packages/react-runtime 的 peerDependencies.react 是无上界的 >=18,允许尚不存在的 React 20+ #3741

Activity

1. yinlianghui

   added

   finding

   on Aug 8, 2026
2. os-zhuang

   added

   pm:queue

   and removed

   finding

   on Aug 8, 2026
3. os-zhuang commented on Aug 8, 2026

   

   os-zhuang

   on Aug 8, 2026 – with Claude

   Contributor

   More actions

   Findings triage: promoted — finding removed, pm:queue applied.

   Stale-premise check (objectui origin/main @ b1204af): packages/react-runtime/package.json still declares peerDependencies.react: ">=18" with no upper bound. Premise live.

   Why promote rather than hold: one-line manifest alignment with a group norm the repo has already enforced twice from the other direction (#3710 narrowed the README-side >=18.0.0 overclaim; #3727 aligned the fixed group's ranges) — the manifest-side unbounded range is the last spelling out of step with 30 sibling declarations, and it self-degrades the day React 20 exists. Nothing to decide: align to ^18.0.0 || ^19.0.0, or document in-file why react-runtime is deliberately wider.

   Dedup: #3690 (family parent, closed per PR #3727), #3750 (README-vs-manifest rows, queued this round — different file face). No open duplicate.

   本评论来自分诊座位 Routine（#5474 试点），不构成认领。

   ---

   Generated by Claude Code
4. yinlianghui

   added

   pm:dispatched

   on Aug 8, 2026
5. yinlianghui

   self-assigned this

   on Aug 8, 2026
6. yinlianghui commented on Aug 8, 2026

   

   yinlianghui

   on Aug 8, 2026 – with Claude

   ContributorAuthor

   More actions

   🔒 认领(objectui shard PM,session session_01GTRjn8xBqp75dk7kFupVRt)

   • 分支:claude/issue-3741-react-runtime-peer-bound
   • 文件面:仅 packages/react-runtime/package.json(peerDependencies.react 一行)+ 若有钉子/changeset 按仓内先例。
   • 方向按分诊:对齐固定组规范 ^18.0.0 || ^19.0.0(30 个兄弟包的拼法);若实测发现 react-runtime 有理由更宽,须在清单同文件留注记并报告 —— 缺省是对齐。
   • 关联:@object-ui/plugin-report 的 peerDependencies 只允许 React/ReactDOM ^18.0.0,其余 28 个 UI 包都是 ^18.0.0 || ^19.0.0(仓库自身 dev 用 19.2.8) #3690(族母单,PR3727 已收)、两个包 README 的版本宣称与自己的 package.json 不符:plugin-chatbot 的 @ai-sdk/react v3(实为 ^4.0.47)、layout 的 react peer 比清单更宽 #3710(README 侧镜像修正)。
   • 与在飞 disabled 的「已声明」判定还有五处停在 != null(action-icon / action-group ×2 / action-menu / record-quick-actions),#3842 只修了两处 #3849、258 个 t() 调用点引用的 key 在任何语言包里都不存在(#3530 守卫首跑实测),其中 8 处直接把 raw key 渲染给用户 #3546 切片六、docs(skills): guide 里反引号包裹的仓内路径无任何门禁校验 —— #3713/#3730 两轮 13+ 处死路径都是靠人肉发现的 #3735、pnpm --filter @object-ui/runner test 在干净 main 上 4 红(包级 vitest 落到 runner 的 vite.config.ts、无 jsdom 环境),而仓根同一批测试 13 全绿 #3746 文件面零相交。

   ---

   Generated by Claude Code
7. yinlianghui

   closed this as completedin #3870on Aug 8, 2026
8. akarma-synetal

   added a commit that references this issue on Aug 10, 2026

   fix(react-runtime): bound the react peer range at ^18.0.0 || ^19.0.0 (o…

   ...

   d11996e