Skip to content

Commit 3cf59a9

Browse files
ihabadhamclaude
andcommitted
Loosen react pin from exact 19.0.4 to ~19.0.4
The exact pin locked out every 19.0.x patch including 19.0.5 and future security patches within the 19.0 line. Pro's own install docs (docs/pro/react-server-components/upgrading-existing-pro-app.md:26-28 and create-without-ssr.md:37) prescribe `react@~19.0.4` — tilde range that keeps the CVE floor while allowing 19.0.x patches. react-on-rails-rsc@19.0.4's peer dep is `react: ^19.0.3`, so 19.0.5 satisfies it. After this change, yarn resolves react to 19.0.5. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent c683e12 commit 3cf59a9

2 files changed

Lines changed: 10 additions & 10 deletions

File tree

package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -78,8 +78,8 @@
7878
"postcss-loader": "7.3.3",
7979
"postcss-preset-env": "^8.5.0",
8080
"prop-types": "^15.8.1",
81-
"react": "19.0.4",
82-
"react-dom": "19.0.4",
81+
"react": "~19.0.4",
82+
"react-dom": "~19.0.4",
8383
"react-intl": "^6.4.4",
8484
"react-on-rails-pro": "16.6.0",
8585
"react-on-rails-pro-node-renderer": "16.6.0",

yarn.lock

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -8738,10 +8738,10 @@ react-deep-force-update@^1.0.0:
87388738
resolved "https://registry.npmjs.org/react-deep-force-update/-/react-deep-force-update-1.1.2.tgz"
87398739
integrity sha512-WUSQJ4P/wWcusaH+zZmbECOk7H5N2pOIl0vzheeornkIMhu+qrNdGFm0bDZLCb0hSF0jf/kH1SgkNGfBdTc4wA==
87408740

8741-
react-dom@19.0.4:
8742-
version "19.0.4"
8743-
resolved "https://registry.npmjs.org/react-dom/-/react-dom-19.0.4.tgz#792d2868dc672c6f8abfce62bdb250e913dcfe2b"
8744-
integrity sha512-JiVlwQwuINIQf2+XUjtRFtLxhTE6hcyX7ZyCmY0HM7I/Kgi7qyXThkzwzg6uCfu3rTg9Ofe1x8qWYrfqthIrzg==
8741+
react-dom@~19.0.4:
8742+
version "19.0.5"
8743+
resolved "https://registry.npmjs.org/react-dom/-/react-dom-19.0.5.tgz#7666ca4385dd1f1d2ac2445423077b2f232aa3c0"
8744+
integrity sha512-yqJj7o8tlj5FiLpycpClCCTp1f1FXvMgCkFej41N1iTmVDiTeDIay6Y69sn8w9JXSCzZyCLP3fotgEhZagDZWw==
87458745
dependencies:
87468746
scheduler "^0.25.0"
87478747

@@ -8873,10 +8873,10 @@ react-transition-group@4.4.5:
88738873
loose-envify "^1.4.0"
88748874
prop-types "^15.6.2"
88758875

8876-
react@19.0.4:
8877-
version "19.0.4"
8878-
resolved "https://registry.npmjs.org/react/-/react-19.0.4.tgz#8031673e73cbb8ecba2c35c8c461396aa38dc69d"
8879-
integrity sha512-6RpEg9/n0sThnO+2CaMLWuvL1iyctm9/lcSTwvmyCoJYD5eiIrwxevXtrMqrtUr96HCdQB8/Yf+oK1QGy8kXEQ==
8876+
react@~19.0.4:
8877+
version "19.0.5"
8878+
resolved "https://registry.npmjs.org/react/-/react-19.0.5.tgz#b9406da29c7085e446e4c2372dcfe4f7c4801aec"
8879+
integrity sha512-yIoQWl4moQfHFKNGmyJavhOki09GwCRcMFuXv3y3KMXoQrGnDi0ZHGe4H9EtQE+jrMWU4hgxaILMS4rxTkJdGw==
88808880

88818881
read-cache@^1.0.0:
88828882
version "1.0.0"

0 commit comments

Comments
 (0)