chore(deps): bump the npm-deps group with 6 updates

[dependabot]

Bumps the npm-deps group with 6 updates:

Package	From	To
react	19.2.6	19.2.7
@types/react	19.2.15	19.2.16
react-dom	19.2.6	19.2.7
@iconify/json	2.2.479	2.2.482
react-server-dom-webpack	19.2.6	19.2.7
vitest	4.1.7	4.1.8

Updates react from 19.2.6 to 19.2.7

Release notes

Sourced from react's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.15 to 19.2.16

Commits

• See full diff in compare view

Updates react-dom from 19.2.6 to 19.2.7

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.

Updates @iconify/json from 2.2.479 to 2.2.482

Commits

• acd5cf9 Update 8 icon sets
• cbe048b Update 5 icon sets
• dcaf24b Merge pull request #302 from iconify/renovate/typescript-eslint-monorepo
• 31baa79 Update dependency @​typescript-eslint/eslint-plugin to ^8.60.0
• fd3cde5 Merge pull request #301 from iconify/renovate/vitest-monorepo
• 750ca0c Merge pull request #303 from iconify/renovate/node-25.x
• 6f1269f Merge pull request #305 from iconify/renovate/eslint-monorepo
• bb1d9d6 Update dependency eslint to ^10.4.1
• d252f97 Update dependency @​types/node to ^25.9.1
• 36986da Update dependency vitest to ^4.1.7
• Additional commits viewable in compare view

Updates @types/react from 19.2.15 to 19.2.16

Commits

• See full diff in compare view

Updates react-server-dom-webpack from 19.2.6 to 19.2.7

Release notes

Sourced from react-server-dom-webpack's releases.

19.2.7 (June 1st, 2026)

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (#36566 by @​unstubbable)

Commits

• 6117d7c Version 19.2.7 (#36591)
• 02c444c [19.2.x][FlightReply] Don't drop FormData entries in decodeReplyFromBusboy ...
• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-server-dom-webpack since your current version.

Updates vitest from 4.1.7 to 4.1.8

Release notes

Sourced from vitest's releases.

v4.1.8

   🐞 Bug Fixes

• browser:
  • Disable client cdp API when allowWrite/allowExec: false [backport to v4]  -  by @​hi-ogawa and Codex in vitest-dev/vitest#10450 (e4067)
  • Remove orphaned Playwright route when same module is mocked via multiple ids [backport to v4]  -  by @​toxik and @​Zelys-DFKH in vitest-dev/vitest#10474 (675b4)

    View changes on GitHub

Commits

• e61f2dd chore: release v4.1.8
• e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
mpp	Ready	Preview, Comment	Jun 9, 2026 4:10pm

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	react-server-dom-webpack@​19.2.7
	@​types/​react@​19.2.16
	vitest@​4.1.8
	react@​19.2.7
	react-dom@​19.2.7
	@​iconify/​json@​2.2.482

View full report