Skip to content

[Flight] Add more cycle protections#36236

Merged
eps1lon merged 1 commit intofacebook:mainfrom
eps1lon:sebbie/march-dos
Apr 8, 2026
Merged

[Flight] Add more cycle protections#36236
eps1lon merged 1 commit intofacebook:mainfrom
eps1lon:sebbie/march-dos

Conversation

@eps1lon
Copy link
Copy Markdown
Collaborator

@eps1lon eps1lon commented Apr 8, 2026

This fixes security vulnerabilities in Server Functions.

@eps1lon eps1lon requested review from gnoff and unstubbable April 8, 2026 18:44
@meta-cla meta-cla bot added the CLA Signed label Apr 8, 2026
@github-actions github-actions bot added the React Core Team Opened by a member of the React Core Team label Apr 8, 2026
@react-sizebot
Copy link
Copy Markdown

Comparing: 0c44b96...e332503

Critical size changes

Includes critical production bundles, as well as any change greater than 2%:

Name +/- Base Current +/- gzip Base gzip Current gzip
oss-stable/react-dom/cjs/react-dom.production.js = 6.84 kB 6.84 kB = 1.88 kB 1.88 kB
oss-stable/react-dom/cjs/react-dom-client.production.js = 612.91 kB 612.91 kB = 108.30 kB 108.30 kB
oss-experimental/react-dom/cjs/react-dom.production.js = 6.84 kB 6.84 kB = 1.88 kB 1.88 kB
oss-experimental/react-dom/cjs/react-dom-client.production.js = 678.85 kB 678.85 kB = 119.27 kB 119.27 kB
facebook-www/ReactDOM-prod.classic.js = 698.24 kB 698.24 kB = 122.65 kB 122.65 kB
facebook-www/ReactDOM-prod.modern.js = 688.55 kB 688.55 kB = 121.03 kB 121.03 kB

Significant size changes

Includes any change greater than 0.2%:

(No significant changes)

Generated by 🚫 dangerJS against e332503

@eps1lon eps1lon merged commit 404b38c into facebook:main Apr 8, 2026
242 checks passed
@eps1lon eps1lon deleted the sebbie/march-dos branch April 8, 2026 19:01
github-actions bot pushed a commit that referenced this pull request Apr 8, 2026
github-actions bot pushed a commit that referenced this pull request Apr 8, 2026
iecg added a commit to iecg/fretboard-app that referenced this pull request Apr 15, 2026
Bumps
[react](https://github.com/facebook/react/tree/HEAD/packages/react) and
[react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom)
from 19.2.4 to 19.2.5.

Release notes
<details>
<summary>Sourced from <a
href="https://github.com/facebook/react/releases">react's
releases</a>.</summary>

## 19.2.5 (April 8th, 2026)

## React Server Components
- Add more cycle protections
([#36236](facebook/react#36236) by
[`@eps1lon`](https://github.com/eps1lon) and
[`@unstubbable`](https://github.com/unstubbable))
</details>

Commits
-
[`23f4f9f`](facebook/react@23f4f9f)
19.2.5
- See full diff in [compare
view](https://github.com/facebook/react/commits/v19.2.5/packages/react)

<br/>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: iecg <iecg@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: iecg <8894160+iecg@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CLA Signed React Core Team Opened by a member of the React Core Team

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants