Skip to content

chore(deps): bump react-router-dom from 6.30.6 to 7.18.4 in /client - #71

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/client/react-router-dom-7.18.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/client/react-router-dom-7.18.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps react-router-dom from 6.30.6 to 7.18.4.

Release notes

Sourced from react-router-dom's releases.

v7.1.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v713

Changelog

Sourced from react-router-dom's changelog.

v7.18.4

Patch Changes

v7.18.3

Patch Changes

v7.18.2

Patch Changes

v7.18.1

Patch Changes

v7.18.0

Patch Changes

v7.17.0

Patch Changes

v7.16.0

Patch Changes

  • Remove stale/invalid unpkg field from package.json. This was removed from other packages with the release of v7 but missed in the react-router-dom re-export package (#15075)
  • Updated dependencies:

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 24, 2026
@strix-security

strix-security Bot commented Sep 24, 2026 •

Copy link
Copy Markdown

Strix Security Review

Warning

This pull request has 2 commits after the last Strix review (39b5a4b). Strix has not reviewed these changes.
Automatic review on push is off for this repository. To review the latest changes, tag @strix-security in a comment, or turn on re-review on push.

No security issues found.

Review summary

Reviewed the full diff for PR #71. The change is a Dependabot dependency bump of react-router-dom from 6.30.6 to 7.18.4, touching only client/package.json, client/package-lock.json, and client/pnpm-lock.yaml. No application source code, routes, handlers, or configuration with runtime security implications were modified, so no security-relevant code paths were introduced or altered by this PR.

Updated for 39b5a4b.


Reviewed by Strix
Re-run review · Configure security review settings

Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 6.30.6 to 7.18.4.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.18.4/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.18.4/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: react-router-dom
  dependency-version: 7.18.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/client/react-router-dom-7.18.4 branch from 39b5a4b to 528d049 Compare October 19, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants