chore(0.87): sync upstream 0.87.1 and prepare the release branch

.changeset/config.json

@@ -6,7 +6,7 @@
   "changelog": "@changesets/cli/changelog",
   "commit": false,
   "fixed": [["react-native-macos", "@react-native-macos/virtualized-lists"]],
-  "ignore": ["react-native-macos", "@react-native/tester"],
+  "ignore": [],
   "privatePackages": {
     "version": false,
     "tag": false

.changeset/pre.json

@@ -0,0 +1,41 @@
+{
+  "mode": "pre",
+  "tag": "rc",
+  "initialVersions": {
+    "@react-native/asset-utils": "0.87.0-rc.1",
+    "@react-native/assets-registry": "0.87.0-rc.1",
+    "@react-native/babel-plugin-codegen": "0.87.0-rc.1",
+    "@react-native/community-cli-plugin": "0.87.0-rc.1",
+    "@react-native/debugger-frontend": "0.87.0-rc.1",
+    "@react-native/debugger-shell": "0.87.0-rc.1",
+    "@react-native/dev-middleware": "0.87.0-rc.1",
+    "@react-native/eslint-config": "0.87.0-rc.1",
+    "@react-native/eslint-plugin": "0.87.0-rc.1",
+    "@react-native/eslint-plugin-specs": "0.87.0-rc.1",
+    "@react-native/gradle-plugin": "0.87.0-rc.1",
+    "@react-native/jest-preset": "0.87.0-rc.1",
+    "@react-native/metro-config": "0.87.0-rc.1",
+    "@react-native/new-app-screen": "0.87.0-rc.1",
+    "@react-native/normalize-colors": "0.87.0-rc.1",
+    "@react-native/js-polyfills": "0.87.0-rc.1",
+    "react-native-macos": "0.87.0-rc.0",
+    "@react-native/babel-preset": "0.87.0-rc.1",
+    "@react-native/metro-babel-transformer": "0.87.0-rc.1",
+    "@react-native/codegen": "0.87.0-rc.1",
+    "@react-native/compatibility-check": "0.87.0-rc.1",
+    "react-native-macos-init": "2.1.3",
+    "@react-native/popup-menu-android": "0.87.0-rc.1",
+    "@react-native/oss-library-example": "0.81.0-main",
+    "react-native-test-library-apple": "0.87.0-main",
+    "react-native-test-library-common": "0.87.0-main",
+    "@react-native/tester": "0.87.0-rc.1",
+    "@react-native/typescript-config": "0.87.0-rc.1",
+    "@react-native-macos/virtualized-lists": "0.87.0-rc.0",
+    "@react-native/core-cli-utils": "0.0.0",
+    "@react-native/eslint-plugin-monorepo": "0.0.0",
+    "@react-native/monorepo-tests": "0.0.0",
+    "@react-native/codegen-typescript-test": "0.0.0",
+    "@react-native/fantom": "0.0.0"
+  },
+  "changesets": []
+}

.changeset/stable-sync.md

@@ -0,0 +1,6 @@
+---
+"react-native-macos": patch
+"@react-native-macos/virtualized-lists": patch
+---
+
+Sync to upstream React Native 0.87.0-rc.1.

.github/actions/build-npm-package/action.yml

@@ -31,6 +31,15 @@ runs:
         pattern: ReactCore*
         path: ./packages/react-native/ReactAndroid/external-artifacts/artifacts
         merge-multiple: true
+    # ReactNativeDependenciesHeaders* is already covered by the
+    # ReactNativeDependencies* pattern above; ReactNativeHeaders* needs its own.
+    - name: Download ReactNativeHeaders artifacts
+      if: ${{ inputs.skip-apple-prebuilts != 'true' }}
+      uses: actions/download-artifact@v7
+      with:
+        pattern: ReactNativeHeaders*
+        path: ./packages/react-native/ReactAndroid/external-artifacts/artifacts
+        merge-multiple: true
     - name: Print Artifacts Directory
       if: ${{ inputs.skip-apple-prebuilts != 'true' }}
       shell: bash

.github/actions/test-ios-rntester/action.yml

@@ -27,6 +27,13 @@ inputs:
       config of the 2026-07-03 SocketRocket dual-copy regression).
     required: false
     default: auto
+  build-from-source:
+    description: >-
+      Force building ReactCore/ReactNativeDependencies from source, disabling the
+      prebuilt Maven fallback (RCT_USE_PREBUILT_RNCORE / RCT_USE_RN_DEP, which
+      otherwise default to '1'). Used by the from-source dynamic-frameworks lane.
+    required: false
+    default: false
 
 runs:
   using: composite
@@ -100,6 +107,17 @@ runs:
           export RCT_USE_LOCAL_RN_DEP="/tmp/third-party/ReactNativeDependencies${{ inputs.flavor }}.xcframework.tar.gz"
           export RCT_TESTONLY_RNCORE_TARBALL_PATH="/tmp/ReactCore/ReactCore${{ inputs.flavor }}.xcframework.tar.gz"
         fi
+        if [[ "${{ inputs.build-from-source }}" == "true" ]]; then
+          # Force building ReactCore/ReactNativeDependencies from source. Both
+          # RCT_USE_PREBUILT_RNCORE and RCT_USE_RN_DEP default to '1', so on a stable
+          # branch (where released Maven artifacts exist for the current version) the
+          # install would otherwise consume those prebuilts instead of building from
+          # source. That is wrong for the from-source dynamic-frameworks lane and also
+          # fails when a published artifact predates newer podspec layout changes
+          # (e.g. a React core tarball without ReactNativeHeaders.xcframework).
+          export RCT_USE_PREBUILT_RNCORE=0
+          export RCT_USE_RN_DEP=0
+        fi
 
         cd packages/rn-tester
 

.github/scripts/__tests__/publishing-contract.test.mjs

@@ -199,10 +199,13 @@ test('repository Changesets policy follows the actual public and private workspa
   assert.ok(corePackage && !corePackage.private, 'Missing public core workspace');
   assert.ok(listsPackage, 'Missing lists workspace');
   const main = corePackage.version === '1000.0.0';
+  if (!main) parseVersion(corePackage.version);
+  const prereleaseReview = !main && semver.prerelease(corePackage.version) !== null
+    && releasePolicy.baseBranch === 'origin/main';
   assert.deepEqual(releasePolicy.ignore, main ? mainPolicy.ignore : []);
-  assert.equal(releasePolicy.baseBranch, main ? 'origin/main'
+  assert.equal(releasePolicy.baseBranch, main || prereleaseReview ? 'origin/main'
     : `origin/${semver.major(corePackage.version)}.${semver.minor(corePackage.version)}-stable`);
-  assert.equal(Boolean(listsPackage.private), main, 'Lists must be public on stable and private on main');
+  assert.equal(Boolean(listsPackage.private), main, 'Lists must be public on release graphs and private in development');
   assert.equal(listsPackage.version, corePackage.version);
   const publicPackages = [corePackage, listsPackage];
   // Derive expectations from manifests, never from the policy or release-plan output.
@@ -302,8 +305,9 @@ test('repository Changesets policy couples public stable packages without regist
 });
 
 test('real Yarn constraints preserve private upstream versions, align public versions, and preserve workspace fork edges', t => {
-  for (const main of [true, false]) {
-    const workspaces = graph(main ? '1000.0.0' : '0.83.2');
+  for (const [version, upstreamVersion] of [['1000.0.0', '0.83.1'], ['0.83.2', '0.83.1'], ['0.87.0-rc.0', '0.87.1']]) {
+    const main = version === '1000.0.0';
+    const workspaces = graph(version);
     workspaces[1].private = main;
     workspaces[1].version = '0.82.0';
     workspaces[2].version = '0.82.7';
@@ -314,7 +318,7 @@ test('real Yarn constraints preserve private upstream versions, align public ver
         if (index !== 1) workspaces[index][field][lists] = '*';
       }
     }
-    if (!main) workspaces[0].peerDependencies['react-native'] = '0.83.1';
+    if (!main) workspaces[0].peerDependencies['react-native'] = upstreamVersion;
     const {root} = releaseFixture(t, {workspaces});
     writeFileSync(join(root, 'yarn.lock'), '');
     writeFileSync(join(root, 'yarn.config.cjs'), `module.exports = require(${JSON.stringify(join(repositoryRoot, 'yarn.config.cjs'))});\n`);
@@ -327,18 +331,26 @@ test('real Yarn constraints preserve private upstream versions, align public ver
     yarn(['constraints']);
     const actual = workspaces.map((_, index) => JSON.parse(readFileSync(join(root, `packages/p${index}/package.json`), 'utf8')));
     assert.equal(actual[0].version, workspaces[0].version);
-    assert.equal(actual[1].version, main ? '1000.0.0' : '0.83.2');
+    assert.equal(actual[1].version, version);
     assert.equal(actual[2].private, true);
     assert.equal(actual[2].version, '0.82.7');
     assert.equal(actual[3].version, '1000.0.0');
     assert.equal(actual[5].private, true);
-    assert.equal(actual[5].version, main ? '0.83.0' : '0.83.1');
+    assert.equal(actual[5].version, main ? '0.83.0' : upstreamVersion);
     for (const index of [0, 1, 3]) {
       for (const field of ['dependencies', 'devDependencies', 'peerDependencies']) {
-        assert.equal(actual[index][field]['@react-native/codegen'], main || index === 3 ? 'workspace:*' : '0.83.1');
+        assert.equal(actual[index][field]['@react-native/codegen'], main || index === 3 ? 'workspace:*' : upstreamVersion);
         if (index !== 1) assert.equal(actual[index][field][lists], 'workspace:*');
       }
     }
+    if (!main) {
+      const archive = join(root, 'core.tgz');
+      yarn(['workspace', core, 'pack', '--out', archive]);
+      const packed = JSON.parse(execFileSync('tar', ['-xOf', archive, 'package/package.json'], {encoding: 'utf8'}));
+      assert.equal(packed.version, version);
+      assert.equal(packed.dependencies[lists], version);
+      assert.equal(packed.dependencies['@react-native/codegen'], upstreamVersion);
+    }
   }
 });
 

.github/scripts/publishing-contract.md

@@ -14,7 +14,9 @@ Pending Changesets come from the declared `@changesets/get-release-plan` API, wi
 
 Stable branches must already have their initial release version and React Native peer configured. The publication script does not turn `1000.0.0` into a release. All public release packages must match the core version and branch. Private runtime workspace links are invalid; explicit registry references to the separately published upstream `@react-native/*` packages are valid. Development-only private workspace links are allowed.
 
-Main and merge-stage branches keep the `1000.0.0` development graph, including private virtualized-lists and upstream workspace links. Their Changesets config defers `react-native-macos` with `ignore`; `@react-native/tester` is also listed for compatibility with older Changesets' dependent validation. This preserves pending core changesets until stable preparation, without changing package privacy or enabling private versions or tags. The independent init package remains versionable. Stable preparation must clear `ignore`, set the stable `baseBranch`, make virtualized-lists public, and configure the release versions and upstream registry dependencies before versioning. The repository-graph test checks these branch-specific source settings.
+Development graphs on main and merge-stage branches keep `1000.0.0`, including private virtualized-lists and upstream workspace links. Their Changesets config defers `react-native-macos` with `ignore`; `@react-native/tester` is also listed for compatibility with older Changesets' dependent validation. This preserves pending core changesets until stable preparation, without changing package privacy or enabling private versions or tags. The independent init package remains versionable. Stable preparation must clear `ignore`, set the stable `baseBranch`, make virtualized-lists public, and configure the release versions and upstream registry dependencies before versioning. The repository-graph test checks these branch-specific source settings.
+
+Public prerelease review heads can retain `origin/main` while RNM and virtualized-lists have the same prerelease version and neither is private or ignored. They are distinct from the placeholder development graph; stable publication and version-wrapper branch guards still apply. The fork-local lists dependency uses `workspace:*` in source so Changesets tracks it, and Yarn packs it as the exact public version, including its prerelease suffix. Upstream registry dependencies keep their exact React Native peer version.
 
 ## Publication and tags
 

.github/workflow-scripts/__tests__/maestro-ios-test.js

@@ -0,0 +1,41 @@
+/**
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ *
+ * @format
+ */
+
+jest.mock('child_process', () => ({
+  execSync: jest.fn(),
+  spawn: jest.fn(),
+}));
+const childProcess = require('child_process');
+
+const {findAvailableSimulator} = require('../maestro-ios');
+
+describe('Maestro iOS runner', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+  });
+
+  it('selects an iPhone Pro simulator from the latest runtime', () => {
+    childProcess.execSync.mockReturnValue(
+      JSON.stringify({
+        devices: {
+          'iOS 18.5': [{name: 'iPhone 16 Pro', udid: 'old-pro'}],
+          'iOS 26.5': [
+            {name: 'iPhone 17 Pro Max', udid: 'new-pro-max'},
+            {name: 'iPhone 17 Pro', udid: 'new-pro'},
+          ],
+        },
+      }),
+    );
+
+    expect(findAvailableSimulator()).toEqual({
+      name: 'iPhone 17 Pro',
+      udid: 'new-pro',
+    });
+  });
+});

.github/workflow-scripts/__tests__/verifyArtifactsAreOnMaven-test.js

@@ -22,24 +22,47 @@ jest.mock('../utils.js', () => ({
 process.exit = mockExit;
 global.fetch = mockFetch;
 
+const BASE_URL =
+  'https://repo1.maven.org/maven2/com/facebook/react/react-native-artifacts';
+
+// The verifier HEAD-checks the POM plus every classifier tarball attached to
+// the react-native-artifacts publication (external-artifacts/build.gradle.kts).
+const expectedUrls = version => [
+  `${BASE_URL}/${version}/react-native-artifacts-${version}.pom`,
+  ...[
+    'reactnative-core-debug',
+    'reactnative-core-release',
+    'reactnative-dependencies-debug',
+    'reactnative-dependencies-release',
+    'reactnative-headers-debug',
+    'reactnative-headers-release',
+    'reactnative-dependencies-headers-debug',
+    'reactnative-dependencies-headers-release',
+  ].map(
+    classifier =>
+      `${BASE_URL}/${version}/react-native-artifacts-${version}-${classifier}.tar.gz`,
+  ),
+];
+
 describe('#verifyArtifactsAreOnMaven', () => {
   beforeEach(jest.clearAllMocks);
 
   it('waits for the packages to be published on maven when version has no v', async () => {
     mockSleep.mockReturnValueOnce(Promise.resolve()).mockImplementation(() => {
       throw new Error('Should not be called again!');
     });
+    // First attempt: the POM is not there yet. Second attempt: every URL is.
     mockFetch
       .mockReturnValueOnce(Promise.resolve({status: 404}))
-      .mockReturnValueOnce(Promise.resolve({status: 200}));
+      .mockReturnValue(Promise.resolve({status: 200}));
 
     const version = '0.78.1';
     await verifyArtifactsAreOnMaven(version);
 
     expect(mockSleep).toHaveBeenCalledTimes(1);
-    expect(mockFetch).toHaveBeenCalledWith(
-      'https://repo1.maven.org/maven2/com/facebook/react/react-native-artifacts/0.78.1/react-native-artifacts-0.78.1.pom',
-    );
+    for (const url of expectedUrls('0.78.1')) {
+      expect(mockFetch).toHaveBeenCalledWith(url, {method: 'HEAD'});
+    }
   });
 
   it('waits for the packages to be published on maven, when version starts with v', async () => {
@@ -48,27 +71,46 @@ describe('#verifyArtifactsAreOnMaven', () => {
     });
     mockFetch
       .mockReturnValueOnce(Promise.resolve({status: 404}))
-      .mockReturnValueOnce(Promise.resolve({status: 200}));
+      .mockReturnValue(Promise.resolve({status: 200}));
 
     const version = 'v0.78.1';
     await verifyArtifactsAreOnMaven(version);
 
     expect(mockSleep).toHaveBeenCalledTimes(1);
-    expect(mockFetch).toHaveBeenCalledWith(
-      'https://repo1.maven.org/maven2/com/facebook/react/react-native-artifacts/0.78.1/react-native-artifacts-0.78.1.pom',
-    );
+    for (const url of expectedUrls('0.78.1')) {
+      expect(mockFetch).toHaveBeenCalledWith(url, {method: 'HEAD'});
+    }
   });
 
   it('passes immediately if packages are already on Maven', async () => {
-    mockFetch.mockReturnValueOnce(Promise.resolve({status: 200}));
+    mockFetch.mockReturnValue(Promise.resolve({status: 200}));
 
     const version = '0.78.1';
     await verifyArtifactsAreOnMaven(version);
 
     expect(mockSleep).toHaveBeenCalledTimes(0);
-    expect(mockFetch).toHaveBeenCalledWith(
-      'https://repo1.maven.org/maven2/com/facebook/react/react-native-artifacts/0.78.1/react-native-artifacts-0.78.1.pom',
-    );
+    // All nine URLs (POM + 8 classifier tarballs) are verified in one pass.
+    expect(mockFetch).toHaveBeenCalledTimes(9);
+    for (const url of expectedUrls('0.78.1')) {
+      expect(mockFetch).toHaveBeenCalledWith(url, {method: 'HEAD'});
+    }
+  });
+
+  it('waits when a classifier artifact is missing even though the POM exists', async () => {
+    mockSleep.mockReturnValueOnce(Promise.resolve()).mockImplementation(() => {
+      throw new Error('Should not be called again!');
+    });
+    // First attempt: POM ok, first classifier missing. Second attempt: all ok.
+    mockFetch
+      .mockReturnValueOnce(Promise.resolve({status: 200}))
+      .mockReturnValueOnce(Promise.resolve({status: 404}))
+      .mockReturnValue(Promise.resolve({status: 200}));
+
+    const version = '0.78.1';
+    await verifyArtifactsAreOnMaven(version);
+
+    expect(mockSleep).toHaveBeenCalledTimes(1);
+    expect(mockExit).not.toHaveBeenCalled();
   });
 
   it('tries 90 times and then exits', async () => {
@@ -82,6 +124,7 @@ describe('#verifyArtifactsAreOnMaven', () => {
     expect(mockExit).toHaveBeenCalledWith(1);
     expect(mockFetch).toHaveBeenCalledWith(
       'https://repo1.maven.org/maven2/com/facebook/react/react-native-artifacts/0.78.1/react-native-artifacts-0.78.1.pom',
+      {method: 'HEAD'},
     );
   });
 });