Skip to content

[Tech] Bump react-router from 7.13.0 to 7.13.1 in /frontend#2750

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/react-router-7.13.1
Open

[Tech] Bump react-router from 7.13.0 to 7.13.1 in /frontend#2750
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/frontend/react-router-7.13.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 25, 2026

Bumps react-router from 7.13.0 to 7.13.1.

Release notes

Sourced from react-router's releases.

v7.13.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7131

Changelog

Sourced from react-router's changelog.

7.13.1

Patch Changes

  • fix null reference exception in bad codepath leading to invalid route tree comparisons (#14780)

  • fix: clear timeout when turbo-stream encoding completes (#14810)

  • Improve error message when Origin header is invalid (#14743)

  • Fix matchPath optional params matching without a "/" separator. (#14689)

    • matchPath("/users/:id?", "/usersblah") now returns null.
    • matchPath("/test_route/:part?", "/test_route_more") now returns null.
  • add RSC unstable_getRequest (#14758)

  • Fix HydrateFallback rendering during initial lazy route discovery with matching splat route (#14740)

  • [UNSTABLE] Add support for <Link unstable_mask> in Data Mode which allows users to navigate to a URL in the router but "mask" the URL displayed in the browser. This is useful for contextual routing usages such as displaying an image in a model on top of a gallery, but displaying a browser URL directly to the image that can be shared and loaded without the contextual gallery in the background. (#14716)

    // routes/gallery.tsx
    export function clientLoader({ request }: Route.LoaderArgs) {
      let sp = new URL(request.url).searchParams;
      return {
        images: getImages(),
        // When the router location has the image param, load the modal data
        modalImage: sp.has("image") ? getImage(sp.get("image")!) : null,
      };
    }
    export default function Gallery({ loaderData }: Route.ComponentProps) {
    return (
    <>
    <GalleryGrid>
    {loaderData.images.map((image) => (
    <Link
    key={image.id}
    {/* Navigate the router to /galley?image=N /}}
    to={/gallery?image=${image.id}}
    {/ But display /images/N in the URL bar */}}
    unstable_mask={/images/${image.id}}
    >
    <img src={image.url} alt={image.alt} />
    </Link>
    ))}
    </GalleryGrid>
      {/* When the modal data exists, display the modal */}
      {data.modalImage ? (

... (truncated)

Commits
  • aa3f078 chore: Update version for release (#14829)
  • 3207a5c chore: Update version for release (pre) (#14814)
  • aa93af3 Merge branch 'main' into release-next
  • db7eb57 Fix manifest version mismatch reload losing query parameters and hash (#14813)
  • 2994019 Add support for <Link unstable_mask> (#14716)
  • 6dda561 fix: clear timeout when turbo-stream encoding completes (#14735) (#14810)
  • 407d885 Revert "fix: clear timeout when turbo-stream encoding completes (#14735)" (#1...
  • 11a1600 Fix meta function API reference URL (#14808)
  • 44991a9 fix: clear timeout when turbo-stream encoding completes (#14735)
  • b66e632 Fix hydrate fallback rendering during initial lazy route discovery (#14740)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@tristanrobert
Copy link
Copy Markdown
Contributor

tristanrobert commented Feb 25, 2026

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/react-router-7.13.1 branch from 95621ba to 8d2ceac Compare March 2, 2026 13:03
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) from 7.13.0 to 7.13.1.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.13.1/packages/react-router)

---
updated-dependencies:
- dependency-name: react-router
  dependency-version: 7.13.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/frontend/react-router-7.13.1 branch from 8d2ceac to 23aa746 Compare March 24, 2026 07:17
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants