Skip to content

[Snyk] Upgrade react from 19.2.0 to 19.2.1 #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
512Andrew wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade react from 19.2.0 to 19.2.1 #15

512Andrew wants to merge 1 commit into from
+5 −5

Conversation

@512Andrew
Copy link
Owner

@512Andrew 512Andrew commented Dec 25, 2025

snyk-top-banner

Snyk has created this PR to upgrade react from 19.2.0 to 19.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 22 days ago.

Release notes
Package name: react
  • 19.2.1 - 2025-12-03
  • 19.2.0 - 2025-10-01

    Below is a list of all new features, APIs, and bug fixes.

    Read the React 19.2 release post for more information.

    New React Features

    • <Activity>: A new API to hide and restore the UI and internal state of its children.
    • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
    • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
    • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

    New React DOM Features

    • Added resume APIs for partial pre-rendering with Web Streams:
    • Added resume APIs for partial pre-rendering with Node Streams:
    • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

    Notable changes

    • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
    • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
    • Use underscore instead of : IDs generated by useId

    All Changes

    React

    React DOM

    React Server Components

    React Reconciler

    eslint-plugin-react-hooks@6.1.0

    Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

    • Breaking: Require Node.js 18 or newer. (@ michaelfaith in #32458)
    • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@ michaelfaith in #32457)
    • New Violations: Disallow calling use within try/catch blocks. (@ poteto in #34040)
    • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@ jbrown215 in #33544)
    • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@ Ayc0 in #34076)
    • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@ jbrown215) in #34497
from react GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade react from 19.2.0 to 19.2.1
6f6ce3c 
Snyk has created this PR to upgrade react from 19.2.0 to 19.2.1.

See this package in npm:
react

See this project in Snyk:
https://app.snyk.io/org/512andrew/project/b45551dc-87ea-432a-a201-d552543e3b1a?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings December 25, 2025 10:45
@netlify
Copy link

netlify bot commented Dec 25, 2025 •
edited
Loading

❌ Deploy Preview for melodious-squirrel-f66679 failed. Why did it fail? →

Name Link
🔨 Latest commit 6f6ce3c
🔍 Latest deploy log https://app.netlify.com/projects/melodious-squirrel-f66679/deploys/694d15c169cab10008b8f872

Copilot AI reviewed Dec 25, 2025
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the React library from version 19.2.0 to 19.2.1, a minor patch release automated by Snyk. The upgrade aims to keep dependencies up-to-date for easier vulnerability management and access to bug fixes included in React 19.2.1.

Key changes:

  • Updates React from 19.2.0 to 19.2.1 in package.json and package-lock.json
  • Note: react-dom remains at 19.2.0 and should be upgraded as well

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File Description
package.json Updates react dependency version specification to 19.2.1
package-lock.json Updates resolved react package version, URL, and integrity hash to 19.2.1

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

package.json
"@react-three/fiber": "^9.4.0",
"next": "^16.0.10",
"react": "19.2.0",
"react": "19.2.1",
Copy link

Copilot AI Dec 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version specification should use a caret (^) to match the pattern used for other dependencies in this file and to be consistent with the package-lock.json entry. Change "19.2.1" to "^19.2.1".

Suggested change
"react": "19.2.1",
"react": "^19.2.1",

Copilot uses AI. Check for mistakes.
package.json
"next": "^16.0.10",
"react": "19.2.0",
"react": "19.2.1",
"react-dom": "19.2.0",
Copy link

Copilot AI Dec 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

React and react-dom versions should be kept in sync. While react is being upgraded to 19.2.1, react-dom remains at 19.2.0. Consider upgrading react-dom to 19.2.1 in the same PR to maintain version consistency and avoid potential compatibility issues.

Suggested change
"react-dom": "19.2.0",
"react-dom": "19.2.1",

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@512Andrew @snyk-bot