Skip to content

chore(deps): bump react from 19.2.7 to 19.2.8 - #48

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-19.2.8
Closed

chore(deps): bump react from 19.2.7 to 19.2.8#48
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/react-19.2.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps react from 19.2.7 to 19.2.8.

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/react-19.2.8 branch from 487ecff to 3b9d9b5 Compare July 25, 2026 08:08
Bumps [react](https://github.com/react/react/tree/HEAD/packages/react) from 19.2.7 to 19.2.8.
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/react-19.2.8 branch from 3b9d9b5 to ea03415 Compare August 2, 2026 17:44
ByteMeBaby added a commit that referenced this pull request Aug 2, 2026
react-dom asserts exact version equality with react at module load and
throws rather than warning, and the guard is compiled into the development
client build that jsdom loads as well as every server build. react-dom
19.2.7 declares a peer of ^19.2.7, which 19.2.8 satisfies, so pnpm reports
no peer problem while the runtime contract is broken.

Dependabot #48 proposed react alone and its lockfile pins
react-dom@19.2.7(react@19.2.8), so merging it would have failed the jsdom
tests and broken SSR. The @types packages move along because
@types/react-dom peers on @types/react.

packages/ui keeps its react and react-dom peerDependencies at ^19.0.0. That
range states what the package supports, not what it was last built against,
and narrowing it would falsely drop 19.0 and 19.1.

- react 19.2.7 -> 19.2.8 (apps/web, packages/ui)
- react-dom 19.2.7 -> 19.2.8 (apps/web, packages/ui)
- @types/react 19.2.17 -> 19.2.18 (apps/web, packages/ui)
- @types/react-dom 19.2.3 -> 19.2.4 (apps/web, packages/ui)

Supersedes Dependabot #48.

Verified locally: the lockfile carries no 19.2.7 reference, and build, lint,
typecheck, and test all pass.
@ByteMeBaby

Copy link
Copy Markdown
Owner

Superseded by #52, which took react and react-dom to 19.2.8 together.

Closing by hand rather than waiting for the next Dependabot run, because this one should not be merged in the meantime. It bumps react alone and its lockfile pins react-dom@19.2.7(react@19.2.8). react-dom asserts exact version equality with react at module load and throws rather than warning, so merging this would fail the jsdom tests and break SSR.

@ByteMeBaby ByteMeBaby closed this Aug 2, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/react-19.2.8 branch August 2, 2026 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant