August 2026 security updates

.github/workflows/react-ci.yml

@@ -22,7 +22,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 22
 
       - name: Install dependencies & build
         run: npm install

package.json

@@ -47,19 +47,19 @@
     "@types/node": "~20.19.0",
     "@types/react": "^18.2.21",
     "@types/react-dom": "^18.0.6",
-    "@vitejs/plugin-react": "^5.2.0",
-    "@vitest/coverage-istanbul": "^4.1.2",
+    "@vitejs/plugin-react": "^6.0.5",
+    "@vitest/coverage-istanbul": "^4.1.10",
     "eslint": "^9.28.0",
     "eslint-plugin-import": "^2.31.0",
     "gulp": "^5.0.1",
     "gulp-replace": "^1.1.3",
     "gulp-typescript": "^6.0.0-alpha.1",
-    "jsdom": "^27.4.0",
+    "jsdom": "^30.0.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "typescript": "^4.1.2",
     "typescript-eslint": "^8.34.0",
-    "vitest": "^4.1.2"
+    "vitest": "^4.1.10"
   },
   "repository": {
     "type": "git",

samples/next-js-sample/eslint.config.mjs

@@ -0,0 +1,11 @@
+import { defineConfig } from "eslint/config";
+import nextCoreWebVitals from "eslint-config-next/core-web-vitals";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+
+export default defineConfig([{
+    extends: [...nextCoreWebVitals],
+}]);

samples/next-js-sample/next.config.mjs

@@ -1,6 +1,12 @@
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   reactStrictMode: true,
+  // You may need the following setting in newer Next.js versions if you
+  // get the error "Cannot read properties of null (reading 'useContext')".
+  transpilePackages: ["configcat-react"],
+  turbopack: {
+    root: "."
+  }
 };
 
 export default nextConfig;

samples/next-js-sample/package.json

@@ -6,20 +6,24 @@
     "dev": "next dev",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint"
+    "lint": "eslint ."
   },
   "dependencies": {
-    "configcat-react": "^5.0.1",
-    "next": "14.2.33",
-    "react": "^18",
-    "react-dom": "^18"
+    "configcat-react": "^5.1.0",
+    "next": "16.3.0",
+    "react": "19.2.8",
+    "react-dom": "19.2.8"
   },
   "devDependencies": {
-    "@types/node": "^20",
-    "@types/react": "^18",
-    "@types/react-dom": "^18",
-    "eslint": "^8",
-    "eslint-config-next": "14.1.4",
-    "typescript": "^5"
+    "@types/node": "^22.20.1",
+    "@types/react": "19.2.18",
+    "@types/react-dom": "19.2.4",
+    "eslint": "9.39.5",
+    "eslint-config-next": "16.3.0",
+    "typescript": "~5.9.3"
+  },
+  "overrides": {
+    "@types/react": "19.2.18",
+    "@types/react-dom": "19.2.4"
   }
 }

samples/next-js-sample/tsconfig.json

@@ -1,6 +1,10 @@
 {
   "compilerOptions": {
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -10,12 +14,21 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "paths": {
-      "@/*": ["./src/*"]
-    }
+      "@/*": [
+        "./src/*"
+      ]
+    },
+    "target": "ES2017"
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx"],
-  "exclude": ["node_modules"]
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
 }

samples/react-native-sample/app.json

@@ -6,24 +6,20 @@
     "orientation": "portrait",
     "icon": "./assets/icon.png",
     "userInterfaceStyle": "light",
-    "newArchEnabled": true,
-    "splash": {
-      "image": "./assets/splash-icon.png",
-      "resizeMode": "contain",
-      "backgroundColor": "#ffffff"
-    },
     "ios": {
       "supportsTablet": true
     },
     "android": {
       "adaptiveIcon": {
         "foregroundImage": "./assets/adaptive-icon.png",
         "backgroundColor": "#ffffff"
-      },
-      "edgeToEdgeEnabled": true
+      }
     },
     "web": {
       "favicon": "./assets/favicon.png"
-    }
+    },
+    "plugins": [
+      "expo-status-bar"
+    ]
   }
 }

samples/react-native-sample/package.json

@@ -9,18 +9,18 @@
     "web": "expo start --web"
   },
   "dependencies": {
-    "@expo/metro-runtime": "~6.1.1",
-    "configcat-react": "^5.0.1",
-    "expo": "~54.0.0-preview.12",
-    "expo-status-bar": "~3.0.6",
-    "react": "19.1.0",
-    "react-dom": "19.1.0",
-    "react-native": "0.81.1",
-    "react-native-web": "^0.21.0"
+    "@expo/metro-runtime": "~57.0.8",
+    "configcat-react": "^5.1.0",
+    "expo": "~57.0.11",
+    "expo-status-bar": "~57.0.1",
+    "react": "19.2.3",
+    "react-dom": "19.2.3",
+    "react-native": "0.86.2",
+    "react-native-web": "^0.21.2"
   },
   "devDependencies": {
-    "@types/react": "~19.1.0",
-    "typescript": "~5.9.2"
+    "@types/react": "~19.2.4",
+    "typescript": "~6.0.3"
   },
   "private": true
 }

samples/react-sdk-sample/package.json

@@ -10,19 +10,19 @@
     "preview": "vite preview"
   },
   "dependencies": {
-    "configcat-react": "^5.0.1",
-    "react": "^19.1.1",
-    "react-dom": "^19.1.1"
+    "configcat-react": "^5.1.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",
-    "@types/react": "^19.1.12",
-    "@types/react-dom": "^19.1.9",
-    "@vitejs/plugin-react": "^5.1.3",
-    "globals": "^17.3.0",
-    "jsdom": "^27.4.0",
-    "typescript": "~5.9.2",
-    "vite": "^7.3.1",
-    "vitest": "^4.0.18"
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^6.0.5",
+    "globals": "^17.9.0",
+    "jsdom": "^30.0.1",
+    "typescript": "~5.9.3",
+    "vite": "^8.2.1",
+    "vitest": "^4.1.10"
   }
 }

sandbox/README.md

@@ -7,3 +7,11 @@ This project uses [Storybook](https://storybook.js.org/) to showcase and test th
 1. `npm i`
 2. `npm run build`
 3. `npm run storybook`
+
+## Troubleshooting
+
+When run from the Command Prompt on Windows, you may encounter the error: `importers[path] is not a function`.
+
+This issue is caused by [a bug in the tooling](https://github.com/vitejs/vite/issues/18468) that occurs when the drive letter is lowercase.
+
+If you run into this problem, use PowerShell instead.

sandbox/package.json

@@ -11,20 +11,20 @@
     "build-storybook": "storybook build"
   },
   "dependencies": {
-    "configcat-react": "^5.0.1",
-    "react": "^19.1.1",
-    "react-dom": "^19.1.1"
+    "configcat-react": "^5.1.0",
+    "react": "^19.2.8",
+    "react-dom": "^19.2.8"
   },
   "devDependencies": {
-    "@storybook/addon-docs": "^9.1.3",
-    "@storybook/addon-links": "^9.1.3",
-    "@storybook/react-vite": "^9.1.3",
-    "@types/react": "^19.1.10",
-    "@types/react-dom": "^19.1.7",
-    "@vitejs/plugin-react": "^5.0.0",
-    "globals": "^16.3.0",
-    "storybook": "^9.1.3",
-    "typescript": "~5.9.2",
-    "vite": "^6.3.5"
+    "@storybook/addon-docs": "^10.5.7",
+    "@storybook/addon-links": "^10.5.7",
+    "@storybook/react-vite": "^10.5.7",
+    "@types/react": "^19.2.18",
+    "@types/react-dom": "^19.2.4",
+    "@vitejs/plugin-react": "^6.0.5",
+    "globals": "^17.9.0",
+    "storybook": "^10.5.7",
+    "typescript": "~5.9.3",
+    "vite": "^8.2.1"
   }
 }