Skip to content

Conversation

@dannyvv
Copy link
Member

@dannyvv dannyvv commented Dec 5, 2025

Description

Bump react and react-dom int he repo and update the profiles so users will bump to prevent CVE in them.

Test plan

@dannyvv dannyvv changed the title Bump React Bump react & react-dom Dec 6, 2025
@dannyvv dannyvv enabled auto-merge (squash) December 6, 2025 05:17
Copy link
Member

@tido64 tido64 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This bump will cause runtime issues that we're currently not catching on CI. The React renderer is embedded with each React Native release. Bumping the package doesn't patch these bits. They're simply there so that we can point at source files when debugging code. If the React package is out of sync with what is embedded in React Native, the latter will fail on startup.

Meta will patch the embedded React renderer within this week. I'm going to block this PR until we can bump React Native.

See also https://github.com/facebook/react-native/blob/main/packages/react-native/Libraries/Renderer/README.md

Copy link
Collaborator

@JasonVMo JasonVMo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Revoking my approval given Tommy's comments.

@dannyvv
Copy link
Member Author

dannyvv commented Dec 11, 2025

Will leave the fix up to Tommy

@dannyvv dannyvv closed this Dec 11, 2025
auto-merge was automatically disabled December 11, 2025 21:35

Pull request was closed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants