Skip to content

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates - #25955

Merged
msonnb merged 1 commit into
developfrom
dependabot/npm_and_yarn/react-router-c4e4d61853
Oct 30, 2026
Merged

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates#25955
msonnb merged 1 commit into
developfrom
dependabot/npm_and_yarn/react-router-c4e4d61853

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the react-router group with 3 updates in the / directory: react-router, @react-router/dev and @react-router/node.

Updates react-router from 7.18.5 to 7.18.4

Changelog

Sourced from react-router's changelog.

v7.18.4

Patch Changes

  • Correctly escape streamed RSC redirect locations in meta tag attributes (#15492)
  • Avoid unintended document.startViewTransition calls during initial hydration and router.revalidate() calls (#15485)

v7.18.3

Patch Changes

  • Improve route matching performance for long paths (#15423)
  • Improve validation of action request origins (#15420)
  • Add additional URL validation on client side navigations/redirects (#15446)

v7.18.2

Patch Changes

  • Harden RSC CSRF codepaths. (#15353)

v7.18.1

Patch Changes

  • No changes

v7.18.0

Patch Changes

  • Fix server handler prerender responses when using ssr: false and future.v8_trailingSlashAwareDataRequests: true. Avoids false positive "SPA Mode" detection when serving prerendered paths (#15173)
  • Use the ServerRouter nonce for nonce-aware SSR components when they don't provide their own value so strict CSP pages can load them. (#15170)
  • Use turbo-stream to serialize and deserialize Framework Mode hydration errors (#15175)
  • Precompute route branch matchers to avoid recompiling route path regexes during matching (#15186)
  • Use the constructed request URL host when validating action request origins. (#15185)
  • Remove the un-documented custom error serialization logic from Data Mode SSR built-in hydration flows (#15175)
  • Validate protocols in RSC render redirects (#15177)
  • Consolidate url normalization logic and better handle mixed slashes (#15176)

v7.17.0

Minor Changes

  • Ship a subset of the official documentation inside the react-router package (#15121)
    • Markdown docs are now available in node_modules/react-router/docs, letting AI coding agents and the React Router agent skills read official docs locally
    • Excludes auto-generated API docs (api/), community/ content, and tutorials (tutorials/)

v7.16.0

... (truncated)

Commits

Updates @react-router/dev from 7.17.0 to 7.18.4

Release notes

Sourced from @​react-router/dev's releases.

v7.18.4

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184

v7.18.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183

v7.18.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from @​react-router/dev's changelog.

v7.18.4

Patch Changes

v7.18.3

Patch Changes

v7.18.2

Patch Changes

v7.18.1

Patch Changes

v7.18.0

Patch Changes

  • Pass Vite server.watch config to child compiler in development mode. (#15178)

  • Ignore external Vite server environments in Framework Mode build hooks (#14883)

    When future.v8_viteEnvironmentApi is enabled, React Router previously treated any non-client Vite environment as its own server build. This caused issues with integrations like Nitro, where plugins can register additional environments.

    Framework Mode build hooks now ignore external server environments and only process the app's own server build.

  • Updated dependencies:

... (truncated)

Commits

Updates @react-router/node from 7.18.1 to 7.18.4

Release notes

Sourced from @​react-router/node's releases.

v7.18.4

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7184

v7.18.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7183

v7.18.2

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7182

Changelog

Sourced from @​react-router/node's changelog.

v7.18.4

Patch Changes

v7.18.3

Patch Changes

  • fix: Prevent client disconnects during streaming from crashing the Node process (#15437)
  • Updated dependencies:

v7.18.2

Patch Changes

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 30, 2026
@dependabot
dependabot Bot requested review from a team as code owners October 30, 2026 14:49
@dependabot
dependabot Bot requested review from chargome, isaacs, logaretm, msonnb, mydea and nicohrubec and removed request for a team October 30, 2026 14:49
@msonnb

msonnb commented Oct 30, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot dependabot Bot changed the title chore(deps-dev): Bump the react-router group with 3 updates chore(deps-dev): Bump the react-router group across 1 directory with 3 updates Oct 30, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-c4e4d61853 branch from 2814e76 to e8fc323 Compare October 30, 2026 15:36
@dependabot
chore(deps-dev): Bump the react-router group across 1 directory with …
61129c9 
…3 updates

Bumps the react-router group with 3 updates in the / directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router), [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev) and [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node).


Updates `react-router` from 7.18.5 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router@7.18.4/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.18.4/packages/react-router)

Updates `@react-router/dev` from 7.17.0 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/@react-router/dev@7.18.4/packages/react-router-dev/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@7.18.4/packages/react-router-dev)

Updates `@react-router/node` from 7.18.1 to 7.18.4
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/@react-router/node@7.18.4/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@7.18.4/packages/react-router-node)

---
updated-dependencies:
- dependency-name: "@react-router/dev"
  dependency-version: 7.18.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: react-router
- dependency-name: "@react-router/node"
  dependency-version: 7.18.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react-router
- dependency-name: react-router
  dependency-version: 7.18.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: react-router
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-c4e4d61853 branch from e8fc323 to 61129c9 Compare October 30, 2026 15:50
@sentry-junior sentry-junior Bot mentioned this pull request Oct 30, 2026
Merged
chargome added a commit that referenced this pull request Oct 30, 2026
@sentry-junior @chargome
Revert "ci(deps): Dedupe lockfile on Dependabot PRs (#25911)" (#25962)
b63640b 
**Why:** With `autoDedupe` enabled in #25961, Dependabot now writes an
already-deduped lockfile, so the dedupe workflow from #25911 has nothing
left to do. After #25961 merged, Dependabot rebased #25955, #25956 and
#25957. On all three, `pnpm dedupe` made no changes: the upload step was
skipped, no artifact was created and no dedupe commit was pushed. `Check
lockfile` passed on #25955 and #25957. #25956 fails `pnpm install` with
`ERR_PNPM_IGNORED_BUILDS`, which is a separate problem.

**How to review:** This is a clean `git revert` of bc8fdf1. It also
restores the optional E2E condition in `build.yml` to the `github.actor`
check, since the author-based check was only needed once the dedupe app
started pushing to Dependabot branches.

<!-- junior-request-attribution:start -->
via **Charly Gomez**.
<!-- junior-request-attribution:end -->

<!-- junior-session-footer:start -->
<!-- junior-conversation-id:slack%3AC02TB1YBNGJ%3A1793371893.509089 -->

--

[View
Session](https://junior-prod.sentry.dev/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089)
[[Sentry]](https://sentry.sentry.io/explore/conversations/slack%3AC02TB1YBNGJ%3A1793371893.509089/?project=4510944073809921)

<!-- junior-session-footer:end -->

Co-authored-by: sentry-junior[bot] <264270552+sentry-junior[bot]@users.noreply.github.com>
Co-authored-by: Charly Gomez <charly.gomez@sentry.io>
@msonnb
msonnb merged commit c9b4058 into develop Oct 30, 2026
343 checks passed
@msonnb
msonnb deleted the dependabot/npm_and_yarn/react-router-c4e4d61853 branch October 30, 2026 19:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chargome chargome chargome approved these changes
@nicohrubec nicohrubec Awaiting requested review from nicohrubec nicohrubec is a code owner automatically assigned from getsentry/team-javascript-sdks-framework
@logaretm logaretm Awaiting requested review from logaretm logaretm is a code owner automatically assigned from getsentry/team-javascript-sdks-browser
@msonnb msonnb Awaiting requested review from msonnb msonnb is a code owner automatically assigned from getsentry/team-javascript-sdks-browser
@isaacs isaacs Awaiting requested review from isaacs isaacs is a code owner automatically assigned from getsentry/team-javascript-sdks-server
@mydea mydea Awaiting requested review from mydea mydea is a code owner automatically assigned from getsentry/team-javascript-sdks-server

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@msonnb @chargome