diff --git a/.changeset/old-bulldogs-relate.md b/.changeset/old-bulldogs-relate.md new file mode 100644 index 000000000000..ea7127beea0d --- /dev/null +++ b/.changeset/old-bulldogs-relate.md @@ -0,0 +1,6 @@ +--- +'@ai-sdk/react': patch +'@ai-sdk/rsc': patch +--- + +Require minimal versions for RSC to address CVE-2025-55182 diff --git a/packages/react/package.json b/packages/react/package.json index f018e0778569..6b630321d730 100644 --- a/packages/react/package.json +++ b/packages/react/package.json @@ -53,7 +53,7 @@ "zod": "3.25.76" }, "peerDependencies": { - "react": "^18 || ^19 || ^19.0.0-rc", + "react": "^18 || ^19.0.0-rc || ^19", "zod": "^3.25.76 || ^4.1.8" }, "peerDependenciesMeta": { diff --git a/packages/rsc/package.json b/packages/rsc/package.json index e213cd6ef8ea..85086ad70ff7 100644 --- a/packages/rsc/package.json +++ b/packages/rsc/package.json @@ -64,7 +64,7 @@ "zod": "3.25.76" }, "peerDependencies": { - "react": "^18 || ^19 || ^19.0.0-rc", + "react": "^18 || ^19.0.0-rc || ~19.0.1 || ~19.1.2 || ^19.2.1", "zod": "^3.25.76 || ^4.1.8" }, "peerDependenciesMeta": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 18ad9d0961dd..d00cf7998de9 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -2440,7 +2440,7 @@ importers: specifier: workspace:* version: link:../ai react: - specifier: ^18 || ^19 || ^19.0.0-rc + specifier: ^18 || ^19 version: 18.3.1 swr: specifier: ^2.2.5 @@ -2454,7 +2454,7 @@ importers: version: 6.6.3 '@testing-library/react': specifier: ^16.0.1 - version: 16.0.1(@testing-library/dom@10.4.0)(@types/react-dom@18.2.4)(@types/react@18.3.3)(react-dom@18.2.0(react@18.3.1))(react@18.3.1) + version: 16.0.1(@testing-library/dom@10.4.0)(@types/react-dom@18.2.4)(@types/react@18.3.3)(react-dom@18.3.1(react@18.3.1))(react@18.3.1) '@testing-library/user-event': specifier: ^14.5.2 version: 14.5.2(@testing-library/dom@10.4.0) @@ -2484,7 +2484,7 @@ importers: version: 2.6.4(@types/node@20.17.24)(typescript@5.8.3) react-dom: specifier: ^18 - version: 18.2.0(react@18.3.1) + version: 18.3.1(react@18.3.1) tsup: specifier: ^7.2.0 version: 7.2.0(postcss@8.5.6)(ts-node@10.9.2(@types/node@20.17.24)(typescript@5.8.3))(typescript@5.8.3) @@ -26931,12 +26931,12 @@ snapshots: lodash: 4.17.21 redent: 3.0.0 - '@testing-library/react@16.0.1(@testing-library/dom@10.4.0)(@types/react-dom@18.2.4)(@types/react@18.3.3)(react-dom@18.2.0(react@18.3.1))(react@18.3.1)': + '@testing-library/react@16.0.1(@testing-library/dom@10.4.0)(@types/react-dom@18.2.4)(@types/react@18.3.3)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)': dependencies: '@babel/runtime': 7.25.7 '@testing-library/dom': 10.4.0 react: 18.3.1 - react-dom: 18.2.0(react@18.3.1) + react-dom: 18.3.1(react@18.3.1) optionalDependencies: '@types/react': 18.3.3 '@types/react-dom': 18.2.4 @@ -36507,12 +36507,6 @@ snapshots: react: 18.2.0 scheduler: 0.23.0 - react-dom@18.2.0(react@18.3.1): - dependencies: - loose-envify: 1.4.0 - react: 18.3.1 - scheduler: 0.23.0 - react-dom@18.3.1(react@18.3.1): dependencies: loose-envify: 1.4.0