Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@
"@sentry/remix": "latest || *",
"@remix-run/css-bundle": "2.7.2",
"@remix-run/node": "2.7.2",
"@remix-run/react": "2.7.2",
"@remix-run/react": "2.17.1",
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remix packages version mismatch may cause compatibility issues

Medium Severity

This Dependabot PR updates only @remix-run/react to version 2.17.1 while leaving all other @remix-run/* packages at version 2.7.2 (@remix-run/css-bundle, @remix-run/node, @remix-run/serve, @remix-run/dev, @remix-run/eslint-config). Remix packages are released together and designed to work at matching versions. A 10 minor version mismatch (2.7 vs 2.17) could cause runtime errors, type mismatches, or incompatible behavior. The sibling test application create-remix-app-v2 correctly keeps all @remix-run/* packages at the same version (2.16.7), demonstrating the expected pattern.

🔬 Verification Test

Test code:
Compared version patterns across test applications:

# Check all @remix-run package versions in the affected file
grep -E "@remix-run/" dev-packages/e2e-tests/test-applications/create-remix-app-v2-non-vite/package.json

# Compare with sibling application that has correct versioning
grep -E "@remix-run/" dev-packages/e2e-tests/test-applications/create-remix-app-v2/package.json

Command run:

grep -E "@remix-run/" dev-packages/e2e-tests/test-applications/create-remix-app-v2-non-vite/package.json

Output:

    "@remix-run/css-bundle": "2.7.2",
    "@remix-run/node": "2.7.2",
    "@remix-run/react": "2.17.1",
    "@remix-run/serve": "2.7.2",
    "@remix-run/dev": "2.7.2",
    "@remix-run/eslint-config": "2.7.2",

Why this proves the bug: The output shows @remix-run/react at 2.17.1 while all other @remix-run/* packages are at 2.7.2 - a 10 minor version mismatch. The create-remix-app-v2 test app (checked in my investigation) shows all packages at the same version (2.16.7), confirming that version consistency is the expected pattern.

Fix in Cursor Fix in Web

"@remix-run/serve": "2.7.2",
"isbot": "^3.6.8",
"react": "^18.2.0",
Expand Down
Loading