[Snyk] Upgrade react-dom from 18.3.1 to 19.2.0 - #22
Merged
Merged
Conversation
Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0. See this package in npm: react-dom See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
|
The latest updates on your projects. Learn more about Vercel for GitHub.
1 Skipped Deployment
|
vercel
Bot
temporarily deployed
to
Preview – onchainkit-miniapp-manifest-generator
October 30, 2025 16:36
Inactive
Author
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Dependency Review✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.OpenSSF Scorecard
Scanned Files
|
Dargon789
added a commit
that referenced
this pull request
May 14, 2026
* test * test * Add .circleci/config.yml (#2) * initial * chore: deprecate code (coinbase#2312) * feat: upgrade tailwind to v4 (coinbase#2313) * chore: refactor fund components (coinbase#2311) * Deprecate ock classes (coinbase#2325) * chore: remove deprecated default components (coinbase#2328) * feat: <Connected /> component (coinbase#2317) Co-authored-by: Alissa Crane <alissacranespam@gmail.com> * v1: Fix lint issues (coinbase#2338) * chore: Add onchainkit-v1 to CI test/lint/format workflows (coinbase#2340) * chore: Merge main into onchainkit-v1 (coinbase#2346) * chore: merge main (coinbase#2356) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Alissa Crane <alissacranespam@gmail.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> Co-authored-by: GarmashAlex <garmasholeksii@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Feat: React 19 + Nextjs 15 upgrade (coinbase#2337) * feat: explore render prop for transaction (coinbase#2316) * Create dependency-review.yml Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * chore: switch enums -> object consts (coinbase#2363) * chore: token audit (coinbase#2357) * Create stale.yml (#5) Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * Feat: TextInput updates (coinbase#2361) * chore: update txn types (coinbase#2370) * [feat] Update popover (coinbase#2374) * chore: Buy component audit (coinbase#2371) * chore: remove useValue usage (coinbase#2381) * chore: audit identity (coinbase#2382) * [feat][1/n] Update internal components (coinbase#2387) * chore: audit earn (coinbase#2380) * chore: rename nft types (coinbase#2386) * chore: rename appchain types (coinbase#2388) * chore: rename checkout types (coinbase#2385) * [feat][2/n] Update rest of internal components (coinbase#2389) * v1: Signature audit pt 1 (coinbase#2360) Co-authored-by: Alissa Crane <alissacranespam@gmail.com> * [feat] Update toast (coinbase#2397) * chore: cleanup types and export utils (coinbase#2394) * [feat] swap audit (coinbase#2379) * [chore] core/api folder audit (coinbase#2392) * chore: Make theming based on data-attribute (coinbase#2410) * chore: Merge main into ock-v1 (coinbase#2411) * chore: Prefix component classnames (coinbase#2310) * v1: Wallet audit (coinbase#2383) * refactor: MiniKit and OnchainKit audit (coinbase#2412) * chore: Merge main into onchainkit-v1 (coinbase#2414) * Bump onchainkit version to v1 * chore: Publish create-onchain@alpha (coinbase#2416) * chore: add 'use client' directive to core provider modules for Next.j… (coinbase#2418) * chore: Create new templates directory and add basic OnchainKit template (coinbase#2419) * chore: Simplify MiniKit template (coinbase#2420) * chore: Update create-onchain CLI tool to handle new templates (coinbase#2421) * Update publish-prerelease.js (#7) Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * refactor: Use floating UI for wallet dropdown (coinbase#2433) * fix: Move wallet click outside logic to WalletDropdown (coinbase#2447) * fix: Get alpha into mergable state (coinbase#2452) * frame-sdk => miniapp-sdk * Remove notifications in playground * Skip create-onchain test if on alpha branch, since it checks out @latest * refactor: Use Mantine for minikit example app (coinbase#2458) * chore: Set account association in MiniKit example app (coinbase#2459) * Add name to example minikit app fc:frame * Add logging to useUserInfo * Add logging to getUrlHost * Try to get the hostname from request headers * Clean up minikit example app hostname resolution * feat: Add batched transaction example to MiniKit Example App (coinbase#2460) * fix: ConnectWallet render prop (coinbase#2454) * feat: Update Sign in with Base wallet UI (coinbase#2456) * chore: Upgrade guides + minor tweaks (coinbase#2464) * Add new project section to upgrade guide * Fix lint issues * fix: Include .gitignore in alpha projects (coinbase#2467) * See context * pre * Overflow scroll context * Test logging quickauth payload * feat: Add optional `defaultPublicClients` prop to allow creating custom RPC clients (coinbase#2473) * feat: adding support for custom unmounted content for wallet * Create Hardhat.yml (#10) Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> * feat: Add ock.css stylesheet with fully scoped styles * Add ock.css to exports * ock.css => onchainkit.css * Fix lint issues * Ensure all vars are prefixed * Fix UI issue * Fix lint errors * Fix tests * Full test coverage * Don't layer onchainkit * Fix tests * feat: upgrade react from 18.3.1 to 19.1.1 Snyk has created this PR to upgrade react from 18.3.1 to 19.1.1. See this package in npm: react See this project in Snyk: https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * fix: upgrade eslint-config-next from 15.3.3 to 15.5.3 Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.3. See this package in npm: eslint-config-next See this project in Snyk: https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities (#16) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * feat: upgrade eslint from 8.57.1 to 9.36.0 Snyk has created this PR to upgrade eslint from 8.57.1 to 9.36.0. See this package in npm: eslint See this project in Snyk: https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * feat: upgrade tailwindcss from 3.4.18 to 4.1.13 Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.13. See this package in npm: tailwindcss See this project in Snyk: https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * feat: upgrade react-dom from 18.3.1 to 19.1.1 Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.1.1. See this package in npm: react-dom See this project in Snyk: https://app.snyk.io/org/dargon789/project/79378c43-8a03-4d5f-b7f8-32c6d7868e2f?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * Potential fix for code scanning alert no. 31: Server-side request forgery Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * fix: packages/playground/package.json to reduce vulnerabilities (#20) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * feat: upgrade react from 18.3.1 to 19.2.0 Snyk has created this PR to upgrade react from 18.3.1 to 19.2.0. See this package in npm: react See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * feat: upgrade tailwindcss from 3.4.18 to 4.1.14 Snyk has created this PR to upgrade tailwindcss from 3.4.18 to 4.1.14. See this package in npm: tailwindcss See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr * fix: examples/minikit-example/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * fix: packages/playground/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * chore: version packages 🚀 (coinbase#2529) (#30) Summary by Sourcery Bump onchainkit and create-onchain packages to version 1.1.2 and record the latest patch changes in the changelogs. Bug Fixes: Document a patch fixing the rename of the allowedAddresses field to ownerAddress in onchainkit. Enhancements: Document deprecation of the component and related functionality in onchainkit. Chores: Remove consumed changeset files after publishing the 1.1.2 release. Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore: fix fund components to mandate session-token (coinbase#2542) * fix: packages/onchainkit/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * fix: packages/miniapp-manifest-generator/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ELLIPTIC-8187303 * fix: examples/minikit-example/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14173355 * fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14173355 * fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 * Update packages/create-onchain/templates/next/package.json Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates Bumps the npm_and_yarn group with 2 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [glob](https://github.com/isaacs/node-glob). Updates `vite` from 5.4.19 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `glob` from 11.0.1 to 11.1.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.1...v11.1.0) Updates `next` from 15.3.3 to 14.2.35 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.3...v14.2.35) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) --- updated-dependencies: - dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 14.2.35 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> * fix: examples/minikit-example/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 * fix: packages/playground/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 * fix: packages/playground/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-10598338 - https://snyk.io/vuln/SNYK-JS-NEXT-12265451 - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 - https://snyk.io/vuln/SNYK-JS-NEXT-12301496 - https://snyk.io/vuln/SNYK-JS-NEXT-14173355 - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 * chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js). Updates `vite` from 5.4.19 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `glob` from 11.0.1 to 11.1.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.1...v11.1.0) Updates `next` from 15.3.4 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.4...v15.4.10) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) Updates `next` from 15.3.4 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.4...v15.4.10) Updates `next` from 15.3.4 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.4...v15.4.10) Updates `next` from 15.3.4 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.4...v15.4.10) --- updated-dependencies: - dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> * fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#44) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-12265451 - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 - https://snyk.io/vuln/SNYK-JS-NEXT-12301496 - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * fix: packages/playground/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-12265451 - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 - https://snyk.io/vuln/SNYK-JS-NEXT-12301496 - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 * Update cli-minikit.yml (#49) CI: Clean up the cli-minikit workflow name and CLI invocation to consistently target the minikit flow. Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update cli-verify-onchainkit-template.yml (#48) Clean up the onchainkit CLI verification workflow by resolving merge artifacts and aligning the test project generation step with the standard onchainkit CLI usage. Enhancements: Rename the workflow to target onchainkit explicitly and remove leftover merge conflict markers. Update the test project generation command to use the default onchainkit CLI flow instead of the mini variant. Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * chore: bump react/next due to recent cve (coinbase#2554) (#51) Co-authored-by: Dylan Steck <dylancsteck@gmail.com> * chore(deps): bump the npm_and_yarn group across 5 directories with 4 updates (#50) Bumps the npm_and_yarn group with 3 updates in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite), [glob](https://github.com/isaacs/node-glob) and [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /examples/minikit-example directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /packages/playground directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /templates/minikit-nextjs directory: [next](https://github.com/vercel/next.js). Bumps the npm_and_yarn group with 1 update in the /templates/onchainkit-nextjs directory: [next](https://github.com/vercel/next.js). Updates `vite` from 5.4.20 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) Updates `glob` from 11.0.1 to 11.1.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v11.0.1...v11.1.0) Updates `next` from 15.3.6 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.6...v15.4.10) Updates `sha.js` from 2.4.11 to 2.4.12 - [Changelog](https://github.com/browserify/sha.js/blob/master/CHANGELOG.md) - [Commits](browserify/sha.js@v2.4.11...v2.4.12) Updates `next` from 15.3.6 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.6...v15.4.10) Updates `next` from 15.3.6 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.6...v15.4.10) Updates `next` from 15.3.6 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.6...v15.4.10) Updates `next` from 15.3.6 to 15.4.10 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v15.3.6...v15.4.10) --- updated-dependencies: - dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 11.1.0 dependency-type: direct:development dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: sha.js dependency-version: 2.4.12 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn - dependency-name: next dependency-version: 15.4.10 dependency-type: direct:production dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * Circleci project setup (#43) * Add .circleci/config.yml * chore: add context exports (coinbase#2261) * feat: Add batch ENS / Basename resolution with useAddresses hook and getAddresses utility (coinbase#2277) * chore: add provider exports back (coinbase#2278) * refactor: Replace Packemon with Vite (coinbase#2227) * fix: Don't clean out out dir when building in dev mode (coinbase#2279) * fix wallet modal (coinbase#2282) * fix: Separate deafult Wagmi and Query providers (coinbase#2280) * chore: show connect button when disconnected in Identity demo (coinbase#2285) * Fix: Flaky AppchainBridgeProvider network toggle test (coinbase#2288) * refactor: send display name (coinbase#2283) * chore: Refactor getNames utility to leverage batch processing with getAddresses (coinbase#2281) * chore: fix typos in documentation (coinbase#2286) * chore: Dynamically set version in version.ts (coinbase#2290) * fix: viem version (coinbase#2291) * fix: viem (coinbase#2293) * fix: viem (coinbase#2295) * chore: Add @farcaster/frame-sdk dependency to minikit templates (coinbase#2297) * chore: bump cli templates deps (coinbase#2296) * chore: remove smart wallet check from cli prompt (coinbase#2287) * fix: ready options (coinbase#2300) * fix: authenticate against user fid (coinbase#2299) * chore: version packages v 0.38.8 🌊 (coinbase#2276) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> * fix: OnchainKit package.json publishConfig.access = public (coinbase#2306) * chore: add redirect for `getOnrampBuyUrl` (coinbase#2104) * fix: signature provider unmount reset (coinbase#2172) * fix: Updates playground to remove outdated imports (coinbase#2294) * chore(deps): bump next from 14.2.25 to 14.2.26 (coinbase#2215) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: update `create-onchain` version (coinbase#2315) * fix: rpcUrl (coinbase#2319) * chore: update release workflows (coinbase#2314) * fix: fix root build command (coinbase#2320) * fix: fix build command in workflow (coinbase#2321) * fix: narrow filtering for release workflow (coinbase#2322) * chore: version packages v0.38.9 🌊 (coinbase#2323) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Alissa Crane <alissacranespam@gmail.com> * fix: support an insecure fallback for session id to allow for testing on http contexts (coinbase#2318) Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * chore: Make create-onchain library public (coinbase#2324) * chore: Don't ask to generate manifest during app creation in create-onchain (coinbase#2326) * fix: Basenames bidirectional validation (coinbase#2329) * chore: version packages v0.38.10 🌊 (coinbase#2330) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Alissa Crane <alissacranespam@gmail.com> * fix: getSocials (coinbase#2333) * docs: fix broken link (coinbase#2331) * feat: Make sign up button optional (coinbase#2332) * chore: Release changesets (coinbase#2342) * Chore: workflow improvement for vscode/cursor users (coinbase#2334) * chore: version packages 🚀 (coinbase#2343) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> * chore: enable paymaster for wallet advanced Send (coinbase#2335) * fix: MiniKit frames connector (coinbase#2347) * chore: version packages 🚀 (coinbase#2348) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> * fix: Update wagmi config if connectors change (coinbase#2350) * chore: version packages 🚀 (coinbase#2352) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> * chore(deps-dev): bump vite from 6.2.3 to 6.2.7 (coinbase#2327) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Use signed commits for Changesets action (coinbase#2351) * chore: Update MiniKit mini app manifest (coinbase#2355) * chore: version packages 🚀 (coinbase#2362) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Alissa Crane <alissacranespam@gmail.com> Co-authored-by: Paul Cramer <paulccramer@gmail.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com> Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com> Co-authored-by: Adam <alessey@gmail.com> Co-authored-by: Zach Blake <ztb@pm.me> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com> Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: xtbase <teaonbase@gmail.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: GarmashAlex <garmasholeksii@gmail.com> * fix: packages/playground/package.json to reduce vulnerabilities (#47) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-12265451 - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 - https://snyk.io/vuln/SNYK-JS-NEXT-12301496 - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * fix: examples/minikit-example/package.json to reduce vulnerabilities (#46) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-12265451 - https://snyk.io/vuln/SNYK-JS-NEXT-12299318 - https://snyk.io/vuln/SNYK-JS-NEXT-12301496 - https://snyk.io/vuln/SNYK-JS-NEXT-14400636 - https://snyk.io/vuln/SNYK-JS-NEXT-14400644 Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * feat: upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0 (#24) Snyk has created this PR to upgrade eslint-plugin-react-hooks from 5.2.0 to 7.0.0. See this package in npm: eslint-plugin-react-hooks See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * fix: upgrade eslint-config-next from 15.3.3 to 15.5.4 (#23) Snyk has created this PR to upgrade eslint-config-next from 15.3.3 to 15.5.4. See this package in npm: eslint-config-next See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * feat: upgrade react-dom from 18.3.1 to 19.2.0 (#22) Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0. See this package in npm: react-dom See this project in Snyk: https://app.snyk.io/org/dargon789/project/2d5d11a1-8d0b-4595-b781-4fcb8ec03598?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> * fix: packages/create-onchain/templates/minikit-basic/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116 * Delete .circleci/Hardhat.yml (#56) Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Create ci-foundry.yml (#57) Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com> * fix: packages/create-onchain/templates/next/package.json to reduce vulnerabilities (#79) The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-NEXT-15104645 - https://snyk.io/vuln/SNYK-JS-NEXT-15105315 Co-authored-by: snyk-bot <snyk-bot@snyk.io> * Revert "Update cli-minikit.yml (#49)" This reverts commit 7333229. * fix: packages/create-onchain/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-QS-14724253 * Fix React Server Components CVE vulnerabilities Updated dependencies to fix Next.js and React CVE vulnerabilities. The fix-react2shell-next tool automatically updated the following packages to their secure versions: - next - react-server-dom-webpack - react-server-dom-parcel - react-server-dom-turbopack All package.json files have been scanned and vulnerable versions have been patched to the correct fixed versions based on the official React advisory. Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com> * chore(deps-dev): bump storybook Bumps the npm_and_yarn group with 1 update in the / directory: [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/core). Updates `storybook` from 8.6.7 to 8.6.15 - [Release notes](https://github.com/storybookjs/storybook/releases) - [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md) - [Commits](https://github.com/storybookjs/storybook/commits/v8.6.15/code/core) --- updated-dependencies: - dependency-name: storybook dependency-version: 8.6.15 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com> * Delete .circleci directory Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update cli-minikit.yml b5970f8 Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Revert "Circleci project setup (#43)" This reverts commit c5ca6c2. * Update cli-minikit.yml (#95) ai help pin sha 7333229 Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501) (#86) (#90) * Add quickAuth example to MiniKit example app (coinbase#2429) * feat: Add Base Account connector support (coinbase#2435) * chore: version packages 🚀 (coinbase#2432) * extended validation to max 8 chars (coinbase#2437) * chore: Use github changesets generator (coinbase#2438) * chore: Manifest validator changeset (coinbase#2440) * chore: Tweak changeset formatter order (coinbase#2442) * feat: Add useSwapToken util (coinbase#2444) * feat: useSendToken hook (coinbase#2445) * fix: Export useSendToken, add example (coinbase#2446) * chore: version packages 🚀 (coinbase#2441) * fix: useFundCardSetupOnrampEventListeners unmount reset (coinbase#2182) * feat: use crypto api for nonce generation (coinbase#2303) * fix: useDebounce cleanup (coinbase#2305) * chore(deps): bump next from 14.2.26 to 14.2.32 (coinbase#2471) * chore(deps-dev): bump vite from 5.4.19 to 5.4.20 (coinbase#2483) * feat: OnchainKit@v1 (coinbase#2415) * chore: Remove deprecated schemaId prop (coinbase#2490) * fix: Remove deprecated cacheTime arg (coinbase#2493) * fix: Fix onchainkit and create-onchain versions (coinbase#2496) * Release create-onchain v1 (coinbase#2497) * chore: version packages 🚀 (coinbase#2498) * chore: Release onchainkit and create-onchain at 1.0.2 (coinbase#2499) * fix: Minikit template prepends process.env.VERCEL_URL with https:// (coinbase#2502) * fix: Add `baseBuilder.allowedAddresses` to