From 713667c33dea2918aedc6667fd1b181af3006131 Mon Sep 17 00:00:00 2001 From: le king fu Date: Wed, 1 Jul 2026 08:41:51 -0400 Subject: [PATCH] fix(deps): bump react-router-dom to 7.18.1 (fixes #235, #238) react-router-dom@7.13.0 pulled react-router@7.13.0, affected by 7 advisories (turbo-stream RCE, DoS __manifest/single-fetch, XSS RSC redirect), corrected in <7.15.1. Bumping the parent to 7.18.1 pulls react-router@7.18.1 and clears both npm audit entries. react-router-dom carries no advisory of its own (#238 inherited transitively from #235). Build (tsc + vite) green; no major bump. Co-Authored-By: Claude Opus 4.8 (1M context) --- package-lock.json | 22 +++++++++++++--------- package.json | 2 +- 2 files changed, 14 insertions(+), 10 deletions(-) diff --git a/package-lock.json b/package-lock.json index f65f044..5759907 100644 --- a/package-lock.json +++ b/package-lock.json @@ -23,7 +23,7 @@ "react": "^19.1.0", "react-dom": "^19.1.0", "react-i18next": "^16.5.4", - "react-router-dom": "^7.13.0", + "react-router-dom": "^7.18.1", "recharts": "^3.7.0" }, "devDependencies": { @@ -2174,6 +2174,7 @@ "version": "1.1.1", "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz", "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==", + "license": "MIT", "engines": { "node": ">=18" }, @@ -3034,9 +3035,10 @@ } }, "node_modules/react-router": { - "version": "7.13.0", - "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.13.0.tgz", - "integrity": "sha512-PZgus8ETambRT17BUm/LL8lX3Of+oiLaPuVTRH3l1eLvSPpKO3AvhAEb5N7ihAFZQrYDqkvvWfFh9p0z9VsjLw==", + "version": "7.18.1", + "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.1.tgz", + "integrity": "sha512-GDLgg3i3uM0aeJO3Fm+TCS+sDQ7gu12T6x0qdTEzcwqEfleci7JwugVNIF3U//0FWKnJT7ptG+20B2jfDqnZAg==", + "license": "MIT", "dependencies": { "cookie": "^1.0.1", "set-cookie-parser": "^2.6.0" @@ -3055,11 +3057,12 @@ } }, "node_modules/react-router-dom": { - "version": "7.13.0", - "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.13.0.tgz", - "integrity": "sha512-5CO/l5Yahi2SKC6rGZ+HDEjpjkGaG/ncEP7eWFTvFxbHP8yeeI0PxTDjimtpXYlR3b3i9/WIL4VJttPrESIf2g==", + "version": "7.18.1", + "resolved": "https://registry.npmjs.org/react-router-dom/-/react-router-dom-7.18.1.tgz", + "integrity": "sha512-KaZh+X/6UtEp28x51AUYZDMg9NGoz2ja3dNHa+ta/tk40vCzKhQ/RypCWBMLbmDr6//E24Vv5uPsrqXFozdkAg==", + "license": "MIT", "dependencies": { - "react-router": "7.13.0" + "react-router": "7.18.1" }, "engines": { "node": ">=20.0.0" @@ -3175,7 +3178,8 @@ "node_modules/set-cookie-parser": { "version": "2.7.2", "resolved": "https://registry.npmjs.org/set-cookie-parser/-/set-cookie-parser-2.7.2.tgz", - "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==" + "integrity": "sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==", + "license": "MIT" }, "node_modules/siginfo": { "version": "2.0.0", diff --git a/package.json b/package.json index babc532..c2d48d0 100644 --- a/package.json +++ b/package.json @@ -27,7 +27,7 @@ "react": "^19.1.0", "react-dom": "^19.1.0", "react-i18next": "^16.5.4", - "react-router-dom": "^7.13.0", + "react-router-dom": "^7.18.1", "recharts": "^3.7.0" }, "devDependencies": { -- 2.45.2