[dependabot]

Bumps react-dom and @types/react-dom. These dependencies needed to be updated together.
Updates react-dom from 19.2.5 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

• Type hardening and performance improvements (@​eps1lon, @​unstubbable #36425)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @types/react-dom from 19.2.3 to 19.2.7

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
symphony-state	Ready	Preview	Sep 6, 2026 9:33pm UTC

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​react-dom@​19.2.7
	react@​19.2.8
	react-dom@​19.2.8

View full report

[cursor]

@dependabot rebase

[dependabot]

Sorry, only users with push access can use that command.

[cursor]

Geprüft von Gardener 1 – lokal grün, CI wartet auf Runner

Local run on Node v22.23.4 and npm 10.9.9. Head ff25f29 (lockfile: react-dom 19.2.5 → 19.2.8, @types/react-dom 19.2.3 → 19.2.7, and react 19.2.5 → 19.2.8 so the pair stays aligned). package.json ranges stay ^19.2.5 / ^19.2.3.

• npm ci — passed
• npm run lint — passed (eslint . --ext .ts,.tsx --max-warnings=0)
• npm run typecheck — passed (tsc -p tsconfig.json --noEmit)
• npm run test:ci — passed (3 suites, 7 tests)
• npm run build — passed (tsup)

Patch releases. React 19.2.6 restored FormData entries in Server Actions; 19.2.7/19.2.8 are RSC decoding and type-hardening fixes. This library does not use Server Actions. Tests render with React 19 and passed.

GitHub CI on this head did not run the test job: it failed in about 2 seconds with "The job was not started because your account is locked due to a billing issue" (ubuntu-latest). The branch is 1 commit behind main, which only changes the workflow to the org self-hosted runner group. I commented @dependabot rebase. That runner is offline, so CI cannot go green yet. Not approved.