Skip to content

Update react-router to fix security vulnerability#456

Merged
mostlygeek merged 1 commit intomainfrom
claude/update-react-router-security-73UWv
Jan 9, 2026
Merged

Update react-router to fix security vulnerability#456
mostlygeek merged 1 commit intomainfrom
claude/update-react-router-security-73UWv

Conversation

@mostlygeek
Copy link
Copy Markdown
Owner

@mostlygeek mostlygeek commented Jan 9, 2026

Update react-router-dom from 7.6.2 to 7.12.0 to address security vulnerability.

  • Updated dependency in package.json
  • Regenerated package-lock.json
  • Verified build passes successfully
  • Confirmed 0 vulnerabilities with npm audit

Summary by CodeRabbit

  • Chores
    • Updated internal dependencies to ensure compatibility and stability.

✏️ Tip: You can customize this high-level summary in your review settings.

Update react-router-dom from 7.6.2 to 7.12.0 to address security vulnerability.

- Updated dependency in package.json
- Regenerated package-lock.json
- Verified build passes successfully
- Confirmed 0 vulnerabilities with npm audit
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Jan 9, 2026

Walkthrough

The react-router-dom dependency version in ui/package.json is updated from ^7.6.2 to ^7.12.0, allowing for minor and patch version updates up to 7.12.0. This is a single-line dependency constraint modification with no other changes to the configuration.

Changes

Cohort / File(s) Summary
Dependency version update
ui/package.json
Updated react-router-dom version constraint from ^7.6.2 to ^7.12.0

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately reflects the main change: updating react-router-dom to address a security vulnerability, which aligns with the PR objectives and the dependency version bump shown in the raw summary.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c19309f and bee12c6.

⛔ Files ignored due to path filters (1)
  • ui/package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • ui/package.json
⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)
  • GitHub Check: run-tests
  • GitHub Check: run-tests
🔇 Additional comments (1)
ui/package.json (1)

17-17: The lockfile has been properly updated to react-router-dom@^7.12.0 and no other workspaces have conflicting versions. The security fix is complete.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@mostlygeek mostlygeek merged commit 267c030 into main Jan 9, 2026
2 of 3 checks passed
@mostlygeek mostlygeek deleted the claude/update-react-router-security-73UWv branch January 31, 2026 04:16
rohitpaul pushed a commit to rohitpaul/llama-swap that referenced this pull request Mar 29, 2026
Update react-router-dom from 7.6.2 to 7.12.0 to address security vulnerability.

- Updated dependency in package.json
- Regenerated package-lock.json
- Verified build passes successfully
- Confirmed 0 vulnerabilities with npm audit

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants