Update React

[fritz-astronomer]

Need to update react
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components
Starship should not be affected, but it would be prudent regardless.

[odaneau-astro]

We run React 18.2.0 in Starship. From what I understand, this CVE does not impact us as it only applies to React 19.

[fritz-astronomer]

CVE doesn't affect us either way, as we don't use server rendering - but I still think we should update to the latest major/minor?

You're correct, that the vulnerability is only with 19.x, all the 19 minors have fix patches.

That being said - I have no idea what a major version update would impact.