Skip to content

chore(deps): bump react-dom and @types/react-dom in /frontend - #416

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/multi-2a6546692b
Open

chore(deps): bump react-dom and @types/react-dom in /frontend#416
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/frontend/multi-2a6546692b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 13, 2026

Copy link
Copy Markdown
Contributor

Bumps react-dom and @types/react-dom. These dependencies needed to be updated together.
Updates react-dom from 18.3.1 to 19.2.5

Release notes

Sourced from react-dom's releases.

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits

Updates @types/react-dom from 18.3.7 to 19.2.3

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Summary by CodeRabbit

  • Chores
    • Updated React DOM and related type definitions to the latest compatible versions.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Apr 13, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: automated, frontend. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@github-actions

Copy link
Copy Markdown

⚠️ Major version update - Manual review required

This is a major version update that may contain breaking changes.
Please review the changelog and test thoroughly before merging.

Dependency: react-dom, @types/react-dom

Once reviewed and tested, manually approve and merge this PR.

@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

Commit: aa04f7e

Check Status
Frontend (npm audit) ❌ FAILED
Backend (pip-audit) ✅ PASSED
Filesystem (Trivy) ✅ PASSED

📊 See workflow artifacts for detailed reports.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-2a6546692b branch from 5cee222 to 359f739 Compare April 13, 2026 08:33
@github-actions

Copy link
Copy Markdown

⚠️ Major version update - Manual review required

This is a major version update that may contain breaking changes.
Please review the changelog and test thoroughly before merging.

Dependency: react-dom, @types/react-dom

Once reviewed and tested, manually approve and merge this PR.

@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

Commit: 2d5d4de

Check Status
Frontend (npm audit) ❌ FAILED
Backend (pip-audit) ✅ PASSED
Filesystem (Trivy) ✅ PASSED

📊 See workflow artifacts for detailed reports.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-2a6546692b branch from 359f739 to 9ad7495 Compare April 13, 2026 09:05
@github-actions

Copy link
Copy Markdown

⚠️ Major version update - Manual review required

This is a major version update that may contain breaking changes.
Please review the changelog and test thoroughly before merging.

Dependency: react-dom, @types/react-dom

Once reviewed and tested, manually approve and merge this PR.

@github-actions

Copy link
Copy Markdown

🔒 Security Scan Results

Commit: 5f0e8c6

Check Status
Frontend (npm audit) ❌ FAILED
Backend (pip-audit) ✅ PASSED
Filesystem (Trivy) ✅ PASSED

📊 See workflow artifacts for detailed reports.

Bumps [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom). These dependencies needed to be updated together.

Updates `react-dom` from 18.3.1 to 19.2.5
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.5/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.2.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: react-dom
  dependency-version: 19.2.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/multi-2a6546692b branch from 9ad7495 to ea04c8b Compare May 5, 2026 06:03
@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown

⚠️ Major version update - Manual review required

This is a major version update that may contain breaking changes.
Please review the changelog and test thoroughly before merging.

Dependency: @types/react-dom, react-dom

Once reviewed and tested, manually approve and merge this PR.

@github-actions

github-actions Bot commented May 5, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

Commit: 73a9c03

Check Status
Frontend (npm audit) ❌ FAILED
Backend (pip-audit) ✅ PASSED
Filesystem (Trivy) ✅ PASSED

📊 See workflow artifacts for detailed reports.

@coderabbitai

coderabbitai Bot commented Jun 4, 2026

Copy link
Copy Markdown

Review Change Stack

📝 Walkthrough

Walkthrough

Frontend dependencies updated: @types/react-dom bumped from ^18.2.0 to ^19.2.3 and react-dom upgraded from ^18.2.0 to ^19.2.5 in frontend/package.json.

Changes

React DOM Upgrade

Layer / File(s) Summary
React DOM version upgrades
frontend/package.json
Both @types/react-dom (types) and react-dom (runtime) are upgraded to v19 in a single coordinated dependency bump.

Estimated Code Review Effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

A rabbit hops with glee so bright, ✨
React DOM now gleams in v19 light!
From eighteen's nest to nineteen's door,
Types and runtime, paired and more. 🐰

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and specifically describes the main change: bumping two React-related dependencies (react-dom and @types/react-dom) in the frontend directory.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/frontend/multi-2a6546692b

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@frontend/package.json`:
- Line 18: Update frontend package dependencies to resolve the React/ReactDOM
major-version mismatch: in frontend/package.json bump "react" to ^19.2.5 (or
match react-dom's 19.2.x) and bump "`@types/react`" to ^19.2.0 so they align with
"react-dom" and "`@types/react-dom`" (keep `@types/react-dom`@19.2.3 or upgrade
consistently). Ensure package.json entries for "react", "react-dom",
"`@types/react`", and "`@types/react-dom`" use matching 19.2.x ranges and then run
install/build (since frontend/src/main.tsx uses react-dom/client createRoot).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 88856a0c-d330-4a16-ac06-76843fbfe799

📥 Commits

Reviewing files that changed from the base of the PR and between 921292d and 851c22d.

⛔ Files ignored due to path filters (1)
  • frontend/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • frontend/package.json

Comment thread frontend/package.json
"@types/node": "^25.6.0",
"@types/react": "^18.2.0",
"@types/react-dom": "^18.2.0",
"@types/react-dom": "^19.2.3",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

For react-dom@19.2.5, what is the required peer dependency range for react? For @types/react-dom@19.2.3, which @types/react major is expected?

💡 Result:

For react-dom@19.2.5, the required peer dependency range for react is ^19.2.5 [1]. For @types/react-dom@19.2.3, the expected peer dependency for @types/react is ^19.2.0 [2][3].

Citations:


🏁 Script executed:

#!/bin/bash
set -euo pipefail
nl -ba frontend/package.json | sed -n '1,80p'

Repository: karanhudia/borg-ui

Length of output: 105


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Show top portion with line numbers using cat -n (nl not available)
cat -n frontend/package.json | sed -n '1,120p'

Repository: karanhudia/borg-ui

Length of output: 4194


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Find where react-dom/client is imported
rg -n "react-dom/client" frontend/src || true

# Show main.tsx for context (if it exists)
if [ -f frontend/src/main.tsx ]; then
  cat -n frontend/src/main.tsx | sed -n '1,120p'
fi

Repository: karanhudia/borg-ui

Length of output: 2027


Fix React/ReactDOM major-version mismatch in frontend/package.json.

react-dom@19.2.5 requires a react peer of ^19.2.5, and @types/react-dom@19.2.3 expects @types/react of ^19.2.0, but the repo currently keeps react and @types/react on ^18.2.0. This conflicts with the app entrypoint that uses react-dom/client + createRoot in frontend/src/main.tsx.

Update react to ^19.2.5 (or the same 19.2.x as react-dom) and @types/react to ^19.2.0 to align majors.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@frontend/package.json` at line 18, Update frontend package dependencies to
resolve the React/ReactDOM major-version mismatch: in frontend/package.json bump
"react" to ^19.2.5 (or match react-dom's 19.2.x) and bump "`@types/react`" to
^19.2.0 so they align with "react-dom" and "`@types/react-dom`" (keep
`@types/react-dom`@19.2.3 or upgrade consistently). Ensure package.json entries
for "react", "react-dom", "`@types/react`", and "`@types/react-dom`" use matching
19.2.x ranges and then run install/build (since frontend/src/main.tsx uses
react-dom/client createRoot).

@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

🔒 Security Scan Results

Commit: 243ac1f

Check Status
Frontend (npm audit) ❌ FAILED
Backend (pip-audit) ✅ PASSED
Filesystem (Trivy) ✅ PASSED

📊 See workflow artifacts for detailed reports.

@github-actions

github-actions Bot commented Jun 4, 2026

Copy link
Copy Markdown

Coverage report

This PR does not seem to contain any modification to coverable code.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file major-update needs-review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant