Add guard around commitTextValue to avoid IE9 undo bug

This commit fixes a case where IE9 raises an exception if modifying a
detached text node.

Author: nhunzaker

fixtures/dom/src/components/fixtures/number-inputs/NumberTestCase.js

@@ -5,7 +5,7 @@ const React = window.React;
 class NumberTestCase extends React.Component {
   state = {value: ''};
   onChange = event => {
-    const parsed = parseFloat(event.target.value, 10);
+    const parsed = parseFloat(event.currentTarget.value, 10);
     const value = isNaN(parsed) ? '' : parsed;
 
     this.setState({value});

fixtures/dom/src/tags.js

@@ -15,6 +15,9 @@ const TAGS_CACHE_KEY = '@react-dom-fixtures/tags';
  * can manually load it by editing the URL (`?version={whatever}`)
  */
 const fallbackTags = [
+  '16.3.0',
+  '16.2.0',
+  '16.1.1',
   '15.4.2',
   '15.3.2',
   '15.2.1',

packages/react-dom/src/client/ReactDOM.js

@@ -736,7 +736,12 @@ const DOMRenderer = ReactFiberReconciler({
       oldText: string,
       newText: string,
     ): void {
-      textInstance.nodeValue = newText;
+      // IE9 will raise an exception if modifying a detached text node
+      // eslint-disable-next-line
+      // https://connect.microsoft.com/IE/feedbackdetail/view/944330/invalid-argument-error-when-changing-nodevalue-of-a-text-node-removed-by-setting-innerhtml-on-an-ancestor
+      if (textInstance.parentNode) {
+        textInstance.nodeValue = newText;
+      }
     },
 
     appendChild(