Addresses DoS and source code exposure vulnerabilities in React Server
Components
([advisory](https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components)).

## Changes
- Bump React and React DOM from `^19.2.1` to `^19.2.2` in:
  - `examples/tab/package.json`
  - `packages/devtools/package.json`
- npm resolved to 19.2.3 (latest patch satisfying constraint)

## Notes
Only two workspaces use React. No code changes required—dependency
version bump only.

<!-- START COPILOT CODING AGENT SUFFIX -->



<!-- START COPILOT ORIGINAL PROMPT -->



<details>

<summary>Original prompt</summary>

> We need to update to react 19.2.2 (and also react dom). Follow
patterns in #419. This is
because of vulnerabilities listed in
https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components


</details>

skip-test-verification 


<!-- START COPILOT CODING AGENT TIPS -->
---

💡 You can make Copilot smarter by setting up custom instructions,
customizing its development environment and configuring Model Context
Protocol (MCP) servers. Learn more [Copilot coding agent
tips](https://gh.io/copilot-coding-agent-tips) in the docs.

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: heyitsaamir <[email protected]>