Chore(deps): bump the react group across 1 directory with 2 updates (#271)

* Chore(deps): bump the react group across 1 directory with 2 updates

Bumps the react group with 2 updates in the / directory: [react](https://github.com/facebook/react/tree/HEAD/packages/react) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react).


Updates `react` from 19.2.5 to 19.2.6
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/commits/v19.2.6/packages/react)

Updates `@types/react` from 19.2.13 to 19.2.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: react
  dependency-version: 19.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
- dependency-name: "@types/react"
  dependency-version: 19.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: react
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update lockfile and use catalog for react dependencies

* fix(ci): add safe.directory config for container-based e2e job

Running in a container causes git 'dubious ownership' errors because
the workspace owner differs from the container user. This broke
lefthook install during pnpm prepare. Mark the workspace as a safe
directory to resolve the issue.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: IzumiSy <beetle-noise@gmx.com>

Author: dependabot[bot]

.github/workflows/ci-e2e.yaml

@@ -20,6 +20,11 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
+      # Running in a container causes git "dubious ownership" errors because the
+      # workspace owner differs from the container user. Mark it as safe so that
+      # lefthook install (triggered by pnpm prepare) can run git commands.
+      - name: Fix git ownership
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
         with:
           run_install: false

e2e/package.json

@@ -18,8 +18,8 @@
     "@types/react-dom": "catalog:",
     "@vitejs/plugin-react": "catalog:",
     "dotenv": "^16.5.0",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
+    "react": "catalog:",
+    "react-dom": "catalog:",
     "tailwindcss": "catalog:",
     "typescript": "catalog:",
     "vite": "catalog:"

examples/nextjs-app/package.json

@@ -12,8 +12,8 @@
     "@hookform/resolvers": "^5.2.2",
     "@tailor-platform/app-shell": "workspace:*",
     "next": "16.2.6",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
+    "react": "catalog:",
+    "react-dom": "catalog:",
     "react-hook-form": "^7.71.2",
     "zod": "^4.4.3"
   },

examples/vite-app/package.json

@@ -12,8 +12,8 @@
   "dependencies": {
     "@tailor-platform/app-shell": "workspace:*",
     "lucide-react": "^1.8.0",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
+    "react": "catalog:",
+    "react-dom": "catalog:",
     "tailwindcss": "catalog:"
   },
   "devDependencies": {

packages/core/package.json

@@ -77,8 +77,8 @@
     "@vitejs/plugin-react": "catalog:",
     "happy-dom": "^20.6.2",
     "postcss": "^8",
-    "react": "^19.2.5",
-    "react-dom": "^19.2.5",
+    "react": "catalog:",
+    "react-dom": "catalog:",
     "tailwindcss": "catalog:",
     "tw-animate-css": "^1.4.0",
     "typescript": "^5",