chore(deps): Bump react from 19.2.3 to 19.2.4

[dependabot]

Bumps react from 19.2.3 to 19.2.4.

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
ozskr	Ready	Preview, Comment	Feb 14, 2026 5:17am

[daftpixie]

@dependabot rebase

[daftpixie]

Closing — root cause identified:

Error: Incompatible React versions: The "react" and "react-dom" packages must have the exact same version.
  - react:      19.2.4
  - react-dom:  19.2.3

Dependabot bumped react but not react-dom. React 19 enforces strict version matching between the two packages, causing 100% test suite failure (63/63 suites, 0 tests executed).

Resolution: Will group react and react-dom in Dependabot config so they're always bumped together. The security fix (DoS mitigations for Server Actions) will be picked up when react-dom 19.2.4 is also available and both are bumped simultaneously.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.