Skip to content

[Snyk] Upgrade react-dom from 19.1.0 to 19.2.1#118

Open
tleyden wants to merge 1 commit intomainfrom
snyk-upgrade-dff0c6e2bf77285e47ee393458064bc2
Open

[Snyk] Upgrade react-dom from 19.1.0 to 19.2.1#118
tleyden wants to merge 1 commit intomainfrom
snyk-upgrade-dff0c6e2bf77285e47ee393458064bc2

Conversation

@tleyden
Copy link
Contributor

@tleyden tleyden commented Dec 28, 2025

snyk-top-banner

Snyk has created this PR to upgrade react-dom from 19.1.0 to 19.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 145 versions ahead of your current version.

  • The recommended version was released 25 days ago.

Release notes
Package name: react-dom
  • 19.2.1 - 2025-12-03
  • 19.2.0 - 2025-10-01

    Below is a list of all new features, APIs, and bug fixes.

    Read the React 19.2 release post for more information.

    New React Features

    • <Activity>: A new API to hide and restore the UI and internal state of its children.
    • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
    • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
    • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

    New React DOM Features

    • Added resume APIs for partial pre-rendering with Web Streams:
    • Added resume APIs for partial pre-rendering with Node Streams:
    • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

    Notable changes

    • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
    • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
    • Use underscore instead of : IDs generated by useId

    All Changes

    React

    React DOM

    React Server Components

    React Reconciler

    eslint-plugin-react-hooks@6.1.0

    Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.

    • Breaking: Require Node.js 18 or newer. (@ michaelfaith in #32458)
    • Breaking: Flat config is now the default recommended preset. Legacy config moved to recommended-legacy. (@ michaelfaith in #32457)
    • New Violations: Disallow calling use within try/catch blocks. (@ poteto in #34040)
    • New Violations: Disallow calling useEffectEvent functions in arbitrary closures. (@ jbrown215 in #33544)
    • Handle React.useEffect in addition to useEffect in rules-of-hooks. (@ Ayc0 in #34076)
    • Added react-hooks settings config option that to accept additionalEffectHooks that are used across exhaustive-deps and rules-of-hooks rules. (@ jbrown215) in #34497
  • 19.2.0-canary-fa3feba6-20250623 - 2025-06-23
  • 19.2.0-canary-f9ae0a4c-20250527 - 2025-05-27
  • 19.2.0-canary-f7396427-20250501 - 2025-05-02
  • 19.2.0-canary-f508edc8-20250818 - 2025-08-18
  • 19.2.0-canary-f3a80361-20250911 - 2025-09-11
  • 19.2.0-canary-f1e70b5e-20250811 - 2025-08-11
  • 19.2.0-canary-f1222f76-20250812 - 2025-08-13
  • 19.2.0-canary-ef8b6fa2-20250702 - 2025-07-03
  • 19.2.0-canary-ef889445-20250930 - 2025-09-30
  • 19.2.0-canary-edac0dde-20250723 - 2025-07-23
  • 19.2.0-canary-eaee5308-20250728 - 2025-07-28
  • 19.2.0-canary-ea05b750-20250408 - 2025-04-09
  • 19.2.0-canary-e9db3cc2-20250501 - 2025-05-01
  • 19.2.0-canary-e9638c33-20250721 - 2025-07-21
  • 19.2.0-canary-e6dc25da-20250709 - 2025-07-09
  • 19.2.0-canary-e5dd82a7-20250401 - 2025-04-01
  • 19.2.0-canary-e2332183-20250924 - 2025-09-24
  • 19.2.0-canary-dffacc7b-20250717 - 2025-07-17
  • 19.2.0-canary-df38ac9a-20250926 - 2025-09-26
  • 19.2.0-canary-de5a1b20-20250905 - 2025-09-05
  • 19.2.0-canary-d92056ef-20250627 - 2025-06-27
  • 19.2.0-canary-d85f86cf-20250514 - 2025-05-14
  • 19.2.0-canary-d85ec5f5-20250716 - 2025-07-16
  • 19.2.0-canary-d415fd3e-20250919 - 2025-09-19
  • 19.2.0-canary-d15d7fd7-20250929 - 2025-09-29
  • 19.2.0-canary-cee7939b-20250625 - 2025-06-25
  • 19.2.0-canary-c498bfce-20250426 - 2025-04-28
  • 19.2.0-canary-c4676e72-20250520 - 2025-05-20
  • 19.2.0-canary-c44e4a25-20250409 - 2025-04-10
  • 19.2.0-canary-c260b38d-20250731 - 2025-07-31
  • 19.2.0-canary-c129c242-20250505 - 2025-05-05
  • 19.2.0-canary-c0464aed-20250523 - 2025-05-26
  • 19.2.0-canary-befc1246-20250708 - 2025-07-08
  • 19.2.0-canary-be11cb5c-20250804 - 2025-08-04
  • 19.2.0-canary-bdb4a96f-20250801 - 2025-08-01
  • 19.2.0-canary-bc6184dd-20250417 - 2025-04-18
  • 19.2.0-canary-bbc13fa1-20250624 - 2025-06-24
  • 19.2.0-canary-bb6f0c8d-20250901 - 2025-09-01
  • 19.2.0-canary-b9cfa0d3-20250505 - 2025-05-05
  • 19.2.0-canary-b9a04536-20250904 - 2025-09-04
  • 19.2.0-canary-b94603b9-20250513 - 2025-05-13
  • 19.2.0-canary-b7e2de63-20250611 - 2025-06-11
  • 19.2.0-canary-b6c0aa88-20250609 - 2025-06-09
  • 19.2.0-canary-b4477d38-20250605 - 2025-06-05
  • 19.2.0-canary-b1b0955f-20250901 - 2025-09-01
  • 19.2.0-canary-b10cb4c0-20250403 - 2025-04-03
  • 19.2.0-canary-b0c1dc01-20250925 - 2025-09-25
  • 19.2.0-canary-b07717d8-20250528 - 2025-05-28
  • 19.2.0-canary-b04254fd-20250415 - 2025-04-16
  • 19.2.0-canary-ac7820a9-20250811 - 2025-08-11
  • 19.2.0-canary-ab859e31-20250606 - 2025-06-06
  • 19.2.0-canary-aad7c664-20250829 - 2025-08-29
  • 19.2.0-canary-a96a0f39-20250815 - 2025-08-15
  • 19.2.0-canary-a7a11657-20250708 - 2025-07-08
  • 19.2.0-canary-a00ca6f6-20250611 - 2025-06-11
  • 19.2.0-canary-9be531cd-20250729 - 2025-07-29
  • 19.2.0-canary-99efc627-20250523 - 2025-05-23
  • 19.2.0-canary-97cdd5d3-20250710 - 2025-07-11
  • 19.2.0-canary-9784cb37-20250730 - 2025-07-30
  • 19.2.0-canary-96c61b7f-20250709 - 2025-07-10
  • 19.2.0-canary-93d7aa69-20250912 - 2025-09-12
  • 19.2.0-canary-914319ae-20250423 - 2025-04-23
  • 19.2.0-canary-8e60cb7e-20250902 - 2025-09-02
  • 19.2.0-canary-8d7b5e49-20250827 - 2025-08-28
  • 19.2.0-canary-8ce15b0f-20250522 - 2025-05-22
  • 19.2.0-canary-8bb7241f-20250926 - 2025-09-26
  • 19.2.0-canary-8a8e9a7e-20250912 - 2025-09-12
  • 19.2.0-canary-89a803fc-20250828 - 2025-08-28
  • 19.2.0-canary-886b3d36-20250910 - 2025-09-10
  • 19.2.0-canary-873f7112-20250821 - 2025-08-21
  • 19.2.0-canary-86181134-20251001 - 2025-10-01
  • 19.2.0-canary-84af9085-20250917 - 2025-09-18
  • 19.2.0-canary-83c88ad4-20250923 - 2025-09-23
  • 19.2.0-canary-7deda941-20250804 - 2025-08-05
  • 19.2.0-canary-7a2c7045-20250506 - 2025-05-06
  • 19.2.0-canary-79d9aed7-20250620 - 2025-06-20
  • 19.2.0-canary-7513996f-20250722 - 2025-07-22
  • 19.2.0-canary-73aa744b-20250702 - 2025-07-02
  • 19.2.0-canary-7216c0f0-20250630 - 2025-07-01
  • 19.2.0-canary-72135096-20250421 - 2025-04-22
  • 19.2.0-canary-6eda5347-20250918 - 2025-09-19
  • 19.2.0-canary-6de32a5a-20250822 - 2025-08-22
  • 19.2.0-canary-6b70072c-20250909 - 2025-09-09
  • 19.2.0-canary-6a7650c7-20250405 - 2025-04-05
  • 19.2.0-canary-67a44bcd-20250915 - 2025-09-15
  • 19.2.0-canary-66f09bd0-20250806 - 2025-08-06
  • 19.2.0-canary-65c4decb-20250630 - 2025-06-30
  • 19.2.0-canary-63779030-20250328 - 2025-03-31
  • 19.2.0-canary-60b5271a-20250709 - 2025-07-09
  • 19.2.0-canary-5e0c951b-20250916 - 2025-09-16
  • 19.2.0-canary-5dc00d6b-20250428 - 2025-04-28
  • 19.2.0-canary-5d87cd22-20250704 - 2025-07-04
  • 19.2.0-canary-56408a5b-20250610 - 2025-06-10
  • 19.2.0-canary-548235db-20251001 - 2025-10-01
  • 19.2.0-canary-540cd652-20250403 - 2025-04-04
  • 19.2.0-canary-534bed5f-20250813 - 2025-08-13
  • 19.2.0-canary-526dd340-20250602 - 2025-06-02
  • 19.2.0-canary-4db4b21c-20250626 - 2025-06-26
  • 19.2.0-canary-4a45ba92-20250515 - 2025-05-15
  • 19.2.0-canary-4a36d3ea-20250416 - 2025-04-17
  • 19.2.0-canary-462d08f9-20250517 - 2025-05-19
  • 19.2.0-canary-4448b187-20250515 - 2025-05-16
  • 19.2.0-canary-4123f6b7-20250826 - 2025-08-26
  • 19.2.0-canary-408d055a-20250430 - 2025-04-30
  • 19.2.0-canary-3fbfb9ba-20250409 - 2025-04-09
  • 19.2.0-canary-3fb190f7-20250908 - 2025-09-08
  • 19.2.0-canary-3d14fcf0-20250724 - 2025-07-24
  • 19.2.0-canary-39cad7af-20250411 - 2025-04-14
  • 19.2.0-canary-3958d5d8-20250807 - 2025-08-07
  • 19.2.0-canary-38ef6550-20250508 - 2025-05-08
  • 19.2.0-canary-3820740a-20250509 - 2025-05-12
  • 19.2.0-canary-379a083b-20250813 - 2025-08-14
  • 19.2.0-canary-37054867-20250604 - 2025-06-04
  • 19.2.0-canary-33a1095d-20250827 - 2025-08-27
  • 19.2.0-canary-33661467-20250407 - 2025-04-07
  • 19.2.0-canary-3302d1f7-20250903 - 2025-09-03
  • 19.2.0-canary-2f0e7e57-20250715 - 2025-07-15
  • 19.2.0-canary-280ff6fe-20250606 - 2025-06-06
  • 19.2.0-canary-2805f0ed-20250903 - 2025-09-03
  • 19.2.0-canary-23884812-20250520 - 2025-05-21
  • 19.2.0-canary-223f81d8-20250707 - 2025-07-07
  • 19.2.0-canary-21fdf308-20250508 - 2025-05-09
  • 19.2.0-canary-1eca9a27-20250922 - 2025-09-22
  • 19.2.0-canary-1dc3bdea-20250812 - 2025-08-12
  • 19.2.0-canary-1d6c8168-20250411 - 2025-04-11
  • 19.2.0-canary-1bd1f01f-20251001 - 2025-10-01
  • 19.2.0-canary-1ae0a845-20250603 - 2025-06-03
  • 19.2.0-canary-19baee81-20250725 - 2025-07-25
  • 19.2.0-canary-197d6a04-20250424 - 2025-04-24
  • 19.2.0-canary-143d3e1b-20250425 - 2025-04-25
  • 19.2.0-canary-14094f80-20250529 - 2025-05-29
  • 19.2.0-canary-12bc60f5-20250613 - 2025-06-13
  • 19.2.0-canary-128abcfa-20250917 - 2025-09-17
  • 19.2.0-canary-0ff1d13b-20250507 - 2025-05-07
  • 19.2.0-canary-0bdb9206-20250818 - 2025-08-19
  • 19.2.0-canary-06e89951-20250620 - 2025-06-20
  • 19.2.0-canary-040f8286-20250402 - 2025-04-02
  • 19.2.0-canary-03fda05d-20250820 - 2025-08-20
  • 19.2.0-canary-0038c501-20250429 - 2025-04-29
  • 19.1.4 - 2025-12-11
  • 19.1.3 - 2025-12-11
  • 19.1.2 - 2025-12-03
  • 19.1.1 - 2025-07-28

    React

    • Fixed Owner Stacks to work with ES2015 function.name semantics (#33680 by @ hoxyq)
  • 19.1.0 - 2025-03-28

    Owner Stack

    An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.

    • An Owner Stack is a development-only stack trace that helps identify which components are responsible for rendering a particular component. An Owner Stack is distinct from a Component Stacks, which shows the hierarchy of components leading to an error.
    • The captureOwnerStack API is only available in development mode and returns a Owner Stack, if available. The API can be used to enhance error overlays or log component relationships when debugging. #29923, #32353, #30306,
      #32538, #32529, #32538

    React

    • Enhanced support for Suspense boundaries to be used anywhere, including the client, server, and during hydration. #32069, #32163, #32224, #32252
    • Reduced unnecessary client rendering through improved hydration scheduling #31751
    • Increased priority of client rendered Suspense boundaries #31776
    • Fixed frozen fallback states by rendering unfinished Suspense boundaries on the client. #31620
    • Reduced garbage collection pressure by improving Suspense boundary retries. #31667
    • Fixed erroneous “Waiting for Paint” log when the passive effect phase was not delayed #31526
    • Fixed a regression causing key warnings for flattened positional children in development mode. #32117
    • Updated useId to use valid CSS selectors, changing format from :r123: to «r123». #32001
    • Added a dev-only warning for null/undefined created in useEffect, useInsertionEffect, and useLayoutEffect. #32355
    • Fixed a bug where dev-only methods were exported in production builds. React.act is no longer available in production builds. #32200
    • Improved consistency across prod and dev to improve compatibility with Google Closure Complier and bindings #31808
    • Improve passive effect scheduling for consistent task yielding. #31785
    • Fixed asserts in React Native when passChildrenWhenCloningPersistedNodes is enabled for OffscreenComponent rendering. #32528
    • Fixed component name resolution for Portal #32640
    • Added support for beforetoggle and toggle events on the dialog element. #32479 #32479

    React DOM

    • Fixed double warning when the href attribute is an empty string #31783
    • Fixed an edge case where getHoistableRoot() didn’t work properly when the container was a Document #32321
    • Removed support for using HTML comments (e.g. <!-- -->) as a DOM container. #32250
    • Added support for <script> and <template> tags to be nested within <select> tags. #31837
    • Fixed responsive images to be preloaded as HTML instead of headers #32445

    use-sync-external-store

    • Added exports field to package.json for use-sync-external-store to support various entrypoints. #25231

    React Server Components

    • Added unstable_prerender, a new experimental API for prerendering React Server Components on the server #31724
    • Fixed an issue where streams would hang when receiving new chunks after a global error #31840, #31851
    • Fixed an issue where pending chunks were counted twice. #31833
    • Added support for streaming in edge environments #31852
    • Added support for sending custom error names from a server so that they are available in the client for console replaying. #32116
    • Updated the server component wire format to remove IDs for hints and console.log because they have no return value #31671
    • Exposed registerServerReference in client builds to handle server references in different environments. #32534
    • Added react-server-dom-parcel package which integrates Server Components with the Parcel bundler #31725, #32132, #31799, #32294, #31741
from react-dom GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade react-dom from 19.1.0 to 19.2.1
28c4877 
Snyk has created this PR to upgrade react-dom from 19.1.0 to 19.2.1.

See this package in npm:
react-dom

See this project in Snyk:
https://app.snyk.io/org/tleyden/project/9106db92-bca1-4641-9cd4-ef8dc22e753d?utm_source=github&utm_medium=referral&page=upgrade-pr
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Dec 28, 2025

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch snyk-upgrade-dff0c6e2bf77285e47ee393458064bc2

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@dosubot
Copy link

dosubot bot commented Dec 28, 2025

Related Documentation

Checked 1 published document(s) in 1 knowledge base(s). No updates required.

How did I do? Any feedback?  Join Discord

@github-actions
Copy link

github-actions bot commented Dec 28, 2025

OSSF Scorecard (PR vs base)

  • Base score: 4.4
  • PR score: 4.4
  • Change: 0.00 (unchanged)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@tleyden @snyk-bot