build(deps): bump react-router from 7.18.0 to 7.18.2 in /client in the npm_and_yarn group across 1 directory - #6971
Conversation
dependabot
Bot
added
dependencies
matthewevans
left a comment
matthewevans
left a comment
There was a problem hiding this comment.
Changes requested
This PR changes the protected frontend dependency manifest, moving react-router from 7.18.0 to 8.3.0. Major dependency upgrades require explicit maintainer review of the migration and runtime compatibility before they can be accepted; CI success alone is not sufficient evidence for this supply-chain surface.
No implementation review or approval is being given on this automated update. Please route the upgrade through the project’s dependency-maintenance process with the required compatibility assessment.
Bumps the npm_and_yarn group with 1 update in the /client directory: [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router). Updates `react-router` from 7.18.0 to 7.18.2 - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router@7.18.2/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.18.2/packages/react-router) --- updated-dependencies: - dependency-name: react-router dependency-version: 8.3.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
b2338b7 to
66a42c2
Compare
matthewevans
left a comment
matthewevans
left a comment
There was a problem hiding this comment.
Changes requested — protected dependency manifest on current head 66a42c219561d0b1eaf04fb881cac84b323c5ff6
This PR modifies the hard-stop path client/package.json:38, changing react-router from ^7.18.0 to ^7.18.2, and refreshes the corresponding lockfile graph in client/pnpm-lock.yaml. Under .agents/pr-review-policy.toml's hard_stops policy, that protected dependency-manifest change requires the project's dependency-maintenance compatibility assessment before approval; passing CI and supply-chain scan are not that assessment.
No implementation review or approval is given for this automated update. Please route the current-head update through the dependency-maintenance process with explicit runtime/migration compatibility evidence, then request a new review.
1 participant
Bumps the npm_and_yarn group with 1 update in the /client directory: react-router.
Updates
react-routerfrom 7.18.0 to 7.18.2Release notes
Sourced from react-router's releases.
Changelog
Sourced from react-router's changelog.
Commits
69a653eRelease v7.18.2 (#15354)8ebd5dfHarden RSC CSRF codepaths (backport of #15311) (#15353)afdf85dRelease v7.18.1 (#15253)