fix: update React.js to v19.2.3 (security release)

Ref: https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components

.github/workflows/chromatic.yml

@@ -18,14 +18,12 @@ jobs:
       NEXT_TELEMETRY_DISABLED: "1"
       STORYBOOK_DISABLE_TELEMETRY: "1"
     steps:
-      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
+      - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6.0.1
-        with:
-          fetch-depth: 0
 
-      - uses: "pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda" # v4.1.0
+      - uses: "pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061" # v4.2.0
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
+        uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
         with:
           node-version: "24.11.1"
           cache: "pnpm"

.github/workflows/ci.yml

@@ -18,12 +18,12 @@ jobs:
       NEXT_TELEMETRY_DISABLED: "1"
       STORYBOOK_DISABLE_TELEMETRY: "1"
     steps:
-      - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+      - uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6.0.1
 
-      - uses: "pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda" # v4.1.0
+      - uses: "pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061" # v4.2.0
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
+        uses: "actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f" # v6.1.0
         with:
           node-version: "24.11.1"
           cache: "pnpm"

CONTRIBUTING.md

@@ -28,7 +28,7 @@ The commit message guidelines adheres to [Conventional Commits](https://www.conv
 ### Prerequisites
 
 - [Node.js](https://nodejs.org/) >= v24.0.0 [(`nvm install 24`)](https://nvm.sh)
-- [pnpm](https://pnpm.io/) v10.24.0 [(`npm install --global corepack@0.34.5 && corepack enable`)](https://github.com/nodejs/corepack)
+- [pnpm](https://pnpm.io/) v10.25.0 [(`npm install --global corepack@0.34.5 && corepack enable`)](https://github.com/nodejs/corepack)
 - [Docker](https://www.docker.com/)
 
 ### Installation

package.json

@@ -3,7 +3,7 @@
   "version": "0.0.0-develop",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a",
+  "packageManager": "pnpm@10.25.0+sha512.5e82639027af37cf832061bcc6d639c219634488e0f2baebe785028a793de7b525ffcd3f7ff574f5e9860654e098fe852ba8ac5dd5cefe1767d23a020a92f501",
   "engines": {
     "node": ">=24.0.0"
   },

pnpm-workspace.yaml

@@ -12,17 +12,17 @@ catalog:
   # TypeScript
   "typescript": "5.9.3"
   "@total-typescript/ts-reset": "0.6.1"
-  "@types/node": "24.10.1"
+  "@types/node": "24.10.3"
 
   # Utils
   "mime": "4.1.0"
 
   # React.js/Next.js
-  "next": &next "16.0.7"
+  "next": &next "16.0.10"
-  "next-intl": "4.5.8"
+  "next-intl": "4.6.0"
   "next-themes": "0.4.6"
-  "react": "19.2.1"
+  "react": "19.2.3"
-  "react-dom": "19.2.1"
+  "react-dom": "19.2.3"
   "@types/react": "19.2.7"
   "@types/react-dom": "19.2.3"
   "react-icons": "5.5.0"
@@ -30,7 +30,7 @@ catalog:
   # Blog
   "@giscus/react": "3.1.0"
   "gray-matter": "4.0.3"
-  "katex": "0.16.25"
+  "katex": "0.16.27"
   "next-mdx-remote": "5.0.0"
   "@mdx-js/mdx": "3.1.1"
   "rehype-katex": "7.0.1"
@@ -42,13 +42,13 @@ catalog:
   "@shikijs/rehype": "1.24.0"
 
   # Markdown Lint
-  "markdownlint-cli2": "0.19.1"
+  "markdownlint-cli2": "0.20.0"
-  "markdownlint": "0.39.0"
+  "markdownlint": "0.40.0"
   "markdownlint-rule-relative-links": "4.2.0"
 
   # ESLint
   "globals": "16.5.0"
-  "typescript-eslint": "8.48.1"
+  "typescript-eslint": "8.49.0"
   "eslint": "9.39.1"
   "eslint-config-conventions": "21.1.1"
   "eslint-plugin-promise": "7.2.1"
@@ -64,7 +64,7 @@ catalog:
   "editorconfig-checker": "6.1.1"
 
   # Storybook
-  "storybook": &storybook "10.1.4"
+  "storybook": &storybook "10.1.8"
   "@storybook/addon-docs": *storybook
   "@storybook/addon-a11y": *storybook
   "@storybook/nextjs": *storybook
@@ -80,9 +80,9 @@ catalog:
 
   # CSS
   "postcss": "8.5.6"
-  "@tailwindcss/postcss": "4.1.17"
+  "@tailwindcss/postcss": "4.1.18"
   "@tailwindcss/typography": "0.5.19"
-  "tailwindcss": "4.1.17"
+  "tailwindcss": "4.1.18"
   "tailwind-merge": "3.4.0"
   "clsx": "2.1.1"
   "cva": "1.0.0-beta.4"
@@ -95,6 +95,7 @@ onlyBuiltDependencies:
   - "esbuild"
   - "sharp"
   - "unrs-resolver"
+  - "@parcel/watcher"
 
 publicHoistPattern:
   - "*eslint*"