Pair react-dom with the React 19.3 Dependabot update

React 19.3 requires its matching renderer; the PR still pinned react-dom
19.2.8 and its build rejected the mixed versions. Apply the exact cloud
handoff patch: react-dom 19.3.0 and scheduler 0.28.0, with the reviewed
registry integrity values. No unrelated dependency changes.

Founder authorized this existing Dependabot branch update. The canonical
checkout remains on main; a separate index applies only the two web
manifest files against the PR head.

Verification: git apply --cached --check passed at 082b326fa3b8; inspected
10 insertions/10 deletions in exactly two files. Reused cloud patch receipt:
74 test files, 772 passed; 0 failed, lint, TypeScript and build passed.
Those are prior cloud results, not a fresh local run of this branch. The
unchanged local-main JavaScript/web gate separately passed 1312 tests;
0 failed; 7 skipped. Hosted CI on this new commit remains required.

Refs #6811

Signed-off-by: Hunter Bown <[email protected]>

web/package-lock.json

@@ -11,7 +11,7 @@
       "dependencies": {
         "next": "^16.4.0",
         "react": "^19.3.0",
-        "react-dom": "^19.2.8",
+        "react-dom": "^19.3.0",
         "stripe": "23.0.0"
       },
       "devDependencies": {
@@ -12900,15 +12900,15 @@
       }
     },
     "node_modules/react-dom": {
-      "version": "19.2.8",
-      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.2.8.tgz",
-      "integrity": "sha512-rVprimfGBG3DR+Tq0IQG2DT5PxKth1WIGDmj5yPmlzr4YBe7uyE+Du4oVqTDXZSHGGGXRtTJEGSSePyQCMBglQ==",
+      "version": "19.3.0",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
+      "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==",
       "license": "MIT",
       "dependencies": {
-        "scheduler": "^0.27.0"
+        "scheduler": "^0.28.0"
       },
       "peerDependencies": {
-        "react": "^19.2.8"
+        "react": "^19.3.0"
       }
     },
     "node_modules/react-is": {
@@ -13315,9 +13315,9 @@
       "license": "MIT"
     },
     "node_modules/scheduler": {
-      "version": "0.27.0",
-      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.27.0.tgz",
-      "integrity": "sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz",
+      "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==",
       "license": "MIT"
     },
     "node_modules/semver": {

web/package.json

@@ -34,7 +34,7 @@
   "dependencies": {
     "next": "^16.4.0",
     "react": "^19.3.0",
-    "react-dom": "^19.2.8",
+    "react-dom": "^19.3.0",
     "stripe": "23.0.0"
   },
   "devDependencies": {