fix: update React.js to v19.2.1 (security release)

Ref: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

.github/workflows/chromatic.yml

@@ -27,7 +27,7 @@ jobs:
       - name: "Setup Node.js"
         uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
         with:
-          node-version: "24.10.0"
+          node-version: "24.11.1"
           cache: "pnpm"
 
       - name: "Install dependencies"

.github/workflows/ci.yml

@@ -18,14 +18,14 @@ jobs:
       NEXT_TELEMETRY_DISABLED: "1"
       STORYBOOK_DISABLE_TELEMETRY: "1"
     steps:
-      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
+      - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
 
       - uses: "pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda" # v4.1.0
 
       - name: "Setup Node.js"
         uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
         with:
-          node-version: "24.10.0"
+          node-version: "24.11.1"
           cache: "pnpm"
 
       - name: "Install dependencies"

.vscode/extensions.json

@@ -1,7 +1,7 @@
 {
   "recommendations": [
     "editorconfig.editorconfig",
-    "esbenp.prettier-vscode",
+    "prettier.prettier-vscode",
     "dbaeumer.vscode-eslint",
     "davidanson.vscode-markdownlint",
     "bradlc.vscode-tailwindcss",

.vscode/settings.json

@@ -3,7 +3,7 @@
   "editor.bracketPairColorization.enabled": true,
   "editor.wordWrap": "on",
   "prettier.configPath": ".prettierrc.json",
-  "editor.defaultFormatter": "esbenp.prettier-vscode",
+  "editor.defaultFormatter": "prettier.prettier-vscode",
   "editor.formatOnSave": true,
   "editor.codeActionsOnSave": {
     "source.fixAll": "explicit",

CONTRIBUTING.md

@@ -28,7 +28,7 @@ The commit message guidelines adheres to [Conventional Commits](https://www.conv
 ### Prerequisites
 
 - [Node.js](https://nodejs.org/) >= v24.0.0 [(`nvm install 24`)](https://nvm.sh)
-- [pnpm](https://pnpm.io/) v10.20.0 [(`npm install --global corepack@0.34.1 && corepack enable`)](https://github.com/nodejs/corepack)
+- [pnpm](https://pnpm.io/) v10.24.0 [(`npm install --global corepack@0.34.5 && corepack enable`)](https://github.com/nodejs/corepack)
 - [Docker](https://www.docker.com/)
 
 ### Installation

apps/website/Dockerfile

@@ -1,7 +1,7 @@
-FROM node:24.10.0-slim@sha256:b8d2197aff9129d16c801a3e3e1b2a873c4946480f5a310f38056df2268c38d9 AS node-pnpm
+FROM node:24.11.1-slim@sha256:0afb7822fac7bf9d7c1bf3b6e6c496dee6b2b64d8dfa365501a3c68e8eba94b2 AS node-pnpm
 ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
-RUN npm install --global corepack@0.34.1 && corepack enable
+RUN npm install --global corepack@0.34.5 && corepack enable
 ENV TURBO_TELEMETRY_DISABLED=1
 ENV NEXT_TELEMETRY_DISABLED=1
 ENV DO_NOT_TRACK=1
@@ -9,7 +9,7 @@ WORKDIR /usr/src/app
 
 FROM node-pnpm AS builder
 COPY ./ ./
-RUN pnpm install --global turbo@2.6.0
+RUN pnpm install --global turbo@2.6.3
 RUN turbo prune @repo/website --docker
 
 FROM node-pnpm AS installer

package.json

@@ -3,7 +3,7 @@
   "version": "0.0.0-develop",
   "private": true,
   "type": "module",
-  "packageManager": "pnpm@10.20.0+sha512.cf9998222162dd85864d0a8102e7892e7ba4ceadebbf5a31f9c2fce48dfce317a9c53b9f6464d1ef9042cba2e02ae02a9f7c143a2b438cd93c91840f0192b9dd",
+  "packageManager": "pnpm@10.24.0+sha512.01ff8ae71b4419903b65c60fb2dc9d34cf8bb6e06d03bde112ef38f7a34d6904c424ba66bea5cdcf12890230bf39f9580473140ed9c946fef328b6e5238a345a",
   "engines": {
     "node": ">=24.0.0"
   },

packages/ui/src/Design/Button/Button.tsx

@@ -34,8 +34,9 @@ interface ButtonBaseProps extends VariantProps<typeof buttonVariants> {
 }
 
 interface ButtonElementProps extends React.ComponentPropsWithoutRef<"button"> {}
-interface LinkElementProps
-  extends React.ComponentPropsWithoutRef<typeof NextLink> {}
+interface LinkElementProps extends React.ComponentPropsWithoutRef<
+  typeof NextLink
+> {}
 
 export type ButtonLinkProps = ButtonBaseProps &
   LinkElementProps & { href: string }

packages/ui/src/Layout/MainLayout/MainLayout.tsx

@@ -1,7 +1,6 @@
 import { classNames } from "@repo/config-tailwind/classNames"
 
-export interface MainLayoutProps
-  extends React.ComponentPropsWithoutRef<"main"> {
+export interface MainLayoutProps extends React.ComponentPropsWithoutRef<"main"> {
   className?: string
   center?: boolean
 }

packages/ui/src/Layout/Section/Section.tsx

@@ -4,8 +4,7 @@ import { Typography } from "../../Design/Typography/Typography.tsx"
 
 export * from "./RevealFade.tsx"
 
-export interface SectionProps
-  extends React.ComponentPropsWithoutRef<"section"> {
+export interface SectionProps extends React.ComponentPropsWithoutRef<"section"> {
   verticalSpacing?: boolean
   horizontalSpacing?: boolean
 }
@@ -64,8 +63,7 @@ export const SectionDescription: React.FC<SectionDescriptionProps> = (
   )
 }
 
-export interface SectionContentProps
-  extends React.ComponentPropsWithoutRef<"div"> {
+export interface SectionContentProps extends React.ComponentPropsWithoutRef<"div"> {
   shadowContainer?: boolean
 }
 

pnpm-workspace.yaml

@@ -7,24 +7,24 @@ catalogMode: "strict"
 
 catalog:
   # Turborepo
-  "turbo": "2.6.0"
+  "turbo": "2.6.3"
 
   # TypeScript
   "typescript": "5.9.3"
   "@total-typescript/ts-reset": "0.6.1"
-  "@types/node": "24.9.2"
+  "@types/node": "24.10.1"
 
   # Utils
   "mime": "4.1.0"
 
   # React.js/Next.js
-  "next": &next "16.0.1"
-  "next-intl": "4.4.0"
+  "next": &next "16.0.7"
+  "next-intl": "4.5.8"
   "next-themes": "0.4.6"
-  "react": "19.2.0"
-  "react-dom": "19.2.0"
-  "@types/react": "19.2.2"
-  "@types/react-dom": "19.2.2"
+  "react": "19.2.1"
+  "react-dom": "19.2.1"
+  "@types/react": "19.2.7"
+  "@types/react-dom": "19.2.3"
   "react-icons": "5.5.0"
 
   # Blog
@@ -42,15 +42,15 @@ catalog:
   "@shikijs/rehype": "1.24.0"
 
   # Markdown Lint
-  "markdownlint-cli2": "0.18.1"
-  "markdownlint": "0.38.0"
+  "markdownlint-cli2": "0.19.1"
+  "markdownlint": "0.39.0"
   "markdownlint-rule-relative-links": "4.2.0"
 
   # ESLint
-  "globals": "16.4.0"
-  "typescript-eslint": "8.46.2"
-  "eslint": "9.39.0"
-  "eslint-config-conventions": "21.1.0"
+  "globals": "16.5.0"
+  "typescript-eslint": "8.48.1"
+  "eslint": "9.39.1"
+  "eslint-config-conventions": "21.1.1"
   "eslint-plugin-promise": "7.2.1"
   "eslint-plugin-unicorn": "62.0.0"
   "eslint-plugin-import-x": "4.16.1"
@@ -59,31 +59,31 @@ catalog:
   "eslint-plugin-react-hooks": "7.0.1"
 
   # Prettier
-  "prettier": "3.6.2"
-  "prettier-plugin-tailwindcss": "0.7.1"
+  "prettier": "3.7.4"
+  "prettier-plugin-tailwindcss": "0.7.2"
   "editorconfig-checker": "6.1.1"
 
   # Storybook
-  "storybook": &storybook "10.0.2"
+  "storybook": &storybook "10.1.4"
   "@storybook/addon-docs": *storybook
   "@storybook/addon-a11y": *storybook
   "@storybook/nextjs": *storybook
   "@storybook/addon-themes": *storybook
-  "@storybook/test-runner": "0.24.1"
-  "@chromatic-com/storybook": "4.1.2"
-  "chromatic": "13.3.3"
+  "@storybook/test-runner": "0.24.2"
+  "@chromatic-com/storybook": "4.1.3"
+  "chromatic": "13.3.4"
 
   # Testing
-  "playwright": &playwright "1.56.1"
+  "playwright": &playwright "1.57.0"
   "@playwright/test": *playwright
-  "start-server-and-test": "2.1.2"
+  "start-server-and-test": "2.1.3"
 
   # CSS
   "postcss": "8.5.6"
-  "@tailwindcss/postcss": "4.1.16"
+  "@tailwindcss/postcss": "4.1.17"
   "@tailwindcss/typography": "0.5.19"
-  "tailwindcss": "4.1.16"
-  "tailwind-merge": "3.3.1"
+  "tailwindcss": "4.1.17"
+  "tailwind-merge": "3.4.0"
   "clsx": "2.1.1"
   "cva": "1.0.0-beta.4"
   "@fontsource/montserrat": "5.2.8"