendered (@​sebmarkbage #​34604)
• Log error if production elements are rendered during development (@​eps1lon #​34189)
• Fix a bug when returning a Temporary reference (e.g. a Client Reference) from Server Functions (@​sebmarkbage #​34084, @​denk0403 #​33761)
• Pass line/column to filterStackFrame (@​eps1lon #​33707)
• Support Async Modules in Turbopack Server References (@​lubieowoce #​34531)
• Add support for .mjs file extension in Webpack (@​jennyscript #​33028)
• Fix a wrong missing key warning (@​unstubbable #​34350)
• Make console log resolve in predictable order (@​sebmarkbage #​33665)

React Reconciler

• createContainer and createHydrationContainer had their parameter order adjusted after on* handlers to account for upcoming experimental APIs

v19.1.6: 19.1.6 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

v19.1.5: 19.1.5 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

v19.1.4: 19.1.4 (December 11th, 2025)

Compare Source

React Server Components

• Add extra loop protection to React Server Functions (@​sebmarkbage #​35351)

v19.1.3: 19.1.3 (December 11th, 2025)

Compare Source

React Server Components

• Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@​eps1lon #​35290)
• Patch Promise cycles and toString on Server Functions (@​sebmarkbage, @​unstubbable #​35289, #​35345)

v19.1.2: 19.1.2 (December 3rd, 2025)

Compare Source

React Server Components

• Bring React Server Component fixes to Server Actions (@​sebmarkbage #​35277)

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
react-shiki	Ready	Preview, Comment	Apr 8, 2026 11:56pm
react-shiki-docs	Error		Apr 8, 2026 11:56pm

[changeset-bot]

⚠️ No Changeset found

Latest commit: 53fe257

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[claude]

Claude encountered an error —— View job

---

I'll analyze this and get back to you.

[claude]

Claude finished @renovate[bot]'s task —— View job

---

✅ PR Review: React Dependencies Update

I've completed my comprehensive review of this pull request that updates React type definitions. Here's my analysis:

Todo List:

• Read repository setup instructions (CLAUDE.md)
• Examine dependency changes in detail
• Check for potential TypeScript compatibility issues
• Verify test coverage and run tests if available
• Assess security implications
• Provide comprehensive review feedback

---

Overall Assessment: APPROVED ✅

This is a low-risk, routine dependency update that should be safe to merge.

📋 Changes Summary

The PR updates React type definitions in the workspace catalog:

• @types/react: ^19.1.10 → ^19.1.12 (patch bump)
• @types/react-dom: ^19.1.7 → ^19.1.9 (patch bump)

🔍 Detailed Review

Code Quality & Best Practices ✅

• Dependency Management: Uses pnpm workspace catalog correctly for consistent versioning across packages
• Semver Compliance: Both updates are patch versions, indicating bug fixes and improvements only
• Monorepo Structure: Changes properly propagated to both package and playground workspaces

Potential Bugs/Issues ✅

• Low Risk: Patch version updates in type definitions are typically safe
• Backward Compatibility: React 19.1.x type definitions maintain API compatibility
• Component Compatibility: Reviewed component.tsx:107 - uses proper forwardRef typing that should be unaffected
• Test Coverage: Comprehensive test suite in component.test.tsx:1-320 covers core functionality

Performance Considerations ✅

• No Runtime Impact: Type-only changes don't affect bundle size or runtime performance
• Development Experience: May include improvements to TypeScript IntelliSense and error reporting

Security Concerns ✅

• Trusted Source: Updates from @types packages on DefinitelyTyped (Microsoft-maintained)
• No Malicious Code: Type definition files contain only TypeScript interfaces and types
• Supply Chain: Using official npm registry with integrity checks via pnpm lockfile

Test Coverage ⚠️

• Existing Coverage: Strong test coverage for component functionality
• Verification: Unable to run tests due to permission restrictions, but code analysis shows:
  • Component uses standard React patterns (forwardRef, standard props)
  • Test suite covers edge cases and error conditions
  • Types are compatible with React 19.1.x ecosystem

🎯 Recommendations

1. ✅ Safe to Merge: This is a standard maintenance update
2. 🔄 Monitor CI: Ensure all automated checks pass (TypeScript, tests, build)
3. 📝 Changeset: Consider if a changeset is needed - typically not required for dev dependency updates
4. 🚀 Deploy Confidence: High confidence for production deployment

🔧 Technical Notes

• Peer Dependencies: Package correctly specifies @types/react >= 16.8.0 as optional peer deps
• TypeScript Compatibility: Changes maintain compatibility with existing codebase patterns
• React Patterns: Component uses modern React patterns (hooks, forwardRef) that remain stable across patch versions

---

Conclusion: This is a routine maintenance update with minimal risk. The changes are well-contained to type definitions and should not affect runtime behavior. Recommended for approval and merge.

---

[vercel]

Deployment failed with the following error:

Resource is limited - try again in 10 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/bassims-projects-2e899514?upgradeToPro=build-rate-limit

[vercel]

Deployment failed with the following error:

Resource is limited - try again in 3 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/bassims-projects-2e899514?upgradeToPro=build-rate-limit