Skip to content

Bump react and @types/react - #11

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7f19880bf6
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7f19880bf6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps react and @types/react. These dependencies needed to be updated together.
Updates react from 19.2.7 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits

Updates @types/react from 19.2.17 to 19.3.0

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f19880bf6 branch from 134ee3a to 0936b01 Compare September 15, 2026 20:31
Bumps [react](https://github.com/react/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together.

Updates `react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.17 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f19880bf6 branch from 0936b01 to d59a1a2 Compare September 15, 2026 20:57
Ke0xes added a commit that referenced this pull request Oct 27, 2026
)

* fix(server): Express 5 catch-all route so production start works

Signed-off-by: Kunal Hatode <kue@cisco.com>

* chore(deps): bump runtime, dev and CI dependencies; clear high/critical advisories

express 5.3.0, dotenv 18.0.7, react/react-dom 19.3.0, lucide-react 1.55.0, multer 2.5.0, vite 8.3.4, @vitejs/plugin-react 6.1.2, wait-on 9.5.1 (axios 1.21.0), concurrently 10.0.6 (shell-quote 1.12.0); actions/checkout v7, setup-node v7, dependency-review-action v5. TypeScript 7 deferred.

Supersedes Dependabot #1 #2 #4 #5 #11 #21 #23 #26 #27 #28 #29 #30.

Signed-off-by: Kunal Hatode <kue@cisco.com>

---------

Signed-off-by: Kunal Hatode <kue@cisco.com>
Co-authored-by: Kunal Hatode <kue@cisco.com>
@Ke0xes

Ke0xes commented Oct 27, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #31, which applied this update (with the rest of the Dependabot backlog) on top of current main, tested together. Closing.

@Ke0xes Ke0xes closed this Oct 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-7f19880bf6 branch October 27, 2026 13:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant