chore(sync packages): ensure react and react-dom remain in sync

[john-traas]

Add react and react-dom to a group to ensure dependabot updates them both in the same PR.

Adds a PR sync to ensure versions stay in sync.

Summary by CodeRabbit

• Chores
  • Grouped React-related packages for automated dependency updates, improving visibility and control over React stack upgrades.
  • Added a CI check that verifies React and React DOM versions match, blocking auto-merge if they differ to prevent runtime inconsistencies.
  • Relaxed React and React DOM dev dependency versions to allow automatic minor and patch updates within the 19.x line, reducing manual maintenance while staying current.

[coderabbitai]

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

Important

Review skipped

Auto incremental reviews are disabled on this repository.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

📝 Walkthrough

Walkthrough

Added a React update group to Dependabot, introduced a GitHub Actions job to verify React and React-DOM versions match and made automerge depend on it, and relaxed React/React-DOM devDependency pins in package.json from exact to caret ranges.

Changes

Cohort / File(s)	Summary of Changes
Dependabot configuration .github/dependabot.yml	Added npm update group "react" with patterns "react" and "react-com"; existing groups and ignore rules unchanged.
CI workflow .github/workflows/pr-checks.yml	Added job check-react-versions to compare React and React-DOM versions from package.json using jq; included this job in automerge needs.
Package manifest package.json	Updated devDependencies: react and react-dom from "19.1.0" to "^19.1.0".

Sequence Diagram(s)

sequenceDiagram
  participant Dev as Developer/PR
  participant GH as GitHub Actions
  participant Check as check-react-versions
  participant Other as lint/build/test/docs/autosquash
  participant Auto as automerge

  Dev->>GH: Open/Update PR
  GH->>Check: Run version consistency check
  GH->>Other: Run other jobs
  Check-->>GH: Pass/Fail
  Other-->>GH: Pass/Fail
  GH->>Auto: Proceed if all needs pass
  Auto-->>Dev: Auto-merge PR (if eligible)

Loading

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

✨ Finishing Touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch sync-react-and-react-dom

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

‼️ IMPORTANT
Auto-reply has been disabled for this repository in the CodeRabbit settings. The CodeRabbit bot will not respond to your replies unless it is explicitly tagged.

• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

Status, Documentation and Community

• Visit our Status Page to check the current availability of CodeRabbit.
• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[Copilot]

Pull Request Overview

This PR implements synchronization between React and React-DOM packages to prevent version mismatches during dependency updates. It ensures that dependabot updates both packages together and adds automated validation to catch any version discrepancies.

• Switches React and React-DOM from exact versions to caret ranges for better dependency management
• Adds a GitHub Actions workflow job to validate React and React-DOM versions match
• Configures dependabot to group React packages together for synchronized updates

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates React and React-DOM to use caret version ranges instead of exact versions
.github/workflows/pr-checks.yml	Adds validation job to ensure React and React-DOM versions match
.github/dependabot.yml	Configures React package grouping for synchronized dependabot updates

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[github-actions]

Documentation has been published to https://lundalogik.github.io/lime-elements/versions/PR-3645/

[coderabbitai]

Actionable comments posted: 3

📜 Review details

Configuration used: .coderabbit.yaml
Review profile: ASSERTIVE
Plan: Pro

💡 Knowledge Base configuration:

• MCP integration is disabled by default for public repositories
• Jira integration is disabled
• Linear integration is disabled

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 9d30dbf and 6c6222a.

📒 Files selected for processing (3)

• .github/dependabot.yml (1 hunks)
• .github/workflows/pr-checks.yml (1 hunks)
• package.json (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

• GitHub Check: Docs / Publish Docs
• GitHub Check: Build
• GitHub Check: Test

🔇 Additional comments (2)

package.json (1)

78-79: LGTM: loosened React/React-DOM ranges align with the sync check and update grouping.

Using caret ranges for both ensures minor/patch updates can roll together while the workflow enforces version parity.

.github/workflows/pr-checks.yml (1)

90-90: LGTM: automerge now depends on the React version sync check.

This enforces version parity before Dependabot PRs auto-merge.

[lime-opensource]

🎉 This PR is included in version 38.22.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