Skip to content

fix(web): migrate to React Router 8 - #28

Merged
Punisheroot merged 1 commit into
mainfrom
fix/resolve-react-router-security-update
Aug 4, 2026
Merged

fix(web): migrate to React Router 8#28
Punisheroot merged 1 commit into
mainfrom
fix/resolve-react-router-security-update

Conversation

@JJordan0C

Copy link
Copy Markdown
Contributor

Summary

Closes #25.

Migrate the web control plane from the removed react-router-dom v7 package to the patched react-router 8.3.0 release.

Implementation

  • Replace react-router-dom with react-router.
  • Update the five affected import sites.
  • Raise the React and React DOM minimum to 19.2.7.
  • Refresh the npm lockfile.
  • Document the Node.js 22.22.0 minimum.
  • Record the advisory remediation in SECURITY.md.

Validation

  • npm ci: passed
  • npm audit --audit-level=high: 0 vulnerabilities
  • npm test: 13 passed
  • npm run typecheck: passed
  • npm run lint: passed
  • npm run build: passed
  • npm run test:e2e:local: passed
  • Browser smoke test and route navigation: passed with no console errors
  • cargo fmt --all -- --check: passed
  • cargo test --locked --workspace: 429 passed, 1 ignored
  • cargo clippy --locked --workspace --all-targets -- -D warnings: passed
  • cargo build --locked --workspace: passed
  • Codex offline tests: 20 passed
  • Plugin validation and proof microbenchmark: passed
  • git diff --check: passed

Risks/limitations

The frontend build now requires Node.js 22.22.0 or newer. The application remains a client-side SPA and does not enable React Server Component APIs.

Documentation/evidence

Updated README.md, CONTRIBUTING.md, the developer and control-plane documentation, and SECURITY.md.

AI assistance and human verification

AI assistance: investigation | code | tests | documentation
Human verification: Review the complete diff and personally confirm the validation results before publication.

@JJordan0C
JJordan0C requested a review from Punisheroot August 4, 2026 15:35

@Punisheroot Punisheroot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

stay always safe!

@Punisheroot
Punisheroot merged commit a741227 into main Aug 4, 2026
15 checks passed
@Punisheroot
Punisheroot deleted the fix/resolve-react-router-security-update branch August 4, 2026 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Resolve react-router security update blocked by dependency constraints

2 participants