From fdb1a2037a9e952d25f827f9a00b2368cedde84c Mon Sep 17 00:00:00 2001 From: os-bill Date: Tue, 8 Sep 2026 15:57:05 +0000 Subject: [PATCH] deps(docs): restore the caret on react-dom now that Dependabot groups the pair MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit `apps/docs/package.json` declared the two halves of a peer-coupled pair in different shapes: `react` floating on `^19.2.7`, `react-dom` pinned exact at `19.2.7`. The pin was a deliberate, bounded workaround — `react-dom@X` peer-requires `react@^X`, `react` was out of that card's scope, and a caret on `react-dom` resolved upward and broke the peer check. `.github/dependabot.yml` now groups `react` and `react-dom` under one `react` group, so the two arrive as a single PR and move together. That is the mechanism the pin was standing in for, so the pin has outlived its reason. Keeping both is belt-and-braces: not wrong, but it hides which mechanism is load-bearing, and it leaves an asymmetry that reads as intentional while the thing that would catch a drift does not fire — a future non-frozen install can float `react` up while `react-dom` stays put, the peer range `^19.2.7` permits it, no tool complains, and React itself requires the pair to match. Specifier shape only. No version moves: `pnpm install --lockfile-only` changes exactly one lockfile line, `specifier: 19.2.7` to `specifier: ^19.2.7`, and the resolved `version: 19.2.7(react@19.2.7)` is unchanged. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_01ChPQM8jamxLUfUAxwFpJ8S --- apps/docs/package.json | 2 +- pnpm-lock.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/docs/package.json b/apps/docs/package.json index 2bd5abb..9bc55e3 100644 --- a/apps/docs/package.json +++ b/apps/docs/package.json @@ -23,7 +23,7 @@ "lucide-react": "^1.16.0", "next": "16.2.6", "react": "^19.2.7", - "react-dom": "19.2.7", + "react-dom": "^19.2.7", "tailwind-merge": "^3.6.0" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 83a0702..595e804 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -36,7 +36,7 @@ importers: specifier: ^19.2.7 version: 19.2.7 react-dom: - specifier: 19.2.7 + specifier: ^19.2.7 version: 19.2.7(react@19.2.7) tailwind-merge: specifier: ^3.6.0