chore(deps): bump the tanstack group across 1 directory with 3 updates - #18
chore(deps): bump the tanstack group across 1 directory with 3 updates#18dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![naudit-codereview[bot]](https://avatars.githubusercontent.com/in/4262657?s=60&v=4){kind=small}
There was a problem hiding this comment.
Routine automated dependency bump for the TanStack group (react-query, react-router, router-plugin) plus their transitive deps; no functional code changes, but the new packages raise the minimum Node engine requirement to >=20.19, which is worth verifying against CI/deploy environments.
Verdict: ✅ approve · 2 inline, 0 ohne Position
Gate: blockt ab High + Medium-Confidence.
🤖 Naudit-Kommandos
Antworte im Thread eines Inline-Kommentars — erste Zeile der Antwort:
@naudit fp <grund>— Fehlalarm. Naudit merkt sich das für dieses Projekt und meidet den Fund künftig.@naudit ok <text>— Finding angenommen/umgesetzt.
Nur Repo-Mitglieder (Developer/Collaborator aufwärts) sind autorisiert. Ein neuer Top-Level-Kommentar wird nicht ausgewertet, es muss eine Antwort auf den Kommentar sein.
| "license": "MIT", | ||
| "engines": { | ||
| "node": ">=12" | ||
| "node": ">=20.19" |
There was a problem hiding this comment.
🟡 Medium · confidence low
Several transitive TanStack packages (@tanstack/history, router-core, router-generator, router-plugin, router-utils, virtual-file-routes) now require node >= 20.19 (up from >=12), and chokidar/unplugin were bumped to major versions with similarly raised Node engine requirements. Confirm the CI pipeline and any deployment/build images meet this minimum Node version, otherwise npm ci/build could fail.
| "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz", | ||
| "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==", | ||
| "version": "4.4.3", | ||
| "resolved": "https://registry.npmjs.org/zod/-/zod-4.4.3.tgz", |
There was a problem hiding this comment.
🔵 Low · confidence low
zod is bumped from 3.x to 4.4.3 as a transitive dependency of @tanstack/router-generator/router-plugin (dev-only). Zod v4 has breaking API changes; since this is only a dev-time dependency of the route generator it should be low risk, but worth a quick sanity build/generate check to ensure route generation still works.
Bumps the tanstack group with 3 updates in the /src/frontend directory: [@tanstack/react-query](https://github.com/TanStack/query/tree/HEAD/packages/react-query), [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router) and [@tanstack/router-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-plugin). Updates `@tanstack/react-query` from 5.90.7 to 5.101.4 - [Release notes](https://github.com/TanStack/query/releases) - [Changelog](https://github.com/TanStack/query/blob/main/packages/react-query/CHANGELOG.md) - [Commits](https://github.com/TanStack/query/commits/@tanstack/react-query@5.101.4/packages/react-query) Updates `@tanstack/react-router` from 1.135.0 to 1.170.21 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/react-router@1.170.21/packages/react-router) Updates `@tanstack/router-plugin` from 1.135.0 to 1.168.26 - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/router-plugin/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/router-plugin@1.168.26/packages/router-plugin) --- updated-dependencies: - dependency-name: "@tanstack/react-query" dependency-version: 5.101.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tanstack - dependency-name: "@tanstack/react-router" dependency-version: 1.170.20 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tanstack - dependency-name: "@tanstack/router-plugin" dependency-version: 1.168.25 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: tanstack ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
473ea95 to
f7790bc
Compare
There was a problem hiding this comment.
Routine dependency bump for the TanStack group (react-query, react-router, router-plugin) and their transitive deps; no functional code changes, but note the raised minimum Node engine requirement.
Verdict: ✅ approve · 2 inline, 0 ohne Position
Gate: blockt ab High + Medium-Confidence.
ℹ️ Roundtrip-Limit erreicht (2/2) — weitere Pushes an diesem PR werden nicht mehr automatisch reviewt.
🤖 Naudit-Kommandos
Antworte im Thread eines Inline-Kommentars — erste Zeile der Antwort:
@naudit fp <grund>— Fehlalarm. Naudit merkt sich das für dieses Projekt und meidet den Fund künftig.@naudit ok <text>— Finding angenommen/umgesetzt.
Nur Repo-Mitglieder (Developer/Collaborator aufwärts) sind autorisiert. Ein neuer Top-Level-Kommentar wird nicht ausgewertet, es muss eine Antwort auf den Kommentar sein.
| }, | ||
| "engines": { | ||
| "node": ">=12" | ||
| "node": ">=20.19" |
There was a problem hiding this comment.
🟡 Medium · confidence low
Several transitive deps now require Node >=20.19 (@tanstack/*, chokidar 5.x, unplugin 3.x, readdirp 5.x). If CI/deploy environments still run an older Node LTS, installs or builds could fail. Worth confirming the pipeline's Node version matches.
| "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-3.6.0.tgz", | ||
| "integrity": "sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==", | ||
| "version": "5.0.0", | ||
| "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-5.0.0.tgz", |
There was a problem hiding this comment.
🔵 Low · confidence low
chokidar bumped from 3.6.0 to 5.0.0 (major) and unplugin from 2.x to 3.x, zod from 3.x to 4.x (major, transitive dev dep of router-plugin/router-generator). These are major version jumps pulled in transitively; while presumably validated upstream by TanStack, it's worth a quick smoke test of vite build/route generation after the bump since major bumps can carry breaking changes.
Bumps the tanstack group with 3 updates in the /src/frontend directory: @tanstack/react-query, @tanstack/react-router and @tanstack/router-plugin.
Updates
@tanstack/react-queryfrom 5.90.7 to 5.101.4Release notes
Sourced from @tanstack/react-query's releases.
... (truncated)
Changelog
Sourced from @tanstack/react-query's changelog.
... (truncated)
Commits
86bb8a6ci: Version Packages (#11094)181ea82ci: Version Packages (#11089)6d55b07test({react,preact}-query): use the '.then()' convention consistently (#11085)44f38dftest({react,preact,solid}-query/useInfiniteQuery): inline the shared 'fetchIt...d1558c1test({react,preact}-query/usePrefetchQuery): inline the 'generateQueryFn' fac...99690d1test({react,preact}-query/usePrefetchInfiniteQuery): inline single-use helper...10770f0test({react,preact}-query/usePrefetchInfiniteQuery): inline the shared 'Suspe...dbd5a86test({react,preact}-query/usePrefetchQuery): inline the shared 'Suspended' co...b955f60test({react,preact}-query/useSuspenseQuery): assert the 'loading' fallback is...b9c657etest({react,preact}-query/usePrefetchQuery): assert the 'Loading...' fallback...Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tanstack/react-querysince your current version.Updates
@tanstack/react-routerfrom 1.135.0 to 1.170.21Changelog
Sourced from @tanstack/react-router's changelog.
... (truncated)
Commits
ac1d0abci: Version Packages (#7968)2435885Create file routes directly (#7970)86bf510Pass intersection observer disabled state directly (#7971)697ebb6fix(react-router): prevent blank frame before initial pending UI (#7961)07a3d10fix(router): preserve raw params for match identity (#7966)790e062ci: Version Packages (#7963)704145cci: Version Packages (#7946)45c4ad8fix(router-core): lane match loader rewrite (#7805)b5e540ddocs: use the dynamic README header endpoint (#7940)179d9b9Improve Router and Start agent skills (#7867)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tanstack/react-routersince your current version.Updates
@tanstack/router-pluginfrom 1.135.0 to 1.168.26Changelog
Sourced from @tanstack/router-plugin's changelog.
... (truncated)
Commits
ac1d0abci: Version Packages (#7968)07a3d10fix(router): preserve raw params for match identity (#7966)790e062ci: Version Packages (#7963)704145cci: Version Packages (#7946)45c4ad8fix(router-core): lane match loader rewrite (#7805)f04ddc6fix(start): skip errored Rspack modules during import protection (#7685)179d9b9Improve Router and Start agent skills (#7867)88f366achore: migrate to typescript 7 (#7887)3a55756test: add regression coverage for existing router behavior (#7886)49bd9faci: Version Packages (#7857)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for
@tanstack/router-pluginsince your current version.