ECHOES-1266 Backport

[jeremy-davis-sonarsource]

No description provided.

[netlify]

✅ Deploy Preview for echoes-react ready!

Name	Link
🔨 Latest commit	eda73bb
🔍 Latest deploy log	https://app.netlify.com/projects/echoes-react/deploys/69c296e3c4cfa800086e2962
😎 Deploy Preview	https://deploy-preview-661--echoes-react.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[hashicorp-vault-sonar-prod]

ECHOES-1266

[sonar-review-alpha]

Summary

This backport hardens React 19 ref handling to prevent callback-ref update loops. It applies patches to Radix UI's compose-refs and radio-group that skip forwarding null values to function refs, adds deduplication logic to the useForwardedRef hook, and improves dependency documentation. These changes prevent maximum update depth errors that occur when function refs trigger state updates that cause the ref to detach/reattach in a feedback loop.

What reviewers should know

Start by reviewing the two .yarn/patches files—they show the specific Radix UI fixes: skipping null calls to function refs in setRef, and replacing a useState + callback pattern with useRef in radio-group. Then check src/common/helpers/useForwardedRef.ts which applies similar null-skipping logic with added deduplication to local state updates. The sidebar-navigation changes are just refactoring (extracting a constant and mocking it in tests). The package.json.md additions document why these patches exist. All changes are minimal and focused on preventing ref-driven render loops in React 19.

---

• Generate Walkthrough
• Generate Diagram

🗣️ Give feedback

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
80.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[sonar-review-alpha]

Conclusion: Solid backport. The ref-hardening logic is correct and the patches are well-targeted. One minor duplication worth cleaning up before it spreads further.

🗣️ Give feedback