React v16.9.0 and the Roadmap Update
React v16.9.0 and the Roadmap Update
August 08, 2019 by Dan Abramov and Brian Vaughn
Today we are releasing React 16.9. It contains several new features, bugfixes, and new deprecation warnings to help prepare for a future major release.
New Deprecations
Renaming Unsafe Lifecycle Methods
Over a year ago, we announced that unsafe lifecycle methods are getting renamed:
componentWillMount → UNSAFE_componentWillMount
componentWillReceiveProps → UNSAFE_componentWillReceiveProps
componentWillUpdate → UNSAFE_componentWillUpdate
React 16.9 does not contain breaking changes, and the old names continue to work in this release. But you will now see a warning when using any of the old names:
Warning: componentWillMount has been renamed, and is not recommended for use.
As the warning suggests, there are usually better approaches for each of the unsafe methods. However, maybe you don’t have the time to migrate or test these components. In that case, we recommend running a “codemod” script that renames them automatically:
cd your_project
npx react-codemod rename-unsafe-lifecycles
(Note that it says npx, not npm. npx is a utility that comes with Node 6+ by default.)
Running this codemod will replace the old names like componentWillMount with the new names like UNSAFE_componentWillMount:
Codemod in action
The new names like UNSAFE_componentWillMount will keep working in both React 16.9 and in React 17.x. However, the new UNSAFE_ prefix will help components with problematic patterns stand out during the code review and debugging sessions. (If you’d like, you can further discourage their use inside your app with the opt-in Strict Mode.)
Note
Learn more about our versioning policy and commitment to stability.
Deprecating javascript: URLs
URLs starting with javascript: are a dangerous attack surface because it’s easy to accidentally include unsanitized output in a tag like and create a security hole:
const userProfile = {
website: “javascript: alert(‘you got hacked’)”,
};
// This will now warn:
Profile
In React 16.9, this pattern continues to work, but it will log a warning. If you use javascript: URLs for logic, try to use React event handlers instead. (As a last resort, you can circumvent the protection with dangerouslySetInnerHTML, but it is highly discouraged and often leads to security holes.)
In a future major release, React will throw an error if it encounters a javascript: URL.
Deprecating “Factory” Components
Before compiling JavaScript classes with Babel became popular, React had support for a “factory” component that returns an object with a render method:
function FactoryComponent() {
return { render() { return
}
This pattern is confusing because it looks too much like a function component — but it isn’t one. (A function component would just return the
This pattern was almost never used in the wild, and supporting it causes React to be slightly larger and slower than necessary. So we are deprecating this pattern in 16.9 and logging a warning if it’s encountered. If you rely on it, adding FactoryComponent.prototype = React.Component.prototype can serve as a workaround. Alternatively, you can convert it to either a class or a function component.
We don’t expect most codebases to be affected by this.
New Features
Async act() for Testing
React 16.8 introduced a new testing utility called act() to help you write tests that better match the browser behavior. For example, multiple state updates inside a single act() get batched. This matches how React already works when handling real browser events, and helps prepare your components for the future in which React will batch updates more often.
However, in 16.8 act() only supported synchronous functions. Sometimes, you might have seen a warning like this in a test but could not easily fix it:
An update to SomeComponent inside a test was not wrapped in act(…).
In React 16.9, act() also accepts asynchronous functions, and you can await its call:
await act(async () => {
// …
});
This solves the remaining cases where you couldn’t use act() before, such as when the state update was inside an asynchronous function. As a result, you should be able to fix all the remaining act() warnings in your tests now.
We’ve heard there wasn’t enough information about how to write tests with act(). The new Testing Recipes guide describes common scenarios, and how act() can help you write good tests. These examples use vanilla DOM APIs, but you can also use React Testing Library to reduce the boilerplate code. Many of its methods already use act() internally.
Please let us know on the issue tracker if you bump into any other scenarios where act() doesn’t work well for you, and we’ll try to help.
Performance Measurements with
In React 16.5, we introduced a new React Profiler for DevTools that helps find performance bottlenecks in your application. In React 16.9, we are also adding a programmatic way to gather measurements called
The measures how often a React application renders and what the “cost” of rendering is. Its purpose is to help identify parts of an application that are slow and may benefit from optimizations such as memoization.
A can be added anywhere in a React tree to measure the cost of rendering that part of the tree. It requires two props: an id (string) and an onRender callback (function) which React calls any time a component within the tree “commits” an update.
render(
);
To learn more about the Profiler and the parameters passed to the onRender callback, check out the Profiler docs.
Note:
Profiling adds some additional overhead, so it is disabled in the production build.
To opt into production profiling, React provides a special production build with profiling enabled. Read more about how to use this build at fb.me/react-profiling.
Notable Bugfixes
This release contains a few other notable improvements:
A crash when calling findDOMNode() inside a tree has been fixed.
A memory leak caused by retaining deleted subtrees has been fixed too.
An infinite loop caused by setState in useEffect now logs an error. (This is similar to the error you see when you call setState in componentDidUpdate in a class.)
We’re thankful to all the contributors who helped surface and fix these and other issues. You can find the full changelog below.
An Update to the Roadmap
In November 2018, we have posted this roadmap for the 16.x releases:
A minor 16.x release with React Hooks (past estimate: Q1 2019)
A minor 16.x release with Concurrent Mode (past estimate: Q2 2019)
A minor 16.x release with Suspense for Data Fetching (past estimate: mid 2019)
These estimates were too optimistic, and we’ve needed to adjust them.
tldr: We shipped Hooks on time, but we’re regrouping Concurrent Mode and Suspense for Data Fetching into a single release that we intend to release later this year.
In February, we shipped a stable 16.8 release including React Hooks, with React Native support coming a month later. However, we underestimated the follow-up work for this release, including the lint rules, developer tools, examples, and more documentation. This shifted the timeline by a few months.
Now that React Hooks are rolled out, the work on Concurrent Mode and Suspense for Data Fetching is in full swing. The new Facebook website that’s currently in active development is built on top of these features. Testing them with real code helped discover and address many issues before they can affect the open source users. Some of these fixes involved an internal redesign of these features, which has also caused the timeline to slip.
With this new understanding, here’s what we plan to do next.
One Release Instead of Two
Concurrent Mode and Suspense power the new Facebook website that’s in active development, so we are confident that they’re close to a stable state technically. We also now better understand the concrete steps before they are ready for open source adoption.
Originally we thought we would split Concurrent Mode and Suspense for Data Fetching into two releases. We’ve found that this sequencing is confusing to explain because these features are more related than we thought at first. So we plan to release support for both Concurrent Mode and Suspense for Data Fetching in a single combined release instead.
We don’t want to overpromise the release date again. Given that we rely on both of them in production code, we expect to provide a 16.x release with opt-in support for them this year.
An Update on Data Fetching
While React is not opinionated about how you fetch data, the first release of Suspense for Data Fetching will likely focus on integrating with opinionated data fetching libraries. For example, at Facebook we are using upcoming Relay APIs that integrate with Suspense. We will document how other opinionated libraries like Apollo can support a similar integration.
In the first release, we don’t intend to focus on the ad-hoc “fire an HTTP request” solution we used in earlier demos (also known as “React Cache”). However, we expect that both we and the React community will be exploring that space in the months after the initial release.
An Update on Server Rendering
We have started the work on the new Suspense-capable server renderer, but we don’t expect it to be ready for the initial release of Concurrent Mode. This release will, however, provide a temporary solution that lets the existing server renderer emit HTML for Suspense fallbacks immediately, and then render their real content on the client. This is the solution we are currently using at Facebook ourselves until the streaming renderer is ready.
Why Is It Taking So Long?
We’ve shipped the individual pieces leading up to Concurrent Mode as they became stable, including new context API, lazy loading with Suspense, and Hooks. We are also eager to release the other missing parts, but trying them at scale is an important part of the process. The honest answer is that it just took more work than we expected when we started. As always, we appreciate your questions and feedback on Twitter and in our issue tracker.
Installation
React
React v16.9.0 is available on the npm registry.
To install React 16 with Yarn, run:
yarn add react@^16.9.0 react-dom@^16.9.0
To install React 16 with npm, run:
npm install --save react@^16.9.0 react-dom@^16.9.0
We also provide UMD builds of React via a CDN:
Refer to the documentation for detailed installation instructions.
Changelog
React
Add API for gathering performance measurements programmatically. (@bvaughn in #15172)
Remove unstable_ConcurrentMode in favor of unstable_createRoot. (@acdlite in #15532)
React DOM
Deprecate old names for the UNSAFE_* lifecycle methods. (@bvaughn in #15186 and @threepointone in #16103)
Deprecate javascript: URLs as a common attack surface. (@sebmarkbage in #15047)
Deprecate uncommon “module pattern” (factory) components. (@sebmarkbage in #15145)
Add support for the disablePictureInPicture attribute on React DOM Server
Fix incorrect output for camelCase custom CSS property names. (@bedakb in #16167)
React Test Utilities and Test Renderer
Add act(async () => ...) for testing asynchronous state updates. (@threepointone in #14853)
Add support for nesting act from different renderers. (@threepointone in #16039 and #16042)
Warn in Strict Mode if effects are scheduled outside an act() call. (@threepointone in #15763 and #16041)
Warn when using act from the wrong renderer. (@threepointone in #15756)
Edit this page