# mrdoob/three.js · RepoSense Release & Migration Intelligence

> Fix sort corruption. #34828 (@Mugen87). Upgrade immediately to patch advisory. Migration: Low.

## Metadata
- **Repository URL**: https://github.com/mrdoob/three.js
- **Primary Package**: `three` (NPM)
- **Categories**: `ECOSYSTEM`, `STYLING`
- **Latest Version**: `r187`
- **Semantic Status**: `SECURITY_PATCH`
- **Bundle Size Impact (unavailable)**: `Size Unavailable`
- **Atom Ingestion Feed**: https://github.com/mrdoob/three.js/releases.atom

## The Human Context (Plain-English Pitch)
three is an open-source library and developer tool in the mrdoob/three.js ecosystem. It saves developers from writing repetitive low-level boilerplate from scratch by providing a battle-tested, open-source implementation ready for production.

## Stage 1 Executive Summary ([Core Change] + [Required Action] + [Migration Effort])
Fix sort corruption. #34828 (@Mugen87). Upgrade immediately to patch advisory. Migration: Low.

## Breaking Changes & Required Actions
- Fix sort corruption. #34828 (@Mugen87)
- Make shadows more node compatible. #34829 (@Mugen87)
- Fix draw ranges after `setGeometrySize()`. #34983 (@MikeFernandez-Pro)
- Fix memory leak of previous matrix data. #35272 (@Mugen87)

## Migration Snippet
```ts
npm install three@r187
```

## Ecosystem Compatibility Matrix & Graph Warnings
- **TypeScript 5.x** [`COMPATIBLE`]: Ships standard TypeScript declaration files without type regressions.

## Zero-Noise Release Timeline
- **r187** (2026-10-30) [SECURITY_PATCH]: Fix sort corruption. #34828 (@Mugen87). Upgrade immediately to patch advisory. Migration: Low.

## Upgrade & Migration Q&A (GEO Direct Answers)
### Is mrdoob/three.js r187 safe to upgrade in production?
mrdoob/three.js r187 is classified as SECURITY_PATCH (MINOR release). Fix sort corruption. #34828 (@Mugen87). Upgrade immediately to patch advisory. Migration: Low.

### What breaking changes or compatibility risks exist in mrdoob/three.js r187?
No breaking API changes or peer dependency conflicts are recorded for mrdoob/three.js r187 in the RepoSense compatibility graph.

### What is the bundle size impact of three r187?
Measured bundle size telemetry is currently unavailable for three r187; verify build output locally before deploying.

### How do I upgrade three to r187?
Upgrade three to r187 by running "npm install three@r187" and applying the migration steps: npm install three@r187