Bump react-router from 8.3.1 to 8.4.0

[dependabot]

Bumps react-router from 8.3.1 to 8.4.0.

Release notes

Sourced from react-router's releases.

v8.4.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v840

Changelog

Sourced from react-router's changelog.

v8.4.0

Minor Changes

• Deprecate the createStaticRouter({ branches }) option (#15297)
  • createStaticRouter now caches route branches internally, ignores branches, and logs a deprecation warning when the option is provided
  • The deprecated EntryContext.branches property remains available for compatibility but is always an empty array

Patch Changes

• Prevent stale route discovery during manifest version-mismatch recovery (#15489)
  • Keep concurrent manifest responses pending while a document reload is in progress
  • Report a discovery error when a previous reload failed to resolve a version mismatch instead of loading a stale route or reloading repeatedly
  • Fail pending requests if a document reload does not complete within five seconds or the document is restored from the back-forward cache, allowing subsequent requests to recover
• Preserve lazy route module import errors during SPA navigations instead of replacing them with a missing dataStrategy result error (#15464)
• Switch to more granular internal router contexts to avoid unnecessary route component re-renders when unrelated data router state changes (#15376)
  • ⚠️ This contains some breaking changes to exported UNSAFE_ contexts, so please review carefully if you are using those unsafe exports
• Correctly escape streamed RSC redirect locations in meta tag attributes (#15491)
• Avoid unintended document.startViewTransition calls during initial hydration and router.revalidate() calls (#15484)
• Fix SingleFetchNoResultError thrown when a fetcher revalidates against a splat route during lazy route discovery (#15395)
  • Track discovery per fetcher load so revalidation waits for the current load's discovery, even when the fetcher key is reused, while still restarting interrupted loaders after discovery completes
• Preserve the underlying decode failure as the cause of the Unable to decode turbo-stream response error (#15450)

Unstable Changes

⚠️ Unstable features are not recommended for production use

• Add a Data Mode future.unstable_routePatternMatching flag for more efficient route matching powered by @remix-run/route-pattern (#15298)
  • Add an unstable_validateParams route field to reject invalid parameter values and continue matching
• Document access control requirements for RSC Server Functions (#15490)
  • Treat every Server Function as a public endpoint that must perform all of its own access control checks
  • Recommend route actions when access control should be provided by route middleware

Commits

• 7ccdcec Release v8.4.0 (#15496)
• dc95459 Prepare v8.4.0 release notes
• 5fe40ed Fix change file
• f329d4b Skip view transitions on revalidation and initial hydration (#15484)
• 34ffffb Preload the route-pattern matcher before opting in (#15506)
• 4091c34 Document RSC server function access control (#15490)
• 6f2a0e0 Restore upstream route-pattern dependency (#15505)
• 10908b2 docs: fix router comment spelling (#15495)
• acf1f20 Fix empty terminating splats with route-pattern matching (#15499)
• c58d715 Fix HTML attribute escaping for RSC redirects (#15491)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)