pkg: Update react to v19.2.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
react (source)	19.2.3 → 19.2.5
react-dom (source)	19.2.3 → 19.2.5
react-test-renderer (source)	19.2.3 → 19.2.5

---

Release Notes

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs-site	Ignored	Preview	Apr 9, 2026 0:14am

[changeset-bot]

⚠️ No Changeset found

Latest commit: f737d38

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[github-actions]

Size Change: 0 B

Total Size: 80.7 kB

ℹ️ View Unchanged

Filename	Size
examples/test-bundlesize/dist/App.js	1.46 kB
examples/test-bundlesize/dist/polyfill.js	307 B
examples/test-bundlesize/dist/rdcClient.js	10.5 kB
examples/test-bundlesize/dist/rdcEndpoint.js	8 kB
examples/test-bundlesize/dist/react.js	59.7 kB
examples/test-bundlesize/dist/webpack-runtime.js	726 B

_{compressed-size-action}

[github-actions]

Benchmark React

Details

Benchmark suite	Current: f737d38	Previous: 7df6a49	Ratio
data-client: getlist-100	130.72 ops/s (± 5.5%)	141.85 ops/s (± 5.6%)	1.09
data-client: getlist-500	37.6 ops/s (± 6.5%)	39.45 ops/s (± 7.1%)	1.05
data-client: update-entity	312.5 ops/s (± 7.3%)	416.67 ops/s (± 9.3%)	1.33
data-client: update-user	312.5 ops/s (± 6.4%)	370.37 ops/s (± 9.7%)	1.19
data-client: getlist-500-sorted	41.15 ops/s (± 6.3%)	43.2 ops/s (± 6.2%)	1.05
data-client: update-entity-sorted	270.27 ops/s (± 6.0%)	333.33 ops/s (± 8.6%)	1.23
data-client: update-entity-multi-view	344.83 ops/s (± 2.9%)	370.37 ops/s (± 9.7%)	1.07
data-client: list-detail-switch-10	6.9 ops/s (± 6.4%)	7.86 ops/s (± 10.2%)	1.14
data-client: update-user-10000	69.93 ops/s (± 13.4%)	80.01 ops/s (± 14.7%)	1.14
data-client: invalidate-and-resolve	34.02 ops/s (± 5.1%)	34.84 ops/s (± 4.7%)	1.02
data-client: unshift-item	212.77 ops/s (± 3.1%)	232.56 ops/s (± 3.2%)	1.09
data-client: delete-item	263.16 ops/s (± 6.6%)	294.12 ops/s (± 6.7%)	1.12
data-client: move-item	169.49 ops/s (± 4.7%)	196.08 ops/s (± 6.0%)	1.16

This comment was automatically generated by workflow using github-action-benchmark.

[github-actions]

Benchmark

Details

Benchmark suite	Current: f737d38	Previous: 7df6a49	Ratio
normalizeLong	465 ops/sec (±0.79%)	461 ops/sec (±2.19%)	0.99
normalizeLong Values	422 ops/sec (±0.26%)	419 ops/sec (±0.21%)	0.99
denormalizeLong	255 ops/sec (±4.26%)	249 ops/sec (±4.02%)	0.98
denormalizeLong Values	228 ops/sec (±3.01%)	229 ops/sec (±3.48%)	1.00
denormalizeLong donotcache	1029 ops/sec (±0.10%)	1035 ops/sec (±0.22%)	1.01
denormalizeLong Values donotcache	746 ops/sec (±1.00%)	749 ops/sec (±0.49%)	1.00
denormalizeShort donotcache 500x	1405 ops/sec (±0.17%)	1419 ops/sec (±0.18%)	1.01
denormalizeShort 500x	700 ops/sec (±3.26%)	698 ops/sec (±3.48%)	1.00
denormalizeShort 500x withCache	6030 ops/sec (±0.31%)	5731 ops/sec (±0.42%)	0.95
queryShort 500x withCache	3016 ops/sec (±0.13%)	2795 ops/sec (±0.77%)	0.93
buildQueryKey All	58091 ops/sec (±0.67%)	57129 ops/sec (±0.48%)	0.98
query All withCache	8075 ops/sec (±0.33%)	6459 ops/sec (±0.33%)	0.80
denormalizeLong with mixin Entity	244 ops/sec (±4.15%)	241 ops/sec (±3.99%)	0.99
denormalizeLong withCache	7857 ops/sec (±0.50%)	8344 ops/sec (±0.18%)	1.06
denormalizeLong Values withCache	4609 ops/sec (±0.32%)	4431 ops/sec (±0.17%)	0.96
denormalizeLong All withCache	7187 ops/sec (±0.15%)	5808 ops/sec (±0.14%)	0.81
denormalizeLong Query-sorted withCache	8361 ops/sec (±0.12%)	6479 ops/sec (±0.19%)	0.77
denormalizeLongAndShort withEntityCacheOnly	1808 ops/sec (±0.22%)	1730 ops/sec (±0.23%)	0.96
denormalize bidirectional 50	4937 ops/sec (±5.16%)	4787 ops/sec (±4.70%)	0.97
denormalize bidirectional 50 donotcache	39594 ops/sec (±1.79%)	39240 ops/sec (±1.59%)	0.99
getResponse	3741 ops/sec (±0.22%)	3608 ops/sec (±0.17%)	0.96
getResponse (null)	10422132 ops/sec (±0.46%)	10343006 ops/sec (±0.57%)	0.99
getResponse (clear cache)	236 ops/sec (±3.90%)	228 ops/sec (±4.20%)	0.97
getSmallResponse	3562 ops/sec (±0.26%)	3509 ops/sec (±0.44%)	0.99
getSmallInferredResponse	2796 ops/sec (±0.13%)	2749 ops/sec (±0.12%)	0.98
getResponse Collection	3784 ops/sec (±0.20%)	3647 ops/sec (±0.13%)	0.96
get Collection	3538 ops/sec (±0.15%)	3315 ops/sec (±0.16%)	0.94
get Query-sorted	4970 ops/sec (±0.23%)	4847 ops/sec (±0.29%)	0.98
setLong	470 ops/sec (±0.18%)	468 ops/sec (±0.19%)	1.00
setLongWithMerge	261 ops/sec (±0.76%)	260 ops/sec (±0.17%)	1.00
setLongWithSimpleMerge	279 ops/sec (±0.13%)	278 ops/sec (±0.13%)	1.00
setSmallResponse 500x	905 ops/sec (±0.75%)	899 ops/sec (±0.80%)	0.99

This comment was automatically generated by workflow using github-action-benchmark.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (19.2.5). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.