chore(deps-dev): Bump the react-router group across 1 directory with 3 updates by dependabot[bot] · Pull Request #22148 · getsentry/sentry-javascript

dependabot · 2026-07-09T15:28:39Z

Bumps the react-router group with 3 updates in the / directory: @react-router/dev, @react-router/node and react-router.

Updates @react-router/dev from 7.17.0 to 8.2.0

Release notes

Sourced from @react-router/dev's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from @react-router/dev's changelog.

v8.2.0

Minor Changes

Add a Web Streams default server entry for non-Node Framework mode apps (#15290)

Apps using @react-router/node, @react-router/express, or @react-router/serve continue to use the renderToPipeableStream default server entry

Apps without those Node server adapter dependencies use a renderToReadableStream default server entry

Non-Node apps with their own entry.server.tsx may be able to remove it in favor of the default if it is not doing anything custom

Detect nub as a supported package manager when installing framework dependencies (#15276)

Patch Changes

Detect user rolldownOptions config in Vite 8+ (#15278)

Unstable Changes

⚠️ Unstable features are not recommended for production use

Add the future.unstable_enableNodeReadableStream flag to opt Node Framework mode apps into using renderToReadableStream instead of renderToPipeableStream (#15290)

This flag has no effect if you have your own entry.server.tsx

Updated dependencies:

react-router@8.2.0

@react-router/node@8.2.0

@react-router/serve@8.2.0

v8.1.0

Patch Changes

Fix a regression with the new prerendering plugin where the react-router.config.ts buildEnd hook would run before prerendering was completed (#15211)

Fixed react-router typegen crashes under the Bun runtime when Babel default imports are already unwrapped (#15214)

Replace the deprecated envFile:false Vite config with envDir:false to eliminate a deprecation warning when using vite@8.1.0+ (#15230)

Only add the "node" Vite server condition for Framework mode apps that declare a Node server adapter dependency (#15242)

This prevents non-Node SSR runtimes from resolving Node-specific package exports by default

Updated dependencies:

react-router@8.1.0

@react-router/node@8.1.0

@react-router/serve@8.1.0

v8.0.1

Patch Changes

Updated dependencies:

react-router@8.0.1

@react-router/node@8.0.1

@react-router/serve@8.0.1

v8.0.0

... (truncated)

Commits

0518044 Release v8.2.0 (#15264)
d6ed351 Prep 8.2.0 release notes
44ceb6d Use runtime-specific default server entries (#15290)
053fd6d Revert "feat: add default web-streams based server entry (#14759)" (#15289)
fdd896a Add tsconfigs for test files (#15279)
e26b254 feat(create-react-router): detect nub package manager (#15276)
40a4364 Read rolldown build options in Vite config (#15278)
2cc25c7 feat: add default web-streams based server entry (#14759)
3287614 Release v8.1.0 (#15227)
aa35115 Prep 8.1.0 release notes
Additional commits viewable in compare view

Updates @react-router/node from 7.17.0 to 8.2.0

Release notes

Sourced from @react-router/node's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from @react-router/node's changelog.

v8.2.0

Patch Changes

Updated dependencies:

react-router@8.2.0

v8.1.0

Patch Changes

Updated dependencies:

react-router@8.1.0

v8.0.1

Patch Changes

Updated dependencies:

react-router@8.0.1

v8.0.0

Major Changes

Switch from @mjackson/node-fetch-server to @remix-run/node-fetch-server now that we can directly use ESM-only packages (#14930)

Update minimum Node version to 22.22.0 (#14928)

Patch Changes

Bump dependencies (#15106)

Bumped @remix-run/node-fetch-server from ^0.13.0 to ^0.13.3

Updated dependencies:

react-router@8.0.0

v7.18.0

Patch Changes

Updated dependencies:

react-router@7.18.0

Commits

0518044 Release v8.2.0 (#15264)
fdd896a Add tsconfigs for test files (#15279)
3287614 Release v8.1.0 (#15227)
d10df2d Release v8.0.1 (#15210)
36122b3 Release v8.0.0 (#15198)
8fc707d chore: format
7e9be69 Version 8.0.0-pre.1
5a77fc9 Merge branch 'main' into v8
6fb1e79 Release v7.18.0 (#15187)
e96bab4 Merge remote-tracking branch 'origin/main' into v8
Additional commits viewable in compare view

Updates react-router from 7.17.0 to 8.2.0

Release notes

Sourced from react-router's releases.

v8.2.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v820

v8.1.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v810

v8.0.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v801

v8.0.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v800

v7.18.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/v7/CHANGELOG.md#v7181

v7.18.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180

Changelog

Sourced from react-router's changelog.

v8.2.0

Patch Changes

Fix href() to properly stringify and URL-encode param values, matching generatePath() (#15277)

splat params preserve path separators while encoding each segment individually

Fix dynamic param extraction for routes with optional static segments (#15200)

When a route path contains optional static segments (e.g. /school?/user/:id), the internal regex's incorrectly shifted parameter indices resulting in incorrect parameter extraction

Consecutive optional static segments (e.g. /one?/two?) were only partially handled

Preserve navigation blocker state through a revalidation (#15246)

Fix route ranking for dynamic parameters with static extension suffixes (#15273)

These were not being detected as dynamic param segments and instead got incorrectly scored higher as a static segment

This meant they could potentially tie truly static routes like /sitemap.xml and outrank them based on definition order

These are now correctly identified as dynamic parameter segments and scored correctly

Use ReactFormState types instead of unknown (#15263)

v8.1.0

Minor Changes

Return route metadata from server request, client navigation, and client fetcher instrumentations (#15235)

Adds result metadata after instrumented calls complete, including the URL, matched route pattern, and params

Adds known HTTP status codes to server request handler instrumentation results

v8.0.1

Patch Changes

Remove the obsolete AppLoadContext type export accidentally left over from v7 now that middleware is always enabled and server request context is provided through RouterContextProvider. (#15207)

v8.0.0

Major Changes

Remove the future.v8_trailingSlashAwareDataRequests flag (#15100)

Trailing slash-aware data request URLs are now the default behavior.

Update tsconfig.json target/lib from ES2020 -> ES2022 (591853e)

Switch the published packages in packages/ to ESM-only. (#14895) (59ebcf1)

Remove deprecated data parameter in favor of loaderData for meta APIs (to align with Route.ComponentProps) (#14931)

Route.MetaArgs, Route.MetaMatch, MetaArgs, MetaMatch, Route.ComponentProps.matches, UIMatch

Remove future.v8_passThroughRequests flag - the raw incoming request is now always passed through to loader/action. Use url for the normalized URL without React Router-specific implementation details (.data suffixes, index/_routes search params). (#15079)

Remove internal hasErrorBoundary field added to router.routes when using a data router (#15074)

This should not impact user-facing code since this was an internal prop and was computed based on the presence of ErrorBoundary or errorElement on your route

hasErrorBoundary is no longer accepted on RouteObject (IndexRouteObject/NonIndexRouteObject), DataRouteObject, <Route> JSX props, or as a key in lazy route definitions.

The MapRoutePropertiesFunction signature no longer requires returning hasErrorBoundary; the router infers it directly.

Remove react-router-dom package (#15076)

In v7 everything DOM-specific was collapsed into react-router/dom

react-router-dom was kept around as a convenience so existing v6 app imports would still work

For v8, you will need to swap react-router-dom imports:

RouterProvider/HydratedRouter should be imported from react-router/dom

... (truncated)

Commits

0518044 Release v8.2.0 (#15264)
d6ed351 Prep 8.2.0 release notes
a22f17d docs: fix useNavigate example to pass state in the options argument (#15282)
0cd1157 chore: format
bf4032e fix: rank a static route above a dynamic param with a static suffix (#15273)
fdd896a Add tsconfigs for test files (#15279)
971f591 Encode href params (#15277)
b41a3ea fix(router): use non-capturing groups for optional static segments in compile...
59c13c5 docs: improve useMatches conceptual explanation and examples (#15205) (#15267)
43e8079 fix(router): preserve navigation blocker state through a revalidation (#15246)
Additional commits viewable in compare view

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 09b3eab. Configure here.}

cursor · 2026-07-10T10:05:46Z

-    "@react-router/dev": "^7.17.0",
-    "@react-router/node": "^7.13.1",
+    "@react-router/dev": "^8.2.0",
+    "@react-router/node": "^8.2.0",


Node engine below v8 minimum

Medium Severity

@react-router/node@8.2.0 requires Node >=22.22.0, but this package still declares engines.node as >=20 and the monorepo runs on Node 20. Installing and developing against the bumped peer/dev dependency is incompatible with the stated runtime support.

Additional Locations (1)

packages/react-router/package.json#L8-L11

^{Reviewed by Cursor Bugbot for commit 09b3eab. Configure here.}

…3 updates Bumps the react-router group with 3 updates in the / directory: [@react-router/dev](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev), [@react-router/node](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-node) and [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router). Updates `@react-router/dev` from 7.17.0 to 8.2.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dev/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/dev@8.2.0/packages/react-router-dev) Updates `@react-router/node` from 7.17.0 to 8.2.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-node/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/@react-router/node@8.2.0/packages/react-router-node) Updates `react-router` from 7.17.0 to 8.2.0 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@8.2.0/packages/react-router) --- updated-dependencies: - dependency-name: "@react-router/dev" dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: react-router - dependency-name: "@react-router/node" dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: react-router - dependency-name: react-router dependency-version: 8.2.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: react-router ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026

dependabot Bot requested a review from a team as a code owner July 9, 2026 15:28

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 9, 2026

dependabot Bot requested review from chargome, mydea and nicohrubec and removed request for a team July 9, 2026 15:28

dependabot Bot changed the title ~~chore(deps-dev): Bump the react-router group with 3 updates~~ chore(deps-dev): Bump the react-router group across 1 directory with 3 updates Jul 10, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-baa27eab56 branch from 95f66c4 to 09b3eab Compare July 10, 2026 10:03

cursor Bot reviewed Jul 10, 2026

View reviewed changes

dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-baa27eab56 branch 2 times, most recently from 1ec0552 to 2040ebd Compare July 13, 2026 14:15

dependabot Bot force-pushed the dependabot/npm_and_yarn/react-router-baa27eab56 branch from 2040ebd to 1fc1f0c Compare July 13, 2026 15:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates#22148

chore(deps-dev): Bump the react-router group across 1 directory with 3 updates#22148
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/react-router-baa27eab56

dependabot Bot commented on behalf of github Jul 9, 2026 •

edited

Loading

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Jul 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v8.2.0

v8.1.0

v8.0.1

v8.0.0

v7.18.1

v7.18.0

v8.2.0

Minor Changes

Patch Changes

Unstable Changes

v8.1.0

Patch Changes

v8.0.1

Patch Changes

v8.0.0

v8.2.0

v8.1.0

v8.0.1

v8.0.0

v7.18.1

v7.18.0

v8.2.0

Patch Changes

v8.1.0

Patch Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

Patch Changes

v7.18.0

Patch Changes

v8.2.0

v8.1.0

v8.0.1

v8.0.0

v7.18.1

v7.18.0

v8.2.0

Patch Changes

v8.1.0

Minor Changes

v8.0.1

Patch Changes

v8.0.0

Major Changes

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Jul 10, 2026

Choose a reason for hiding this comment

Node engine below v8 minimum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 9, 2026 •

edited

Loading