chore(deps): update react to v19.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/react (source)	19.2.18 → 19.3.0
@types/react-dom (source)	19.2.7 → 19.3.0
react (source)	19.2.8 → 19.3.0
react-dom (source)	19.2.8 → 19.3.0

---

Release Notes

react/react (react)

v19.3.0

Compare Source

react/react (react-dom)

v19.3.0

Compare Source

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying mouseterm with    Cloudflare Pages

Latest commit:	d0b7765
Status:	✅  Deploy successful!
Preview URL:	https://f2d11452.mouseterm.pages.dev
Branch Preview URL:	https://renovate-react.mouseterm.pages.dev

View logs

[dormouse-bot]

Feedback on work in progress — not a merge verdict.

website/src/data/dependencies-npm.json still discloses react/react-dom at 19.2.8 and scheduler at 0.27.0, so CI's Dependency disclosure is current step (.github/workflows/ci.yml) fails Build & Test on this head. Renovate doesn't run the generator, so a lockfile bump of a disclosed prod dependency always arrives stale — the same one-commit clear the repo has applied to previous Renovate bumps.

I pushed the regenerated snapshot (node website/scripts/generate-deps.js, three version lines) as a follow-up commit.

On the bump itself: pnpm install --frozen-lockfile resolves with no peer warnings, no 19.2.x react or @types/react* entries survive anywhere in the lockfile (@types/react-dom@19.3.0 narrows its peer to ^19.3.0, which the single @types/react@19.3.0 satisfies), and tsc --noEmit is clean for lib/ and standalone/. lib's vitest run is 2930/2934; the four failures are all src/host/remote/native-direct-peer.test.ts WebRTC-addon channel timeouts, unrelated to React.