npm / react
react
What changed in react 19, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-17.
2 breaking7 security1 deprecations12 new APIs and options7 performance5 behavior and defaults2 tooling15 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initreact 1951 changes
Breaking changes 2
Moves react-server-dom-webpack/*.unbundled to the private react-server-dom-unbundled package.
Types were hardened in React Server Components, which may affect developer-written type usage.
Security 7
Adds nonce to rendered import maps.
Added more DoS mitigations to Server Actions to improve application security.
Hardened Server Components to improve application security.
Added more DoS mitigations to Server Actions.
Hardened Server Components against security threats.
Added more DoS mitigations to Server Actions.
Server Components were hardened against security threats.
Deprecations 1
Development builds warn when a component appears to have been unblocked by calling use() conditionally.
New APIs and options 12
Adds an API for assigning transition types to React View Transition animations.
Adds a react-dom API that marks a Suspense subtree as browser-only when used with use().
Adds fetchPriority support for module resources.
Adds refs to Fragment components to support composable platform behavior.
Adds support for the maskType SVG prop.
Adds support for the onFullscreenChange event.
Adds support for the onFullscreenError event.
Allows overriding request.timeOrigin through options.startTime.
Adds an option to observe when a subtree defers rendering to the browser.
Enables React integration with the Trusted Types API.
Adds an option to allow partial streams in the Flight Client.
Adds the ViewTransition component to power View Transition animations in React.
Performance 7
Improves the transport protocol used by React Server Components.
Avoids setting innerHTML when its value has not changed.
Batches updates from resize events until the next frame.
Performance improvements when decoding React Server Components.
React Server Components received performance improvements that may improve application runtime behavior.
React Server Components received performance improvements that may improve application runtime behavior.
Performance improvements make React Server Components more efficient.
Behavior and default changes 5
Adds support for transporting Error.cause through Flight replies.
Allows Server Components to render context providers from client modules.
Includes submitter in submit events and uses the FormData submitter parameter.
Transitions render independently, so a slow transition no longer holds up unrelated transitions.
Transitions render independently instead of being entangled into one render.
Tooling 2
Types were hardened for React Server Components, improving type safety for developers using them.
Type hardening improves the type surface for React Server Components.
Fixes and other changes 15
Adds support for transporting AggregateError.errors through Flight replies.
Recognizes credentialless as a boolean iframe attribute and suggests its correct casing.
Updates defaultValue handling for number inputs to match other input types.
Fires onReset when forms are automatically reset.
Forwards the nonce option when preloading modules.
Fixed missing FormData entries in Server Actions.
React Server Components add more cycle protections.
Adds extra loop protection to React Server Functions.
Promise cycles and toString behavior on Server Functions were patched.
React Server Component fixes were brought to Server Actions.
Adds extra loop protection to React Server Functions, helping prevent excessive or infinite execution loops.
React Server Component fixes are now included in Server Actions.
React Server Components add more cycle protections.
React Server Functions add extra loop protection to prevent problematic execution loops.
React Server Component fixes were brought to Server Actions.