Skip to content

chore(deps): bump react-router-dom to 7.18.0 in cra-react-router example - #1232

Merged
yogeshchoudhary147 merged 1 commit into
mainfrom
fix/react-router-bump
Sep 7, 2026
Merged

chore(deps): bump react-router-dom to 7.18.0 in cra-react-router example#1232
yogeshchoudhary147 merged 1 commit into
mainfrom
fix/react-router-bump

Conversation

@yogeshchoudhary147

@yogeshchoudhary147 yogeshchoudhary147 commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Upgrades react-router-dom from ^6.3.0 to ^7.18.0 in the cra-react-router example to fix two vulnerabilities in react-router@6.x:

No SDK source or published package is affected; the vulnerability is scoped to the example app only.

Summary by CodeRabbit

  • Chores
    • Updated the React Router dependency used by the Create React App example.

@yogeshchoudhary147
yogeshchoudhary147 requested a review from a team as a code owner September 7, 2026 09:39
@coderabbitai

coderabbitai Bot commented Sep 7, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Team

Run ID: 28c5f42c-443c-4282-a7ae-417a1f09e3ac

📥 Commits

Reviewing files that changed from the base of the PR and between 9fd0e11 and 8c7e6c3.

📒 Files selected for processing (1)
  • examples/cra-react-router/package.json

Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review.


📝 Walkthrough

Walkthrough

The CRA React Router example upgrades react-router-dom from ^6.3.0 to ^7.18.0.

Changes

React Router dependency

Layer / File(s) Summary
Router dependency update
examples/cra-react-router/package.json
The example updates its react-router-dom dependency to ^7.18.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 8c7e6

The CRA React Router example now uses React Router DOM 7.18.0 to address the cited dependency vulnerabilities. No current merge-blocking risk is identified.

Suggested reviewers: tusharpandey13

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency upgrade in the cra-react-router example. It matches the main change in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/react-router-bump

Warning

Some tools did not complete. Review the errors below.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

examples/cra-react-router/package.json

ESLint skipped: missing config or dependency (missing-dependency). The ESLint configuration references a package that is not available in the sandbox.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@yogeshchoudhary147
yogeshchoudhary147 enabled auto-merge (squash) September 7, 2026 09:42
@yogeshchoudhary147
yogeshchoudhary147 merged commit 1451a2f into main Sep 7, 2026
17 checks passed
@yogeshchoudhary147
yogeshchoudhary147 deleted the fix/react-router-bump branch September 7, 2026 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants