Skip to content

fix(frontend): update React Router security patch - #74

Closed
prithvee07 wants to merge 1 commit into
Kritt-ai:mainfrom
prithvee07:fix/react-router-advisory
Closed

prithvee07 wants to merge 1 commit into
Kritt-ai:mainfrom
prithvee07:fix/react-router-advisory

Conversation

@prithvee07

Copy link
Copy Markdown
Contributor

What & why

Updates react-router-dom and its locked react-router dependency from 7.18.1 to 7.18.2 to consume the available security patch. The change is dependency-only and preserves the lockfile's cross-platform optional packages.

Type of change

  • fix — bug fix
  • feat — new feature
  • docs — documentation only
  • refactor / chore / test / ci
  • Breaking change (! / BREAKING CHANGE:)

Affected components

  • frontend
  • backend
  • engine
  • database (migration)
  • docs / CI / tooling

Checklist

By submitting this pull request, I agree to the Contribution Terms linked in the repository pull request template.

  • Commits use Conventional Commits
  • Lint passes
  • Relevant tests pass
  • No secrets committed

Verification

  • npm audit --omit=dev --package-lock-only — 0 production vulnerabilities
  • npm run lint — passed
  • npm test -- --exclude src/pages/Accounts.test.js — 255/255 passed
  • npm run build — passed
  • git diff upstream/main...HEAD --check — passed

Notes for reviewers

The full test suite has one pre-existing locale-sensitive failure in Accounts.test.js on Windows: the platform formats the date as 12 Aug 2026 while the assertion expects Aug 12, 2026. This dependency-only change does not touch that code. The production build emits the repository's existing chunk-size warning.

@harel-coffee

Copy link
Copy Markdown
Contributor

Thank you for preparing this React Router update. Closing this PR as superseded by #93, which has now been merged into main.

This PR proposes updating react-router-dom from 7.18.1 to 7.18.2. PR #93 updates both react-router-dom and its react-router dependency to 7.18.3, so the update proposed here is covered by the newer version now on main. The package manifest and lockfile have both been updated through that merged PR.

No additional changes are needed in this PR. Thanks again for the contribution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants