fix(deps): bump react-router-dom to 7.18.1 (security #235, #238) #239

Merged

maximus merged 1 commit from issue-238-react-router-dom into main

2026-07-01 23:58:55 +00:00

Author	SHA1	Message	Date
le king fu	713667c33d	fix(deps): bump react-router-dom to 7.18.1 (fixes #235 , #238 ) All checks were successful PR Check / rust (pull_request) Successful in 23m56s Details PR Check / frontend (pull_request) Successful in 2m35s Details react-router-dom@7.13.0 pulled react-router@7.13.0, affected by 7 advisories (turbo-stream RCE, DoS __manifest/single-fetch, XSS RSC redirect), corrected in <7.15.1. Bumping the parent to 7.18.1 pulls react-router@7.18.1 and clears both npm audit entries. react-router-dom carries no advisory of its own (#238 inherited transitively from #235). Build (tsc + vite) green; no major bump. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-01 08:41:51 -04:00

Author

SHA1

Message

Date

le king fu

713667c33d

fix(deps): bump react-router-dom to 7.18.1 (fixes #235 , #238 )

PR Check / rust (pull_request) Successful in 23m56s

Details

PR Check / frontend (pull_request) Successful in 2m35s

Details

react-router-dom@7.13.0 pulled react-router@7.13.0, affected by 7 advisories
(turbo-stream RCE, DoS __manifest/single-fetch, XSS RSC redirect), corrected
in <7.15.1. Bumping the parent to 7.18.1 pulls react-router@7.18.1 and clears
both npm audit entries. react-router-dom carries no advisory of its own (#238
inherited transitively from #235). Build (tsc + vite) green; no major bump.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-01 08:41:51 -04:00