Skip to content

Commit 587ee45

Browse files
tanemclaude
andcommitted
Fix npm audit vulnerabilities and unblock Renovate lockfile maintenance
Sets minimumReleaseAge to null for lockFileMaintenance, matching the config already proven in tanem/react-svg. The repo-wide 3-day release soak was also applying to weekly lock refreshes, and since a full refresh always pulls in something published within 3 days, the resulting PR's renovate/stability-days check could never pass - deadlocking #2929 since 2025-11-24 and leaving 23 transitive dev dependency alerts unaddressed. Also: - Bump @babel/core to 7.29.7 (pinned exact, so the lockfile refresh alone couldn't reach the patched version). - Add an override pinning brace-expansion to ^5.0.8, fixing GHSA-mh99-v99m-4gvg (a DoS newly published 2026-07-24) in nested copies that eslint/jest/ts-jest otherwise keep on 1.x/2.x. - Migrate examples/react-router-v6 to react-router-dom 7.18.2, fixing GHSA-jjmj-jmhj-qwj2 (open redirect/XSS), which has no fix in the 6.x line. Renamed to examples/react-router since the version is no longer relevant. Verified with a headless browser that navigation and the progress bar animation still work correctly. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
1 parent 14fffc7 commit 587ee45

17 files changed

Lines changed: 5660 additions & 6330 deletions

README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -101,7 +101,7 @@ render(<Enhanced isAnimating />, document.getElementById('root'))
101101
- Next Pages Router: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/next-pages-router) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/next-pages-router)
102102
- Original Design: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/original-design) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/original-design)
103103
- Plain JS: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/plain-js) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/plain-js)
104-
- React Router V6: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/react-router-v6) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/react-router-v6)
104+
- React Router: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/react-router) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/react-router)
105105
- Render Props: [Source](https://github.com/tanem/react-nprogress/tree/master/examples/render-props) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/render-props)
106106
- UMD Build (Development): [Source](https://github.com/tanem/react-nprogress/tree/master/examples/umd-dev) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/umd-dev)
107107
- UMD Build (Production): [Source](https://github.com/tanem/react-nprogress/tree/master/examples/umd-prod) | [Sandbox](https://codesandbox.io/p/devbox/github/tanem/react-nprogress/tree/master/examples/umd-prod)
File renamed without changes.

examples/react-router-v6/.devcontainer/devcontainer.json renamed to examples/react-router/.devcontainer/devcontainer.json

File renamed without changes.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# ReactNProgress React Router V6 Example
1+
# ReactNProgress React Router Example
22

33
## Available Scripts
44

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
2-
"name": "react-router-v6",
3-
"description": "ReactNProgress React Router V6 Example",
2+
"name": "react-router",
3+
"description": "ReactNProgress React Router Example",
44
"keywords": [
55
"@tanem/react-nprogress"
66
],
@@ -11,7 +11,7 @@
1111
"@tanem/react-nprogress": "latest",
1212
"react": "19.2.4",
1313
"react-dom": "19.2.4",
14-
"react-router-dom": "6.30.3",
14+
"react-router-dom": "7.18.2",
1515
"react-transition-group": "4.4.5"
1616
},
1717
"devDependencies": {
File renamed without changes.

0 commit comments

Comments
 (0)