chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF	Age	Confidence
@types/react (source)	devDependencies	pin	^19.1.12 → 19.2.14
@types/react-dom (source)	devDependencies	pin	^19.1.9 → 19.2.3
react (source)	devDependencies	minor	19.2.4 → 19.3.0
react-dom (source)	devDependencies	minor	19.2.4 → 19.3.0

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

react/react (react)

v19.3.0

Compare Source

v19.2.8

Compare Source

v19.2.7

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #​36566)

v19.2.6

Compare Source

React Server Components

• Type hardening and performance improvements (@​eps1lon, @​unstubbable #​36425)

v19.2.5

Compare Source

React Server Components

• Add more cycle protections (@​eps1lon, @​unstubbable #​36236)

react/react (react-dom)

v19.3.0

Compare Source

v19.2.8

Compare Source

v19.2.7

Compare Source

React Server Components

• Fixed missing FormData entries in Server Actions which regressed in 19.2.6 (@​unstubbable #​36566)

v19.2.6

Compare Source

React Server Components

• Type hardening and performance improvements (@​eps1lon, @​unstubbable #​36425)

v19.2.5

Compare Source

React Server Components

• Add more cycle protections (@​eps1lon, @​unstubbable #​36236)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	13.37%	116 / 867
🔵	Statements	13.37%	116 / 867
🔵	Functions	7.24%	5 / 69
🔵	Branches	46.15%	6 / 13

File Coverage

No changed files found.

Generated in workflow #263 for commit 6a447b0 by the Vitest Coverage Report Action

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Progress: resolved 1, reused 0, downloaded 0, added 0
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 19.3.0 (released 5 days ago) of react does not meet the minimumReleaseAge constraint

This error happened while installing a direct dependency of /tmp/renovate/repos/github/marimo-team/use-acp

The latest release of react is "19.3.0". Published at 9/9/2026

Other releases are:
  * beta: 19.0.0-beta-26f2496093-20240514 published at 5/14/2024
  * rc: 19.0.0-rc.1 published at 11/14/2024
  * next: 19.3.0-canary-d5736f09-20260507 published at 5/8/2026
  * backport: 19.0.8 published at 7/21/2026
  * experimental: 0.0.0-experimental-9b938532-20260914 published at 9/14/2026 4:26:01 PM
  * canary: 19.3.0-canary-9b938532-20260914 published at 9/14/2026 4:24:27 PM

If you need the full list of all 2947 published versions run "$ pnpm view react versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude