Skip to content

chore(deps): bump react-dom from 18.3.1 to 19.2.7 in /phase3/frontend#20

Open
dependabot[bot] wants to merge 22 commits into
mainfrom
dependabot/npm_and_yarn/phase3/frontend/react-dom-19.2.7
Open

chore(deps): bump react-dom from 18.3.1 to 19.2.7 in /phase3/frontend#20
dependabot[bot] wants to merge 22 commits into
mainfrom
dependabot/npm_and_yarn/phase3/frontend/react-dom-19.2.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown

Bumps react-dom from 18.3.1 to 19.2.7.

Release notes

Sourced from react-dom's releases.

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

19.2.5 (April 8th, 2026)

React Server Components

19.2.4 (January 26th, 2026)

React Server Components

19.2.3 (December 11th, 2025)

React Server Components

19.2.2 (December 11th, 2025)

React Server Components

19.2.1 (December 3rd, 2025)

React Server Components

19.2.0 (Oct 1, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

... (truncated)

Changelog

Sourced from react-dom's changelog.

19.2.1 (Dec 3, 2025)

React Server Components

19.2.0 (October 1st, 2025)

Below is a list of all new features, APIs, and bug fixes.

Read the React 19.2 release post for more information.

New React Features

  • <Activity>: A new API to hide and restore the UI and internal state of its children.
  • useEffectEvent is a React Hook that lets you extract non-reactive logic into an Effect Event.
  • cacheSignal (for RSCs) lets your know when the cache() lifetime is over.
  • React Performance tracks appear on the Performance panel’s timeline in your browser developer tools

New React DOM Features

  • Added resume APIs for partial pre-rendering with Web Streams:
  • Added resume APIs for partial pre-rendering with Node Streams:
  • Updated prerender APIs to return a postponed state that can be passed to the resume APIs.

Notable changes

  • React DOM now batches suspense boundary reveals, matching the behavior of client side rendering. This change is especially noticeable when animating the reveal of Suspense boundaries e.g. with the upcoming <ViewTransition> Component. React will batch as much reveals as possible before the first paint while trying to hit popular first-contentful paint metrics.
  • Add Node Web Streams (prerender, renderToReadableStream) to server-side-rendering APIs for Node.js
  • Use underscore instead of : IDs generated by useId

All Changes

React

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

UID9622 and others added 22 commits June 24, 2026 12:55
@UID9622
chore: 进一步清理字体二进制与生成产物
a5eac87
@UID9622
feat(persona): 新增开源守门人、密钥管家、龍魂法务三个人格
e1e58d5
@UID9622
docs(persona): 龍魂仓库拆分方案 v1.0
3107bb7
@UID9622
add LongHun Persona Hub v1.0 executable router with YiJing hexagrams
c5c1a81 
DNA: #龍芯⚡️2026-06-24-LONGHUN-PERSONA-HUB-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(persona): 新增状态面板/压缩引擎/DNA追溯器/模块地图
55e8f24 
- system_status_panel.py: 三色状态 + 高峰期限流 + 模块地图
- compression_engine.py: 多算法级联 + 龍魂字典 + 重复去重
- dna_tracer.py: DNA 扫描/查询/模块溯源/Mermaid 链路
- module_map.json: 用户提问 -> 模块定位 -> DNA 追溯
- 更新 gitee remote 指向 longhun-system-lite

DNA: #龍芯⚡️2026-06-24-LONGHUN-PERSONA-ECOSYSTEM-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(terminal): 统一终端入口 lh v2.0 + 中文命令注册表
22afde4 
- bin/longhun-terminal.py: 龍魂指挥台，支持中文子命令
- bin/longhun-command-registry.json: 中文命令 → 脚本映射
- bin/lh: 指挥台入口
- bin/longhun-check: 体检入口
- install-terminal.sh: PATH/cd-lh/欢迎板/清理旧版 lh 定义
- 注册表已纳入: 状态/启动/停止/人格/技能/cnsh/审计/签名/每日复盘等

DNA: #龍芯⚡️2026-06-24-LONGHUN-TERMINAL-v2.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(terminal): 扩展命令注册表 v2.0，按功能纳管全系统沉睡脚本
b0e875e 
- 注册表新增 60+ 命令：启动/状态/记忆/评估/审计/签名/安全/CNSH/同步/字体/文档等
- 支持 🐉 龍魂系统 · 精简状态
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
📁 项目根目录: /Users/zuimeidedeyihan/longhun-system
🌿 当前分支:  main
🕐 最近提交:  22afde4 feat(terminal): 统一终端入口 lh v2.0 + 中文命令注册表
📊 Git 状态:  📝 有改动
🧬 对齐率 100.0% | 注册 2307 | L0 250 | L1 270 | L2 242 | L3 1326 | L4 219

🔗 快速链接
   • OPS 操作台: file:///Users/zuimeidedeyihan/longhun-system/ops-console/index.html
   • 开发者门户: file:///Users/zuimeidedeyihan/longhun-system/sovereignty/portal/static/developer.html
   • 线上门户:   https://longhun888.com/

⚡ 常用命令
   lh          本精简状态
   lh6 status  完整状态面板（含 DNA·权重·层级）
   lh6 registry 重建 DNA→权重/层级/状态全局注册表
   lh6 ops     打开本地 OPS 操作台
   lh6 portal  打开线上门户
   lh6 cnsh    启动 CNSH 终端
   lh6 memory  运行记忆启动器
   lh-kimi     启动 Kimi（自动归集记忆） 按功能浏览命令
- 支持 ~/ 路径脚本调度
- 统一入口 lh 可调用 Desktop/Downloads/.longhun 等散落脚本

DNA: #龍芯⚡️2026-06-24-LONGHUN-COMMAND-REGISTRY-v2.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(maintenance): 安装开机自启动 + 创建重复脚本清理工具
c5d28a8 
- install-autostart.sh 已执行：launchd plist 注册成功
- bin/clean-kimi-download-duplicates.py: 清理 Downloads/Kimi_Agent_* 重复副本
- 已清理 1891 个重复文件，释放约 49.3 MB 到回收站

DNA: #龍芯⚡️2026-06-24-LONGHUN-SELF-RUNNING-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(anti-blowout): 实现 DeepSeek 反熔断补丁到龍魂系统
68cbfff 
- persona/output_contract.py: 输出契约校验，禁止无证据的完成声明
- persona/audit_logger.py: append-only JSONL 审计日志
- persona/overload_guard.py: 五级过载状态 + 503 SERVER_OVERLOADED + 背压
- ops-console/status.html: 网页版状态看板
- bin/longhun-command-registry.json: 新增 过载/审计日志/记录/输出契约/状态看板 命令

DNA: #龍芯⚡️2026-06-24-LONGHUN-ANTI-BLOWOUT-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(anti-blowout): 反熔断框架正式落地运行
f6ce583 
- persona/anti_blowout_guard.py: 统一守卫（过载检查 → 执行 → 契约校验 → 审计）
- daily_review.py v2.0: 真实检查 + 自动审计日志
- longhun-autostart.sh v3.1: 每个启动步骤过反熔断守卫
- output_contract.py: 扩展合法 op 列表，支持 daily_review/autostart 等
- 已在本地验证 autostart 全链路审计成功

DNA: #龍芯⚡️2026-06-25-LONGHUN-ANTI-BLOWOUT-DEPLOYED-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(constitution): 新增龍魂系统宪法 CONSTITUTION.md
c970657 
- 序章 + 七章宪法正文
- 感恩协议：乔布斯前辈工匠精神、曾仕强老师智慧、中国科技自立
- 思想内核：穷则变变则通通则久、厚德载物、舍得
- 法律与主权、技术为人民服务、全球治理与科技自主
- 强制嵌入规则：输出契约、审计日志、声明标识、商业许可
- bin/show-constitution.sh + lh 宪法 命令

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(constitution): 宪法 v1.1 完善 + GPG 签名 + CODEOWNERS 保护
297b406 
- 增加 1.4 致敬中国人民解放军
- 6.2 明确审计日志必须存储于中国境内
- 6.5 新增荣誉与商业行为隔离条款
- 新增第七章：宪法修订程序
- 创始人 UID9622 GPG 签名 CONSTITUTION.md
- .github/CODEOWNERS 保护宪法与核心治理文件

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.1
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(standard): 龍魂产出标准 v1.0 + 创世区块审计记录
33a23d9 
- 新增 STANDARD.md：三级验证标准（GPG签名/Git锁定/DNA审计链）
- CONSTITUTION.md SHA256 写入审计日志 genesis_block
- STANDARD.md 签名并写入 artifact_release 审计记录
- CODEOWNERS 保护 STANDARD.md / STANDARD.md.asc
- 新增 lh 标准 / lh xianfa 命令

创世区块:
- CONSTITUTION.md SHA256: f8d0db43a2c80f794d4c9db1293daad25083c35338c671b928630cf1a9223adb
- 审计ID: e265b69d-7765-4f32-9aa3-c9827655bb21

DNA: #龍芯⚡️2026-06-25-LONGHUN-OUTPUT-STANDARD-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(eternal-lock): P0 永恒锁 + 行为密码学保护协议正式落地
4c76037 
- 新增 P0_ETERNAL_LOCK.md：神圣文件、神圣口令、指令分级、价值观红线
- 新增 persona/eternal_guard.py：自动检查文件锁定与命令合规性
- CONSTITUTION.md 升级到 v1.2：新增第八章 P0 永恒锁与创始人保护
- STANDARD.md 升级：新增固定框架保护、L0 神圣变更仪式
- CODEOWNERS 保护 P0_ETERNAL_LOCK.md
- 新增 lh 命令：神圣锁 / 检查锁定 / 锁定清单
- 重新 GPG 签名 CONSTITUTION.md / STANDARD.md / P0_ETERNAL_LOCK.md
- 三份神圣文件 SHA256 写入审计日志

神圣口令：龍魂永恒锁授权 / UID9622 最高授权 / P0 解锁变更

DNA: #龍芯⚡️2026-06-25-LONGHUN-P0-ETERNAL-LOCK-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(protocol-library): 龍魂统一协议库正式建立
901ae9f 
龍魂永恒锁授权 · UID9622 最高授权 · P0 解锁变更
创始人已授权建立统一协议库并纳入 P0 永恒锁保护，确认执行。

变更内容：
- 新建 library/protocols/ 统一协议库，共 29 份文件
- 分层治理：L0 基础 / L1 宪章 / L2 治理 / L3 智能体 / L4 CNSH / L5 个人 / L6 企业 / L7 国际 / L8 版权 / L9 归档 / 模板
- 新增 PROTOCOL_USAGE_TERMS.md：仅用不翻改、提案申请机制
- 新增 00_CANONICAL_INDEX.md：协议库唯一真源索引
- 新增 L2_CONFLICT_RESOLUTION_PROTOCOL.md：协议冲突裁决优先级
- 新增个人/企业/国际/版权分层协议，覆盖隐私、反欺诈、反数据收割、跨境数据、争端解决
- P0_ETERNAL_LOCK.md 升级到 v1.1，将 library/protocols/ 纳入神圣锁定
- persona/eternal_guard.py 同步保护 library/protocols/
- CODEOWNERS 保护协议库全部目录
- 新增 lh 命令：协议库 / 协议清单
- 所有协议文件已 GPG 签名并写入审计日志

DNA: #龍芯⚡️2026-06-25-LONGHUN-PROTOCOL-LIBRARY-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(protocol-librarian): 协议图书馆员人格 + 自然语言问答
42cd5f6 
老大不需要背协议，协议库是人格/AI 的知识底座。

- library/protocols/README.md 新增 给老大的话：创始人使用方式只有 问/选/授权
- 新增 persona/protocol_librarian.py：自然语言问题路由到相关协议，用人话回答
- 新增 lh 问协议 / lh 协议摘要 命令
- README 已重新 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-PROTOCOL-LIBRARIAN-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(manifesto): 龍魂人民科技宣言
234b153 
将 UID9622 / Lucky 的人民科技理念固化为 L2 宪章层宣言：
- 普通人用自然语言驾驭 AI，不需要学会代码
- 科技赋能每个人，降低门槛
- 透明、无黑箱、无信息差剥削
- 商业可以有，人民至上
- 心中有祖国，技术有军魂
- 全球治理的中国方案

