chore(deps-dev): bump @types/react from 18.3.28 to 19.2.14

[dependabot]

Bumps @types/react from 18.3.28 to 19.2.14.

Commits

• See full diff in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

The package.json devDependency @types/react was updated from ^18.3.23 to ^19.2.14. No other dependencies, scripts, or configuration keys were modified.

Changes

React Types Dependency Update

Layer / File(s)	Summary
Dependency Specification package.json	@types/react devDependency version updated from ^18.3.23 to ^19.2.14.
Metadata / Changelog package.json	Lines changed: +1 / -1; no other dependency entries, scripts, or config keys modified.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A gentle hop, a version climb,
From eighteen to nineteen, short in time,
No tangled code, no tests to play,
Just clearer types to guide the way,
A tiny nibble, tidy rhyme.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	O título descreve com precisão a mudança principal: um bump da dependência @types/react de 18.3.28 para 19.2.14.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/npm_and_yarn/types/react-19.2.14

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@package.json`:
- Around line 124-125: The package major versions are misaligned: `@types/react`
is bumped to 19 while the runtime React/ReactDOM and `@types/react-dom` remain on
18, which violates the peer dependency; change the "@types/react" entry back to
an 18.x-compatible version (e.g., ^18.0.0 or matching `@types/react-dom`'s peer
range) so both "@types/react" and "@types/react-dom" share React 18 majors, then
update the lockfile and run your package manager install to ensure dependencies
are consistent; alternatively, if you intend to upgrade runtime, update React
and ReactDOM and both `@types` packages together in the same PR.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 36cf3f9f-9649-4856-8eb9-c94985979969

📥 Commits

Reviewing files that changed from the base of the PR and between 2b34c7e and 19e57bd.

📒 Files selected for processing (1)

• package.json

[coderabbitai]

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "== Local package.json versions =="
jq -r '
  .dependencies.react as $r |
  .dependencies["react-dom"] as $rd |
  .devDependencies["@types/react"] as $tr |
  .devDependencies["@types/react-dom"] as $trd |
  "react=\($r)\nreact-dom=\($rd)\n@types/react=\($tr)\n@types/react-dom=\($trd)"
' package.json

echo
echo "== Remote peerDependencies for `@types/react-dom`@18.3.7 =="
curl -fsSL https://registry.npmjs.org/@types%2freact-dom/18.3.7 | jq '.peerDependencies'

echo
echo "Expected: `@types/react-dom` 18.x should peer with `@types/react` 18.x; if so, current 19.x is mismatched."

Repository: adm01-debug/zapp-web

Length of output: 372

---

Align React type package majors with the installed React runtime

Line 124 upgrades to React 19 types while the project is still on React 18 runtime (Lines 97, 99) and @types/react-dom 18 (Line 125). The registry shows @types/react-dom@18.3.7 requires @types/react@^18.0.0 as a peer dependency—installing @types/react@^19.2.14 violates this constraint and will cause type incompatibilities. Keep React type packages on 18.x until runtime is upgraded, or upgrade React/ReactDOM and both type packages together in one coordinated PR.

Suggested minimal fix (keep runtime on React 18)

-    "@types/react": "^19.2.14",
+    "@types/react": "^18.3.28",
     "@types/react-dom": "^18.3.7",

📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change

	"@types/react": "^19.2.14",
	"@types/react-dom": "^18.3.7",
	"@types/react": "^18.3.28",
	"@types/react-dom": "^18.3.7",

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@package.json` around lines 124 - 125, The package major versions are
misaligned: `@types/react` is bumped to 19 while the runtime React/ReactDOM and
`@types/react-dom` remain on 18, which violates the peer dependency; change the
"@types/react" entry back to an 18.x-compatible version (e.g., ^18.0.0 or
matching `@types/react-dom`'s peer range) so both "@types/react" and
"@types/react-dom" share React 18 majors, then update the lockfile and run your
package manager install to ensure dependencies are consistent; alternatively, if
you intend to upgrade runtime, update React and ReactDOM and both `@types`
packages together in the same PR.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
zapp-web	Ready	Preview, Comment	May 9, 2026 0:45am

[adm01-debug]

🔴 Fechado — base do PR é pré-Onda 1 (regressão massiva)

Análise técnica realizada em 2026-05-09:

Problema: Este PR foi criado pelo Dependabot em 2026-05-04, baseado num commit ancestral da era Lovable (pré-faxina). Desde então, o repo passou por:

• Onda 1 (PRs docs: auditoria profunda do repositório (2026-05-08) #95-chore: console.* → logger + override no-console em CLI/tests (Onda 1 PR 1.4) #100): remoção de Storybook, lovable-tagger, build artifacts (35MB liberados, 35 deps removidas)
• Onda 2 (PRs fix(react-hooks): rules-of-hooks 8 violations (Onda 2 PR 2.1) #101-chore: prefix unused vars com _ em src/lib + src/hooks + src/pages (Onda 2 PR 2.5) #107): rules-of-hooks, race condition guards, eslint-plugin-unused-imports, prefix _ em unused vars
• Schemas hardening (fix(edge): restore schemas.ts after Lovable truncation #91-harden(edge): ExternalDbBridgeSchema refines per-action invariants (E3) #94): MessageSchema, RemoteUrlSchema anti-SSRF, ExternalDbBridge refines
• Onda 5 (chore(eslint): fix 21 quick-win errors (Onda 5 PR 5.1) #109-chore(eslint): DDD refactor de imports — fechar Onda 5 (PR 5.3) #112): 164 → 0 errors ESLint

Diff mensurado: mergear este PR aplicaria +6092 files / -5261 deletions em main, revertendo todas as Ondas acima.

Plano FX-DEP-02 (pós-deploy):

1. Reabilitar Dependabot após deploy estabilizado
2. Dependabot recriará automaticamente este PR com base atualizada (main pós-Ondas)
3. Avaliação individual com testes locais (lint + typecheck + build) antes do merge

Referência: /workspace/notes/pos-onda-5-encerramento-2026-05-09.md

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.