template + call `setFrameReady()` automatically (coinbase#2503) * chore: Add changeset to create-onchain (coinbase#2504) * chore: version packages 🚀 (coinbase#2505) * chore(ONRAMP-843): FundCard accept sessionToken param (coinbase#2501) * feat: Allow useOpenUrl to specify fallback behavior (coinbase#2500) * fix: Rename setFrameReady and isFrameReady (coinbase#2510) * fix: Update GetOnrampUrl type (coinbase#2511) * chore: version packages 🚀 (coinbase#2509) * fix: Allow additional properties in `withValidManifest` (coinbase#2515) * chore: version packages 🚀 (coinbase#2516) * fix: Deprecate useNotifications hook (coinbase#2527) * fix: Deprecate Checkout component (coinbase#2528) * fix: Rename allowedAddresses to ownerAddress (coinbase#2530) * chore: version packages 🚀 (coinbase#2529) * chore: fix fund components to mandate session-token (coinbase#2542) * chore: bump react/next due to recent cve (coinbase#2554) e1b37c5 --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Sohey <soheimam@gmail.com> Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com> Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com> Co-authored-by: Dylan Steck <dylancsteck@gmail.com> * Update issue templates (#87) * Update issue templates * Update .github/ISSUE_TEMPLATE/bug_report.md Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update .github/ISSUE_TEMPLATE/bug_report.md Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update .github/ISSUE_TEMPLATE/bug_report.md Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update .github/ISSUE_TEMPLATE/bug_report.md Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update .github/ISSUE_TEMPLATE/custom.md Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update .github/ISSUE_TEMPLATE/feature_request.md Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> --------- Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> * Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Potential fix for pull request finding 'CodeQL / Workflow does not contain permissions' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Update packages/onchainkit/plugins/__tests__/vite-dual-css.test.ts Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> * Potential fix for code scanning alert no. 29: Workflow does not contain permissions (#120) Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> * Revert "chore: bump react/next due to recent cve (coinbase#2554)" (#117) This reverts commit e1b37c5. Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: AU_gdev_19 <64915515+Dargon789@users.noreply.github.com> Signed-off-by: Dargon789 <64915515+Dargon789@users.noreply.github.com> Co-authored-by: Alissa Crane <alissa.crane@coinbase.com> Co-authored-by: Alissa Crane <alissacranespam@gmail.com> Co-authored-by: xtbase <teaonbase@gmail.com> Co-authored-by: Dan Cortes <3639170+dgca@users.noreply.github.com> Co-authored-by: Daniel Schlabach <31226559+dschlabach@users.noreply.github.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> Co-authored-by: GarmashAlex <garmasholeksii@gmail.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: 0xFloyd <32312309+0xFloyd@users.noreply.github.com> Co-authored-by: dgca <dgca@users.noreply.github.com> Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com> Co-authored-by: suryatejamandadi-cb <suryateja.mandadi@coinbase.com> Co-authored-by: snyk-bot <snyk-bot@snyk.io> Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com> Co-authored-by: Dylan Steck <dylancsteck@gmail.com> Co-authored-by: Paul Cramer <paulccramer@gmail.com> Co-authored-by: Brendan from DeFi <brendan.forster@coinbase.com> Co-authored-by: leopardracer <136604165+leopardracer@users.noreply.github.com> Co-authored-by: Adam <alessey@gmail.com> Co-authored-by: Zach Blake <ztb@pm.me> Co-authored-by: Teimur Gasanov <teymurgg321@gmail.com> Co-authored-by: Vercel <vercel[bot]@users.noreply.github.com> Co-authored-by: Sohey <soheimam@gmail.com> Co-authored-by: Rustam Goygov <139204496+rustam-cb@users.noreply.github.com> Co-authored-by: sourcery-ai[bot] <58596630+sourcery-ai[bot]@users.noreply.github.com> Co-authored-by: googleworkspace-bot <googleworkspace-bot@google.com>
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade react-dom from 18.3.1 to 19.2.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 414 versions ahead of your current version.
The recommended version was released a month ago.
Release notes
Package name: react-dom
Below is a list of all new features, APIs, and bug fixes.
Read the React 19.2 release post for more information.
