Skip to content

chore: update tanstack router deps to latest#492

Merged
achou11 merged 4 commits intomainfrom
deps/update-tanstack-router-2026-01-20
Jan 20, 2026
Merged

chore: update tanstack router deps to latest#492
achou11 merged 4 commits intomainfrom
deps/update-tanstack-router-2026-01-20

Conversation

@achou11
Copy link
Member

@achou11 achou11 commented Jan 20, 2026

Couple of notable changes:

  • v1.146.2 introduces some additional redirect safeguarding in router's core (PR) that causes issues when using the reloadDocument: true when navigating, which we do in a few places to reset the history. In order to bypass this we patch router-core to allow redirects to URLs that use our app's custom comapeo: protocol. Any security/access control measures are thus handled in our app within the protocol handler that's set up in the main process.

  • Uses RouteApi.redirect() instead of the standalone redirect() function, which is a little more ergonomic and shouldn't have any user-facing effects (docs)

@awana-lockfile-bot
Copy link

package-lock.json changes

Click to toggle table visibility
Name Status Previous Current
@tanstack/history UPDATED 1.145.7 1.153.2
@tanstack/react-router UPDATED 1.145.7 1.153.2
@tanstack/router-core UPDATED 1.145.7 1.153.2
@tanstack/router-generator UPDATED 1.145.7 1.153.2
@tanstack/router-plugin UPDATED 1.145.7 1.153.2
diff UPDATED 8.0.2 8.0.3

@socket-security
Copy link

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​tanstack/​router-plugin@​1.145.7 ⏵ 1.153.29910078 +199 +1100
Updated@​tanstack/​react-router@​1.145.7 ⏵ 1.153.29910084 +199 +1100

View full report

@achou11 achou11 merged commit 76e48fc into main Jan 20, 2026
13 checks passed
@achou11 achou11 deleted the deps/update-tanstack-router-2026-01-20 branch January 20, 2026 19:14
achou11 added a commit that referenced this pull request Jan 20, 2026
Couple of notable changes:

- [v1.146.2](https://github.com/TanStack/router/releases/tag/v1.146.2)
introduces some additional redirect safeguarding in router's core
([PR](TanStack/router#6337)) that causes issues
when using the `reloadDocument: true` when navigating, which we do in a
few places to reset the history. In order to bypass this we patch
router-core to allow redirects to URLs that use our app's custom
`comapeo:` protocol. Any security/access control measures are thus
handled in our app within the protocol handler that's set up in the main
process.

- Uses `RouteApi.redirect()` instead of the standalone `redirect()`
function, which is a little more ergonomic and shouldn't have any
user-facing effects
([docs](https://tanstack.com/router/latest/docs/framework/react/api/router/redirectFunction#using-routeredirect-file-based-routes))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant