Bump the react-router group across 1 directory with 4 updates

[dependabot]

Bumps the react-router group with 4 updates in the /frontend directory: @react-router/node, @react-router/serve, react-router and @react-router/dev.

Updates @react-router/node from 8.2.0 to 8.3.0

Release notes

Sourced from @​react-router/node's releases.

v8.3.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830

Changelog

Sourced from @​react-router/node's changelog.

v8.3.0

Patch Changes

• Allow typescript@7 to be used (#15317)
• Updated dependencies:
  • react-router@8.3.0

Commits

• 2edaca7 Release v8.3.0 (#15294)
• 687ab72 Prep release notes
• 4680094 feat: allow typescript@7 to be used with react-router (#15317)
• See full diff in compare view

Updates @react-router/serve from 8.2.0 to 8.3.0

Release notes

Sourced from @​react-router/serve's releases.

v8.3.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830

Changelog

Sourced from @​react-router/serve's changelog.

v8.3.0

Patch Changes

• Updated dependencies:
  • react-router@8.3.0
  • @react-router/express@8.3.0
  • @react-router/node@8.3.0

Commits

• 2edaca7 Release v8.3.0 (#15294)
• See full diff in compare view

Updates react-router from 8.2.0 to 8.3.0

Release notes

Sourced from react-router's releases.

v8.3.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830

Changelog

Sourced from react-router's changelog.

v8.3.0

Patch Changes

• Encode path params in href/generatePath per RFC 3986 path-segment rules instead of encodeURIComponent (#15310)
  • Characters that are valid literally in a path segment ($ & + , ; = : @ — RFC 3986 pchar) are no longer percent-encoded, so values like a semver build 1.0.0+1 interpolate unchanged instead of becoming 1.0.0%2B1
  • Structural/unsafe characters (/ ? # %, whitespace, non-ASCII) are still escaped exactly as before
• Use crypto.randomUUID() for createMemorySessionStorage session ids (#15302)
  • createMemorySessionStorage is only intended for local development and testing - sessions are lost when the server restarts
• Fix NavLink not applying its pending state when to has a trailing slash (#15300)
• Preserve RSC route component metadata so routes with a clientLoader can skip unnecessary server requests once their components have rendered while still fetching missing server-rendered elements (#15323)
• Harden RSC CSRF code paths (#15311)
• Fix server crash (TypeError: Invalid state: Unable to enqueue) when a request is aborted while the RSC HTML stream has a pending flush (#15286)
  • Handle cancellation of the injectRSCPayload readable side, clear the pending flush, and cancel the underlying RSC payload stream

Unstable Changes

⚠️ Unstable features are not recommended for production use

• Detect stale RSC clients during lazy route discovery and reload the destination document (#15318)

  Migration

  Apps using the default RSC Framework entry do not need to make any changes. Apps with a custom entry.rsc.tsx should import the generated client version and pass it to unstable_matchRSCServerRequest:

  import clientVersion from "virtual:react-router/unstable_rsc/client-version";
  return unstable_matchRSCServerRequest({
  // ...
  clientVersion,
  });

• Add CSP nonce support to RSC document rendering (#15320)

  • Add nonce options to unstable_routeRSCServerRequest and unstable_RSCStaticRouter
  • Forward the nonce to the HTML renderer and apply it to injected RSC payload scripts and nonce-aware framework components

  To adopt nonce-based CSP, update your entry.ssr.tsx (run react-router reveal entry.ssr first in RSC Framework Mode) to generate a fresh nonce for each request. Pass it to routeRSCServerRequest, spread the renderHTML options into React's HTML renderer, pass options.nonce to RSCStaticRouter, and use the same nonce in the Content-Security-Policy response header:

  const nonce = crypto.randomUUID();
  const response = await routeRSCServerRequest({
    request,
    serverResponse,
    createFromReadableStream,
    nonce,
    async renderHTML(getPayload, options) {
      const payload = getPayload();
      return renderHTMLToReadableStream(

... (truncated)

Commits

• 2edaca7 Release v8.3.0 (#15294)
• 687ab72 Prep release notes
• d2f1f1b update changes files to use h4 instead of h3 (#15334)
• 8186207 fix(rsc): preserve component metadata for client loader revalidation (#15323)
• c26e431 feat(rsc): support CSP nonces in document rendering (#15320)
• 6286f90 feat(rsc): reload stale clients after new deployments (#15318)
• 3d83ad4 docs: fix useLinkClickHandler defaultShouldRevalidate default description (#1...
• f75c89f Update docs links to v8 API reference (#15316)
• baa9ba6 fix: encode path params per RFC 3986 path-segment rules in href/generatePath ...
• 69debd1 fix: apply NavLink pending state when the to prop has a trailing slash (#15300)
• Additional commits viewable in compare view

Updates @react-router/dev from 8.2.0 to 8.3.0

Release notes

Sourced from @​react-router/dev's releases.

v8.3.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v830

Changelog

Sourced from @​react-router/dev's changelog.

v8.3.0

Minor Changes

• Restart react-router dev with --conditions=development when not already configured (#15291)

Patch Changes

• Allow typescript@7 to be used (#15317)

Unstable Changes

⚠️ Unstable features are not recommended for production use

• Add unstable_rsc/client-version client build version virtual module (#15318)

• Support the subResourceIntegrity config option in RSC Framework Mode (#15321)

  Migration guide

  No changes are required when using the default RSC SSR entry. If you maintain a custom app/entry.ssr.tsx, import the new virtual module and pass its hashes to React's importMap render option:

  +import subResourceIntegrity from "virtual:react-router/unstable_rsc/subresource-integrity";
  return renderToReadableStream(<RSCStaticRouter getPayload={getPayload} />, {
  ...options,
  bootstrapScriptContent,
  formState,
  
  importMap: subResourceIntegrity
  ? { integrity: subResourceIntegrity }
  : undefined,
  signal: request.signal,
  });

Updated dependencies:

• react-router@8.3.0
• @react-router/node@8.3.0
• @react-router/serve@8.3.0

Commits

• 2edaca7 Release v8.3.0 (#15294)
• 687ab72 Prep release notes
• 4680094 feat: allow typescript@7 to be used with react-router (#15317)
• d2f1f1b update changes files to use h4 instead of h3 (#15334)
• ce44989 feat(rsc): support subResourceIntegrity (#15321)
• 6286f90 feat(rsc): reload stale clients after new deployments (#15318)
• 88ded38 Fix change file
• f1d0a41 chore: format
• 497a957 feat: restart with development condition (#15291)
• ac5d9d5 chore: format
• See full diff in compare view