chore: bump the npm-production-minor-patch group across 1 directory with 14 updates

[dependabot]

Bumps the npm-production-minor-patch group with 14 updates in the / directory:

Package	From	To
@react-native-google-signin/google-signin	16.1.2	16.1.4
@sentry/react-native	8.12.0	8.23.0
@shopify/flash-list	2.0.2	2.3.2
@supabase/supabase-js	2.106.2	2.112.3
@tanstack/react-query	5.100.14	5.101.4
lucide-react-native	1.16.0	1.31.0
react	19.2.3	19.2.8
react-dom	19.2.3	19.2.8
react-native	0.85.3	0.87.0
react-native-reanimated	4.3.1	4.5.3
react-native-safe-area-context	5.7.0	5.9.0
react-native-screens	4.25.2	4.27.0
react-native-svg	15.15.4	15.15.5
react-native-worklets	0.8.3	0.11.4

Updates @react-native-google-signin/google-signin from 16.1.2 to 16.1.4

Release notes

Sourced from @​react-native-google-signin/google-signin's releases.

v16.1.4

16.1.4 (2026-07-27)

Bug Fixes

• expo: declare AppCheckCore modular dependencies (#1519) (8594b76)

⭐ Tip: there's a paid version of the package with a new implementation, advanced security features, support for web, and more features.

v16.1.3

16.1.3 (2026-07-27)

Bug Fixes

• android avoid NPE in GoogleSigninButton on RN 0.79 old architecture (#1491) (be6c576)

⭐ Tip: there's a paid version of the package with a new implementation, advanced security features, support for web, and more features.

Commits

• fe86016 chore(release): 16.1.4 [skip ci]
• 8594b76 fix(expo): declare AppCheckCore modular dependencies (#1519)
• 011d328 chore(release): 16.1.3 [skip ci]
• be6c576 fix: android avoid NPE in GoogleSigninButton on RN 0.79 old architecture (#1491)
• aa1074e chore(deps): bump lodash-es from 4.17.21 to 4.17.23 (#1497)
• b344b33 chore(deps): bump tar from 6.1.12 to 6.2.1 (#1485)
• 865ee19 chore(deps): bump lodash from 4.17.21 to 4.17.23 (#1486)
• bf290c6 chore(deps): bump minimatch from 3.1.2 to 3.1.5 (#1494)
• fc9a71f chore(deps): bump fast-xml-parser from 4.4.1 to 4.5.4 (#1495)
• See full diff in compare view

Updates @sentry/react-native from 8.12.0 to 8.23.0

Release notes

Sourced from @​sentry/react-native's releases.

8.23.0

Changes

• Migrate iOS internals from the deprecated PrivateSentrySDKOnly SPI to SentrySDK.internal (#6541)

  Re-lands #6380, reverted in 8.20.0 by #6491 because it broke iOS screenshot capture. The underlying sentry-cocoa bug is fixed in 9.24.0.

[!WARNING] Action required if you target React Native < 0.75. RNSentry now ships Swift code, which makes it a Swift pod under CocoaPods. If your Podfile doesn't already modularize React Native's ObjC pods (RN >= 0.75 does this by default), add use_modular_headers! to your ios/Podfile before running pod install. Otherwise pod install fails with an error like: The Swift pod 'RNSentry' depends upon 'React-hermes', which does not define modules.

Fixes

• Send SDK-internal diagnostics to the debug logger instead of the Sentry Logs API (#6585)

  Ten internal warnings in the TurboModule instrumentation, scope sync and the Expo Router error boundary were written against logger, which captures a log record and sends it to your project. They now go to debug, printed only when the SDK is initialized with debug: true.

• Measure callback-style native module calls until their completion callback fires (#6561)

  Bridge methods that report completion through success/failure callbacks instead of a Promise return undefined, so they were recorded as sync calls with a near-zero duration. Their turbo_module.* durations are now correct, and slow ones produce a native.turbo_module breadcrumb. On the Old Architecture a failure callback is also counted as an error, following React Native's own (failure, success) trailing-argument convention.

• Resolve config-plugins through the expo package in the Expo config plugin (#6581)

• Make the RNSentry SPEC CHECKSUM in Podfile.lock machine-independent (#6534)

  The prebuilt Sentry.xcframework is now referenced through a $(PODS_ROOT)/sentry-xcframeworks/… symlink instead of the absolute per-user cache path, so Podfile.lock no longer churns between developers and CI. Expect a one-time RNSentry checksum change on the next pod install; the SENTRY_XCFRAMEWORK_CACHE_DIR=/tmp/… workaround is no longer needed.

Internal

• Mark enableTurboModuleTracking as internal and correct its documentation (#6168)

  The option only installs the native TurboModulePerfLogger; no sink consumes its callbacks, so enabling it emits no data. Its documentation claimed it fed crash attribution, per-module spans and aggregated stats — those all come from turboModuleContextIntegration(), which is enabled by default with enableNative and never reads this option. No behaviour change.

Dependencies

• Bump Android SDK from v8.51.0 to v8.52.0 (#6566)
  • changelog
  • diff

8.22.0

Features

• Add enableMetricKit option to enable the iOS MetricKit integration (#6540)

  When enabled, the iOS SDK sends MXDiskWriteExceptionDiagnostic, MXCPUExceptionDiagnostic and MXHangDiagnostic reports to Sentry. Requires iOS 15 or later and is disabled by default. MetricKit hang diagnostics are reported by the operating system and are separate from the app hangs captured by enableAppHangTracking, so enabling both can result in the same hang being reported twice.

... (truncated)

Changelog

Sourced from @​sentry/react-native's changelog.

8.23.0

Changes

• Migrate iOS internals from the deprecated PrivateSentrySDKOnly SPI to SentrySDK.internal (#6541)

  Re-lands #6380, reverted in 8.20.0 by #6491 because it broke iOS screenshot capture. The underlying sentry-cocoa bug is fixed in 9.24.0.

[!WARNING] Action required if you target React Native < 0.75. RNSentry now ships Swift code, which makes it a Swift pod under CocoaPods. If your Podfile doesn't already modularize React Native's ObjC pods (RN >= 0.75 does this by default), add use_modular_headers! to your ios/Podfile before running pod install. Otherwise pod install fails with an error like: The Swift pod 'RNSentry' depends upon 'React-hermes', which does not define modules.

Fixes

• Send SDK-internal diagnostics to the debug logger instead of the Sentry Logs API (#6585)

  Ten internal warnings in the TurboModule instrumentation, scope sync and the Expo Router error boundary were written against logger, which captures a log record and sends it to your project. They now go to debug, printed only when the SDK is initialized with debug: true.

• Measure callback-style native module calls until their completion callback fires (#6561)

  Bridge methods that report completion through success/failure callbacks instead of a Promise return undefined, so they were recorded as sync calls with a near-zero duration. Their turbo_module.* durations are now correct, and slow ones produce a native.turbo_module breadcrumb. On the Old Architecture a failure callback is also counted as an error, following React Native's own (failure, success) trailing-argument convention.

• Resolve config-plugins through the expo package in the Expo config plugin (#6581)

• Make the RNSentry SPEC CHECKSUM in Podfile.lock machine-independent (#6534)

  The prebuilt Sentry.xcframework is now referenced through a $(PODS_ROOT)/sentry-xcframeworks/… symlink instead of the absolute per-user cache path, so Podfile.lock no longer churns between developers and CI. Expect a one-time RNSentry checksum change on the next pod install; the SENTRY_XCFRAMEWORK_CACHE_DIR=/tmp/… workaround is no longer needed.

Internal

• Mark enableTurboModuleTracking as internal and correct its documentation (#6168)

  The option only installs the native TurboModulePerfLogger; no sink consumes its callbacks, so enabling it emits no data. Its documentation claimed it fed crash attribution, per-module spans and aggregated stats — those all come from turboModuleContextIntegration(), which is enabled by default with enableNative and never reads this option. No behaviour change.

Dependencies

• Bump Android SDK from v8.51.0 to v8.52.0 (#6566)
  • changelog
  • diff

8.22.0

Features

• Add enableMetricKit option to enable the iOS MetricKit integration (#6540)

  When enabled, the iOS SDK sends MXDiskWriteExceptionDiagnostic, MXCPUExceptionDiagnostic and MXHangDiagnostic reports to Sentry. Requires iOS 15 or later and is disabled by default. MetricKit hang diagnostics are reported by the operating system and are separate from the app hangs captured by enableAppHangTracking, so enabling both can result in the same hang being reported twice.

... (truncated)

Commits

• 580759e release: 8.23.0
• 1d55d8a fix(core): Use the debug logger, not the Logs API, for SDK diagnostics (#6585)
• 21c11b5 chore: update scripts/update-wizard.sh to v7.0.2 (#6569)
• 36a65c1 chore: update scripts/update-sentry-android-gradle-plugin.sh to 6.18.0 (#6571)
• 75735f9 fix(core): Measure callback-style native module calls until completion (#6561)
• aab34e2 chore(deps): bump brace-expansion to ^2.1.4 / ^5.0.9 (#6577)
• 4340ac1 fix(expo): Resolve config-plugins through the expo package (#6581)
• fdff1d8 chore(deps): bump js-yaml to ^3.15.1 / ^4.3.1 (#6578)
• c974c52 docs(core): Correct enableTurboModuleTracking docs and document TurboModule p...
• 0a5670a docs: fix dead links in the README (#6570)
• Additional commits viewable in compare view

Updates @shopify/flash-list from 2.0.2 to 2.3.2

Release notes

Sourced from @​shopify/flash-list's releases.

v2.3.2

What's Changed

• fix(recycling): disable removeClippedSubviews to prevent Android crash by @​shopify-github-actions-access[bot] in Shopify/flash-list#2202
• fix: scroll to index autoscroll race by @​isekovanic in Shopify/flash-list#2290
• feat(sticky-headers): configure sticky header zIndex by @​GurkarnSD in Shopify/flash-list#2311

New Contributors

• @​isekovanic made their first contribution in Shopify/flash-list#2290
• @​GurkarnSD made their first contribution in Shopify/flash-list#2311

Full Changelog: Shopify/flash-list@v2.3.1...v2.3.2

v2.3.1

What's Changed

• fix(scroll): maintain scroll position when prepending large items by @​naqvitalha in Shopify/flash-list#2138
• Fix: Add type to RecyclerViewProps export statement to comply with isolatedModules by @​benjaminpeters in Shopify/flash-list#1995
• fix(scroll): guard against zero window size in bound detection by @​naqvitalha in Shopify/flash-list#2146
• fix(scroll): enable maintainVisibleContentPosition for horizontal lists by @​naqvitalha in Shopify/flash-list#2145

New Contributors

• @​benjaminpeters made their first contribution in Shopify/flash-list#1995

Full Changelog: Shopify/flash-list@v2.3.0...v2.3.1

v2.3.0

What's Changed

• chore: update skill instructions for metro port, app install, and e2e by @​naqvitalha in Shopify/flash-list#2132
• fix(scroll): read initialScrollIndex offset after layout recompute by @​naqvitalha in Shopify/flash-list#2133
• feat(scroll): add inverted prop by @​naqvitalha in Shopify/flash-list#2131

Full Changelog: Shopify/flash-list@v2.2.3...v2.3.0

v2.2.3

What's Changed

• Ensure average measurement is always positive by @​mhoran in Shopify/flash-list#2053
• fix(hooks): eliminate scroll jitter when prepending items at bottom by @​Hector-Zhuang in Shopify/flash-list#2095
• Remove x,y from measureParentSize — fixes Fabric sticky header offset by @​thomasttvo in Shopify/flash-list#2105
• fix(layout): suppress grid separators in the last row to prevent height mismatch by @​naqvitalha in Shopify/flash-list#2114
• fix: support React.memo, forwardRef, and class components in all component props by @​naqvitalha in Shopify/flash-list#2115
• docs: clarify overrideProps usage and document overflow visible workaround by @​naqvitalha in Shopify/flash-list#2128
• fix: respect waitForInteraction when initialScrollIndex is set by @​naqvitalha in Shopify/flash-list#2130

New Contributors

• @​mhoran made their first contribution in Shopify/flash-list#2053
• @​Hector-Zhuang made their first contribution in Shopify/flash-list#2095
• @​thomasttvo made their first contribution in Shopify/flash-list#2105

Full Changelog: Shopify/flash-list@v2.2.2...v2.2.3

... (truncated)

Commits

• 8c1375e v2.3.2
• d6c9513 feat(sticky-headers): configure sticky header zIndex (#2311)
• 8ca7477 fix: scroll to index autoscroll race (#2290)
• f4278ba Update skill to include fixture checks
• 8bf4c81 chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /fixture/web (#2210)
• ea9956a chore(deps): bump picomatch from 2.3.1 to 2.3.2 (#2214)
• 43ed94e chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /documentation (#2212)
• 508606e chore(deps): bump picomatch from 2.3.1 to 2.3.2 in /fixture/react-native (#2213)
• f47a64e chore(skills): add analyze-feedback skill and incorporate agent learnings (#2...
• 5ffed99 feat(skills): add analyze-feedback skill for agent workflow feedback (#2206)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​shopify/flash-list since your current version.

Updates @supabase/supabase-js from 2.106.2 to 2.112.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

• supabase: add trace context headers to canonical CORS allow-list (#2603)
• supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

• supabase: add trace context headers to canonical CORS allow-list (#2603)
• supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

• realtime: prevent duplicate on bindings (#2594)
• realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

• Filipe Cabaço @​filipecabaco
• Vaibhav @​7ttp

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

• realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

• Vaibhav @​7ttp

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.3 (2026-08-11)

🩹 Fixes

• supabase: improve trace propagation sampling and diagnostics (#2604)
• supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

• Katerina Skroumpelou @​mandarini

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

• realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

• Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

• supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

• supabase: forward db retry option (#2571)

❤️ Thank You

• Katerina Skroumpelou @​mandarini
• Vaibhav @​7ttp

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

... (truncated)

Commits

• e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
• 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
• 84beab1 chore(release): version 2.112.2 changelogs (#2599)
• 07b27ee chore(release): version 2.112.1 changelogs (#2593)
• 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
• 0136f34 chore(release): version 2.112.0 changelogs (#2589)
• 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
• a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
• e6c975c fix(supabase): forward db retry option (#2571)
• a262492 chore(release): version 2.111.0 changelogs (#2572)
• Additional commits viewable in compare view

Updates @tanstack/react-query from 5.100.14 to 5.101.4

Release notes

Sourced from @​tanstack/react-query's releases.

@​tanstack/react-query-devtools@​5.101.4

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.101.4
  • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-next-experimental@​5.101.4

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.101.4

@​tanstack/react-query-persist-client@​5.101.4

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.101.4
  • @​tanstack/react-query@​5.101.4

@​tanstack/react-query@​5.101.4

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.4

@​tanstack/react-query-devtools@​5.101.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-devtools@​5.101.3
  • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-next-experimental@​5.101.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/react-query@​5.101.3

@​tanstack/react-query-persist-client@​5.101.3

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-persist-client-core@​5.101.3
  • @​tanstack/react-query@​5.101.3

@​tanstack/react-query@​5.101.3

Patch Changes

• Updated dependencies [7e3c822]:

... (truncated)

Changelog

Sourced from @​tanstack/react-query's changelog.

5.101.4

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.4

5.101.3

Patch Changes

• Updated dependencies [7e3c822]:
  • @​tanstack/query-core@​5.101.3

5.101.2

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.2

5.101.1

Patch Changes

• Updated dependencies [9eff92e]:
  • @​tanstack/query-core@​5.101.1

5.101.0

Patch Changes

• Updated dependencies []:
  • @​tanstack/query-core@​5.101.0

Commits

• 86bb8a6 ci: Version Packages (#11094)
• 181ea82 ci: Version Packages (#11089)
• 6d55b07 test({react,preact}-query): use the '.then()' convention consistently (#11085)
• 44f38df test({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...
• d1558c1 test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...
• 99690d1 test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...
• 10770f0 test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...
• dbd5a86 test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...
• b955f60 test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...
• b9c657e test({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...
• Additional commits viewable in compare view

Updates lucide-react-native from 1.16.0 to 1.31.0

Release notes

Sourced from lucide-react-native's releases.

Version 1.31.0

What's Changed

• feat(icons): added mail-badge icon by @​lazerg in lucide-icons/lucide#4638
• feat(icons): add angle by @​samuelalake in lucide-icons/lucide#4545
• feat(icons): added eject icon by @​ThibautMarechal in lucide-icons/lucide#4043

New Contributors

• @​lazerg made their first contribution in lucide-icons/lucide#4638
• @​ThibautMarechal made their first contribution in lucide-icons/lucide#4043

Full Changelog: lucide-icons/lucide@1.30.0...1.31.0

Version 1.30.0

What's Changed

• chore(icons): refine & rename various emoji icons by @​karsa-mistmere in lucide-icons/lucide#4606
• fix(scripts): removed toBeRemovedInVersion from all scripts and tools by @​karsa-mistmere in lucide-icons/lucide#4674
• feat(icons): added audio-lines-x icon by @​karsa-mistmere in lucide-icons/lucide#4590
• feat(lab): added chinese-character icon to lab by @​congemcd in lucide-icons/lucide#4212
• test(packages): updates unit test snapshots with face-slightly-smiling by @​karsa-mistmere in lucide-icons/lucide#4676
• ci(dev): fix post-release job by downloading lucide-font artifact by name by @​ericfennis with @​Copilot in lucide-icons/lucide#4675
• feat(icons): add shield-lock icon by @​Caisere in lucide-icons/lucide#3508
• ci(security): Pin sha actions by @​jguddas in lucide-icons/lucide#4678
• feat(icons): added broom icon by @​karsa-mistmere in lucide-icons/lucide#4683

New Contributors

• @​congemcd made their first contribution in lucide-icons/lucide#4212
• @​Caisere made their first contribution in lucide-icons/lucide#3508

Full Changelog: lucide-icons/lucide@1.29.0...1.30.0

Version 1.29.0

What's Changed

• fix(@​lucide/lab): Fix lab build by @​ericfennis in lucide-icons/lucide#4618
• feat(copilot): remove incorrect spaces clause from copilot instructions by @​karsa-mistmere in lucide-icons/lucide#4623
• feat(docs): remove Super and Noodle from showcase by @​karsa-mistmere in lucide-icons/lucide#4626
• chore(deps-dev): bump @​angular/platform-server from 21.2.18 to 21.2.19 by @​dependabot[bot] in lucide-icons/lucide#4629
• ci(security): improve security with adding permissions by @​ericfennis in lucide-icons/lucide#4619
• feat(dependabot): added dependabot config, grouping PRs for each package by @​karsa-mistmere in lucide-icons/lucide#4633
• fix(ci): limit certain github workflows to main repository by @​karsa-mistmere in lucide-icons/lucide#4628
• fix(dependabot): Revert dependabot groups by @​ericfennis in lucide-icons/lucide#4665
• chore(dependabot): Group by dependency group by @​ericfennis in lucide-icons/lucide#4666
• chore(deps-dev): bump the svelte-deps group with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4671
• chore(deps): bump the vue-deps group with 3 updates by @​dependabot[bot] in lucide-icons/lucide#4670
• chore(deps): bump the github-actions group with 13 updates by @​dependabot[bot] in lucide-icons/lucide#4668
• feat(icons): added layer reordering icons by @​karsa-mistmere in lucide-icons/lucide#4617

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

Version 1.28.0

... (truncated)

Commits

• f229f83 chore(depedencies): Update dependencies (#4553)
• 7291cbc fix(lucide-react-native): Add icon exports property to the package.json file ...
• 63369b1 fix(lucide-react-native): restore the icons entry point in the JS bundles (#4...
• 7e93884 fix(lcuide-react-native): Fix context provider export (#4497)
• 5ff536e ci(release.yml): Fix workflow and remove version scripts in package scripts...
• 2dd4be8 Fix provider exports (#4463)
• See full diff in compare view

Updates react from 19.2.3 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Changelog

Sourced from react's changelog.

19.2.7 (June 1, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

• Type hardening and performance improvements (@​eps1lon, @​unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

• Add more cycle protections (@​eps1lon, @​unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (@​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable #35632)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• 90ab3f8 Version 19.2.4
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates react-dom from 19.2.3 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

• Performance improvements when decoding (#37087 by @​eps1lon)

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

19.2.6 (May 6th, 2026)

React Server Components

• Type hardening and performance improvements (#36425 by @​eps1lon and @​unstubbable)

19.2.5 (April 8th, 2026)

React Server Components

• Add more cycle protections (#36236 by @​eps1lon and @​unstubbable)

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Changelog

Sourced from react-dom's changelog.

19.2.7 (June 1, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #36566)

19.2.6 (May 6, 2026)

React Server Components

• Type hardening and performance improvements (@​eps1lon, @​unstubbable #36425)

19.2.5 (March 18, 2026)

React Server Components

• Add more cycle protections (@​eps1lon, @​unstubbable #36236)

19.2.4 (Jan 26, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (@​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable #35632)

Commits

• 1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
• b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
• 6117d7c Version 19.2.7 (#36591)
• eaf3e95 Version 19.2.6
• 23f4f9f 19.2.5
• 90ab3f8 Version 19.2.4
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates react-native from 0.85.3 to 0.87.0

Release notes

Sourced from react-native's releases.

0.87.0

---

Hermes V1 dSYMS:

• Debug

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[maxjuniorbr]

@dependabot rebase

[dependabot]

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.