Skip to content

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates#22148

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/react-router-baa27eab56
Open

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates#22148
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/react-router-baa27eab56

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the react-router group with 3 updates in the / directory: @react-router/dev, @react-router/node and react-router.

Updates @react-router/dev from 7.17.0 to 8.2.0

Release notes

Sourced from @​react-router/dev's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from @​react-router/dev's changelog.

v8.2.0

Minor Changes

  • Add a Web Streams default server entry for non-Node Framework mode apps (#15290)
    • Apps using @react-router/node, @react-router/express, or @react-router/serve continue to use the renderToPipeableStream default server entry
    • Apps without those Node server adapter dependencies use a renderToReadableStream default server entry
    • Non-Node apps with their own entry.server.tsx may be able to remove it in favor of the default if it is not doing anything custom
  • Detect nub as a supported package manager when installing framework dependencies (#15276)

Patch Changes

  • Detect user rolldownOptions config in Vite 8+ (#15278)

Unstable Changes

⚠️ Unstable features are not recommended for production use

v8.1.0

Patch Changes

  • Fix a regression with the new prerendering plugin where the react-router.config.ts buildEnd hook would run before prerendering was completed (#15211)
  • Fixed react-router typegen crashes under the Bun runtime when Babel default imports are already unwrapped (#15214)
  • Replace the deprecated envFile:false Vite config with envDir:false to eliminate a deprecation warning when using vite@8.1.0+ (#15230)
  • Only add the "node" Vite server condition for Framework mode apps that declare a Node server adapter dependency (#15242)
    • This prevents non-Node SSR runtimes from resolving Node-specific package exports by default
  • Updated dependencies:

v8.0.1

Patch Changes

v8.0.0

... (truncated)

Commits

Updates @react-router/node from 7.17.0 to 8.2.0

Release notes

Sourced from @​react-router/node's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from @​react-router/node's changelog.

v8.2.0

Patch Changes

v8.1.0

Patch Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

  • Switch from @mjackson/node-fetch-server to @remix-run/node-fetch-server now that we can directly use ESM-only packages (#14930)
  • Update minimum Node version to 22.22.0 (#14928)

Patch Changes

  • Bump dependencies (#15106)
    • Bumped @remix-run/node-fetch-server from ^0.13.0 to ^0.13.3
  • Updated dependencies:

v7.18.0

Patch Changes

Commits

Updates react-router from 7.17.0 to 8.2.0

Release notes

Sourced from react-router's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from react-router's changelog.

v8.2.0

Patch Changes

  • Fix href() to properly stringify and URL-encode param values, matching generatePath() (#15277)
    • splat params preserve path separators while encoding each segment individually
  • Fix dynamic param extraction for routes with optional static segments (#15200)
    • When a route path contains optional static segments (e.g. /school?/user/:id), the internal regex's incorrectly shifted parameter indices resulting in incorrect parameter extraction
    • Consecutive optional static segments (e.g. /one?/two?) were only partially handled
  • Preserve navigation blocker state through a revalidation (#15246)
  • Fix route ranking for dynamic parameters with static extension suffixes (#15273)
    • These were not being detected as dynamic param segments and instead got incorrectly scored higher as a static segment
    • This meant they could potentially tie truly static routes like /sitemap.xml and outrank them based on definition order
    • These are now correctly identified as dynamic parameter segments and scored correctly
  • Use ReactFormState types instead of unknown (#15263)

v8.1.0

Minor Changes

  • Return route metadata from server request, client navigation, and client fetcher instrumentations (#15235)
    • Adds result metadata after instrumented calls complete, including the URL, matched route pattern, and params
    • Adds known HTTP status codes to server request handler instrumentation results

v8.0.1

Patch Changes

  • Remove the obsolete AppLoadContext type export accidentally left over from v7 now that middleware is always enabled and server request context is provided through RouterContextProvider. (#15207)

v8.0.0

Major Changes

  • Remove the future.v8_trailingSlashAwareDataRequests flag (#15100)
    • Trailing slash-aware data request URLs are now the default behavior.
  • Update tsconfig.json target/lib from ES2020 -> ES2022 (591853e)
  • Switch the published packages in packages/ to ESM-only. (#14895) (59ebcf1)
  • Remove deprecated data parameter in favor of loaderData for meta APIs (to align with Route.ComponentProps) (#14931)
    • Route.MetaArgs, Route.MetaMatch, MetaArgs, MetaMatch, Route.ComponentProps.matches, UIMatch
  • Remove future.v8_passThroughRequests flag - the raw incoming request is now always passed through to loader/action. Use url for the normalized URL without React Router-specific implementation details (.data suffixes, index/_routes search params). (#15079)
  • Remove internal hasErrorBoundary field added to router.routes when using a data router (#15074)
    • This should not impact user-facing code since this was an internal prop and was computed based on the presence of ErrorBoundary or errorElement on your route
    • hasErrorBoundary is no longer accepted on RouteObject (IndexRouteObject/NonIndexRouteObject), DataRouteObject, <Route> JSX props, or as a key in lazy route definitions.
    • The MapRoutePropertiesFunction signature no longer requires returning hasErrorBoundary; the router infers it directly.
  • Remove react-router-dom package (#15076)
    • In v7 everything DOM-specific was collapsed into react-router/dom
      • react-router-dom was kept around as a convenience so existing v6 app imports would still work
    • For v8, you will need to swap react-router-dom imports:
      • RouterProvider/HydratedRouter should be imported from react-router/dom

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
@dependabot dependabot Bot requested a review from a team as a code owner July 9, 2026 15:28
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026
@dependabot dependabot Bot requested review from chargome, mydea and nicohrubec and removed request for a team July 9, 2026 15:28
@dependabot dependabot Bot changed the title chore(deps-dev): Bump the react-router group with 3 updates chore(deps-dev): Bump the react-router group across 1 directory with 3 updates Jul 10, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-baa27eab56 branch from 95f66c4 to 09b3eab Compare July 10, 2026 10:03

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 09b3eab. Configure here.

"@react-router/dev": "^7.17.0",
"@react-router/node": "^7.13.1",
"@react-router/dev": "^8.2.0",
"@react-router/node": "^8.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Node engine below v8 minimum

Medium Severity

@react-router/node@8.2.0 requires Node >=22.22.0, but this package still declares engines.node as >=20 and the monorepo runs on Node 20. Installing and developing against the bumped peer/dev dependency is incompatible with the stated runtime support.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 09b3eab. Configure here.

…3 updates

Bumps the react-router group with 3 updates in the / directory: [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev), [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router).


Updates `@react-router/dev` from 7.17.0 to 8.2.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@8.2.0/packages/react-router-dev)

Updates `@react-router/node` from 7.17.0 to 8.2.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@8.2.0/packages/react-router-node)

Updates `react-router` from 7.17.0 to 8.2.0
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@8.2.0/packages/react-router)

---
updated-dependencies:
- dependency-name: "@react-router/dev"
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: react-router
- dependency-name: "@react-router/node"
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: react-router
- dependency-name: react-router
  dependency-version: 8.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: react-router
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-baa27eab56 branch from 09b3eab to 1ec0552 Compare July 10, 2026 17:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants