[ecv]

A React 19 or react-router-dom 7 upgrade to the blog CMS passes CI today and breaks the admin panel Strapi 5.59 serves. This adds a CI step that fails on any React, router or styled-components version outside Strapi's declared peer ranges, and a Renovate rule that stops opening React 19 and router 7 upgrades until Strapi supports them.

Related to #33

Test plan

• The peer check passes on main and exits 1 locally on React 19, router 7 and styled-components 5
• renovate-config-validator accepts the new config
• A throwaway PR with React 19 fails the new step in CI: https://github.com/datum-cloud/datum.net-cms/actions/runs/40731799140
• The check passes on this PR: https://github.com/datum-cloud/datum.net-cms/actions/runs/40731828571

[polylane]

Warning

Polylane could not verify the production impact of this pull request.

I checked the resulting ci.yml and renovate.json against the checked-in lockfile: react 18.3.1, react-dom 18.3.1, react-router-dom 6.30.6 and styled-components 6.6.0 all sit inside Strapi's ranges, and CI run 40731828571 passed at this head. The workflow has no deploy step, so production is untouched.

View the full analysis →

Also considered · 3 refuted

• Refuted · New npm ls gate fails on the checked-in dependency tree and blocks merges · CI run 40731828571 on this exact head SHA 94da48d concluded success on 2026-10-28T17:02Z, so the step passes on the tree this merge produces.
• Refuted · The step sits on the production deploy path and a failure blocks a CMS release · The repository holds one workflow (.github/workflows/ lists only ci.yml) and it performs no deploy.
• Refuted · Renovate allowedVersions starves the CMS of React and router fixes · 18.x and 6.x ranges stay allowed, so patch and minor updates still open.

Analysed against 1 cloud account and 1 repository

• Cloud account: datum-cloud-prod
• Repository: datum-cloud/datum.net-cms

Polylane could not find the cloud resources this repository manages, so this review looked at the entire cloud account. Connect this repository to its resources and the next review will focus on exactly what this code deploys to.

_{Polylane analysed 94da48d for production impact. You can ask follow-ups by mentioning @polylane in a comment.}

Rate this review: 👍 helpful · 👎 not helpful · 😕 confusing