nextjs - 💡(How to fix) Fix React Version Update Required for create-next-app Template [5 comments, 4 participants]

Link to the code that reproduces this issue

https://github.com/shiqocred/16.0.7-next

To Reproduce

bun x create-next-app@latest ✔ What is your project named? … 16.0.7 ✔ Would you like to use the recommended Next.js defaults? › Yes, use recommended defaults Creating a new Next.js app in /Users/macbookpro/Documents/project/nextjs/16.0.7.

Using bun.

Initializing project with template: app-tw

Installing dependencies:

• next
• react
• react-dom

Installing devDependencies:

• @tailwindcss/postcss
• @types/node
• @types/react
• @types/react-dom
• eslint
• eslint-config-next
• tailwindcss
• typescript

bun install v1.2.17 (282dda62)

• @tailwindcss/[email protected]
• @types/[email protected] (v24.10.1 available)
• @types/[email protected]
• @types/[email protected]
• [email protected]
• [email protected]
• [email protected]
• [email protected]
• [email protected]
• [email protected]
• [email protected]

349 packages installed [6.51s]

Current vs. Expected behavior

Given the recent security issues (react & next.js), I expected the template to use React v19.2.1, but it is still using React v19.2.0. Is this still safe?

Provide environment information

Operating System:
  Platform: darwin
  Arch: arm64
  Version: Darwin Kernel Version 25.1.0: Mon Oct 20 19:32:47 PDT 2025; root:xnu-12377.41.6~2/RELEASE_ARM64_T8103
  Available memory (MB): 8192
  Available CPU cores: 8
Binaries:
  Node: 24.11.1
  npm: 11.6.2
  Yarn: N/A
  pnpm: N/A
Relevant Packages:
  next: 16.0.7 // Latest available version is detected (16.0.7).
  eslint-config-next: N/A
  react: 19.2.0
  react-dom: 19.2.0
  typescript: 5.9.3
Next.js Config:
  output: N/A

Which area(s) are affected? (Select all that apply)

create-next-app

Which stage(s) are affected? (Select all that apply)

Other (Deployed)

Additional context

No response