Skip to content

📦 [0.74]: Bump @types/react from 18.2.67 to 18.3.28#15911

Closed
dependabot[bot] wants to merge 1 commit into0.74-stablefrom
dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28
Closed

📦 [0.74]: Bump @types/react from 18.2.67 to 18.3.28#15911
dependabot[bot] wants to merge 1 commit into0.74-stablefrom
dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 2, 2026

Bumps @types/react from 18.2.67 to 18.3.28.

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Apr 2, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 2, 2026 06:54
@vineethkuttan
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch from 1609255 to dd0bbfb Compare April 3, 2026 05:24
@vineethkuttan
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch from dd0bbfb to e7fe673 Compare April 4, 2026 10:44
@vineethkuttan
Copy link
Copy Markdown
Contributor

/azp run PR

@vineethkuttan vineethkuttan added the AutoMerge Causes a PR to be automatically merged once all requirements are passed (label drives bot activity) label Apr 4, 2026
@azure-pipelines
Copy link
Copy Markdown
Contributor

Azure Pipelines successfully started running 1 pipeline(s).

@microsoft-github-policy-service microsoft-github-policy-service Bot enabled auto-merge (squash) April 4, 2026 13:35
@vmoroz
Copy link
Copy Markdown
Member

vmoroz commented Apr 6, 2026

https://github.com/dependabot recreate

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch from e7fe673 to 9894df7 Compare April 6, 2026 18:09
@vmoroz
Copy link
Copy Markdown
Member

vmoroz commented Apr 6, 2026

/azp run

@azure-pipelines
Copy link
Copy Markdown
Contributor

Azure Pipelines successfully started running 1 pipeline(s).

@vmoroz
Copy link
Copy Markdown
Member

vmoroz commented Apr 8, 2026

@dependabot recreate

@dependabot dependabot Bot changed the title 📦 Bump @types/react from 18.2.67 to 18.3.28 📦 [0.74]: Bump @types/react from 18.2.67 to 18.3.28 Apr 8, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch from 9894df7 to e127950 Compare April 8, 2026 04:17
@vineethkuttan
Copy link
Copy Markdown
Contributor

/azp run PR

@azure-pipelines
Copy link
Copy Markdown
Contributor

Azure Pipelines successfully started running 1 pipeline(s).

@vmoroz
Copy link
Copy Markdown
Member

vmoroz commented Apr 22, 2026

@dependabot recreate

Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 18.2.67 to 18.3.28.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/react"
  dependency-version: 18.3.28
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch from e127950 to 175ef89 Compare April 22, 2026 16:52
vmoroz added a commit that referenced this pull request Apr 23, 2026
* Pin @types/react to current minor on stable branches in dependabot

Dependabot's lockfile-only strategy respects the existing semver range in
package.json. Because @types/react is declared as a caret range (e.g.
"^18.2.6", "^19.1.4"), dependabot proposes minor-version bumps to the type
definitions even though the paired `react` runtime stays on its current
minor. On 0.74-stable this broke TS compilation — bumping @types/react from
18.2.67 to 18.3.28 failed with a forwardRef inference error in
KeyboardExt.tsx (see PR #15911).

Add an ignore rule to each stable-branch entry so minor and major updates
of @types/react and @types/react-dom are filtered out of the grouped PR.
Only patch updates flow through, keeping the type definitions aligned with
the frozen React minor on each branch:

  0.74-stable: @types/react locked to 18.2.x
  0.81-stable: @types/react locked to 19.1.x
  0.82-stable: @types/react locked to 19.1.x
  0.83-stable: @types/react locked to 19.2.x
  0.84-stable: @types/react locked to 19.2.x

The main-branch entry is unchanged — it should continue to track upstream
React type releases.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* Extend dependabot ignore to react + react-native + react-test-renderer

The react runtime, its type defs, and the matching test renderer are
version-locked together on each stable branch. Bumping any one of them to
a different minor can break TS compilation or runtime compatibility, so
lock the full set on every stable-branch dependabot entry.

Also include react-dom / @types/react-dom defensively — they aren't
currently in any stable-branch package.json but will be pinned if added
later.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
auto-merge was automatically disabled April 23, 2026 00:09

Pull request was closed

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 23, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/0.74-stable/types/react-18.3.28 branch April 23, 2026 00:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AutoMerge Causes a PR to be automatically merged once all requirements are passed (label drives bot activity) dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants