Anupam Mediratta ff6043b811 fix: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) (#11644) ...

* fix: GHSA-qwww-vcr4-c8h2 security vulnerability

Automated dependency upgrade by OrbisAI Security

Signed-off-by: anupamme <mediratta@gmail.com>

* fix: upgrade react-router-dom to 7.18.2 to fully remediate GHSA-qwww-vcr4-c8h2

The prior fix pinned react-router@7.18.2 directly but left react-router-dom
at ^7.18.1, which bun resolved to 7.18.1. That package bundles its own
react-router@7.18.1 sub-dep, leaving the vulnerable version in bun.lock
via the react-router-dom/react-router scoped resolution. Pinning
react-router-dom to 7.18.2 and regenerating the lockfile removes all
7.18.1 resolutions.

Assisted-by: Claude Code:claude-sonnet-4-6
Signed-off-by: Anupam Mediratta <mediratta@gmail.com>

---------

Signed-off-by: anupamme <mediratta@gmail.com>
Signed-off-by: Anupam Mediratta <mediratta@gmail.com>

2026-08-21 08:41:23 +02:00

..

e2e

fix(ci): test stale chunks in split bundle (#11595)

2026-08-19 08:45:59 +02:00

public/locales

feat(ui): unify model and backend lifecycle (#11548)

2026-08-16 11:57:31 +02:00

scripts

refactor(ui): move inline styles onto the design system, add an inline-style gate (#11238)

2026-07-30 23:17:06 +02:00

src

fix(ui): reload once when a page chunk 404s

2026-08-18 19:51:15 +00:00

.nycrc.json

test: add Go + React UI coverage gates and fill test gaps (#9989)

2026-05-26 22:06:10 +02:00

bun.lock

fix: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) (#11644)

2026-08-21 08:41:23 +02:00

coverage-baseline.txt

test(react-ui): add page render-smoke specs, reset the coverage gate (#10122)

2026-06-01 14:24:36 +02:00

eslint.config.js

feat(ui): move to React for frontend (#8772)

2026-03-05 21:47:12 +01:00

i18next-parser.config.js

feat(react-ui): add Indonesian language support (#10266)

2026-06-12 10:08:58 +02:00

index.html

chore: Security hardening (#9719)

2026-05-08 16:25:45 +02:00

inline-style-baseline.txt

feat(ui): unify model and backend lifecycle (#11548)

2026-08-16 11:57:31 +02:00

package-lock.json

chore(deps): bump dompurify from 3.4.12 to 3.4.13 in /core/http/react-ui in the npm_and_yarn group across 1 directory (#11425)

2026-08-10 10:21:41 +02:00

package.json

fix: upgrade react-router to 7.18.2, 8.3.0 (GHSA-qwww-vcr4-c8h2) (#11644)

2026-08-21 08:41:23 +02:00

playwright.config.js

fix(router): production-ready request router + auto-size batch for embedding/rerank (#10104)

2026-06-12 16:21:15 +02:00

vite.config.js

feat(ui): unify model and backend lifecycle (#11548)

2026-08-16 11:57:31 +02:00