π₯ Keeps React and React-Native experts up to date! Join 34k+ devs for one email per week.
βοΈ This Week In React #261: Major RSC vulnerability, Activity, React Router, Sonner, Cedar | RNRepo, Nitro Modules, Keyboard Controller, SET, Sheets, deep links | tsgo, Bun, WebGPU, Vite, oxfmt, Valibot
|
βπ Read Online β Hi everyone! A major React 19 Server Functions vulnerability has just been disclosed. Make sure to upgrade your React 19 or meta-framework ASAP! On the mobile side, we have more positive news: RNRepo should speed up our React Native builds even more, and Shared Elements Transitions are coming soon! (unlike React Native 1.0 π ) Donβt forget to answer the State of React 2025 survey while itβs still open! As always, thanks for supporting us on your favorite platform:
πΈ Sponsor
βAG Charts: The Best React Charts in the World.β AG Charts is a high-performance, canvas-based charting library from AG Grid. Originally built to power AG Gridβs Integrated Charts, it now serves over 1M npm downloads each month.
π Get Started for Free: www.ag-grid.com/chartsβ
βοΈ React
βReact 19 Critical Security Vulnerability in React Server Componentsβ A critical (10.0) security vulnerability affects React 19. It allows unauthenticated remote code execution vulnerability in React Server Components by crafting a malicious HTTP request sent to a Server Function endpoint. The React team recommends upgrading immediately. The vulnerability has been responsibly disclosed, and patches are already available for React 19 and the most popular frameworks that leverage RSCs: Next.js, Expo, React Router, Waku, Redwood, and more. Hosting providers can mitigate the issue thanks to their Web Application Firewalls.
πΈ Sponsor
βLet AI fix your mistakes. It already generated the diffβ Seer, Sentryβs AI debugger, finds what broke, tells you why, and figures out the fix. Now it can hand that root cause (with full issue context) to your Cursor agent to draft the PR automatically. Hereβs how it works and how to set it up.β β
π± React-Native
βRNRepo - Faster React Native Builds Through Prebuilt Artifactsβ Software Mansion just unveiled RNRepo, a new infrastructure project aiming to speed up our React Native builds. The idea is to prebuild popular native libraries against multiple React Native versions ahead of time, and host the artifacts on a Maven repository. Then, you can configure your build to download the prebuilt artifacts instead of building them locally, saving time and disk space. This should complete nicely the speed improvements we get with React Native core prebuilds and the Expo Build Cache providers. For now, RNRepo is in beta. It only supports Android and 40 popular libraries, but iOS support is coming, and the community can request support for additional libraries.
π«π· En franΓ§ais
π Other
π€ Fun
See ya! π |
βοΈ This Week In React
π₯ Keeps React and React-Native experts up to date! Join 34k+ devs for one email per week.
π Read Online Hi everyone! Filip and Krzysztof from Software Mansion here! π Itβs been another challenging week for the React ecosystem. Developers worldwide have been rushing to update their React versions to patch two new vulnerabilities. This serves as a good reminder for all of us to prioritize security during testing. Fortunately, React Native remains mostly unaffected by these threats, as Server Components arenβt yet widely used in the mobile environment. We are taking a well-deserved...
π Read Online Hi everyone! This week, it remains important for me to raise awareness about the React Server Components vulnerability, since an exploit is now widely available. Thankfully, we also have more positive React content to check with Fate, TanStack Alpha, React Grab, and more. Itβs even hotter on the React Native side. We were patiently waiting for 0.83 to publish π and itβs now out. You can now use <Activity> in React Native π₯. Reanimated 4.2 is also out with Shared Elements...
π Read Online Hi everyone! Kacper and Tymek from Software Mansion here! π This week, TanStack Pacer debuts in Beta, a new framework-agnostic library for controlling function timing with a dedicated React adapter. Lots of interesting articles featuring a 20,000x improvement in TanStack Router route matching algorithm speed, tips to speeding up Next.js on Kubernetes, and a tutorial for React 19 Actions for better component responsiveness. On the React Native side, we'd like to highlight an...