RepoJournal
Meta

Meta

React, React Native, and Jest — the open source under what Meta ships

Pick a date

  1. Fri 1 may
  2. Sat 2 may
  3. Sun 3 may
  4. Mon 4 may
  5. Tue 5 may
  6. Wed 6 may
  7. Thu 7 may
  8. Fri 8 may
  9. Sat 9 may
  10. Sun 10 may
  11. Tue 12 may
  12. Wed 13 may
  13. Thu 14 may
  14. Sat 16 may
  15. Sun 17 may
  16. Tue 19 may
  17. Wed 20 may
  18. Thu 21 may
  19. Sat 23 may
  20. Sun 24 may
  21. Tue 26 may
  22. Thu 28 may
  23. Fri 29 may
  24. Sat 30 may
  25. Sun 31 may
  26. Mon 1 jun
  27. Mon 8 jun
  28. Tue 9 jun
  29. Today 10 jun

The Wire · Showcase

REACT SERVER COMPONENTS GET SECURITY HARDENING ACROSS THREE MAJOR VERSIONS

By RepoJournal · Filed · About Meta

React shipped type hardening and performance improvements to Server Functions across 19.0.6, 19.1.7, and 19.2.6, closing security vulnerabilities in FlightReply.

The React team deployed identical security fixes [1] [2] [3] to three active LTS channels simultaneously, signaling this is a patch you can't skip. The improvements harden type safety in Server Components and address performance regressions in the Flight protocol — both critical for production apps streaming RSC payloads [4]. Over on React Native, the infrastructure crew is reshaping text rendering: they've renamed DrawCommandSpan to CanvasEffectSpan [5] and added AnimatedEffectSpan for text animation support [7], paving the way for richer text effects without sacrificing layout performance. Meanwhile, Jest locked down three configuration gaps [8] [9] [10] that let you define coverage and verbosity per project, while also fixing moduleNameMapper resolution in require.resolve() and patching expect module loading [11]. The Android side shipped a snapshot capture upgrade that defaults to software rendering [6] to prevent overlapping views from bleeding into transition captures.

Action items

References

  1. [1] [FlightReply] Type hardening and performance improvements ↗ facebook/react
  2. [2] 19.0.6 (May 6th, 2026) ↗ facebook/react
  3. [3] 19.1.7 (May 6th, 2026) ↗ facebook/react
  4. [4] [FlightReply] Type hardening and performance improvements (#36425) facebook/react
  5. [5] Rename DrawCommandSpan to CanvasEffectSpan and remove UpdateAppearance (#56705) facebook/react-native
  6. [6] Use software snapshot capture unless featureflag (#56684) facebook/react-native
  7. [7] Add support for animated effects on spans of text (#56702) facebook/react-native
  8. [8] fix: support `silent` and `verbose` as project config ↗ facebook/jest
  9. [9] fix: allow `collectCoverage` and `coverageProvider` in project config ↗ facebook/jest
  10. [10] fix(jest-runtime): apply moduleNameMapper to require.resolve paths ↗ facebook/jest
  11. [11] fix(runtime): resolve `expect` and `@jest/expect` from the internal module registry ↗ facebook/jest

FAQ

What changed in Meta on May 7, 2026?
React shipped type hardening and performance improvements to Server Functions across 19.0.6, 19.1.7, and 19.2.6, closing security vulnerabilities in FlightReply.
What should Meta teams do about it?
Upgrade React to 19.0.6, 19.1.7, or 19.2.6 depending on your LTS track before next server-side deploy • Review Jest project config settings — silent, verbose, collectCoverage, and coverageProvider now work per-project • Pin React Native 0.313.0 if you're using text animations or snapshot transitions
Which Meta repositories shipped on May 7, 2026?
facebook/react, facebook/react-native, facebook/jest

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.