chore(deps-dev): bump react-router-dom from 6.30.4 to 7.0.0 - #244
chore(deps-dev): bump react-router-dom from 6.30.4 to 7.0.0#244dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 6.30.4 to 7.0.0. - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/react-router-dom@7.0.0/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.0.0/packages/react-router-dom) --- updated-dependencies: - dependency-name: react-router-dom dependency-version: 7.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
dependabot
Bot
added
the
dependencies
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
![buildsworth-bk-app[bot]](https://avatars.githubusercontent.com/in/3010600?s=60&v=4){kind=small}
There was a problem hiding this comment.
This changes the plugin's public router peer to a version the current Backstage dependency set cannot install alongside; the blocking compatibility failure is inline. The PR build is also currently failing.
Want to dig deeper?
Paste this into your agent to explore the findings from this review's Buildkite build:
Download the buildsworth logs from build 8072, then answer my questions about the findings.
Install the reading-buildsworth-logs skill to run this.
About buildsworth
Model: gpt-5.6-sol with xhigh thinking.
How to request a review: Comment @buildsworth-bk review on the PR, or request buildsworth-bk as a reviewer.
Risk labels (how buildsworth classifies risk) — buildsworth classifies risk itself from the diff. To let it approve, grant L2 approval by mentioning @buildsworth-bk (see L2 approval grant):
- L1 — Low risk (dep bumps, docs/copy, lockfiles, small presentational fixes). buildsworth may approve by default.
- L2 — Standard risk (new UI, additive API fields, refactors). Approved only with an L2 grant; otherwise comment-only.
- L3 — High risk (auth, migrations, payments, secrets, perf-critical paths). Human review always required.
| "react": "^16.13.1 || ^17.0.0 || ^18.0.0", | ||
| "react-dom": "^16.13.1 || ^17.0.0 || ^18.0.0", | ||
| "react-router-dom": "^6.25.0" | ||
| "react-router-dom": "^7.0.0" |
There was a problem hiding this comment.
Blocking: This makes the plugin’s peer set incompatible with the Backstage packages it is built against. @backstage/core-app-api@^1.18.0 and the other Backstage packages here require react-router-dom@^6.3.0; packaging this change and installing it into an app on RRD 6 fails with ERESOLVE, while changing the app to RRD 7 instead conflicts with Backstage’s peer. RRD 7 also requires React 18+, although this package still advertises React 16/17. Please keep this peer/dev dependency on v6 until the Backstage dependency set supports v7, then migrate the React peer range with it.
Bumps react-router-dom from 6.30.4 to 7.0.0.
Changelog
Sourced from react-router-dom's changelog.
... (truncated)
Commits
e8e3b00chore: Update version for release (#12344)1499f3echore: Update version for release (pre) (#12315)995bcbbchore: Update version for release (pre) (#12235)0e9b346chore: Update version for release (pre) (#12205)6576bd0chore: Update version for release (pre) (#12202)8daac72Merge branch 'dev' into release-next2d5924ffeat: configure export conditions properly (#12136)18dc8b8chore: Update version for release (pre) (#12184)fde6951Merge branch 'dev' into release-next813497aDrop support for Node 18 and installGlobals (#12171)Attestation changes
This version has no provenance attestation, while the previous version (6.30.4) was attested. Review the package versions before updating.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.