Thanks to everyone who made this release possible!
For a full list of changes, see the changelog:
github.com/react/react/blob/…
browser() is a new API for components that depend on the browser.
Calling use(browser()) suspends during server rendering, so React can show the nearest Suspense fallback and continue rendering the component on the client.
react.dev/reference/react-do…
Fragment Refs are now stable.
Pass a ref to <Fragment> to work with its DOM children as a group, without adding a wrapper element. FragmentInstance includes APIs for events, focus, observers, measurement, and scrolling.
react.dev/reference/react/Fr…
<ViewTransition> is now stable.
It can animate UI as it enters, exits, or updates. Transitions, Suspense reveals, and deferred updates can trigger the animation.
react.dev/reference/react/Vi…
React 19.3 is now available!
This release makes View Transitions and Fragment Refs stable, and adds browser(), Trusted Types support, and Context in Server Components.
react.dev/blog/2026/09/09/re…
Thank you to @infinite_red @OldMissionHQ @arcjethq @RenderATL for being React Conf 2025's Silver sponsors!
Checkout @giolaq and @efahsl React Conf 2025 talk on how to use React and React Native to build for Amazon’s new Vega OS: youtube.com/watch?v=NKLwWf2G…
Thank you to @AmazonAppDev for being React Conf 2025's Platinum sponsor! Learn more here: developer.amazon.com
A huge thank you to React Conf 2025's sponsors. This event wouldn't be possible without the support of our incredible partners conf.react.dev/#sponsors
We want to make the next React Conf even better. Please give us your feedback and share your thoughts with us: conf.react.dev/survey
You can also checkout the photos from React Conf 2025 here: conf.react.dev/photos
In case you missed it, most speakers were interviewed by @JorgeWritesCode. See the interviews here:
conf.react.dev/?grid=intervi…
React@reactjs
11 Dec 2025United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
We found that the fix to address the DoS vulnerability in React Server Components (CVE-2025-55184) was incomplete and does not prevent an attack in a specific case.
This is disclosed as CVE-2025-67779. New patches are available now, please update immediately.
React@reactjs
11 Dec 2025United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
These vulnerabilities are present in the patches published last week for React2Shell.
Even though they do not allow for Remote Code Execution they are high severity and you should update (again) immediately.
react.dev/blog/2025/12/11/de…
React@reactjs
11 Dec 2025United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
This pattern shows up across the industry.
For example, after Log4Shell, additional CVEs were reported as the community examined the original fix.
Additional disclosures can be frustrating, but they are generally a sign of a healthy response cycle.