chore(deps): bump react and @types/react in /apps/admin

[dependabot]

Bumps react and @types/react. These dependencies needed to be updated together.
Updates react from 19.2.3 to 19.2.4

Release notes

Sourced from react's releases.

19.2.4 (January 26th, 2026)

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (#35632 by @​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

Commits

• 90ab3f8 Version 19.2.4
• See full diff in compare view

Updates @types/react from 19.2.8 to 19.2.10

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[fingertips18]

@coderabbitai Are there any breaking changes in this dependency update? Is it safe to merge?

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

🌐 Web query:

React 19.2.4 release breaking changes

💡 Result:

React 19.2.4 (released January 26, 2026) is a patch release and does not list any API breaking changes in the release notes. The only noted change is in React Server Components:

• “Add more DoS mitigations to Server Actions, and harden Server Components” (RSC security hardening). [1]

Practical impact:

• For most client-rendered apps, no behavior changes are expected.
• If you use React Server Components / Server Actions (e.g., via react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack), this hardening may cause previously-accepted malformed or hostile requests/payloads to be rejected or handled differently—that’s the point of the mitigation. The React team recommends upgrading, and notes 19.2.4 is “safe” for the newly disclosed DoS issues. [2]

If you’re actually looking for “breaking changes in React 19” (major upgrade, not 19.2.x), those are covered in the React 19 upgrade guide. [3]

Sources: [1] [2] [3]

---

@fingertips18: No, there are no breaking changes in this dependency update. It's safe to merge. ✅

Summary:

• React 19.2.3 → 19.2.4: Patch release focused on security

  • Adds DoS mitigations to Server Actions and hardens Server Components
  • No API breaking changes
  • For most client-rendered apps, no behavior changes expected

• @types/react 19.2.8 → 19.2.10: Patch update for TypeScript type definitions

Security Context:
The update specifically addresses newly disclosed DoS vulnerabilities in Server Actions. The React team recommends upgrading and considers 19.2.4 "safe" for these issues. If you're using React Server Components or Server Actions, the hardening may cause malformed or hostile payloads to be rejected (which is the intended security improvement).

Since both are patch version updates with security improvements and no breaking changes, this is a recommended merge.