fix(deps): update react packages

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
react (source)	19.2.3 → 19.2.5
react-dom (source)	19.2.3 → 19.2.5
react-shiki (source)	0.9.1 → 0.9.3

---

Release Notes

facebook/react (react)

v19.2.5: 19.2.5 (April 8th, 2026)

Compare Source

React Server Components

• Add more cycle protections (#​36236 by @​eps1lon and @​unstubbable)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#​35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

AVGVSTVS96/react-shiki (react-shiki)

v0.9.3

Compare Source

Patch Changes

• Fix: CSS specificity by utilizing CSS @layer base and rename classnames and line-number CSS variables to rs- prefixed names, with legacy selector and variable aliases kept for backwards compatibility until the next release. #141 aa59bd5 @​AVGVSTVS96
• Fix: missing type definition for css #144 6bbd930 @​AVGVSTVS96

v0.9.2

Compare Source

Patch Changes

• Feat: auto-load embedded languages #127 34a87b2 @​AVGVSTVS96

• Chore: update dependencies #125 b691861 @​AVGVSTVS96

• Deprecate customLanguages in favor of preloadLanguages for language preloading. #128 121517f @​AVGVSTVS96

  preloadLanguages supports both bundled language IDs and custom language registrations.
  This also enables preloading bundled IDs directly (previously preloading focused on custom grammars).

• Refactor: consolidate language resolution and use stricter Shiki type for grammars #123 30024f7 @​AVGVSTVS96

  • Use stricter Shiki LanguageRegistration type for textmate grammars
  • Re-export LanguageRegistration type for convenience
  • Replace try/catch error handling with proactive language validation
  • Decouple display label from language resolver

  BREAKING CHANGES:

  • Custom grammars without top-level 'repository' property need LanguageRegistration casting
  • Component language display no longer shows 'plaintext' for invalid languages

---

Configuration

📅 Schedule: (in timezone Europe/Oslo)

• Branch creation
  • "before 6am on Saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate using a preset from . View repository job log here

[changeset-bot]

⚠️ No Changeset found

Latest commit: 9e0f083

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR