[dependabot]

Bumps the minor-and-patch group with 15 updates in the /samples/react-native/login-pkce directory:

Package	From	To
react	19.2.3	19.3.1
@types/react	19.2.17	19.3.0
react-native	0.85.3	0.88.0
react-native-config	1.6.1	1.7.2
react-native-safe-area-context	5.8.0	5.10.1
@react-native-community/cli	20.1.3	20.2.0
@react-native/babel-preset	0.85.3	0.88.0
@react-native/jest-preset	0.85.3	0.88.0
@react-native/metro-config	0.85.3	0.88.0
@react-native/typescript-config	0.85.3	0.88.0
@testing-library/react-native	14.0.0	14.1.0
@types/react	19.2.17	19.3.0
babel-jest	30.4.1	30.5.2
jest	30.4.2	30.5.2
prettier	3.8.3	3.9.10
test-renderer	1.2.0	1.3.1
react	19.2.3	19.3.1
react-native	0.85.3	0.88.0
react-native-config	1.6.1	1.7.2
react-native-safe-area-context	5.8.0	5.10.1
@react-native-community/cli	20.1.3	20.2.0
@react-native/babel-preset	0.85.3	0.88.0
@react-native/jest-preset	0.85.3	0.88.0
@react-native/metro-config	0.85.3	0.88.0
@react-native/typescript-config	0.85.3	0.88.0
@testing-library/react-native	14.0.0	14.1.0
@types/react	19.2.17	19.3.0
babel-jest	30.4.1	30.5.2
jest	30.4.2	30.5.2
prettier	3.8.3	3.9.10
test-renderer	1.2.0	1.3.1

Bumps the minor-and-patch group with 15 updates in the /samples/react-native/token-refresh directory:

Package	From	To
react	19.2.3	19.3.1
@types/react	19.2.17	19.3.0
react-native	0.85.3	0.88.0
react-native-config	1.6.1	1.7.2
react-native-safe-area-context	5.8.0	5.10.1
@react-native-community/cli	20.1.3	20.2.0
@react-native/babel-preset	0.85.3	0.88.0
@react-native/jest-preset	0.85.3	0.88.0
@react-native/metro-config	0.85.3	0.88.0
@react-native/typescript-config	0.85.3	0.88.0
@testing-library/react-native	14.0.0	14.1.0
@types/react	19.2.17	19.3.0
babel-jest	30.4.1	30.5.2
jest	30.4.2	30.5.2
prettier	3.8.3	3.9.10
test-renderer	1.2.0	1.3.1
react	19.2.3	19.3.1
react-native	0.85.3	0.88.0
react-native-config	1.6.1	1.7.2
react-native-safe-area-context	5.8.0	5.10.1
@react-native-community/cli	20.1.3	20.2.0
@react-native/babel-preset	0.85.3	0.88.0
@react-native/jest-preset	0.85.3	0.88.0
@react-native/metro-config	0.85.3	0.88.0
@react-native/typescript-config	0.85.3	0.88.0
@testing-library/react-native	14.0.0	14.1.0
@types/react	19.2.17	19.3.0
babel-jest	30.4.1	30.5.2
jest	30.4.2	30.5.2
prettier	3.8.3	3.9.10
test-renderer	1.2.0	1.3.1

Updates react from 19.2.3 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

• Improve transport protocol (#37845 by @​unstubbable and @​eps1lon)

19.3.0 (September 9, 2026)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.3 release post for more information.

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)

... (truncated)

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

• <ViewTransition />: Adds <ViewTransition /> and addTransitionType APIs to power View Transition animations in React (@​sebmarkbage, @​jackpope, @​gaearon: #31975, #31987, #31996, #31999, #32001, #32002, #32028, #32029, #32031, #32034, #32038, #32041, #32050, #32090, #32105, #32254, #32379, #32422, #32462, #32540, #32545, #32585, #32599, #32611, #32612, #32617, #32651, #32653, #32656, #32664, #32699, #32723, #32734, #32751, #32752, #32760, #32761, #32764, #32772, #32790, #32819, #32820, #32822, #32833, #32849, #33094, #33191, #33200, #33206, #33293, #33330, #33331, #33332, #33357, #33362, #33433, #33576, #34374, #34450, #34481, #34500, #34502, #34510, #34511, #34539, #35567, #35564, #35485, #35380, #35063, #35060, #34676, #36917, #35337, #35520)
• Fragment Refs: Add Refs to <Fragment /> to support composable platform behavior (@​jackpope, @​sebmarkbage, @​eps1lon, @​Dhakshin2007, @​chirokas, @​teamleaderleo, @​fallintoplace: #32465, #32613, #32619, #32654, #32660, #32682, #32722, #32813, #32814, #33056, #33058, #33093, #34069, #34103, #34544, #34545, #37062, #37061, #37060, #36047, #36010, #35642, #35641, #35637, #35630, #34935, #37457, #37408, #37326, #37251, #37171, #37169, #37168, #37167, #37166, #37165, #37164, #37163, #37162, #37161, #37160, #37125, #37063)

New React DOM Features

• browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
  • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

• Enable Trusted Types API integration (@​rickhanlonii #35816)
• Transitions now render independently instead of being entangled into a single render, so a slow transition no longer holds up unrelated ones (@​acdlite #37290)
• Added a DEV-only warning when a component appears to have been unblocked by calling use() conditionally (@​hoxyq, @​eps1lon: #37104, #37203, #37491)

All Changes

React

• Fast Refresh Fixes
  • Fix Fast Refresh to find and remount edits to components wrapped behind lazy() (@​sophiebits #36965)
  • Fix Fast Refresh so edits to a memo() comparison function take effect (@​sophiebits #36964)
  • Fix Fast Refresh crash when an edit changes the kind of a component's type (@​sophiebits #36963)
  • Unify hot reload type resolution for Fast Refresh (@​sophiebits #36962)
  • Fix Fast Refresh to remount correctly when an edit changes the component kind (@​sophiebits #36950)
  • Double invoke effects in StrictMode after Fast Refresh (@​eps1lon #35962)
• Performance Track Fixes
  • Prevent crash when accessing $$typeof in Performance Tracks (@​eps1lon #35679)
  • Handle non-string function names in Performance Tracks (@​eps1lon #35659)
  • Use minus (-) instead of en dash for removed props in Performance Tracks (@​eps1lon #35649)
  • Handle arrays with bigints in deep objects in Performance Tracks (@​eps1lon #35648)
  • Don't enumerate typed array props in Performance Tracks in DEV (@​UditDewan #36913)
  • Bail out of diffing wide objects and arrays in Performance Tracks (@​eps1lon #34742)
  • Clear potentially large performance measures in DEV (@​hoxyq #34803)
  • Fix missing else branch for renders with no props change in Performance Tracks (@​hoxyq #34837)
• Activity Fixes
  • Fix useSyncExternalStore missing store mutations that happened while an Activity tree was hidden (@​sophiebits #36947)
  • Hide portal contents when an Activity is hidden (@​acdlite #35091)
  • Prevent metadata hoisting in hidden <Activity> trees (@​ronnakamoto #34983)
  • Prevent errors thrown inside a hidden Activity from escaping to the visible UI (@​acdlite #35074)
  • Don't unhide a node if a direct parent Offscreen is still hidden (@​sebmarkbage #34821)
  • Don't show internal <Offscreen> component in error messages (@​rickhanlonii #35763)
• Warn in DEV when a component appears to have been unblocked by a conditional use() (@​hoxyq, @​eps1lon: #37104, #37203, #37491)
• Render transitions independently instead of entangling them into a single render (@​acdlite #37290)
• Fix hang when updating a dehydrated boundary inside a hidden tree (@​gaearon #37135)
• Don't reacquire Host Singletons during dev effect validation (@​gnoff #37113)
• Only remove properties from Host Singletons on release (@​gnoff #37112)

... (truncated)

Commits

• 61aa00d [19.3.x][Flight] Improve transport protocol (#37845)
• 2dc7da7 [test] Bump Jest to 30.4 (#37382)
• 4f93894 docs: remove stale parentType param from validateChildKeys JSDoc (#36928)
• dbc3750 Update required references to GitHub repo (#36752)
• 900ae09 [flow] Bump flow to v0.317.0 (#36701)
• fbb1370 [flow] Bump flow to v0.307.1 (#36199)
• 56922cf [react-native-renderer] Delete Paper (legacy) renderer (#36285)
• 74568e8 [Flight] Transport AggregateErrors.errors (#36156)
• e66ef64 [tests] remove withoutStack from assertConsole helpers (#35498)
• db71391 [Fiber] Instrument the lazy initializer thenable in all cases (#35521)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.

Updates @types/react from 19.2.17 to 19.3.0

Commits

• See full diff in compare view

Updates react-native from 0.85.3 to 0.88.0

Release notes

Sourced from react-native's releases.

0.88.0

Added

• C++: Add <React/FeatureFlags.h> umbrella header as the public entry point for react/featureflags (f970054a8a by @​j-piasecki)
• C++: Add <React/RendererBridging.h> umbrella header as the public entry point for react/renderer/bridging (5b680c5f9f by @​j-piasecki)
• C++: Add <React/Timing.h> umbrella header as the public entry point for react/timing (70f172d29f by @​j-piasecki)
• C++: Added missing mutex include in HostTarget.h (3f8f5c216a by @​etodanik)
• EventTarget: Enable the imperative EventTarget API (addEventListener, removeEventListener, dispatchEvent) on native view refs in canary (8480b86820 by @​rubennorte)
• Feature Flags: Add enableImageTransparentTintColor feature flag (c5bd054983 by @​coado)
• JavaScript API: Deprecate 'react-native/Libraries/Core/InitializeCore'. Use 'react-native/setup-env' instead. (554baba159 by @​huntie)
• PlatformColor: Support a lazy raw color fallback for PlatformColor when native tokens fail to resolve (65008fcdd0 by @​Abbondanzo)
• React Native DevTools: Experimental performance screenshots support and Page.captureScreenshot is added to the EXPERIMENTAL channel (4be68ef785 by @​huntie)
• React Native DevTools: Support for inspecting WebSocket events in the Network panel is added to the CANARY channel (713ae6b1b9 by @​huntie)
• React Native DevTools: Users and agents can now capture app screenshots via the Page.captureScreenshot command (00efc0a440 by @​huntie)
• Text: Add object syntax for fontVariationSettings (376b99ff14 by @​evankatz14)
• TypeScript: Add isInstalled() and clearAllLogs() to the LogBox TypeScript declarations (a69badd468 by @​Abbondanzo)
• TypeScript: Add missing strictMode prop to FlatList TypeScript types (3e2403327c by @​drhops)
• TypeScript: Add TypeScript declarations for requestIdleCallback and cancelIdleCallback (c086431a4b by @​Critteros)
• VirtualizedList: Add missing ListItemComponent type to VirtualizedList props (5306e9229c by @​aravi365)

Android specific

• Feature Flags: Add enableMountingCoordinatorPullModelAndroid feature flag (ece0efe837 by @​coado)
• Network Inspection: Expose network event reporting to third-party networking stacks as an unstable API (83d0be8958 by @​huntie)
• Networking: Send app name and version as the default User-Agent header for network requests, matching iOS (04e50d540d by Calvin Liu)
• Renderer: Add inert Java plumbing (PullTransactionMountItem, FabricUIManager.onTransactionAvailable) for the pull model (6515647d94 by @​coado)
• Renderer: Wire the pull-model mounting path in C++ behind enableMountingCoordinatorPullModelAndroid (9da1a01153 by @​coado)
• Text: Add fontVariationSettings support for <Text> (19f7d144b9 by @​evankatz14)
• TextInput: Add fontVariationSettings support for TextInput (a688608090 by @​evankatz14)
• TurboModules: Add ArrayBuffer, the Java representation of a JS ArrayBuffer for TurboModules, with an explicit byte-ownership contract (5bb9639594 by Kamil Paradowski)
• TurboModules: Add ArrayBuffer support to Java TurboModules (5fb3ebce1a by Kamil Paradowski)
• TurboModules: Borrowed ArrayBuffer bytes are scoped to the synchronous call that received them. ArrayBuffer.bytes and ArrayBuffer.size throw IllegalStateException afterwards, and a ByteBuffer already obtained from bytes is unchecked and reads freed memory, so copy with ArrayBuffer.arrayBufferWithCopiedBytes to keep them (d84c13d511 by @​christophpurrer)

iOS specific

• Text: Add fontVariationSettings support on iOS (8415753e21 by @​evankatz14)
• Assets: Use asset catalog for ios images (26769a00b2 by @​janicduplessis)
• CocoaPods: Add a React-cxxstableapi dependency to third-party New Architecture pods so they can resolve React Native's C++ API guard headers (d3daf111e0 by @​coado)
• Legacy Architecture: Allow consumers to opt into RCT_REMOVE_LEGACY_MODULE_INTEROP and RCT_REMOVE_LEGACY_COMPONENT_INTEROP from CocoaPods and SwiftPM. Both default to off and will become the default in a future release (b933d18177 by @​christophpurrer)
• SceneDelegate: Add SceneDelegate lifecycle support (7bfe32fd33 by @​artus9033)
• Styles: Print warning advice when using shadow* styles without providing a solid background color (eb4d3892ab by @​hannojg)

