Skip to content

Conversation

@MSNev
Copy link
Contributor

@MSNev MSNev commented Dec 4, 2025

No description provided.

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR attempts to roll back React and React-DOM to version 19.0.1 to address a CVE (Common Vulnerabilities and Exposures) security issue. However, the implementation has critical issues that will prevent successful installation and use of the packages.

Key Changes:

  • Update React and React-DOM from 19.1.2 to 19.0.1 (intended)
  • Update corresponding TypeScript type definitions
  • Update peer dependencies and documentation

Critical Problem: React version 19.0.1 does not exist. The lockfile also contains multiple inconsistencies where resolved URLs and integrity hashes point to different versions (19.1.2, 19.2.x) than what's specified in the version fields.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 7 comments.

File Description
common/config/rush/npm-shrinkwrap.json Attempts to update React, React-DOM, and type definitions to 19.0.1, but contains version mismatches where resolved URLs point to different versions (19.1.2, 19.2.7)
applicationinsights-react-js/package.json Updates devDependencies and peer dependencies to reference non-existent React 19.0.1
README.md Updates version compatibility table with non-existent React version 19.0.1
Files not reviewed (1)
  • common/config/rush/npm-shrinkwrap.json: Language not supported

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants