Upgrade React Router packages for CVE fixes (#1092)

Co-authored-by: Kent C. Dodds <me+github@kentcdodds.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>

Author: kentcdodds

app/routes/_auth/auth.$provider/callback.test.ts

@@ -15,15 +15,17 @@ import { insertGitHubUser, deleteGitHubUsers } from '#tests/mocks/github.ts'
 import { server } from '#tests/mocks/index.ts'
 import { consoleError } from '#tests/setup/setup-test-env.ts'
 import { BASE_URL, convertSetCookieToCookie } from '#tests/utils.ts'
+import { type Route } from './+types/callback.ts'
 import { loader } from './callback.ts'
 
 const ROUTE_PATH = '/auth/github/callback'
 const PARAMS = { provider: 'github' }
 const LOADER_ARGS_BASE = {
 	params: PARAMS,
 	context: {} as AppLoadContext,
-	unstable_pattern: ROUTE_PATH,
-}
+	url: new URL(ROUTE_PATH, BASE_URL),
+	pattern: ROUTE_PATH,
+} satisfies Omit<Route.LoaderArgs, 'request'>
 
 afterEach(async () => {
 	await deleteGitHubUsers()

package-lock.json

@@ -58,8 +58,8 @@
     "@radix-ui/react-toast": "^1.2.15",
     "@radix-ui/react-tooltip": "^1.2.8",
     "@react-email/components": "^1.0.6",
-    "@react-router/express": "^7.13.0",
-    "@react-router/node": "^7.13.0",
+    "@react-router/express": "^7.16.0",
+    "@react-router/node": "^7.16.0",
     "@remix-run/server-runtime": "^2.17.4",
     "@sentry/profiling-node": "^10.38.0",
     "@sentry/react-router": "^10.38.0",
@@ -94,7 +94,7 @@
     "qrcode": "^1.5.4",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
-    "react-router": "^7.13.0",
+    "react-router": "^7.16.0",
     "remix-auth": "^4.2.0",
     "remix-auth-github": "^3.0.2",
     "remix-utils": "^9.0.1",
@@ -112,7 +112,7 @@
     "@epic-web/config": "^1.21.3",
     "@faker-js/faker": "^10.2.0",
     "@playwright/test": "^1.58.1",
-    "@react-router/dev": "^7.13.0",
+    "@react-router/dev": "^7.16.0",
     "@sly-cli/sly": "^2.1.1",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
@@ -144,8 +144,8 @@
     "prettier": "^3.8.1",
     "prettier-plugin-sql": "^0.19.2",
     "prettier-plugin-tailwindcss": "^0.7.2",
-    "react-router-auto-routes": "^0.7.1",
-    "react-router-devtools": "^6.2.0",
+    "react-router-auto-routes": "^0.8.4",
+    "react-router-devtools": "^6.2.1",
     "tsx": "^4.21.0",
     "tw-animate-css": "^1.4.0",
     "typescript": "^5.9.3",