-
Notifications
You must be signed in to change notification settings - Fork 0
build(deps): Bump react and @types/react #120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Needs ReviewI recommend reviewing this upgrade before merging because the upgrade introduces two breaking changes requiring Node.js 18 or newer and changes to ESLint configuration defaults. However, the codebase is already using modern React patterns including createRoot, functional components with hooks, and has no deprecated API usage. The project currently has no Node.js version constraints in package.json, which means the Node.js 18+ requirement needs to be enforced. All malicious package warnings in the security alerts refer to typosquatting packages with different names (types-node, @typescript_eslinter/eslint, vite-plugin-react-extend) that are not present in this project's dependencies. The actual packages used (react, @types/react) are legitimate and the upgrade includes 10 new features and 8 bug fixes. What we checked
Dependency UsageReact is the core UI framework powering this VPN frontend application, used extensively across all user-facing components including wallet integration, account management, VPN instance selection, navigation, and notifications, with hooks like useState, useEffect, and useRef enabling interactive features throughout the entire application. The framework supports critical business functionality such as wallet connectivity for blockchain authentication, real-time VPN instance polling and monitoring, and user account management, following a modern React hooks-based architecture distributed across pages, reusable UI components, custom API hooks, and routing infrastructure. TypeScript type definitions from @types/react provide type safety across the React codebase, though direct imports are handled implicitly through the TypeScript compilation process rather than explicit import statements.
This code imports
This code is defining a React functional component that displays customizable toast notifications with different message types (success, error, or info). View 10 more usages
This code imports the
This code is setting up a React component that imports hooks (
This code is importing and preparing to use React's state management (
This code is setting up a React component that manages wallet state and client data by combining multiple hooks for state management, side effects, and performance optimization through memoization.
This code is setting up a test utilities file that imports React's
Other Usages (12)These usages were analyzed but no breaking changes were detected: react
ChangesReact updated with two breaking changes: Node.js 18+ is now required, and the default ESLint config changed to flat config format (legacy config moved to
View 44 more changes
References (6)[1]: React upgraded to 19.2.0 which requires Node.js 18+, but package.json has no engines field to enforce this requirement Line 22 in a8d3c6d
[2]: @types/react upgraded to 19.2.2 (legitimate package, not the malicious 'types-node' typosquatting variant mentioned in security alerts) Line 37 in a8d3c6d
[3]: Code already uses modern createRoot API from react-dom/client, compatible with React 19 Line 2 in a8d3c6d
[4]: Components use modern React hooks (useState, useRef, useEffect) which are fully compatible with React 19
[5]: Official React 19 upgrade guide documents breaking changes including Node.js 18+ requirement and removal of deprecated APIs (source link) [6]: React 19.2 introduces new Activity component, useEffectEvent hook, and changes useId prefix from :r: to r (source link) fossabot analyzed this PR using static analysis and dependency research. |
Deploying blinklabs-vpn with
|
| Latest commit: |
c0e03e1
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://b5b21acc.blinklabs-vpn.pages.dev |
| Branch Preview URL: | https://dependabot-npm-and-yarn-mult-jpyj.blinklabs-vpn.pages.dev |
Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react). These dependencies needed to be updated together. Updates `react` from 19.1.1 to 19.2.0 - [Release notes](https://github.com/facebook/react/releases) - [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/facebook/react/commits/v19.2.0/packages/react) Updates `@types/react` from 19.1.13 to 19.2.2 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: react dependency-version: 19.2.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: "@types/react" dependency-version: 19.2.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
a8d3c6d to
c0e03e1
Compare
|
Looks like these dependencies are up-to-date now, so this is no longer needed. |
Bumps react and @types/react. These dependencies needed to be updated together.
Updates
reactfrom 19.1.1 to 19.2.0Release notes
Sourced from react's releases.
... (truncated)
Changelog
Sourced from react's changelog.
... (truncated)
Commits
5667a41Bump next prerelease version numbers (#34639)8bb7241Bump useEffectEvent to Canary (#34610)e3c9656Ensure Performance Track are Clamped and Don't overlap (#34509)68f00c9Release Activity in Canary (#34374)0e10ee9[Reconciler] Set ProfileMode for Host Root Fiber by default in dev (#34432)3bf8ab4Add missing Activity export to development mode (#34439)1549bda[Flight] Only assign_storein dev mode when creating lazy types (#34354)bb6f0c8[Flight] Fix wrong missing key warning when static child is blocked (#34350)05addfcUpdate Flow to 0.266 (#34271)ec5dd0aUpdate Flow to 0.257 (#34253)Updates
@types/reactfrom 19.1.13 to 19.2.2Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)