chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF	Age	Confidence
@types/react (source)	devDependencies	pin	^19.1.12 → 19.2.14
@types/react-dom (source)	devDependencies	pin	^19.1.9 → 19.2.3
react (source)	devDependencies	patch	19.2.4 → 19.2.7
react-dom (source)	devDependencies	patch	19.2.4 → 19.2.7

⚠️ Renovate's pin functionality does not currently wire in the release age for a package, so the Minimum Release Age checks can apply. You will need to manually validate the Minimum Release Age for these package(s).

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

---

Release Notes

facebook/react (react)

v19.2.7

Compare Source

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

• Type hardening and performance improvements
  (by @​eps1lon and @​unstubbable)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

facebook/react (react-dom)

v19.2.7

Compare Source

v19.2.6: 19.2.6 (May 6th, 2026)

Compare Source

React Server Components

• Type hardening and performance improvements
  (by @​eps1lon and @​unstubbable)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml

Progress: resolved 1, reused 0, downloaded 0, added 0
 ERR_PNPM_NO_MATURE_MATCHING_VERSION  Version 19.2.7 (released 9 days ago) of react does not meet the minimumReleaseAge constraint

This error happened while installing a direct dependency of /tmp/renovate/repos/github/marimo-team/use-acp

The latest release of react is "19.2.7". Published at 6/1/2026

Other releases are:
  * beta: 19.0.0-beta-26f2496093-20240514 published at 5/14/2024
  * rc: 19.0.0-rc.1 published at 11/14/2024
  * next: 19.3.0-canary-d5736f09-20260507 published at 5/8/2026
  * backport: 19.1.8 published at 6/1/2026
  * experimental: 0.0.0-experimental-900ae094-20260605 published at 6/8/2026
  * canary: 19.3.0-canary-900ae094-20260605 published at 6/8/2026

If you need the full list of all 2823 published versions run "$ pnpm view react versions".

If you want to install the matched version ignoring the time it was published, you can add the package name to the minimumReleaseAgeExclude setting. Read more about it: https://pnpm.io/settings#minimumreleaseageexclude