New React Features
<Activity>: A new API to hide and restore the UI and internal state of its children.useEffectEventis a React Hook that lets you extract non-reactive logic into an Effect Event.cacheSignal(for RSCs) lets your know when thecache()lifetime is over.New React DOM Features
resume: to resume a prerender to a stream.resumeAndPrerender: to resume a prerender to HTML.resumeToPipeableStream: to resume a prerender to a stream.resumeAndPrerenderToNodeStream: to resume a prerender to HTML.prerenderAPIs to return apostponedstate that can be passed to theresumeAPIs.Notable changes
<ViewTransition>Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.prerender,renderToReadableStream) to server-side-rendering APIs for Node.js:IDs generated by useIdAll Changes
React
<Activity />was developed over many years, starting beforeClassComponent.setState(@ acdlite @ sebmarkbage and many others)%oplaceholder (@ eps1lon #34198)useDeferredValueloop in popstate event (@ acdlite #32821)useDeferredValue(@ acdlite #34376)cacheSignal(@ sebmarkbage #33557)React DOM
:for IDs generated byuseId(@ sebmarkbage, @ eps1lon: #32001, #33342#33099, #33422)nonceto be used on hoistable styles (@ Andarist #32461)React.useinsideReact.lazy-ed Component (@ hi-ogawa #33941)progressiveChunkSizeoption for server-side-rendering APIs (@ sebmarkbage #33027)React Server Components
<img>and<link>using hints before they're rendered (@ sebmarkbage #34604)filterStackFrame(@ eps1lon #33707)React Reconciler
on*handlers to account for upcoming experimental APIseslint-plugin-react-hooks@6.1.0
Note: Version 6.0.0 was mistakenly released and immediately deprecated and untagged on npm. This is the first official 6.x major release and includes breaking changes.
recommendedpreset. Legacy config moved torecommended-legacy. (@ michaelfaith in #32457)usewithin try/catch blocks. (@ poteto in #34040)useEffectEventfunctions in arbitrary closures. (@ jbrown215 in #33544)React.useEffectin addition touseEffectin rules-of-hooks. (@ Ayc0 in #34076)react-hookssettings config option that to acceptadditionalEffectHooksthat are used across exhaustive-deps and rules-of-hooks rules. (@ jbrown215) in #34497React
Owner Stack
An Owner Stack is a string representing the components that are directly responsible for rendering a particular component. You can log Owner Stacks when debugging or use Owner Stacks to enhance error overlays or other development tools. Owner Stacks are only available in development builds. Component Stacks in production are unchanged.
#32538, #32529, #32538
React
useIdto use valid CSS selectors, changing format from:r123:to«r123». #32001React DOM
hrefattribute is an empty string #31783getHoistableRoot()didn’t work properly when the container was a Document #32321<!-- -->) as a DOM container. #32250<script>and<template>tags to be nested within<select>tags. #31837use-sync-external-store
exportsfield topackage.jsonforuse-sync-external-storeto support various entrypoints. #25231React Server Components
unstable_prerender, a new experimental API for prerendering React Server Components on the server #31724registerServerReferencein client builds to handle server references in different environments. #32534Below is a list of all new features, APIs, deprecations, and breaking changes. Read React 19 release post and React 19 upgrade guide for more information.
New Features
React
startTransitioncan now accept async functions. Functions passed tostartTransitionare called “Actions”. A given Transition can include one or more Actions which update state in the background and update the UI with one commit. In addition to updating state, Actions can now perform side effects including async requests, and the Action will wait for the work to finish before finishing the Transition. This feature allows Transitions to include side effects likefetch()in the pending state, and provides support for error handling, and optimistic updates.useActionState: is a new hook to order Actions inside of a Transition with access to the state of the action, and the pending state. It accepts a reducer that can call Actions, and the initial state used for first render. It also accepts an optional string that is used if the action is passed to a formactionprop to support progressive enhancement in forms.useOptimistic: is a new hook to update state while a Transition is in progress. It returns the state, and a set function that can be called inside a transition to “optimistically” update the state to expected final value immediately while the Transition completes in the background. When the transition finishes, the state is updated to the new value.use: is a new API that allows reading resources in render. In React 19,useaccepts a promise or Context. If provided a promise,usewill suspend until a value is resolved.usecan only be used in render but can be called conditionally.refas a prop: Refs can now be used as props, removing the need forforwardRef.React DOM Client
<form> actionprop: Form Actions allow you to manage forms automatically and integrate withuseFormStatus. When a<form> actionsucceeds, React will automatically reset the form for uncontrolled components. The form can be reset manually with the newrequestFormResetAPI.<button> and <input> formActionprop: Actions can be passed to theformActionprop to configure form submission behavior. This allows using different Actions depending on the input.useFormStatus: is a new hook that provides the status of the parent<form> action, as if the form was a Context provider. The hook returns the values:pending,data,method, andaction.<head>section of the document.<head>on the client before revealing the content of a Suspense boundary that depends on that stylesheet.preinit,preload,prefetchDNS, andpreconnectAPIs to optimize initial page loads by moving discovery of additional resources like fonts out of stylesheet loading. They can also be used to prefetch resources used by an anticipated navigation.React DOM Server
prerenderandprerenderToNodeStreamAPIs for static site generation. They are designed to work with streaming environments like Node.js Streams and Web Streams. UnlikerenderToString, they wait for data to load for HTML generation.React Server Components
Deprecations
element.refaccess: React 19 supports ref as a prop, so we’re deprecatingelement.refin favor ofelement.props.ref. Accessing will result in a warning.react-test-renderer: In React 19, react-test-renderer logs a deprecation warning and has switched to concurrent rendering for web usage. We recommend migrating your tests to @ testinglibrary.com/docs/react-testing-library/intro/) or @ testingesting-library.com/docs/react-native-testing-library/intro)Breaking Changes
React 19 brings in a number of breaking changes, including the removals of long-deprecated APIs. We recommend first upgrading to
18.3.1, where we've added additional deprecation warnings. Check out the upgrade guide for more details and guidance on codemodding.React
onUncaughtErrorandonCaughtErrormethods tocreateRootandhydrateRootto customize this error handling.propTypes: UsingpropTypeswill now be silently ignored. If required, we recommend migrating to TypeScript or another type-checking solution.defaultPropsfor functions: ES6 default parameters can be used in place. Class components continue to supportdefaultPropssince there is no ES6 alternative.contextTypesandgetChildContext: Legacy Context for class components has been removed in favor of thecontextTypeAPI.React.createFactory: Now that JSX is broadly supported, allcreateFactoryusage can be migrated to JSX components.react-test-renderer/shallow: This has been a re-export of react-shallow-renderer since React 18. If needed, you can continue to use the third-party package directly. We recommend using @ testinglibrary.com/docs/react-testing-library/intro/) or @ testingesting-library.com/docs/react-native-testing-library/intro) instead.React DOM
react-dom/test-utils: We’ve movedactfromreact-dom/test-utilsto react. All other utilities have been removed.ReactDOM.render,ReactDOM.hydrate: These have been removed in favor of the concurrent equivalents:ReactDOM.createRootandReactDOM.hydrateRoot.unmountComponentAtNode: Removed in favor ofroot.unmount().ReactDOM.findDOMNode: You can replaceReactDOM.findDOMNodewith DOM Refs.Notable Changes
React
<Context>as a provider: You can now render<Context>as a provider instead of<Context.Provider>.useDeferredValueinitial value argument: When provided,useDeferredValuewill return the initial value for the initial render of a component, then schedule a re-render in the background with thedeferredValuereturned.useMemoanduseCallbackwill now reuse the memoized results from the first render, during the second render. Additionally, StrictMode will now double-invoke ref callback functions on initial mount.React DOM
TypeScript Changes
The most common changes can be codemodded with
npx types-react-codemod@latest preset-19 ./path-to-your-react-ts-files.ReactChild(replacement:React.ReactElement | number | string)ReactFragment(replacement:Iterable<React.ReactNode>)ReactNodeArray(replacement:ReadonlyArray<React.ReactNode>)ReactText(replacement:number | string)VoidFunctionComponent