Skip to content

Update frontend React Router packages to a patched compatible release - #233

Merged
jayhill merged 1 commit into
mainfrom
copilot/update-react-router-dependency
Jul 27, 2026
Merged

Update frontend React Router packages to a patched compatible release#233
jayhill merged 1 commit into
mainfrom
copilot/update-react-router-dependency

Conversation

Copilot AI commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Dependabot could not apply the React Router security update because react-router-dom@7.17.0 hard-pinned its transitive react-router@7.17.0 dependency. This change moves the frontend to the next compatible react-router-dom release so npm resolves a patched react-router without forcing an invalid downgrade path.

  • Dependency update

    • Bump frontend's direct react-router-dom dependency from ^7.17.0 to ^7.18.1
    • Allow npm to resolve react-router to 7.18.1 through the package's declared dependency edge
  • Lockfile refresh

    • Regenerate frontend/package-lock.json so the resolved tree records:
      • react-router-dom@7.18.1
      • react-router@7.18.1
  • Effect on the dependency graph

    • Remove the vulnerable 7.17.0 -> 7.17.0 pairing that blocked the security update
    • Keep the upgrade scoped to the frontend package and its lockfile
{
  "dependencies": {
    "react-router-dom": "^7.18.1"
  }
}

Copilot AI review requested due to automatic review settings July 27, 2026 00:42

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because there is no eligible user to bill. To allow Copilot reviews on bot-authored pull requests, enable direct organization billing in your organization's Copilot settings.

@jayhill
jayhill marked this pull request as ready for review July 27, 2026 00:48
@jayhill
jayhill merged commit eda349f into main Jul 27, 2026
8 checks passed
@jayhill
jayhill deleted the copilot/update-react-router-dependency branch July 27, 2026 00:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants