Bump React to 19.x stable (CVE-2025-55182) #2
Conversation
Co-authored-by: arhan.busam <arhan.busam@gmail.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
This PR is being reviewed by Cursor Bugbot
Details
You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.
To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.
| "react": "19.0.0-rc-66855b96-20241106", | ||
| "react-dom": "19.0.0-rc-66855b96-20241106" | ||
| "react": "^19.0.1", | ||
| "react-dom": "^19.0.1" |
There was a problem hiding this comment.
TypeScript type definitions not updated for React 19
Medium Severity
The React runtime dependencies were upgraded to version 19.x (^19.0.1), but @types/react and @types/react-dom remain at version ^18. These type packages provide TypeScript definitions, and React 19 has significant API changes from React 18. The @types/react@19.x packages exist and provide correct typings for React 19. Using mismatched type definitions can cause incorrect type checking, missing types for new React 19 APIs, and potential runtime surprises when the types don't match actual behavior.
Note
Dependencies
react/react-domfrom 19.0.0-rc to^19.0.1; lockfile updates includescheduler@^0.27.0.GitHub API client
getRequiredEnvandgetOctokitto validate env vars, normalizeGITHUB_PRIVATE_KEYnewlines, and lazily initialize a singleton client at runtime.octokit.request(...)usages withgetOctokit().request(...)across API methods.Written by Cursor Bugbot for commit f14dfb9. Configure here.