Changed

• Babel: Platform.OS and Platform.select(...) inlining in react-native/babel-preset now requires the inlinePlatform option in addition to platform (f63b2a1cb5 by @​robhogan)
• Babel: Inline Platform.OS and Platform.select(...) for React Native Platform imports during the Babel preset, covering some cases that were previously left un-inlined. (40c06121a1 by @​robhogan)
• Build: Add React Native Maven pull-through cache fallback for prebuilt artifacts. (3bfb277fec by @​coado)
• Events: Enabled Web-based event dispatching refactor (31d33ce91b by @​rubennorte)
• Hermes: Bump Hermes to 260318099.0.3 (79024f7c59 by @​fabriziocucci)
• Hermes: Bump Hermes to 260318099.0.4 (993be7d6c6 by @​fabriziocucci)
• Hermes: Bump hermes-v1 to 260318099.0.1 (b113cf5864 by @​fabriziocucci)
• Legacy Architecture: Core components (ActivityIndicatorView, ModalHostView, PullToRefreshView, SafeAreaView, Switch) no longer report legacy RCT-prefixed names in their view configs (904812016f by @​christophpurrer)
• Metro: Bump Metro to 0.87.0 (fe511aba7c by @​robhogan)
• Metro: Bump the minimum Metro version to 0.87.1, so upgrading projects resolve the same Metro as freshly created ones (f2439a83cf by @​robhogan)

... (truncated)

Changelog

Sourced from react-native's changelog.

v0.88.0

Added

• C++: Add <React/FeatureFlags.h> umbrella header as the public entry point for react/featureflags (f970054a8a by @​j-piasecki)
• C++: Add <React/RendererBridging.h> umbrella header as the public entry point for react/renderer/bridging (5b680c5f9f by @​j-piasecki)
• C++: Add <React/Timing.h> umbrella header as the public entry point for react/timing (70f172d29f by @​j-piasecki)
• C++: Added missing mutex include in HostTarget.h (3f8f5c216a by @​etodanik)
• EventTarget: Enable the imperative EventTarget API (addEventListener, removeEventListener, dispatchEvent) on native view refs in canary (8480b86820 by @​rubennorte)
• Feature Flags: Add enableImageTransparentTintColor feature flag (c5bd054983 by @​coado)
• JavaScript API: Deprecate 'react-native/Libraries/Core/InitializeCore'. Use 'react-native/setup-env' instead. (554baba159 by @​huntie)
• PlatformColor: Support a lazy raw color fallback for PlatformColor when native tokens fail to resolve (65008fcdd0 by @​Abbondanzo)
• React Native DevTools: Experimental performance screenshots support and Page.captureScreenshot is added to the EXPERIMENTAL channel (4be68ef785 by @​huntie)
• React Native DevTools: Support for inspecting WebSocket events in the Network panel is added to the CANARY channel (713ae6b1b9 by @​huntie)
• React Native DevTools: Users and agents can now capture app screenshots via the Page.captureScreenshot command (00efc0a440 by @​huntie)
• Text: Add object syntax for fontVariationSettings (376b99ff14 by @​evankatz14)
• TypeScript: Add isInstalled() and clearAllLogs() to the LogBox TypeScript declarations (a69badd468 by @​Abbondanzo)
• TypeScript: Add missing strictMode prop to FlatList TypeScript types (3e2403327c by @​drhops)
• TypeScript: Add TypeScript declarations for requestIdleCallback and cancelIdleCallback (c086431a4b by @​Critteros)
• VirtualizedList: Add missing ListItemComponent type to VirtualizedList props (5306e9229c by @​aravi365)

Android specific

• Feature Flags: Add enableMountingCoordinatorPullModelAndroid feature flag (ece0efe837 by @​coado)
• Network Inspection: Expose network event reporting to third-party networking stacks as an unstable API (83d0be8958 by @​huntie)
• Networking: Send app name and version as the default User-Agent header for network requests, matching iOS (04e50d540d by Calvin Liu)
• Renderer: Add inert Java plumbing (PullTransactionMountItem, FabricUIManager.onTransactionAvailable) for the pull model (6515647d94 by Description has been truncated