chore(deps): bump react dependency set

Merge the React dependency update after resolving current-main lockfile and generated manifest conflicts.\n\nValidation: GitHub PR checks build (ubuntu-latest), build (macos-latest), CodeQL, a11y, and visual passed before merge.\n\nCo-authored-by: Codex <noreply@openai.com>

Author: dependabot[bot]

FORJAMIE.md

@@ -328,6 +328,8 @@ See also: `~/.codex/instructions/Learnings.md`
 
 ### 2026-04-13
 
+- Synced the React security bump branch notes with the updated root overrides and lockfile inputs so the repo map reflects the current source-of-truth versions for `react` and `@types/react`.
+- Aligned `react-dom` back to the exact `react` patch version after CI surfaced a runtime mismatch, then regenerated the lockfile so the build lane and the documented source of truth stay in lockstep.
 - Added the PR #142 dependency bump map entry for the `hono` tooling/runtime update so the documented project state stays aligned with the current branch contents and repo guidance.
 
 ### 2026-03-22
@@ -379,4 +381,4 @@ open_prs: 0
 blockers: none
 next_milestone: ChatGPT widget integration
 next_milestone_date: 2026-04-01
-MACHINE_READABLE_END -->
+MACHINE_READABLE_END -->

package.json

@@ -154,9 +154,9 @@
     },
     "overrides": {
       "storybook": "10.2.10",
-      "react": "19.2.3",
-      "react-dom": "19.2.3",
-      "@types/react": "19.2.7",
+      "react": "19.2.5",
+      "react-dom": "19.2.5",
+      "@types/react": "19.2.14",
       "@types/react-dom": "19.2.3",
       "@modelcontextprotocol/sdk@<1.24.0": ">=1.24.0",
       "@modelcontextprotocol/sdk@<1.26.0": ">=1.26.0",

packages/astudio-icons/package.json

@@ -64,7 +64,7 @@
     "@svgr/plugin-jsx": "^8.1.0",
     "@svgr/plugin-svgo": "^8.1.0",
     "@types/node": "^25.2.0",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "tsx": "^4.7.0",
     "vitest": "^4.0.18"

packages/cloudflare-template/src/worker/widget-manifest.generated.ts

@@ -6,134 +6,134 @@
 export const widgetManifest = {
   "auth-demo": {
     name: "auth-demo",
-    uri: "auth-demo.b821b927",
-    hash: "b821b927",
+    uri: "auth-demo.1612c4c0",
+    hash: "1612c4c0",
     originalPath: "src/widgets/auth/auth-demo/index.html",
   },
   "past-orders": {
     name: "past-orders",
-    uri: "past-orders.29e88ff5",
-    hash: "29e88ff5",
+    uri: "past-orders.98787531",
+    hash: "98787531",
     originalPath: "src/widgets/auth/past-orders/index.html",
   },
   "search-spotlight": {
     name: "search-spotlight",
-    uri: "search-spotlight.954f6b46",
-    hash: "954f6b46",
+    uri: "search-spotlight.ddfd68bc",
+    hash: "ddfd68bc",
     originalPath: "src/widgets/auth/search-spotlight/index.html",
   },
   "chat-header": {
     name: "chat-header",
-    uri: "chat-header.c13ae8c4",
-    hash: "c13ae8c4",
+    uri: "chat-header.d7ec6415",
+    hash: "d7ec6415",
     originalPath: "src/widgets/chat/chat-header/index.html",
   },
   "chat-input": {
     name: "chat-input",
-    uri: "chat-input.151bc279",
-    hash: "151bc279",
+    uri: "chat-input.55abddaf",
+    hash: "55abddaf",
     originalPath: "src/widgets/chat/chat-input/index.html",
   },
   "chat-messages": {
     name: "chat-messages",
-    uri: "chat-messages.0831b825",
-    hash: "0831b825",
+    uri: "chat-messages.db2d39e3",
+    hash: "db2d39e3",
     originalPath: "src/widgets/chat/chat-messages/index.html",
   },
   "chat-sidebar": {
     name: "chat-sidebar",
-    uri: "chat-sidebar.5b74c8a7",
-    hash: "5b74c8a7",
+    uri: "chat-sidebar.78edca71",
+    hash: "78edca71",
     originalPath: "src/widgets/chat/chat-sidebar/index.html",
   },
   "chat-template": {
     name: "chat-template",
-    uri: "chat-template.20d828f1",
-    hash: "20d828f1",
+    uri: "chat-template.4715b021",
+    hash: "4715b021",
     originalPath: "src/widgets/chat/chat-template/index.html",
   },
   "chat-view": {
     name: "chat-view",
-    uri: "chat-view.f44b1c7a",
-    hash: "f44b1c7a",
+    uri: "chat-view.9ef39500",
+    hash: "9ef39500",
     originalPath: "src/widgets/chat/chat-view/index.html",
   },
   "compose-view": {
     name: "compose-view",
-    uri: "compose-view.db5afbdb",
-    hash: "db5afbdb",
+    uri: "compose-view.5d449771",
+    hash: "5d449771",
     originalPath: "src/widgets/chat/compose-view/index.html",
   },
   "shopping-cart": {
     name: "shopping-cart",
-    uri: "shopping-cart.775eb12a",
-    hash: "775eb12a",
+    uri: "shopping-cart.fdc41e91",
+    hash: "fdc41e91",
     originalPath: "src/widgets/commerce/shopping-cart/index.html",
   },
   "dashboard-widget": {
     name: "dashboard-widget",
-    uri: "dashboard-widget.36bd0e13",
-    hash: "36bd0e13",
+    uri: "dashboard-widget.c70f1cf3",
+    hash: "c70f1cf3",
     originalPath: "src/widgets/dashboard/dashboard-widget/index.html",
   },
   "json-render-demo": {
     name: "json-render-demo",
-    uri: "json-render-demo.c674f86e",
-    hash: "c674f86e",
+    uri: "json-render-demo.3654c43d",
+    hash: "3654c43d",
     originalPath: "src/widgets/demo/json-render-demo/index.html",
   },
   "kitchen-sink-lite": {
     name: "kitchen-sink-lite",
-    uri: "kitchen-sink-lite.762ebaad",
-    hash: "762ebaad",
+    uri: "kitchen-sink-lite.2c150d10",
+    hash: "2c150d10",
     originalPath: "src/widgets/demo/kitchen-sink-lite/index.html",
   },
   "pizzaz-carousel": {
     name: "pizzaz-carousel",
-    uri: "pizzaz-carousel.5eb2134a",
-    hash: "5eb2134a",
+    uri: "pizzaz-carousel.cfc709cf",
+    hash: "cfc709cf",
     originalPath: "src/widgets/pizzaz/pizzaz-carousel/index.html",
   },
   "pizzaz-gallery": {
     name: "pizzaz-gallery",
-    uri: "pizzaz-gallery.da8f5b0e",
-    hash: "da8f5b0e",
+    uri: "pizzaz-gallery.176b0822",
+    hash: "176b0822",
     originalPath: "src/widgets/pizzaz/pizzaz-gallery/index.html",
   },
   "pizzaz-map": {
     name: "pizzaz-map",
-    uri: "pizzaz-map.16c88cd2",
-    hash: "16c88cd2",
+    uri: "pizzaz-map.c2661336",
+    hash: "c2661336",
     originalPath: "src/widgets/pizzaz/pizzaz-map/index.html",
   },
   "pizzaz-markdown": {
     name: "pizzaz-markdown",
-    uri: "pizzaz-markdown.f16872c9",
-    hash: "f16872c9",
+    uri: "pizzaz-markdown.9159c817",
+    hash: "9159c817",
     originalPath: "src/widgets/pizzaz/pizzaz-markdown/index.html",
   },
   "pizzaz-shop": {
     name: "pizzaz-shop",
-    uri: "pizzaz-shop.6d2a246e",
-    hash: "6d2a246e",
+    uri: "pizzaz-shop.ba1892c0",
+    hash: "ba1892c0",
     originalPath: "src/widgets/pizzaz/pizzaz-shop/index.html",
   },
   "pizzaz-table": {
     name: "pizzaz-table",
-    uri: "pizzaz-table.b0c9e28e",
-    hash: "b0c9e28e",
+    uri: "pizzaz-table.deaea400",
+    hash: "deaea400",
     originalPath: "src/widgets/pizzaz/pizzaz-table/index.html",
   },
   "solar-system": {
     name: "solar-system",
-    uri: "solar-system.37e935b7",
-    hash: "37e935b7",
+    uri: "solar-system.c4650386",
+    hash: "c4650386",
     originalPath: "src/widgets/science/solar-system/index.html",
   },
   "search-results": {
     name: "search-results",
-    uri: "search-results.2c150a57",
-    hash: "2c150a57",
+    uri: "search-results.38f3bf97",
+    hash: "38f3bf97",
     originalPath: "src/widgets/search/search-results/index.html",
   },
 } as const;

packages/effects/package.json

@@ -50,7 +50,7 @@
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
     "@types/node": "^25.2.0",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.3",
     "typescript": "^5.7.2",

packages/json-render/package.json

@@ -40,7 +40,7 @@
   },
   "devDependencies": {
     "@types/node": "^25.2.0",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.3",
     "typescript": "^5.7.2",

packages/runtime/package.json

@@ -35,7 +35,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.0",
-    "@types/react": "^19.2.10",
+    "@types/react": "^19.2.14",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18"
   }

packages/tokens/package.json

@@ -55,17 +55,17 @@
     "access": "public"
   },
   "peerDependencies": {
-    "react": "^19.2.4"
+    "react": "^19.2.5"
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.0",
     "@testing-library/react": "^16.3.2",
     "@testing-library/jest-dom": "^6.6.6",
     "@types/node": "^25.2.0",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.14",
     "fast-check": "^3.15.1",
     "happy-dom": "^20.8.9",
-    "react": "^19.2.4",
+    "react": "^19.2.5",
     "tsx": "^4.7.0",
     "typescript": "^5.9.3",
     "vitest": "^4.0.18",

packages/ui/package.json

@@ -164,7 +164,7 @@
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
     "@types/node": "^25.2.0",
-    "@types/react": "^19.2.7",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^5.1.3",
     "axe-core": "^4.11.1",

packages/validation-prototype/package.json

@@ -7,11 +7,11 @@
     "analyze": "node ../../node_modules/vite/bin/vite.js build --mode analyze"
   },
   "dependencies": {
-    "react": "^19.2.4",
+    "react": "^19.2.5",
     "react-dom": "^19.2.4"
   },
   "devDependencies": {
-    "@types/react": "^19.2.10",
+    "@types/react": "^19.2.14",
     "@types/react-dom": "^19.0.0",
     "@vitejs/plugin-react": "^5.1.3",
     "vite": "^7.3.1",