[Snyk] Upgrade org.webjars.npm:react-dom from 16.10.2 to 19.2.7

[mhill-os]

Snyk has created this PR to upgrade org.webjars.npm:react-dom from 16.10.2 to 19.2.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 20 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This is a major upgrade from React v16 to v19, which includes multiple significant and breaking changes. A direct upgrade requires substantial code modifications and careful testing. It is highly recommended to upgrade incrementally if possible (16 -> 17 -> 18 -> 19) to isolate issues.

Key Breaking Changes:

React 17 (from v16):

• Event Delegation: Events are no longer attached at the document level but at the React root container. This can break manual event listeners attached to document that expect to catch React events.
• Event Pooling Removed: e.persist() is no longer necessary as SyntheticEvent objects are no longer pooled. This is a behavioral change but is unlikely to break most applications.
• Effect Cleanup Timing: The useEffect cleanup function now runs asynchronously, which can affect logic that relies on synchronous cleanup.

React 18 (from v17):

• New Root API: ReactDOM.render is deprecated and replaced by ReactDOM.createRoot. Using the old API will keep the app in React 17 compatibility mode and prevent the use of new concurrent features. This is a mandatory code change.
• Automatic Batching: State updates inside promises, setTimeout, and native event handlers are now automatically batched, reducing re-renders but potentially changing application behavior that relied on synchronous updates.
• Stricter Strict Mode: In development, components will be automatically unmounted and remounted to help find bugs related to effect cleanup.
• IE11 Support Dropped: Support for Internet Explorer 11 is removed.

React 19 (from v18):

• ref is now a prop: forwardRef is no longer needed to pass a ref to a component, simplifying component composition.
• Legacy APIs Removed: ReactDOM.render, ReactDOM.hydrate, and propTypes are fully removed.
• New Hooks and Actions: Introduces useActionState, useOptimistic, and use for managing form state, optimistic updates, and reading promises/context during render.

Recommendation: This upgrade spans three major versions with fundamental API changes. A direct upgrade is high-risk and will require significant refactoring. Plan for a staged migration, addressing the breaking changes for each major version sequentially. Utilize the provided codemods to automate some of the required changes, such as updating to the new Root API.

Sources:

• React 17 Release Notes: https://react.dev/blog/2020/10/20/react-v17
• React 18 Upgrade Guide: https://react.dev/blog/2022/03/08/react-18-upgrade-guide
• React 19 Upgrade Guide: https://react.dev/blog/2024/04/25/react-19-upgrade-guide

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.