chore(deps): bump react and @types/react by dependabot[bot] · Pull Request #31 · blackboxprogramming/blackroad

dependabot · 2026-02-27T12:46:16Z

Bumps react and @types/react. These dependencies needed to be updated together.
Updates react from 18.3.1 to 19.2.4

Release notes

19.2.4 (January 26th, 2026)

React Server Components

Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @gnoff, @lubieowoce, @sebmarkbage, @unstubbable)

19.2.3 (December 11th, 2025)

React Server Components

Add extra loop protection to React Server Functions (@sebmarkbage #35351)

19.2.2 (December 11th, 2025)

React Server Components

Move react-server-dom-webpack/*.unbundled to private react-server-dom-unbundled (@eps1lon facebook/react#35290)

Patch Promise cycles and toString on Server Functions (@sebmarkbage, @unstubbable #35289, #35345)

19.2.1 (December 3rd, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

... (truncated)

Changelog

Sourced from react's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

Bring React Server Component fixes to Server Actions (@sebmarkbage #35277)

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

<Activity>: A new API to hide and restore the UI and internal state of its children.

useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.

cacheSignal (for RSCs) lets your know when the cache() lifetime is over.

React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

Added resume APIs for partial pre-rendering with Web Streams:

resume: to resume a prerender to a stream.

resumeAndPrerender: to resume a prerender to HTML.

Added resume APIs for partial pre-rendering with Node Streams:

resumeToPipeableStream: to resume a prerender to a stream.

resumeAndPrerenderToNodeStream: to resume a prerender to HTML.

Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js

Use underscore instead of : IDs generated by useId

All Changes

React

<Activity /> was developed over many years, starting before ClassComponent.setState (@acdlite @sebmarkbage and many others)

Stringify context as "SomeContext" instead of "SomeContext.Provider" (@kassens #33507)

Include stack of cause of React instrumentation errors with %o placeholder (@eps1lon #34198)

Fix infinite useDeferredValue loop in popstate event (@acdlite #32821)

Fix a bug when an initial value was passed to useDeferredValue (@acdlite #34376)

Fix a crash when submitting forms with Client Actions (@sebmarkbage #33055)

Hide/unhide the content of dehydrated suspense boundaries if they resuspend (@sebmarkbage #32900)

Avoid stack overflow on wide trees during Hot Reload (@sophiebits #34145)

Improve Owner and Component stacks in various places (@sebmarkbage, @eps1lon: #33629, #33724, #32735, #33723)

Add cacheSignal (@sebmarkbage #33557)

... (truncated)

Commits

90ab3f8 Version 19.2.4
612e371 Version 19.2.3
b910fc1 Version 19.2.2
053df4e Version 19.2.1
5667a41 Bump next prerelease version numbers (#34639)
8bb7241 Bump useEffectEvent to Canary (#34610)
e3c9656 Ensure Performance Track are Clamped and Don't overlap (#34509)
68f00c9 Release Activity in Canary (#34374)
0e10ee9 [Reconciler] Set ProfileMode for Host Root Fiber by default in dev (#34432)
3bf8ab4 Add missing Activity export to development mode (#34439)
Additional commits viewable in compare view

Updates @types/react from 18.3.23 to 19.2.14

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together. Updates `react` from 18.3.1 to 19.2.4 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.4/packages/react) Updates `@types/react` from 18.3.23 to 19.2.14 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.4 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: "@types/react" dependency-version: 19.2.14 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

chatgpt-codex-connector · 2026-02-27T12:46:20Z

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

Copilot

Pull request overview

This PR attempts to upgrade React from version 18.3.1 to 19.2.4 and @types/react from 18.3.23 to 19.2.14 across the monorepo, as part of an automated Dependabot update. However, the upgrade is incomplete and creates multiple critical peer dependency conflicts.

Changes:

Upgrades react to 19.2.4 in apps/homework and apps/roadbook
Upgrades @types/react to 19.2.14 across apps/homework, apps/roadbook, and packages/ui
Leaves react-dom at 18.3.1, which is incompatible with React 19
Does not upgrade packages/ui runtime dependencies, creating version mismatches

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 4 comments.

File	Description
pnpm-lock.yaml	Updates dependency resolution, but creates peer dependency mismatches between React 19, react-dom 18, and Next.js 13
apps/homework/package.json	Updates react to 19.2.4 and `@types/react` to 19.2.14, but leaves react-dom at 18.2.0
apps/roadbook/package.json	Updates react to 19.2.4 and `@types/react` to 19.2.14, but leaves react-dom at 18.2.0
packages/ui/package.json	Updates `@types/react` to ^19, but leaves runtime dependencies on React 18

Files not reviewed (1)

pnpm-lock.yaml: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-02-27T16:05:00Z

apps/roadbook/package.json

+    "react": "^19.2.4",
    "react-dom": "^18.2.0",


React 19.2.4 is being used with react-dom 18.3.1, which violates react-dom's peer dependency requirement of ^18.3.1. The react-dom package explicitly expects React 18, but React 19 is being provided. This creates a peer dependency mismatch that can cause runtime issues and unexpected behavior.

Additionally, Next.js 13.5.11 has a peer dependency on react ^18.2.0 and react-dom ^18.2.0, but is being used with React 19.2.4. Next.js 13 was not designed to work with React 19, and this version mismatch can lead to compatibility issues.

To fix this issue, either:

Upgrade react-dom to a version compatible with React 19 (if available), OR

Revert React to version 18.3.1 to maintain compatibility with the current ecosystem, OR

Upgrade Next.js to a version that supports React 19 (Next.js 15+ officially supports React 19)

Copilot · 2026-02-27T16:05:01Z

packages/ui/package.json

  },
  "devDependencies": {
-    "@types/react": "^18",
+    "@types/react": "^19",


This package specifies @types/react ^19 in devDependencies and @types/react-dom ^18 in devDependencies, but @types/react-dom 18.3.7 has a peer dependency requirement of @types/react ^18.0.0. Using @types/react 19.2.14 with @types/react-dom 18.3.7 creates a type definition mismatch.

This can lead to TypeScript compilation errors or incorrect type checking. The @types/react-dom version should be upgraded to one compatible with @types/react 19, or @types/react should remain at version 18.

Suggested change

"@types/react": "^19",

"@types/react": "^18",

Copilot · 2026-02-27T16:05:01Z

pnpm-lock.yaml

    dependencies:
      react:
        specifier: ^18.0.0
        version: 18.3.1
      react-dom:
        specifier: ^18.0.0
        version: 18.3.1(react@18.3.1)


The packages/ui package has dependencies on react ^18.0.0 and react-dom ^18.0.0, which means it will install React 18.3.1. However, the consuming applications (apps/homework and apps/roadbook) are using React 19.2.4. This creates a version mismatch where the UI package is built with React 18 types and runtime while the applications are using React 19.

This inconsistency can lead to:

Multiple React instances being bundled

Runtime errors due to different React versions

Type definition conflicts

Unpredictable behavior when components from packages/ui are used in apps

The packages/ui dependencies should be updated to match the React version used by the consuming applications, or all applications should use the same React version as packages/ui.

Copilot · 2026-02-27T16:05:01Z

apps/homework/package.json

+    "react": "^19.2.4",
    "react-dom": "^18.2.0"


React 19.2.4 is being used with react-dom 18.3.1, which violates react-dom's peer dependency requirement of ^18.3.1. The react-dom package explicitly expects React 18, but React 19 is being provided. This creates a peer dependency mismatch that can cause runtime issues and unexpected behavior.

Additionally, Next.js 13.5.11 has a peer dependency on react ^18.2.0 and react-dom ^18.2.0, but is being used with React 19.2.4. Next.js 13 was not designed to work with React 19, and this version mismatch can lead to compatibility issues.

To fix this issue, either:

Upgrade react-dom to a version compatible with React 19 (if available), OR

Revert React to version 18.3.1 to maintain compatibility with the current ecosystem, OR

Upgrade Next.js to a version that supports React 19 (Next.js 15+ officially supports React 19)

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 27, 2026

blackboxprogramming requested a review from Copilot February 27, 2026 16:01

Copilot started reviewing on behalf of blackboxprogramming February 27, 2026 16:02 View session

Copilot AI reviewed Feb 27, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump react and @types/react#31

chore(deps): bump react and @types/react#31
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-d88693a43a

dependabot bot commented on behalf of github Feb 27, 2026

Uh oh!

chatgpt-codex-connector bot commented Feb 27, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Feb 27, 2026

Uh oh!

Copilot AI Feb 27, 2026

Uh oh!

Copilot AI Feb 27, 2026

Uh oh!

Copilot AI Feb 27, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 27, 2026

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

chatgpt-codex-connector bot commented Feb 27, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Feb 27, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant