From 251f84db84384b9657987ef3954f3cb34e4b6bde Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 24 Apr 2025 14:36:48 +0000 Subject: [PATCH 1/2] chore: Update version for release --- .changeset/new-hornets-run.md | 9 ----- .changeset/pre.json | 35 ------------------- .changeset/stale-bats-swim.md | 6 ---- packages/create-react-router/CHANGELOG.md | 2 +- packages/create-react-router/package.json | 2 +- packages/react-router-architect/CHANGELOG.md | 6 ++-- packages/react-router-architect/package.json | 2 +- packages/react-router-cloudflare/CHANGELOG.md | 4 +-- packages/react-router-cloudflare/package.json | 2 +- packages/react-router-dev/CHANGELOG.md | 8 ++--- packages/react-router-dev/package.json | 2 +- packages/react-router-dom/CHANGELOG.md | 4 +-- packages/react-router-dom/package.json | 2 +- packages/react-router-express/CHANGELOG.md | 6 ++-- packages/react-router-express/package.json | 2 +- packages/react-router-fs-routes/CHANGELOG.md | 4 +-- packages/react-router-fs-routes/package.json | 2 +- packages/react-router-node/CHANGELOG.md | 4 +-- packages/react-router-node/package.json | 2 +- .../CHANGELOG.md | 4 +-- .../package.json | 2 +- packages/react-router-serve/CHANGELOG.md | 8 ++--- packages/react-router-serve/package.json | 2 +- packages/react-router/CHANGELOG.md | 2 +- packages/react-router/package.json | 2 +- 25 files changed, 37 insertions(+), 87 deletions(-) delete mode 100644 .changeset/new-hornets-run.md delete mode 100644 .changeset/pre.json delete mode 100644 .changeset/stale-bats-swim.md diff --git a/.changeset/new-hornets-run.md b/.changeset/new-hornets-run.md deleted file mode 100644 index 91b73c60da..0000000000 --- a/.changeset/new-hornets-run.md +++ /dev/null @@ -1,9 +0,0 @@ ---- -"react-router": patch ---- - -Update Single Fetch to also handle the 204 redirects used in `?_data` requests in Remix v2 - -- This allows applications to return a redirect on `.data` requests from outside the scope of React Router (i.e., an `express`/`hono` middleware) -- ⚠️ Please note that doing so relies on implementation details that are subject to change without a SemVer major release -- This is primarily done to ease upgrading to Single Fetch for existing Remix v2 applications, but the recommended way to handle this is redirecting from a route middleware diff --git a/.changeset/pre.json b/.changeset/pre.json deleted file mode 100644 index 8f24bf4eb8..0000000000 --- a/.changeset/pre.json +++ /dev/null @@ -1,35 +0,0 @@ -{ - "mode": "exit", - "tag": "pre", - "initialVersions": { - "integration": "0.0.0", - "integration-cloudflare-dev-proxy-template": "0.0.0", - "integration-vite-5-template": "0.0.0", - "integration-vite-6-template": "0.0.0", - "integration-vite-plugin-cloudflare-template": "0.0.0", - "integration-vite-rolldown-template": "0.0.0", - "create-react-router": "7.5.1", - "react-router": "7.5.1", - "@react-router/architect": "7.5.1", - "@react-router/cloudflare": "7.5.1", - "@react-router/dev": "7.5.1", - "react-router-dom": "7.5.1", - "@react-router/express": "7.5.1", - "@react-router/fs-routes": "7.5.1", - "@react-router/node": "7.5.1", - "@react-router/remix-routes-option-adapter": "7.5.1", - "@react-router/serve": "7.5.1", - "@playground/framework": "0.0.0", - "@playground/framework-express": "0.0.0", - "@playground/framework-rolldown-vite": "0.0.0", - "@playground/framework-spa": "0.0.0", - "@playground/framework-vite-5": "0.0.0", - "@playground/split-route-modules": "0.0.0", - "@playground/split-route-modules-spa": "0.0.0", - "@playground/vite-plugin-cloudflare": "0.0.0" - }, - "changesets": [ - "new-hornets-run", - "stale-bats-swim" - ] -} diff --git a/.changeset/stale-bats-swim.md b/.changeset/stale-bats-swim.md deleted file mode 100644 index 8ee39168bd..0000000000 --- a/.changeset/stale-bats-swim.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@react-router/dev": patch -"react-router": patch ---- - -Adjust approach for Prerendering/SPA Mode via headers diff --git a/packages/create-react-router/CHANGELOG.md b/packages/create-react-router/CHANGELOG.md index 0ddcf3fefe..c4b52c0615 100644 --- a/packages/create-react-router/CHANGELOG.md +++ b/packages/create-react-router/CHANGELOG.md @@ -1,6 +1,6 @@ # `create-react-router` -## 7.5.2-pre.0 +## 7.5.2 ## 7.5.1 diff --git a/packages/create-react-router/package.json b/packages/create-react-router/package.json index 93f7cf9978..4466e4d54f 100644 --- a/packages/create-react-router/package.json +++ b/packages/create-react-router/package.json @@ -1,6 +1,6 @@ { "name": "create-react-router", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Create a new React Router app", "homepage": "https://reactrouter.com", "bugs": { diff --git a/packages/react-router-architect/CHANGELOG.md b/packages/react-router-architect/CHANGELOG.md index 0707e0f411..c98452bae2 100644 --- a/packages/react-router-architect/CHANGELOG.md +++ b/packages/react-router-architect/CHANGELOG.md @@ -1,12 +1,12 @@ # `@react-router/architect` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` - - `@react-router/node@7.5.2-pre.0` + - `react-router@7.5.2` + - `@react-router/node@7.5.2` ## 7.5.1 diff --git a/packages/react-router-architect/package.json b/packages/react-router-architect/package.json index 0713cf4d58..c33cfe53ab 100644 --- a/packages/react-router-architect/package.json +++ b/packages/react-router-architect/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/architect", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Architect server request handler for React Router", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-cloudflare/CHANGELOG.md b/packages/react-router-cloudflare/CHANGELOG.md index 1329e9cf7e..4e06d79064 100644 --- a/packages/react-router-cloudflare/CHANGELOG.md +++ b/packages/react-router-cloudflare/CHANGELOG.md @@ -1,11 +1,11 @@ # `@react-router/cloudflare` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` + - `react-router@7.5.2` ## 7.5.1 diff --git a/packages/react-router-cloudflare/package.json b/packages/react-router-cloudflare/package.json index aa9ab6f0d4..14124d74fc 100644 --- a/packages/react-router-cloudflare/package.json +++ b/packages/react-router-cloudflare/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/cloudflare", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Cloudflare platform abstractions for React Router", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-dev/CHANGELOG.md b/packages/react-router-dev/CHANGELOG.md index 07b499851a..59e0c20f7c 100644 --- a/packages/react-router-dev/CHANGELOG.md +++ b/packages/react-router-dev/CHANGELOG.md @@ -1,14 +1,14 @@ # `@react-router/dev` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Adjust approach for Prerendering/SPA Mode via headers ([#13453](https://github.com/remix-run/react-router/pull/13453)) - Updated dependencies: - - `react-router@7.5.2-pre.0` - - `@react-router/node@7.5.2-pre.0` - - `@react-router/serve@7.5.2-pre.0` + - `react-router@7.5.2` + - `@react-router/node@7.5.2` + - `@react-router/serve@7.5.2` ## 7.5.1 diff --git a/packages/react-router-dev/package.json b/packages/react-router-dev/package.json index 6f5f44b814..874e028cce 100644 --- a/packages/react-router-dev/package.json +++ b/packages/react-router-dev/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/dev", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Dev tools and CLI for React Router", "homepage": "https://reactrouter.com", "bugs": { diff --git a/packages/react-router-dom/CHANGELOG.md b/packages/react-router-dom/CHANGELOG.md index d9854615be..d3730335dd 100644 --- a/packages/react-router-dom/CHANGELOG.md +++ b/packages/react-router-dom/CHANGELOG.md @@ -1,11 +1,11 @@ # react-router-dom -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` + - `react-router@7.5.2` ## 7.5.1 diff --git a/packages/react-router-dom/package.json b/packages/react-router-dom/package.json index 822a6ee7a7..1ce7faa9df 100644 --- a/packages/react-router-dom/package.json +++ b/packages/react-router-dom/package.json @@ -1,6 +1,6 @@ { "name": "react-router-dom", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Declarative routing for React web applications", "keywords": [ "react", diff --git a/packages/react-router-express/CHANGELOG.md b/packages/react-router-express/CHANGELOG.md index d66822faad..a544105ae5 100644 --- a/packages/react-router-express/CHANGELOG.md +++ b/packages/react-router-express/CHANGELOG.md @@ -1,12 +1,12 @@ # `@react-router/express` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` - - `@react-router/node@7.5.2-pre.0` + - `react-router@7.5.2` + - `@react-router/node@7.5.2` ## 7.5.1 diff --git a/packages/react-router-express/package.json b/packages/react-router-express/package.json index b4099c2eb5..165250e1e9 100644 --- a/packages/react-router-express/package.json +++ b/packages/react-router-express/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/express", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Express server request handler for React Router", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-fs-routes/CHANGELOG.md b/packages/react-router-fs-routes/CHANGELOG.md index bba5938942..dbb97fde6d 100644 --- a/packages/react-router-fs-routes/CHANGELOG.md +++ b/packages/react-router-fs-routes/CHANGELOG.md @@ -1,11 +1,11 @@ # `@react-router/fs-routes` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `@react-router/dev@7.5.2-pre.0` + - `@react-router/dev@7.5.2` ## 7.5.1 diff --git a/packages/react-router-fs-routes/package.json b/packages/react-router-fs-routes/package.json index 4673db79f6..fa0100cee9 100644 --- a/packages/react-router-fs-routes/package.json +++ b/packages/react-router-fs-routes/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/fs-routes", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "File system routing conventions for React Router, for use within routes.ts", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-node/CHANGELOG.md b/packages/react-router-node/CHANGELOG.md index 2034598914..b41e4ccb63 100644 --- a/packages/react-router-node/CHANGELOG.md +++ b/packages/react-router-node/CHANGELOG.md @@ -1,11 +1,11 @@ # `@react-router/node` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` + - `react-router@7.5.2` ## 7.5.1 diff --git a/packages/react-router-node/package.json b/packages/react-router-node/package.json index 7b93c82efe..46728f6bba 100644 --- a/packages/react-router-node/package.json +++ b/packages/react-router-node/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/node", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Node.js platform abstractions for React Router", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-remix-routes-option-adapter/CHANGELOG.md b/packages/react-router-remix-routes-option-adapter/CHANGELOG.md index 689d2014af..be52bb6d0a 100644 --- a/packages/react-router-remix-routes-option-adapter/CHANGELOG.md +++ b/packages/react-router-remix-routes-option-adapter/CHANGELOG.md @@ -1,11 +1,11 @@ # `@react-router/remix-config-routes-adapter` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `@react-router/dev@7.5.2-pre.0` + - `@react-router/dev@7.5.2` ## 7.5.1 diff --git a/packages/react-router-remix-routes-option-adapter/package.json b/packages/react-router-remix-routes-option-adapter/package.json index c7ade481e6..0be415ec31 100644 --- a/packages/react-router-remix-routes-option-adapter/package.json +++ b/packages/react-router-remix-routes-option-adapter/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/remix-routes-option-adapter", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Adapter for Remix's \"routes\" config option, for use within routes.ts", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router-serve/CHANGELOG.md b/packages/react-router-serve/CHANGELOG.md index 5e5b6b9a2b..dca864bd26 100644 --- a/packages/react-router-serve/CHANGELOG.md +++ b/packages/react-router-serve/CHANGELOG.md @@ -1,13 +1,13 @@ # `@react-router/serve` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes - Updated dependencies: - - `react-router@7.5.2-pre.0` - - `@react-router/node@7.5.2-pre.0` - - `@react-router/express@7.5.2-pre.0` + - `react-router@7.5.2` + - `@react-router/node@7.5.2` + - `@react-router/express@7.5.2` ## 7.5.1 diff --git a/packages/react-router-serve/package.json b/packages/react-router-serve/package.json index 2a2f12208f..e755f005fa 100644 --- a/packages/react-router-serve/package.json +++ b/packages/react-router-serve/package.json @@ -1,6 +1,6 @@ { "name": "@react-router/serve", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Production application server for React Router", "bugs": { "url": "https://github.com/remix-run/react-router/issues" diff --git a/packages/react-router/CHANGELOG.md b/packages/react-router/CHANGELOG.md index b81c033f95..17a7a15bfc 100644 --- a/packages/react-router/CHANGELOG.md +++ b/packages/react-router/CHANGELOG.md @@ -1,6 +1,6 @@ # `react-router` -## 7.5.2-pre.0 +## 7.5.2 ### Patch Changes diff --git a/packages/react-router/package.json b/packages/react-router/package.json index cedfe1d2cf..8ad3a4aeff 100644 --- a/packages/react-router/package.json +++ b/packages/react-router/package.json @@ -1,6 +1,6 @@ { "name": "react-router", - "version": "7.5.2-pre.0", + "version": "7.5.2", "description": "Declarative routing for React", "keywords": [ "react", From e7221ce8bfab3f914c7c1e041fee5266a650d292 Mon Sep 17 00:00:00 2001 From: Matt Brophy Date: Thu, 24 Apr 2025 10:44:30 -0400 Subject: [PATCH 2/2] Update release notes --- CHANGELOG.md | 9 +++++++-- packages/create-react-router/CHANGELOG.md | 2 ++ 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 3e89ab998b..a7cde3a471 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -14,6 +14,7 @@ We manage release notes in this file instead of the paginated Github Releases Pa - [React Router Releases](#react-router-releases) - [v7.5.2](#v752) + - [Security Notice](#security-notice) - [Patch Changes](#patch-changes) - [Unstable Changes](#unstable-changes) - [v7.5.1](#v751) @@ -27,7 +28,7 @@ We manage release notes in this file instead of the paginated Github Releases Pa - [Unstable Changes](#unstable-changes-2) - [Changes by Package](#changes-by-package) - [v7.4.1](#v741) - - [Security Notice](#security-notice) + - [Security Notice](#security-notice-1) - [Patch Changes](#patch-changes-3) - [Unstable Changes](#unstable-changes-3) - [v7.4.0](#v740) @@ -326,6 +327,10 @@ Date: YYYY-MM-DD Date: 2025-04-24 +### Security Notice + +Fixed 2 security vulnerabilities that could result in cache-poisoning attacks by sending specific headers intended for build-time usage for SPA Mode and Pre-rendering ([GHSA-f46r-rw29-r322](https://github.com/remix-run/react-router/security/advisories/GHSA-f46r-rw29-r322), [GHSA-cpj6-fhp6-mr6j](https://github.com/remix-run/react-router/security/advisories/GHSA-cpj6-fhp6-mr6j)). + ### Patch Changes - `react-router` - Adjust approach for Pre-rendering/SPA Mode via headers ([#13453](https://github.com/remix-run/react-router/pull/13453)) @@ -452,7 +457,7 @@ Date: 2025-03-28 ### Security Notice -Fixed a security vulnerability that allowed URL manipulation and potential cache pollution via the `Host` and `X-Forwarded-Host` headers due to inadequate port sanitization. +Fixed a security vulnerability that allowed URL manipulation and potential cache pollution via the `Host` and `X-Forwarded-Host` headers due to inadequate port sanitization ([GHSA-4q56-crqp-v477/CVE-2025-31137](https://github.com/remix-run/react-router/security/advisories/GHSA-4q56-crqp-v477)). ### Patch Changes diff --git a/packages/create-react-router/CHANGELOG.md b/packages/create-react-router/CHANGELOG.md index c4b52c0615..5a31a35d14 100644 --- a/packages/create-react-router/CHANGELOG.md +++ b/packages/create-react-router/CHANGELOG.md @@ -2,6 +2,8 @@ ## 7.5.2 +_No changes_ + ## 7.5.1 _No changes_