deps(npm): Bump the react group across 1 directory with 4 updates#8330
Merged
MarkusNeusinger merged 1 commit intoJul 23, 2026
Merged
Conversation
dependabot
Bot
added
dependencies
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/app/react-3620f64c15
branch
from
June 8, 2026 20:16
f3e0bca to
85ef102
Compare
MarkusNeusinger
enabled auto-merge (squash)
June 9, 2026 18:48
auto-merge was automatically disabled
June 9, 2026 19:01
Pull request was closed
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
MarkusNeusinger
enabled auto-merge (squash)
June 9, 2026 19:01
MarkusNeusinger
disabled auto-merge
June 9, 2026 19:11
Owner
|
@dependabot rebase |
Contributor
Author
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
Owner
|
@dependabot rebase |
Contributor
Author
|
Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry! If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request |
Owner
|
@dependabot recreate |
Bumps the react group with 4 updates in the /app directory: [react](https://github.com/react/react/tree/HEAD/packages/react), [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom). Updates `react` from 19.2.6 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.6 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) Updates `react-router-dom` from 7.15.1 to 7.18.1 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.1/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.1/packages/react-router-dom) Updates `@types/react` from 19.2.15 to 19.2.17 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) --- updated-dependencies: - dependency-name: "@types/react" dependency-version: 19.2.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: react - dependency-name: "@types/react" dependency-version: 19.2.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: react - dependency-name: react dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: react - dependency-name: react-dom dependency-version: 19.2.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: react - dependency-name: react-router-dom dependency-version: 7.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: react ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/app/react-3620f64c15
branch
from
July 23, 2026 22:02
862aa9b to
37d91ab
Compare
MarkusNeusinger
enabled auto-merge (squash)
July 23, 2026 22:03
MarkusNeusinger
added a commit
that referenced
this pull request
Jul 23, 2026
… (white-screen outage) (#9670) ## Outage Since ~22:15 UTC anyplot.ai serves a **blank page**: the `mui` chunk crashes at init (`TypeError: t is not a function` at `mui-BsYJ4sJA.js:1:54`). HTTP stays 200 everywhere and CI stays green — jsdom tests never execute the built bundle, so nothing caught it. ## Root cause The npm-minor Dependabot group (#9657, merged 22:13 UTC) bumped **vite 8.0.16 → 8.1.5** (rolldown 1.0.3 → 1.1.5). The new bundler's codegen emits a broken `mui`/`@emotion` chunk under our `manualChunks` split. Bisect (each step: clean install + build + real-browser check via Playwright): | Build | vite | mui chunk | Result | |---|---|---|---| | `28bf851df` (pre-react-group) | 8.0.16 | `mui-D3S8Baso` | ✅ boots | | `4d95a747c` (#8330 react 19.2.8) | 8.0.16 | `mui-DhJTAfML` | ✅ boots | | `d56329aa1` (#9657 npm-minor) / main | **8.1.5** | `mui-BsYJ4sJA` | ❌ TypeError, blank page | | main + this pin | 8.0.16 | `mui-DhJTAfML` | ✅ boots — **byte-identical to the known-good chunk** | (react 19.2.8 was initially suspected and is exonerated — pinning react back on main changed nothing; pinning vite alone restores the exact known-good chunk hash.) ## Fix - `app/package.json`: `vite` pinned to exact `8.0.16` (build-time dep only, zero runtime surface). - `.github/dependabot.yml`: ignore vite minor/major bumps with an explanatory comment — the next npm-minor group would otherwise re-bump vite and auto-merge green again, since no CI gate executes the built bundle. Lift the ignore once a newer vite is verified in a real browser. - CHANGELOG entry under Fixed. ## Post-merge Cloud Build deploys the healed bundle (~10 min). If Cloud Run traffic was manually pinned to revision `anyplot-app-00124-vqn` during the incident, reset with `--to-latest` after the new revision is live. Follow-up (separate): add a CI smoke gate that loads the built bundle in a headless browser, so a broken chunk can never ship green again. 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the react group with 4 updates in the /app directory: react, @types/react, react-dom and react-router-dom.
Updates
reactfrom 19.2.6 to 19.2.8Release notes
Sourced from react's releases.
Changelog
Sourced from react's changelog.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)6117d7cVersion 19.2.7 (#36591)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.
Updates
@types/reactfrom 19.2.15 to 19.2.17Commits
Updates
react-domfrom 19.2.6 to 19.2.8Release notes
Sourced from react-dom's releases.
Changelog
Sourced from react-dom's changelog.
Commits
1dd4ecb[FlightReply] Performance improvements when decoding (#37087)b0d2fdb[19.2.x] Update required references to GitHub repo (#36753)6117d7cVersion 19.2.7 (#36591)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.
Updates
react-router-domfrom 7.15.1 to 7.18.1Changelog
Sourced from react-router-dom's changelog.
Commits
afdf85dRelease v7.18.1 (#15253)2ecaa1dFix react-router-dom main entry metadata (#15238)6fb1e79Release v7.18.0 (#15187)195a0d0Release v7.17.0 (#15145)8984d23Release v7.16.0 (#15105)3ed77afchore: formate96962bfix: remove stale unpkg field from react-router-dom (#15075)Updates
@types/reactfrom 19.2.15 to 19.2.17Commits