Skip to content

[Snyk] Upgrade react-dom from 19.2.0 to 19.2.1#16

Open
512Andrew wants to merge 1 commit intomainfrom
snyk-upgrade-c1e01757b2e70228be6d344eef43c694
Open

[Snyk] Upgrade react-dom from 19.2.0 to 19.2.1#16
512Andrew wants to merge 1 commit intomainfrom
snyk-upgrade-c1e01757b2e70228be6d344eef43c694

Conversation

@512Andrew
Copy link
Owner

@512Andrew 512Andrew commented Dec 25, 2025

snyk-top-banner

Snyk has created this PR to upgrade react-dom from 19.2.0 to 19.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 22 days ago.

Release notes
Package name: react-dom
  • 19.2.1 - 2025-12-03
  • 19.2.0 - 2025-10-01

    Below is a list of all new features, APIs, and bug fixes.

    Read the React 19.2 release post for more information.

    New React Features

    • <Activity>: A new API to hide and restore the UI and internal state of its children.
    • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
    • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
    • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

    New React DOM Features

    • Added resume APIs for partial pre-rendering with Web Streams:
    • Added resume APIs for partial pre-rendering with Node Streams:
    • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

    Notable changes

    • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
    • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
    • Use underscore instead of : IDs generated by useId

    All Changes

    React

    React DOM

    React Server Components

    React Reconciler

    eslint-plugin-react-hooks@6.1.0

    Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

    • Breaking: Require Node.js 18 or newer. (@ michaelfaith in #32458)
    • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@ michaelfaith in #32457)
    • New Violations: Disallow calling use within try/catch blocks. (@ poteto in #34040)
    • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@ jbrown215 in #33544)
    • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@ Ayc0 in #34076)
    • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@ jbrown215) in #34497
from react-dom GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade react-dom from 19.2.0 to 19.2.1
fd4249f 
Snyk has created this PR to upgrade react-dom from 19.2.0 to 19.2.1.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/512andrew/project/b45551dc-87ea-432a-a201-d552543e3b1a?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings December 25, 2025 10:45
@netlify
Copy link

netlify bot commented Dec 25, 2025 •
edited
Loading

❌ Deploy Preview for melodious-squirrel-f66679 failed. Why did it fail? →

Name Link
🔨 Latest commit fd4249f
🔍 Latest deploy log https://app.netlify.com/projects/melodious-squirrel-f66679/deploys/694d15c46be7d100081afdd5

Copilot AI reviewed Dec 25, 2025
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades react-dom from 19.2.0 to 19.2.1 as part of a Snyk dependency update. However, the upgrade creates a version mismatch issue with the core React library.

Key Changes:

  • Updates react-dom from 19.2.0 to 19.2.1 in package.json
  • Updates package-lock.json with new version, integrity hash, and peer dependency requirements

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.

File Description
package.json Updates react-dom version to 19.2.1, but creates a version mismatch with react 19.2.0
package-lock.json Updates react-dom metadata and changes peer dependency requirement to ^19.2.1

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

package.json
@@ -15,7 +15,7 @@
"@react-three/fiber": "^9.4.0",
"next": "^16.0.10",
"react": "19.2.0",
Copy link

Copilot AI Dec 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Upgrading react-dom to 19.2.1 while keeping react at 19.2.0 creates a version mismatch. According to the package-lock.json changes, react-dom 19.2.1 has a peer dependency of "^19.2.1" for react, but the current react version is pinned at 19.2.0. This mismatch will likely cause a peer dependency warning or error during installation. Both react and react-dom should be upgraded together to 19.2.1 to maintain compatibility.

Suggested change
"react": "19.2.0",
"react": "19.2.1",

Copilot uses AI. Check for mistakes.
package.json
"next": "^16.0.10",
"react": "19.2.0",
"react-dom": "19.2.0",
"react-dom": "19.2.1",
Copy link

Copilot AI Dec 25, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The version format is inconsistent with the package-lock.json. In package.json line 18, react-dom should use the caret prefix (^19.2.1) to match the format used in package-lock.json line 15. Without the caret, the package will be pinned to exactly 19.2.1, while package-lock.json indicates a range starting from ^19.2.1. This inconsistency can cause confusion and unexpected behavior during dependency resolution.

Suggested change
"react-dom": "19.2.1",
"react-dom": "^19.2.1",

Copilot uses AI. Check for mistakes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@512Andrew @snyk-bot