Skip to content

chore(deps): bump react-router-dom from 6.30.3 to 7.13.1#109276

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/react-router-dom-7.13.1
Open

chore(deps): bump react-router-dom from 6.30.3 to 7.13.1#109276
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/react-router-dom-7.13.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 24, 2026

Bumps react-router-dom from 6.30.3 to 7.13.1.

Release notes

Sourced from react-router-dom's releases.

v7.1.3

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v713

Changelog

Sourced from react-router-dom's changelog.

7.13.1

Patch Changes

  • Updated dependencies:
    • react-router@7.13.1

7.13.0

Patch Changes

  • Updated dependencies:
    • react-router@7.13.0

7.12.0

Patch Changes

  • Updated dependencies:
    • react-router@7.12.0

7.11.0

Patch Changes

  • Updated dependencies:
    • react-router@7.11.0

7.10.1

Patch Changes

  • Updated dependencies:
    • react-router@7.10.1

7.10.0

Patch Changes

  • Updated dependencies:
    • react-router@7.10.0

7.9.6

Patch Changes

  • Updated dependencies:
    • react-router@7.9.6

7.9.5

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 24, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 24, 2026 23:42
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 24, 2026
@github-actions github-actions bot added the Scope: Frontend Automatically applied to PRs that change frontend components label Feb 24, 2026
Copy link
Contributor

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 2 potential issues.

Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.

"react-mentions": "4.4.10",
"react-popper": "^2.3.0",
"react-router-dom": "6.30.3",
"react-router-dom": "7.13.1",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Major version bump breaks Sentry router v6 integration

High Severity

Bumping react-router-dom from 6.x to 7.x is a major version upgrade, but the codebase still uses Sentry's v6-specific integrations: wrapCreateBrowserRouterV6 and reactRouterV6BrowserTracingIntegration (found in static/app/main.tsx, static/app/views/integrationPipeline/pipelineView.tsx, static/gsAdmin/init.tsx, and static/app/bootstrap/initializeSdk.tsx). Sentry documents separate wrapCreateBrowserRouterV7 and reactRouterV7BrowserTracingIntegration wrappers for React Router v7. Using v6-specific wrappers with a v7 router will likely break browser tracing or cause runtime errors, since v7 removed the @remix-run/router dependency and restructured internals. Additionally, v7 enforces all v6 future flags by default (e.g. v7_relativeSplatPath, v7_startTransition), which could alter routing behavior without corresponding code updates.

Fix in Cursor Fix in Web

"react-mentions": "4.4.10",
"react-popper": "^2.3.0",
"react-router-dom": "6.30.3",
"react-router-dom": "7.13.1",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The application uses Sentry's react-router-dom v6 integration functions (wrapCreateBrowserRouterV6) with react-router-dom v7, which will cause a crash on startup.
Severity: CRITICAL

Suggested Fix

Update the Sentry integration to be compatible with react-router-dom v7. Replace calls to wrapCreateBrowserRouterV6 with wrapCreateBrowserRouterV7 and reactRouterV6BrowserTracingIntegration with reactRouterV7BrowserTracingIntegration in files like static/app/main.tsx, static/gsAdmin/init.tsx, and static/app/bootstrap/initializeSdk.tsx.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: package.json#L168

Potential issue: The pull request upgrades `react-router-dom` from v6 to v7 but fails to
update the Sentry integration functions. The code continues to call
`wrapCreateBrowserRouterV6` and `reactRouterV6BrowserTracingIntegration`, which are
specific to `react-router-dom` v6. According to Sentry's documentation, v7 requires
`wrapCreateBrowserRouterV7` and `reactRouterV7BrowserTracingIntegration`. This
incompatibility will cause a runtime error when the application attempts to initialize
the router, preventing the application from loading.

Did we get this right? 👍 / 👎 to inform future reviews.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 25, 2026

Dependabot can't authenticate to a private package registry. Because of this, Dependabot cannot update this pull request.

Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 6.30.3 to 7.13.1.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.13.1/packages/react-router-dom)

---
updated-dependencies:
- dependency-name: react-router-dom
  dependency-version: 7.13.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/react-router-dom-7.13.1 branch from 34e58bc to 4ecd20d Compare February 25, 2026 20:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code Scope: Frontend Automatically applied to PRs that change frontend components

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants