npm / react-dom
react-dom
What changed in react-dom 19, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-18.
4 security8 new APIs and options4 performance3 behavior and defaults15 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initreact-dom 1934 changes
Security 4
Adds nonce to rendered import maps.
Enables integration with the Trusted Types API.
Added more DoS mitigations to Server Actions.
Server Components were hardened.
New APIs and options 8
Adds a react-dom API that resolves in the browser and errors during server rendering; use it inside a Suspense boundary to mark a subtree as browser-only without a recoverable error.
Recognizes credentialless as a boolean iframe attribute.
Adds fetchPriority support for module resources.
Adds support for the maskType SVG prop.
Adds an option to react-dom/server APIs for observing when a subtree defers to the browser.
Adds an option for observing subtrees that defer to the browser.
Adds support for the onFullscreenChange event.
Adds support for the onFullscreenError event.
Performance 4
Avoids setting innerHTML when its value has not changed.
Batches updates from resize events until the next frame.
Tracks explicitly preloaded stylesheets to avoid unnecessary suspension.
Performance improvements were made to React Server Components.
Behavior and default changes 3
Submit events now include submitter, and FormData uses its submitter parameter.
Transitions render independently instead of being entangled into one render, so a slow transition no longer holds up unrelated ones.
Type hardening may affect type checking when using React Server Components.
Fixes and other changes 15
For type="number" inputs, defaultValue now matches the behavior of other input types.
Preserves referrerPolicy in image preload headers.
Fixes false-positive hydration mismatches on nonce attributes.
Stops firing onAllReady after the shell has errored.
Fires onReset when forms are automatically reset.
Fixes a hang in react-dom/server on Deno.
Forwards the nonce option when preloading a module.
Updates HTML parser rules for the new select parser.
The synthetic toggle event now includes source.
Fixed missing FormData entries in Server Actions that regressed in 19.2.6.
React Server Components add more cycle protections.
Extra loop protection was added to React Server Functions.
Patched Promise cycles involving Server Functions.
React Server Component fixes were brought to Server Actions.
Patched toString behavior on Server Functions.