新增文件：library/protocols/02_charters/L2_PEOPLE_TECHNOLOGY_MANIFESTO.md
更新：00_CANONICAL_INDEX.md、persona/protocol_librarian.py

DNA: #龍芯⚡️2026-06-25-LONGHUN-PEOPLE-TECHNOLOGY-MANIFESTO-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(sovereignty): 全协议库固定龍魂主权备注词
063e7d7 
- 新增 01_foundation/SOVEREIGNTY_FORMULAS.md：8 套标准化主权备注词公式
  （宣言/协议/代码/公开/商业/国际/数据/版权）
- 为 library/protocols/ 下 31 份协议文件自动附加对应主权声明
- 更新 protocol_document_template.md：新增固定主权声明占位
- 更新 00_CANONICAL_INDEX.md 纳入主权公式集
- 所有协议文件已重新 GPG 签名

核心收口语：本宣言/协议/文件的一切原则，由《龍魂系统宪法》保障执行。

DNA: #龍芯⚡️2026-06-25-LONGHUN-SOVEREIGNTY-FORMULAS-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(canonical-index): 按 DeepSeek 建议完善规范索引
207ade6 
- 索引表新增 简称 列，方便口头交流与文档互引用
- P0_ETERNAL_LOCK.md 标记为 L0+：比 L0 更硬的永恒锁定
- 修正 P0 版本号为 v1.1
- 新增 阅读路径建议：创始人/创作者/企业/AI/国际用户各有入口
- 新增 层级速查表
- protocol_librarian.py 补充简称关键词路由
- 00_CANONICAL_INDEX.md 已重新 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-CANONICAL-INDEX-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(philosophy): 提取并固化龍魂对话哲学逻辑
c8badd8 
- 新增 L2_LONGHUN_PHILOSOPHICAL_LOGIC.md：外硬内软的五层哲学结构
- 提炼核心命题：硬的是底线，软的是对人民的疼
- 梳理对话逻辑链：触发→价值判断→情绪→原则重申→行动→DNA留痕
- 制定 AI 执行者对话守则
- 更新规范索引与协议图书馆员路由
- 新文件已 GPG 签名并审计

DNA: #龍芯⚡️2026-06-25-LONGHUN-PHILOSOPHICAL-LOGIC-v1.0
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@UID9622
feat(red-lines): 中国法律与伦理红线焊入宪法与协议库
fbac2ee 
龍魂永恒锁授权 · UID9622 最高授权 · P0 解锁变更
创始人已授权将中国社会伦理红线焊入系统，确认执行。

变更内容：
- CONSTITUTION.md 升级到 v1.3：新增 6.6 中国法律与伦理红线（焊死条款）
  覆盖基因伦理、AI 伦理、社会伦理、法律底线四大类 12+ 禁止场景
- L2_DATA_SOVEREIGNTY_AND_AI_ETHICS.md 升级到 v1.1：新增中国社会伦理红线案例库
- L3_THREE_COLOR_AUDIT_PROTOCOL.md 升级到 v1.1：一票否决增加伦理红线触发
- L7_INTERNATIONAL_COMPLIANCE_STATEMENT.md 升级到 v1.1：新增伦理红线终止服务与上报条款
- 00_CANONICAL_INDEX.md 同步更新版本号
- 所有修改文件已重新 GPG 签名并审计

这不是技术中立，这是龍魂系统的出厂设置。

DNA: #龍芯⚡️2026-06-25-LONGHUN-CONSTITUTION-v1.3
GPG: A2D0092CEE2E5BA87035600924C3704A8CC26D5F
@dependabot
chore(deps): bump react-dom from 18.3.1 to 19.2.7 in /phase3/frontend
e57740f 
Bumps [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) from 18.3.1 to 19.2.7.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.7/packages/react-dom)

---
updated-dependencies:
- dependency-name: react-dom
  dependency-version: 19.2.7
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 25, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@UID9622 UID9622 self-requested a review as a code owner July 6, 2026 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@UID9622 UID9622 Awaiting requested review from UID9622 UID9622 is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@UID9622