Skip to content

build(deps): bump react-dom and @types/react-dom in /web - #52

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/multi-de36fa8f59
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/multi-de36fa8f59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps react-dom and @types/react-dom. These dependencies needed to be updated together.
Updates react-dom from 18.3.1 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits
  • f4e439e [Fizz] Add nonce to rendered import maps (#37339)
  • 21c89c9 [DOM] Clean up Fragment listeners on signal abort (#37457)
  • 065bc84 [DOM] Unobserve fragment IntersectionObserver targets after exit (#37408)
  • ff7445e [DOM] Update HTML parser rules for new select parser (#34804)
  • 2dc7da7 [test] Bump Jest to 30.4 (#37382)
  • 29d9d31 [DOM] Copy source onto the synthetic toggle event (#37389)
  • 269bd40 [test] Remove the custom toThrow override for legacy V8 error messages (#37...
  • a112448 [DOM] Treat omitted Fragment Event listener options same as capture: false ...
  • 3d05080 [Fizz] Construct the render lifetime controller only when it is needed (#37357)
  • 77ed3f5 [Flight/Fizz] Stop the caller's signal from retaining a finished render (#37315)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @types/react-dom from 18.3.7 to 19.3.0

Commits

@dependabot dependabot Bot added the dependencies Dependency updates label Oct 5, 2026
@dependabot
dependabot Bot requested a review from Sulaiman-Dauda as a code owner October 5, 2026 03:56
@dependabot dependabot Bot added the dependencies Dependency updates label Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/multi-de36fa8f59 branch from 1c80c6f to 89e68d3 Compare October 6, 2026 14:08
Bumps [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom). These dependencies needed to be updated together.

Updates `react-dom` from 18.3.1 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 18.3.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

---
updated-dependencies:
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/web/multi-de36fa8f59 branch from 89e68d3 to d562246 Compare October 6, 2026 14:10
Sulaiman-Dauda added a commit that referenced this pull request Oct 6, 2026
* Move the frontend to React 19, Vite 8 and React Router 8

Dependabot raised these as separate PRs that cannot pass alone (#49, #50,
#52): react-dom 19 needs @types/react 19 in step, @vitejs/plugin-react 6
needs Vite 8, and React Router 8 needs React 19.2.7 or later. They move
together here (#41).

- react, react-dom, @types/react and @types/react-dom 18 to 19.3
- vite 6.4 to 8.3 and @vitejs/plugin-react 4 to 6
- react-router 7.18 to 8.4

The only source change is the type of useModalFocus's ref. React 19 types
useRef(null) as RefObject<T | null>, and the hook already handled a null
element.

The lockfile drops Babel, Rollup and esbuild for Rolldown and Lightning
CSS, adds no package with an install script, and moves source-map-js to
1.2.2, which closes Dependabot alert 7. The libc markers on the Linux
native packages are kept, so npm ci installs only the glibc builds.

Fixes #41

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* Keep licence headers in the built bundle, and ask contributors for Node 22.22

Vite 8 minifies with Rolldown and Lightning CSS, which drop the @license
comments esbuild kept. The release binary embeds web/dist, so it would
have shipped React, React Router and xterm without the notices their MIT
licences require. Rolldown's comments.legal option keeps them. xterm's
notice in its stylesheet still goes, but the same notice ships in its
JavaScript, as it did before.

React Router 8 needs Node 22.22 or later, so CONTRIBUTING.md now says so.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>
@Sulaiman-Dauda

Copy link
Copy Markdown
Owner

Superseded by #58, which moves React, Vite and React Router together so the peer dependencies line up.

@dependabot @github

dependabot Bot commented on behalf of github Oct 6, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/web/multi-de36fa8f59 branch October 6, 2026 15:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant