chore(deps): bump react and @types/react by dependabot[bot] · Pull Request #1361 · ripple/explorer

dependabot · 2026-10-01T15:23:42Z

Bumps react and @types/react. These dependencies needed to be updated together.
Updates react from 18.3.1 to 19.3.1

Release notes

19.3.1 (October 14th, 2026)

React Server Components

Improve transport protocol (#37845 by @unstubbable and @eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

<ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@sebmarkbage, @jackpope, @gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)

Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@jackpope, @sebmarkbage, @eps1lon, @Dhakshin2007, @chirokas, @teamleaderleo, @fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@gnoff: #37143, #37241)

Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@gnoff #37193)

Notable changes

Enable Trusted Types API integration (@rickhanlonii #35816)

Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@acdlite #37290)

Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@hoxyq, @eps1lon: #37104, #37203, #37491)

All Changes

React

Fast Refresh Fixes

Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@sophiebits #36965)

Fix Fast Refresh so edits to a memo() comparison function take effect (@sophiebits #36964)

Fix Fast Refresh crash when an edit changes the kind of a component's type (@sophiebits #36963)

Unify hot reload type resolution for Fast Refresh (@sophiebits #36962)

Fix Fast Refresh to remount correctly when an edit changes the component kind (@sophiebits #36950)

Double invoke effects in StrictMode after Fast Refresh (@eps1lon #35962)

Performance Track Fixes

Prevent crash when accessing $$typeof in Performance Tracks (@eps1lon #35679)

Handle non-string function names in Performance Tracks (@eps1lon #35659)

Use minus (-) instead of en dash for removed props in Performance Tracks (@eps1lon #35649)

Handle arrays with bigints in deep objects in Performance Tracks (@eps1lon #35648)

Don't enumerate typed array props in Performance Tracks in DEV (@UditDewan #36913)

Bail out of diffing wide objects and arrays in Performance Tracks (@eps1lon #34742)

Clear potentially large performance measures in DEV (@hoxyq #34803)

Fix missing else branch for renders with no props change in Performance Tracks (@hoxyq #34837)

Activity Fixes

Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@sophiebits #36947)

Hide portal contents when an Activity is hidden (@acdlite #35091)

Prevent metadata hoisting in hidden <Activity> trees (@ronnakamoto #34983)

Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@acdlite #35074)

Don't unhide a node if a direct parent Offscreen is still hidden (@sebmarkbage #34821)

Don't show internal <Offscreen> component in error messages (@rickhanlonii #35763)

Warn in DEV when a component appears to have been unblocked by a conditional use() (@hoxyq, @eps1lon: #37104, #37203, #37491)

Render transitions independently instead of entangling them into a single render (@acdlite #37290)

Fix hang when updating a dehydrated boundary inside a hidden tree (@gaearon #37135)

Don't reacquire Host Singletons during dev effect validation (@gnoff #37113)

Only remove properties from Host Singletons on release (@gnoff #37112)

... (truncated)

Commits

61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
2dc7da7 [test] Bump Jest to 30.4 (#37382)
4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
dbc3750 Update required references to GitHub repo (#36752)
900ae09 [flow] Bump flow to v0.317.0 (#36701)
fbb1370 [flow] Bump flow to v0.307.1 (#36199)
56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
74568e8 [Flight] Transport AggregateErrors.errors (#36156)
e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 18.3.28 to 19.3.0

Commits

See full diff in compare view

ripple-code-reviewer

React-ReactDOM version mismatch causes runtime crashes - see inline.

ripple-code-reviewer · 2026-10-07T21:15:30Z

    "jest-environment-jsdom": "^30.3.0",
    "prop-types": "^15.8.1",
-    "react": "^18.3.1",
+    "react": "^19.3.0",


React 19 + ReactDOM 18 mismatch causes crashes. Update @types/react-dom to 19.3.0 and regenerate package-lock.json:

"react": "^19.3.0", "react-dom": "^19.3.0",

## High Level Overview of Change Quarterly batch dependency upgrade (2026-Q4). This PR consolidates the open Dependabot dependency PRs **and** applies any further upgrades needed to resolve the open Semgrep (DGE) supply-chain tickets that a package upgrade can fix. - **21** Dependabot PRs applied (Upgraded); **9** skipped (peer-dependency or Node-engine conflicts — see the table). - **0** Semgrep tickets needed an upgrade: the 4 new **Critical** axios tickets (DGE-8416–8419, `axios ≥ 1.20.0`) are already satisfied on `main` by the Q3 batch (No-op), and none are left open. - Twelve of the applied PRs are major bumps, eight of them production dependencies: `express` 5, `dotenv` 18, `i18next-browser-languagedetector` 8, `i18next-http-backend` 4, `react-helmet-async` 3, `react-error-boundary` 6, `vite-plugin-svgr` 5, `tldts` 7. > **Express 4 → 5 needed a server fix that CI does not catch — please review it specifically.** Under Express 5 the production server crashed on startup (`PathError: Missing parameter name at index 1: *`), because `path-to-regexp` 8 no longer accepts a bare `*` route. No Jest test loads `server/`, so `lint:ci`, `build`, `build-ts` and `test:ci` all passed regardless. Two lines in `server/index.js` were changed to the Express 5 syntax, and the server was started and probed in both production and development modes (see Test Plan). ### Context of Change Quarterly batch of the Dependabot PRs opened on 2026-10-01, plus the Semgrep tickets a package upgrade can fix. Direct dependency versions were bumped in `package.json`; `package-lock.json` was updated in place (never regenerated from scratch). No `overrides` or `resolutions` were added and no parent range was widened. ### Type of Change - [ ] Bug fix (non-breaking change which fixes an issue) - [ ] New feature (non-breaking change which adds functionality) - [x] Breaking change (fix or feature that would cause existing functionality to not work as expected) - [ ] Refactor (non-breaking change that only restructures code) - [ ] Tests (You added tests for code that already exists, or your new feature included in this PR) - [ ] Documentation Updates - [ ] Translation Updates - [ ] Release "Breaking change" is checked because production dependencies cross major versions (most notably `express` 5). User-facing behavior is unchanged. ### Codebase Modernization N/A — no file conversions. - [ ] Updated files to React Hooks - [ ] Updated files to TypeScript ## Before / After **`server/index.js`** — Express 5 route syntax (details in `code-changes.md`): ```js // before (Express 4) app.get('*', (_req, res) => { res.sendFile(path.join(__dirname, '/../build/index.html')) }) app.use('*', (req, res) => { /* 404 */ }) // after (Express 5) app.get('/{*splat}', (_req, res) => { res.sendFile(path.join(__dirname, '/../build/index.html')) }) app.use((req, res) => { /* 404 */ }) ``` `/{*splat}` keeps matching `/` itself, as `*` did; `app.use` with no path already matches every request. **Prettier 3.9 reformat** — six files re-wrapped by `npm run lint` (`--fix`), cosmetic only: `BasicInfoCard.test.tsx`, `AMMPool/utils.ts`, `ConfBalanceTooltipIcon.tsx`, `Notification/index.tsx`, `TransactionActionIcon.tsx`, `registerServiceWorker.js`. **Lockfile** — 86 packages changed version, 44 added, 46 removed; most of the churn is Express 5's own dependency tree (`router`, `path-to-regexp` 8, `serve-static` 2, …). All Semgrep tickets closed in Q3 were re-verified against this lockfile and remain satisfied (e.g. `path-to-regexp` is now 8.4.2 and `serve-static` 2.2.1, both outside their advisories' affected ranges). ## Test Plan Run locally on Node 22.14: - `npm run lint:ci` — passes - `npm run build` — passes - `npm run build-ts` — passes - `npm run test:ci` — 292/293 suites, 1688/1726 tests pass; coverage thresholds met. The only failure, `src/containers/shared/test/amendmentUtils.test.ts` (38 tests), calls the live VHS dev API (`vhs.dev.ripplex.io/v1/network/amendments/info`), which was returning **HTTP 503** during the run; it fails identically on an untouched `main` checkout. It is unrelated to this batch and should pass once the endpoint recovers (or be mocked in a follow-up). - **Express 5 server smoke test** (not covered by CI), with `node server`: - `NODE_ENV=production`: `/` → 200 `index.html`; `/transactions/ABC123` → 200 `index.html` (SPA fallback); `/api/v1/healthz` → 200 `success`. - `NODE_ENV=development`: `/` → 200 (static); `/transactions/ABC123` → 404 `{"error":"route not found"}`; `/api/v1/does-not-exist` → 404. ## Superseded Dependabot PRs | PR | Package | From | Asked for | Resolved | Status | MajorVersionUpgrade | |----|---------|------|-----------|----------|--------|---------------------| | #1375 | ts-jest | 29.4.9 | 29.4.14 | 29.4.14 | Upgraded | No | | #1374 | dotenv | 17.4.2 | 18.0.5 | 18.0.6 | Upgraded | Yes ([v18](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)) | | #1373 | @testing-library/react | 13.4.0 | 16.3.3 | 16.3.3 | Upgraded | Yes ([v14](https://github.com/testing-library/react-testing-library/releases/tag/v14.0.0), [v15](https://github.com/testing-library/react-testing-library/releases/tag/v15.0.0), [v16](https://github.com/testing-library/react-testing-library/releases/tag/v16.0.0)) | | #1372 | compression | 1.8.1 | 1.8.2 | 1.8.2 | Upgraded | No | | #1371 | stylelint-scss | 7.0.0 | 7.3.0 | 7.3.0 | Upgraded | No | | #1370 | @babel/preset-react | 7.28.5 | 8.0.1 | 7.28.5 | Skipped (peer dep conflict: requires `@babel/core ^8`; installed 7.29.7) | Yes ([v8](https://github.com/babel/babel/releases/tag/v8.0.0)) | | #1369 | express | 4.22.3 | 5.2.1 | 5.2.1 | Upgraded (with `server/index.js` route fix) | Yes ([v5](https://github.com/expressjs/express/releases/tag/v5.0.0), [migration guide](https://expressjs.com/en/guide/migrating-5.html)) | | #1368 | lint-staged | 15.5.2 | 17.6.0 | 15.5.2 | Skipped (engine conflict: requires Node ≥ 22.22.1; repo allows `>=22.0.0` with `engine-strict=true`) | Yes ([v16](https://github.com/lint-staged/lint-staged/releases/tag/v16.0.0), [v17](https://github.com/lint-staged/lint-staged/releases/tag/v17.0.0)) | | #1367 | @types/node | 22.19.17 | 26.6.4 | 22.19.17 | Skipped (runtime is Node 22; Node 26 types would allow APIs missing at runtime) | Yes ([types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)) | | #1366 | jest-environment-jsdom | 30.3.0 | 30.5.2 | 30.5.2 | Upgraded | No | | #1365 | i18next-browser-languagedetector | 7.2.2 | 8.2.1 | 8.2.1 | Upgraded | Yes ([v8](https://github.com/i18next/i18next-browser-languageDetector/blob/master/CHANGELOG.md)) | | #1364 | eslint-plugin-prettier | 5.5.5 | 5.5.6 | 5.5.6 | Upgraded | No | | #1363 | i18next-http-backend | 3.0.6 | 4.0.2 | 4.0.2 | Upgraded | Yes ([v4](https://github.com/i18next/i18next-http-backend/blob/master/CHANGELOG.md)) | | #1362 | @typescript-eslint/parser | 8.58.2 | 8.71.0 | 8.71.1 | Upgraded | No | | #1361 | react / @types/react | 18.3.1 / 18.3.28 | 19.3.0 / 19.3.0 | 18.3.1 / 18.3.28 | Skipped (peer dep conflict: `react-query@3.39.3`, the last v3, requires `react ≤ 18`) | Yes ([v19](https://github.com/facebook/react/releases/tag/v19.0.0), [types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react)) | | #1360 | react-helmet-async | 2.0.5 | 3.0.0 | 3.0.0 | Upgraded | Yes ([v3](https://github.com/staylor/react-helmet-async/releases/tag/v3.0.0)) | | #1359 | react-error-boundary | 4.1.2 | 6.1.6 | 6.1.6 | Upgraded | Yes ([v5](https://github.com/bvaughn/react-error-boundary/releases/tag/5.0.0), [v6](https://github.com/bvaughn/react-error-boundary/releases/tag/6.0.0)) | | #1358 | react-error-overlay | 6.0.11 | 6.1.0 | 6.1.0 | Upgraded | No | | #1357 | vite-plugin-environment | 1.1.3 | 1.1.4 | 1.1.3 | Skipped (peer dep conflict: requires `vite >= 8`; installed 7.3.6) | No | | #1356 | prettier | 3.6.2 | 3.9.9 | 3.9.9 | Upgraded | No | | #1355 | xrpl | 4.6.0 | 5.3.0 | 5.3.0 | Upgraded | Yes ([v5](https://github.com/XRPLF/xrpl.js/releases/tag/xrpl%405.0.0)) | | #1354 | react-router | 7.18.4 | 8.4.0 | 7.18.4 | Skipped (peer dep conflict: requires `react ≥ 19.2.7`, blocked by #1361; also Node ≥ 22.22) | Yes ([v8](https://github.com/remix-run/react-router/releases/tag/react-router%408.0.0)) | | #1353 | vite-plugin-svgr | 4.5.0 | 5.2.0 | 5.2.0 | Upgraded | Yes ([v5](https://github.com/pd4d10/vite-plugin-svgr/releases/tag/v5.0.0)) | | #1352 | @typescript-eslint/eslint-plugin | 8.58.2 | 8.71.0 | 8.71.1 | Upgraded | No | | #1351 | react-i18next | 15.4.1 | 17.0.15 | 15.4.1 | Skipped (peer dep conflict: requires `i18next ≥ 26.2.0`; installed 23.16.8) | Yes ([CHANGELOG](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)) | | #1350 | babel-jest | 29.7.0 | 30.5.2 | 30.5.2 | Upgraded | Yes ([v30](https://jestjs.io/blog/2025/06/04/jest-30)) | | #1349 | tldts | 6.1.86 | 7.4.16 | 7.4.16 | Upgraded | Yes ([v7](https://github.com/remusao/tldts/releases/tag/v7.0.0)) | | #1348 | eslint-import-resolver-typescript | 4.4.4 | 4.4.5 | 4.4.5 | Upgraded | No | | #1347 | @babel/preset-env | 7.29.2 | 8.0.6 | 7.29.2 | Skipped (peer dep conflict: requires `@babel/core ^8`; installed 7.29.7) | Yes ([v8](https://github.com/babel/babel/releases/tag/v8.0.0)) | | #1346 | eslint-plugin-react-hooks | 4.6.2 | 7.1.1 | 4.6.2 | Skipped (peer dep conflict: `eslint-config-airbnb@19.0.4`, the latest, requires `^4.3.0`) | Yes ([CHANGELOG](https://github.com/facebook/react/blob/main/packages/eslint-plugin-react-hooks/CHANGELOG.md)) | ## Semgrep tickets Out of scope (not package-upgrade-fixable; not addressed here): DGE-4837, DGE-4839, DGE-4840, DGE-7803, DGE-7812 (code findings); DGE-7802, DGE-7804 (config findings); DGE-4831, DGE-4834, DGE-4843, DGE-7794 (`ripple/explorer-deploy`). | Ticket | Package | From | Asked for | Resolved | Status | MajorVersionUpgrade | |--------|---------|------|-----------|----------|--------|---------------------| | [DGE-8416](https://ripplelabs.atlassian.net/browse/DGE-8416) | axios | 1.20.0 | ≥ 1.20.0 | 1.20.0 | No-op (already satisfied on main since the Q3 batch) | No | | [DGE-8417](https://ripplelabs.atlassian.net/browse/DGE-8417) | axios | 1.20.0 | ≥ 1.20.0 | 1.20.0 | No-op (already satisfied on main since the Q3 batch) | No | | [DGE-8418](https://ripplelabs.atlassian.net/browse/DGE-8418) | axios | 1.20.0 | ≥ 1.20.0 | 1.20.0 | No-op (already satisfied on main since the Q3 batch) | No | | [DGE-8419](https://ripplelabs.atlassian.net/browse/DGE-8419) | axios | 1.20.0 | ≥ 1.20.0 | 1.20.0 | No-op (already satisfied on main since the Q3 batch) | No | No ticket required an upgrade that a Dependabot PR did not already propose. ## Closing instructions After merging, run `/batch-deps-upgrade close` to close the superseded PRs and the resolved Semgrep tickets. It will close these **Upgraded** Dependabot PRs — #1375, #1374, #1373, #1372, #1371, #1369, #1366, #1365, #1364, #1363, #1362, #1360, #1359, #1358, #1356, #1355, #1353, #1352, #1350, #1349, #1348 — and these **No-op** tickets: DGE-8416, DGE-8417, DGE-8418, DGE-8419. The following PRs were **Skipped** and should remain open so Dependabot keeps rebasing them: #1370 (@babel/preset-react), #1368 (lint-staged), #1367 (@types/node), #1361 (react / @types/react), #1357 (vite-plugin-environment), #1354 (react-router), #1351 (react-i18next), #1347 (@babel/preset-env), #1346 (eslint-plugin-react-hooks). No Semgrep tickets stay open.

ripple-code-reviewer

React and react-dom major versions are mismatched — see inline.

ripple-code-reviewer · 2026-10-08T15:52:11Z

    "jest-environment-jsdom": "^30.5.2",
    "prop-types": "^15.8.1",
-    "react": "^18.3.1",
+    "react": "^19.3.0",


React and react-dom must use matching major versions. Update react-dom to ^19.3.0:

"react": "^19.3.0", "react-dom": "^19.3.0",

Bumps [react](https://github.com/react/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together. Updates `react` from 18.3.1 to 19.3.1 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.1/packages/react) Updates `@types/react` from 18.3.28 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-major - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

ripple-code-reviewer

Found 2 blocking issues — see inline.

ripple-code-reviewer · 2026-10-26T14:06:25Z

    "jest-environment-jsdom": "^30.5.2",
    "prop-types": "^15.8.1",
-    "react": "^18.3.1",
+    "react": "^19.3.1",


react and react-dom versions must match—react@19 with react-dom@18 breaks at render. Bump react-dom to ^19.x:

"react": "^19.3.1", "react-dom": "^19.3.1",

ripple-code-reviewer · 2026-10-26T14:06:25Z

    "@types/lodash": "^4.17.20",
    "@types/node": "^22.14.0",
-    "@types/react": "^18.3.28",
+    "@types/react": "^19.3.0",


@types/react-dom@18 with @types/react@19 causes TypeScript errors. Update @types/react-dom to ^19.x:

"@types/react": "^19.3.0", "@types/react-dom": "^19.3.0",

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 1, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f19880bf6 branch from d708a1e to df4d290 Compare October 7, 2026 21:13

ripple-code-reviewer Bot suggested changes Oct 7, 2026

View reviewed changes

pdp2121 mentioned this pull request Oct 8, 2026

chore (deps): q4 package upgrades #1377

Merged

1 of 10 tasks

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f19880bf6 branch from df4d290 to 3c37cbd Compare October 8, 2026 15:50

ripple-code-reviewer Bot suggested changes Oct 8, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-7f19880bf6 branch from 3c37cbd to 6bdd16f Compare October 26, 2026 14:04

ripple-code-reviewer Bot suggested changes Oct 26, 2026

View reviewed changes

Navigation Menu

Repository navigation

chore(deps): bump react and @types/react - #1361

chore(deps): bump react and @types/react#1361
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7f19880bf6

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading

Uh oh!

ripple-code-reviewer Bot left a comment

Uh oh!

ripple-code-reviewer Bot Oct 7, 2026

Uh oh!

ripple-code-reviewer Bot left a comment

Uh oh!

ripple-code-reviewer Bot Oct 8, 2026

Uh oh!

ripple-code-reviewer Bot left a comment

Uh oh!

ripple-code-reviewer Bot Oct 26, 2026

Uh oh!

ripple-code-reviewer Bot Oct 26, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

19.3.1 (October 14th, 2026)

React Server Components

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

Notable changes

All Changes

React

Uh oh!

ripple-code-reviewer Bot left a comment

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot Oct 7, 2026

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot left a comment

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot Oct 8, 2026

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot left a comment

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot Oct 26, 2026

Choose a reason for hiding this comment

Uh oh!

ripple-code-reviewer Bot Oct 26, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 1, 2026 •

edited

Loading