chore(deps)(deps): bump react and @types/react in /frontend#92
chore(deps)(deps): bump react and @types/react in /frontend#92dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together. Updates `react` from 19.2.6 to 19.2.7 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react) Updates `@types/react` from 19.2.15 to 19.2.16 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: "@types/react" dependency-version: 19.2.16 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
📝 WalkthroughWalkthroughFrontend React dependencies are updated to patch releases. The ChangesFrontend React Dependency Updates
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@frontend/package.json`:
- Around line 18-19: The package.json shows "react" set to ^19.2.7 while
"react-dom" remains ^19.2.6; update the "react-dom" dependency to ^19.2.7 to
match "react" (edit the "react-dom" entry shown in the diff), then
regenerate/update the lockfile so pnpm-lock.yaml resolves react-dom@19.2.7
(e.g., run pnpm install or pnpm up react-dom@19.2.7) to ensure runtime uses
19.2.7.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Pro Plus
Run ID: 8bb0f301-2c06-4925-9b18-30828d38d67c
⛔ Files ignored due to path filters (1)
frontend/pnpm-lock.yamlis excluded by!**/pnpm-lock.yaml
📒 Files selected for processing (1)
frontend/package.json
| "react": "^19.2.7", | ||
| "react-dom": "^19.2.6", |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Check if react-dom 19.2.7 is available on npm
npm view react-dom@19.2.7 version 2>/dev/null || echo "Version 19.2.7 not found"
# Check latest react-dom versions
npm view react-dom versions --json | jq '.[-5:]'
# Verify current react version
npm view react@19.2.7 versionRepository: hadleyrich/iscreami
Length of output: 265
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# Show the relevant deps in frontend/package.json
echo "== frontend/package.json =="
node -e "const p=require('./frontend/package.json'); console.log({react:p.dependencies?.react||p.devDependencies?.react, reactDom:p.dependencies?.['react-dom']||p.devDependencies?.['react-dom'], typesReact:p.devDependencies?.['`@types/react`']})"
# List likely lockfiles in frontend
echo "== Lockfiles in frontend =="
ls -1 frontend | rg -n 'package-lock\.json|yarn\.lock|pnpm-lock\.yaml|npm-shrinkwrap\.json' || true
# Grep resolved versions in lockfiles (if present)
for f in frontend/package-lock.json frontend/yarn.lock frontend/pnpm-lock.yaml frontend/npm-shrinkwrap.json; do
if [[ -f "$f" ]]; then
echo "== Searching $f =="
rg -n "react-dom@|react-dom:" "$f" | head -n 30 || true
rg -n "react@|react:" "$f" | head -n 30 || true
fi
doneRepository: hadleyrich/iscreami
Length of output: 2669
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "== package-lock.json: first react-dom occurrences =="
rg -n "react-dom" frontend/package-lock.json | head -n 40 || true
echo "== pnpm-lock.yaml: react-dom resolved version(s) =="
rg -n "react-dom@19\.|react-dom:" frontend/pnpm-lock.yaml | head -n 80 || true
echo "== pnpm-lock.yaml: `@types/react-dom` occurrences =="
rg -n "`@types/react-dom`" frontend/pnpm-lock.yaml | head -n 60 || trueRepository: hadleyrich/iscreami
Length of output: 1831
Update react-dom to match react (19.2.7)
frontend/package.json bumps react to ^19.2.7, but react-dom is left at ^19.2.6, and frontend/pnpm-lock.yaml still resolves to react-dom@19.2.6(react@19.2.7), so the runtime dependency won’t pick up the 19.2.7 change your PR calls out. react-dom@19.2.7 exists on npm—align react-dom (and the lockfile) to 19.2.7.
📦 Proposed fix to align react-dom version
"react": "^19.2.7",
- "react-dom": "^19.2.6",
+ "react-dom": "^19.2.7",
"react-router-dom": "^7.16.0",📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
| "react": "^19.2.7", | |
| "react-dom": "^19.2.6", | |
| "react": "^19.2.7", | |
| "react-dom": "^19.2.7", |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@frontend/package.json` around lines 18 - 19, The package.json shows "react"
set to ^19.2.7 while "react-dom" remains ^19.2.6; update the "react-dom"
dependency to ^19.2.7 to match "react" (edit the "react-dom" entry shown in the
diff), then regenerate/update the lockfile so pnpm-lock.yaml resolves
react-dom@19.2.7 (e.g., run pnpm install or pnpm up react-dom@19.2.7) to ensure
runtime uses 19.2.7.
Bumps react and @types/react. These dependencies needed to be updated together.
Updates
reactfrom 19.2.6 to 19.2.7Release notes
Sourced from react's releases.
Commits
6117d7cVersion 19.2.7 (#36591)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
@types/reactfrom 19.2.15 to 19.2.16Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit