From 5fbb9c978da0c47e08158abd2bba315f6333f8e7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 24 Jul 2026 16:32:14 +0000
Subject: [PATCH] chore: bump react-router from 7.15.1 to 7.18.0 in /site
(#27484)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps
[react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router)
from 7.15.1 to 7.18.0.
Release notes
Sourced from react-router's
releases.
v7.18.0
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7180
v7.17.0
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7170
v7.16.0
See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7160
Changelog
Sourced from react-router's
changelog.
v7.18.0
Patch Changes
- Fix server handler prerender responses when using
ssr:
false and future.v8_trailingSlashAwareDataRequests:
true. Avoids false positive "SPA Mode" detection when
serving prerendered paths (#15173)
- Use the
ServerRouter nonce for nonce-aware SSR
components when they don't provide their own value so strict CSP pages
can load them. (#15170)
- Use
turbo-stream to serialize and deserialize Framework
Mode hydration errors (#15175)
- Precompute route branch matchers to avoid recompiling route path
regexes during matching (#15186)
- Use the constructed request URL host when validating action request
origins. (#15185)
- Remove the un-documented custom error serialization logic from Data
Mode SSR built-in hydration flows (#15175)
- Validate protocols in RSC render redirects (#15177)
- Consolidate url normalization logic and better handle mixed slashes
(#15176)
v7.17.0
Minor Changes
- Ship a subset of the official documentation inside the
react-router package (#15121)
- Markdown docs are now available in
node_modules/react-router/docs, letting AI coding agents
and the React Router agent skills read official docs locally
- Excludes auto-generated API docs (
api/),
community/ content, and tutorials
(tutorials/)
v7.16.0
Minor Changes
- Stabilize
future.unstable_trailingSlashAwareDataRequests as
future.v8_trailingSlashAwareDataRequests (#15098)
Patch Changes
-
Disable manifest path when lazy route dicovery is disabled (#15068)
-
Fix browser URL creation to use the configured history window instead
of the global window. (#15066)
- Pass the history/router window through to
createBrowserURLImpl so custom window contexts keep the
correct URL origin.
-
Fix useNavigation() return type to preserve
discriminated union across navigation states (#15095)
-
Widen MetaDescriptor script:ld+json type
from LdJsonObject to LdJsonObject |
LdJsonObject[] to permit multiple JSON-LD schemas in a single
<script type="application/ld+json"> tag
emitted by <Meta /> (#15082)
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/coder/coder/network/alerts).
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
site/package.json | 2 +-
site/pnpm-lock.yaml | 16 ++++++++--------
2 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/site/package.json b/site/package.json
index 08a4c5394f..418c9642ef 100644
--- a/site/package.json
+++ b/site/package.json
@@ -100,7 +100,7 @@
"react-markdown": "9.1.0",
"react-query": "npm:@tanstack/react-query@5.77.0",
"react-resizable-panels": "3.0.6",
- "react-router": "7.15.1",
+ "react-router": "7.18.0",
"react-syntax-highlighter": "15.6.6",
"react-textarea-autosize": "8.5.9",
"react-virtualized-auto-sizer": "1.0.26",
diff --git a/site/pnpm-lock.yaml b/site/pnpm-lock.yaml
index 43206b3392..5bc14e3f56 100644
--- a/site/pnpm-lock.yaml
+++ b/site/pnpm-lock.yaml
@@ -222,8 +222,8 @@ importers:
specifier: 3.0.6
version: 3.0.6(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
react-router:
- specifier: 7.15.1
- version: 7.15.1(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
+ specifier: 7.18.0
+ version: 7.18.0(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
react-syntax-highlighter:
specifier: 15.6.6
version: 15.6.6(react@19.2.6)
@@ -446,7 +446,7 @@ importers:
version: 10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
storybook-addon-remix-react-router:
specifier: 6.0.0
- version: 6.0.0(react-dom@19.2.6(react@19.2.6))(react-router@7.15.1(react-dom@19.2.6(react@19.2.6))(react@19.2.6))(react@19.2.6)(storybook@10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6))
+ version: 6.0.0(react-dom@19.2.6(react@19.2.6))(react-router@7.18.0(react-dom@19.2.6(react@19.2.6))(react@19.2.6))(react@19.2.6)(storybook@10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6))
tailwindcss:
specifier: 3.4.18
version: 3.4.18(tsx@4.22.4)(yaml@2.8.3)
@@ -5403,8 +5403,8 @@ packages:
react: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
react-dom: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
- react-router@7.15.1:
- resolution: {integrity: sha512-R8rl9HhgikFYoPJymnUtPXWbnDb3oget6lQnfIoupbt61aT9aOhRkDsY2XRhZRyX1Z/8a5sL74fXmFNm3NRK5A==, tarball: https://registry.npmjs.org/react-router/-/react-router-7.15.1.tgz}
+ react-router@7.18.0:
+ resolution: {integrity: sha512-pTTGt8J+ji1NOmYnjzT+bAJy/1zD+Jp4ziO6cL7T3ZLvXKtusO7BpFqlRXitqpcPVqllsIXFHRMt+2/k3Xn6HQ==, tarball: https://registry.npmjs.org/react-router/-/react-router-7.18.0.tgz}
engines: {node: '>=20.0.0'}
peerDependencies:
react: '>=18'
@@ -11949,7 +11949,7 @@ snapshots:
react: 19.2.6
react-dom: 19.2.6(react@19.2.6)
- react-router@7.15.1(react-dom@19.2.6(react@19.2.6))(react@19.2.6):
+ react-router@7.18.0(react-dom@19.2.6(react@19.2.6))(react@19.2.6):
dependencies:
cookie: 1.1.1
react: 19.2.6
@@ -12428,12 +12428,12 @@ snapshots:
dependencies:
internal-slot: 1.0.6
- storybook-addon-remix-react-router@6.0.0(react-dom@19.2.6(react@19.2.6))(react-router@7.15.1(react-dom@19.2.6(react@19.2.6))(react@19.2.6))(react@19.2.6)(storybook@10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6)):
+ storybook-addon-remix-react-router@6.0.0(react-dom@19.2.6(react@19.2.6))(react-router@7.18.0(react-dom@19.2.6(react@19.2.6))(react@19.2.6))(react@19.2.6)(storybook@10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6)):
dependencies:
'@mjackson/form-data-parser': 0.4.0
compare-versions: 6.1.0
react-inspector: 6.0.2(react@19.2.6)
- react-router: 7.15.1(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
+ react-router: 7.18.0(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
storybook: 10.3.3(@testing-library/dom@10.4.0)(prettier@3.4.1)(react-dom@19.2.6(react@19.2.6))(react@19.2.6)
optionalDependencies:
react: 19.2.6