Skip to content

chore: upgrade react-email to ^6.1.4#1206

Merged
brendan-kellam merged 3 commits into
mainfrom
brendan/upgrade-react-email-v6
May 15, 2026
Merged

chore: upgrade react-email to ^6.1.4#1206
brendan-kellam merged 3 commits into
mainfrom
brendan/upgrade-react-email-v6

Conversation

@brendan-kellam
Copy link
Copy Markdown
Contributor

@brendan-kellam brendan-kellam commented May 15, 2026

Summary

  • Upgrades react-email from ^5.2.10 to ^6.1.4 in @sourcebot/web.
  • react-email 6 bundles the preview server (and dropped its Next.js dependency), so @react-email/preview-server is removed from devDependencies along with the now-obsolete @react-email/preview-server/next resolution override. Net yarn.lock impact: -302 MiB.
  • Root esbuild resolution bumped ^0.27.3 -> ^0.28.0 to match what react-email 6 ships its binary at (otherwise: Host version "0.28.0" does not match binary version "0.27.7"). The original esbuild resolution was a dedup convenience (chore: deduplicate esbuild via resolution #1118), not a CVE pin, and the tree stays deduped at a single version.
  • Bumped satellite package ranges: @react-email/components ^1.0.2 -> ^1.0.12, @react-email/render ^2.0.0 -> ^2.0.8.

Test plan

  • yarn install succeeds and yarn.lock shows a single esbuild@0.28.0 resolution
  • yarn workspace @sourcebot/web build compiles successfully against the new versions (the pre-existing OrgRole.GUEST typecheck failure on main is unrelated)
  • yarn dev:emails boots the preview server: React Email 6.1.4 ... Ready in 0.1s
  • No regression in transactional emails (magic link, invite user, join request submitted/approved) when sent from a deployed environment

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated core dependencies including react-email (v6.1.4), esbuild, and related packages to latest versions.

Review Change Stack

Bump `react-email` from `^5.2.10` to `^6.1.4` in the web package.
react-email 6 bundles the preview server into the main package and
drops its Next.js dependency, so `@react-email/preview-server` and
the `@react-email/preview-server/next` resolution override are no
longer needed. Net `yarn.lock` impact is -302 MiB.

Also bumped the `esbuild` root resolution from `^0.27.3` to `^0.28.0`
since react-email 6 requires the matching host/binary, and bumped
the satellite ranges on `@react-email/components` (`^1.0.2` -> `^1.0.12`)
and `@react-email/render` (`^2.0.0` -> `^2.0.8`).

Smoke tested with `yarn workspace @sourcebot/web build` (Next.js
compile passes) and `yarn dev:emails` (preview server boots clean
at 6.1.4).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions

This comment has been minimized.

@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented May 15, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 10112f4d-85e2-4146-8750-b20fabea3a40

📥 Commits

Reviewing files that changed from the base of the PR and between 34d7f77 and d1ce0ea.

⛔ Files ignored due to path filters (1)
  • yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (3)
  • CHANGELOG.md
  • package.json
  • packages/web/package.json

Walkthrough

This PR upgrades the react-email ecosystem from v5 to v6.1.4 across root and web packages, bumps esbuild and brace-expansion versions in the root devDependencies, removes @react-email/preview-server/next (now bundled with v6), and documents the upgrade in CHANGELOG.

Changes

React-email and Build Tool Dependency Upgrades

Layer / File(s) Summary
Root package and changelog documentation
CHANGELOG.md, package.json
CHANGELOG entry added documenting the react-email upgrade to ^6.1.4. Root package.json devDependencies updated: esbuild bumped from ^0.27.3 to ^0.28.0, brace-expansion versions updated, and @react-email/preview-server/next entry removed.
Web package react-email v6 ecosystem upgrade
packages/web/package.json
@react-email/components and @react-email/render upgraded to newer versions in dependencies. @react-email/ui added to devDependencies and react-email bumped from ^5.2.10 to ^6.1.4 to adopt v6 major release.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

  • sourcebot-dev/sourcebot#1121: Main PR bumps react-email/@react-email/* to newer versions and removes the @react-email/preview-server/next dependency entry while retrieved PR adds Yarn resolutions for @react-email/preview-server/next, both modifying the same react-email-related package wiring.
  • sourcebot-dev/sourcebot#961: Both PRs adjust React Email-related dependencies in packages/web/package.json, with the main PR upgrading the broader react-email/@react-email/* set and the retrieved PR bumping @react-email/preview-server.

Suggested reviewers

  • msukkari
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: upgrading react-email to ^6.1.4, which is the primary objective evident from all three modified files (CHANGELOG.md, package.json, and packages/web/package.json).
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch brendan/upgrade-react-email-v6

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

brendan-kellam and others added 2 commits May 15, 2026 16:23
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Removed the mention of dropping the separate @react-email/preview-server devDependency in the changelog.
@brendan-kellam brendan-kellam merged commit 2de768d into main May 15, 2026
9 checks passed
@brendan-kellam brendan-kellam deleted the brendan/upgrade-react-email-v6 branch May 15, 2026 23:27
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 15, 2026

License Audit

⚠️ Status: PASS

Metric Count
Total packages 2067
Resolved (non-standard) 11
Unresolved 0
Strong copyleft 0
Weak copyleft 39

Weak Copyleft Packages (informational)

Package Version License
@img/sharp-libvips-darwin-arm64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-darwin-arm64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-darwin-x64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-arm 1.0.5 LGPL-3.0-or-later
@img/sharp-libvips-linux-arm 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-arm64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-ppc64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-riscv64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-s390x 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-x64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-linux-x64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-arm64 1.2.4 LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64 1.0.4 LGPL-3.0-or-later
@img/sharp-libvips-linuxmusl-x64 1.2.4 LGPL-3.0-or-later
@img/sharp-wasm32 0.33.5 Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-wasm32 0.34.5 Apache-2.0 AND LGPL-3.0-or-later AND MIT
@img/sharp-win32-arm64 0.34.5 Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32 0.33.5 Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-ia32 0.34.5 Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64 0.33.5 Apache-2.0 AND LGPL-3.0-or-later
@img/sharp-win32-x64 0.34.5 Apache-2.0 AND LGPL-3.0-or-later
axe-core 4.10.3 MPL-2.0
dompurify 3.4.0 (MPL-2.0 OR Apache-2.0)
lightningcss 1.32.0 MPL-2.0
lightningcss-android-arm64 1.32.0 MPL-2.0
lightningcss-darwin-arm64 1.32.0 MPL-2.0
lightningcss-darwin-x64 1.32.0 MPL-2.0
lightningcss-freebsd-x64 1.32.0 MPL-2.0
lightningcss-linux-arm-gnueabihf 1.32.0 MPL-2.0
lightningcss-linux-arm64-gnu 1.32.0 MPL-2.0
lightningcss-linux-arm64-musl 1.32.0 MPL-2.0
lightningcss-linux-x64-gnu 1.32.0 MPL-2.0
lightningcss-linux-x64-musl 1.32.0 MPL-2.0
lightningcss-win32-arm64-msvc 1.32.0 MPL-2.0
lightningcss-win32-x64-msvc 1.32.0 MPL-2.0
Resolved Packages (11)
Package Version Original Resolved Source
@react-grab/cli 0.1.23 UNKNOWN MIT LICENSE file inside the package tarball (MIT License, Copyright (c) 2025 Aiden Bai)
@react-grab/cli 0.1.29 UNKNOWN MIT LICENSE file inside the package tarball (MIT License, Copyright (c) 2025 Aiden Bai)
@react-grab/mcp 0.1.29 UNKNOWN MIT LICENSE file inside the package tarball (MIT License, Copyright (c) 2025 Aiden Bai)
codemirror-lang-elixir 4.0.0 UNKNOWN Apache-2.0 npm registry latest version metadata and GitHub repo livebook-dev/codemirror-lang-elixir LICENSE
element-source 0.0.3 UNKNOWN MIT LICENSE file inside the package tarball (MIT License, Copyright (c) 2026 Aiden Bai)
lezer-elixir 1.1.2 UNKNOWN Apache-2.0 npm registry latest version metadata and GitHub repo livebook-dev/lezer-elixir LICENSE
map-stream 0.1.0 UNKNOWN MIT npm registry latest version metadata and GitHub repo dominictarr/map-stream LICENSE
memorystream 0.3.1 UNKNOWN MIT GitHub repo JSBizon/node-memorystream LICENSE (SPDX MIT via GitHub license API)
pause-stream 0.0.11 ["MIT","Apache2"] (MIT OR Apache-2.0) License array in package metadata; dual-licensed MIT and Apache 2.0 per LICENSE file in GitHub repo dominictarr/pause-stream
posthog-js 1.369.0 SEE LICENSE IN LICENSE Apache-2.0 LICENSE file in GitHub repo PostHog/posthog-js (Apache License, Version 2.0)
valid-url 1.0.9 UNKNOWN MIT LICENSE file in GitHub repo ogt/valid-url (released under the MIT license)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant