Skip to content

build(deps): bump the react group across 1 directory with 4 updates - #2438

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/react-a5afae3ba8
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/npm_and_yarn/react-a5afae3ba8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the react group with 4 updates in the / directory: react, @types/react, react-dom and @types/react-dom.

Updates react from 19.2.0 to 19.3.0

Release notes

Sourced from react's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates @types/react from 19.2.7 to 19.3.0

Commits

Updates react-dom from 19.2.0 to 19.3.0

Release notes

Sourced from react-dom's releases.

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 16, 2026
Bumps the react group with 4 updates in the / directory: [react](https://github.com/react/react/tree/HEAD/packages/react), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom).


Updates `react` from 19.2.0 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react)

Updates `@types/react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `react-dom` from 19.2.0 to 19.3.0
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom)

Updates `@types/react-dom` from 19.2.3 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `@types/react` from 19.2.7 to 19.3.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: react
- dependency-name: "@types/react"
  dependency-version: 19.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: react
- dependency-name: "@types/react-dom"
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react
- dependency-name: react
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react
- dependency-name: react-dom
  dependency-version: 19.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the react group with 4 updates build(deps): bump the react group across 1 directory with 4 updates Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/react-a5afae3ba8 branch from 7804fd4 to 8771b87 Compare October 16, 2026 07:23
@martastn martastn self-assigned this Oct 16, 2026
@martastn

Copy link
Copy Markdown
Contributor

Verdict: Safe to merge

Bump: react/react-dom 19.2.0 → 19.3.0, @types/react 19.2.7 → 19.3.0, @types/react-dom 19.2.3 → 19.3.0 (minor, direct); scheduler 0.27.0 → 0.28.0 (transitive via react-dom). Lockfile changes nothing else.
Changes:

  • 19.2.1–19.2.8 are RSC-only security fixes (react-server-dom-*, not installed). No advisories for react/react-dom 19.2.0.
  • 19.3: new opt-in APIs (ViewTransition, Fragment refs, browser()), independent transitions, resize batching, number inputs sync defaultValue while focused (#36980). @types/react now needs TS ≥ 5.6 (we have 5.8.3).
  • New publisher is legitimate: repo moved facebook/react → react/react, trusted publishing with SLSA provenance, lockfile integrity matches npm.

Usage in repo: whole UI (createRoot in src/index.tsx). No transitions/Activity/ViewTransition/use() in our code or any bundled lib. Only touch point: number inputs in RunSimulationForm.tsx.

Impact: none visible. The number input's value attribute now updates while typing instead of on blur; the visible value, error state and Start button match master at every step. Nothing reads that attribute.

Verified:

  • tsc ✅ · tests ✅ (28 unit + 9 E2E, same as master; ProjectMenu E2E flaky on both) · build ✅ (main.js +8.5 kB gzip, +0.5%; other chunks and CSS byte-identical)
  • Manual UI/functional diff vs master (pixel MD5 + DOM/style fingerprints, prod demo + dev): editor/add/select/edit, scene tree, export/import (byte-identical), examples, JSROOT results, scoring/settings, dialogs, tooltips, light/dark, wide/narrow. No differences found.

Fix (5f1abf7): clearing a number field in RunSimulationForm.tsx passed NaN as the input value (pre-existing on master). That caused React's "Received NaN for the value attribute" warning plus browser "NaN" cannot be parsed warnings, one more of them with 19.3. Both fields now render '' when the state is NaN. Validation is unchanged (state stays NaN, error frame shown). Verified: tsc ✅, no NaN console messages after clearing the field.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant