Overview - Router

router

7 days30 days

Latest CI Pipeline Executions

Exact

Succeeded
main
1bbe4a06 docs(router): correct ReturnType of `Router.matchRoute` to match the runtime output (#3896) The `.matchRoute` method on the Router type page previously stated it returns a `RouteMatch` object. In reality, it returns only the route match's params. This update corrects the return type in docs to reflect actual behavior. Fix #3875
48 minutes ago by Redbird10
Succeeded
main
d0bbf662 chore(deps): update dependency vite to v6.1.3 [security] (#3900) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [vite](https://vite.dev) ([source](https://redirect.github.com/vitejs/vite/tree/HEAD/packages/vite)) | [`6.1.2` -> `6.1.3`](https://renovatebot.com/diffs/npm/vite/6.1.2/6.1.3) | [![age](https://developer.mend.io/api/mc/badges/age/npm/vite/6.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/vite/6.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/vite/6.1.2/6.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/vite/6.1.2/6.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/) | ### GitHub Vulnerability Alerts #### [CVE-2025-31125](https://redirect.github.com/vitejs/vite/security/advisories/GHSA-4r4m-qw57-chr8) ### Summary The contents of arbitrary files can be returned to the browser. ### Impact Only apps explicitly exposing the Vite dev server to the network (using `--host` or [`server.host` config option](https://vitejs.dev/config/server-options.html#server-host)) are affected. ### Details - base64 encoded content of non-allowed files is exposed using `?inline&import` (originally reported as `?import&?inline=1.wasm?init`) - content of non-allowed files is exposed using `?raw?import` `/@fs/` isn't needed to reproduce the issue for files inside the project root. ### PoC Original report (check details above for simplified cases): The ?import&?inline=1.wasm?init ending allows attackers to read arbitrary files and returns the file content if it exists. Base64 decoding needs to be performed twice ``` $ npm create vite@latest $ cd vite-project/ $ npm install $ npm run dev ``` Example full URL `http://localhost:5173/@fs/C:/windows/win.ini?import&?inline=1.wasm?init` --- ### Release Notes <details> <summary>vitejs/vite (vite)</summary> ### [`v6.1.3`](https://redirect.github.com/vitejs/vite/releases/tag/v6.1.3) [Compare Source](https://redirect.github.com/vitejs/vite/compare/v6.1.2...v6.1.3) Please refer to [CHANGELOG.md](https://redirect.github.com/vitejs/vite/blob/v6.1.3/packages/vite/CHANGELOG.md) for details. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TanStack/router).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
59 minutes ago by renovate[bot]
Succeeded
main
e9b253eb fix(router-plugin): code-splitting to handle default exported function declarations (#3901) Currently, when the code-splitter encounters a known identifier used for configuration in `createFileRoute` (such as `component`, `loader`, `errorComponent`, etc.) it retains the export without splitting it out into a separate file. This functionality is currently partially working when the export is a "default export" which references an already declared identifier. ```ts const loader = () => {} export default loader ``` However, it does not work when the "default export" is also making a function declaration for the export. ```ts export default function loader() {} ``` This PR adds the functionality to detect this use case and perform the same transformations to align itself with the behaviour for all others exports.
2 hours ago by SeanCassiere
Succeeded
main
0394b6b6 fix(router-devtools-core): remove floating panel style on close (#3898)
4 hours ago by birkskyum
Failed
main
0394b6b6 fix(router-devtools-core): remove floating panel style on close (#3898)
5 hours ago by birkskyum
Failed
main
0394b6b6 fix(router-devtools-core): remove floating panel style on close (#3898)
9 hours ago by birkskyum
Succeeded
main
1f2e2435 docs(start): add note on needing variable export named as `APIRoute` (#3892) Just a quick note to prevent hitting 404s where the export needs to be named `APIRoute`. --------- Co-authored-by: Sean Cassiere <33615041+SeanCassiere@users.noreply.github.com>
9 hours ago by AtAFork
Failed
main
1f2e2435 docs(start): add note on needing variable export named as `APIRoute` (#3892) Just a quick note to prevent hitting 404s where the export needs to be named `APIRoute`. --------- Co-authored-by: Sean Cassiere <33615041+SeanCassiere@users.noreply.github.com>
14 hours ago by AtAFork
Failed
main
1f2e2435 docs(start): add note on needing variable export named as `APIRoute` (#3892) Just a quick note to prevent hitting 404s where the export needs to be named `APIRoute`. --------- Co-authored-by: Sean Cassiere <33615041+SeanCassiere@users.noreply.github.com>
14 hours ago by AtAFork
Failed
main
1f2e2435 docs(start): add note on needing variable export named as `APIRoute` (#3892) Just a quick note to prevent hitting 404s where the export needs to be named `APIRoute`. --------- Co-authored-by: Sean Cassiere <33615041+SeanCassiere@users.noreply.github.com>
15 hours ago by AtAFork
Succeeded
main
2bed2c21 release: v1.114.30
2 days ago by tannerlinsley
Succeeded
main
2bed2c21 release: v1.114.30
2 days ago by tannerlinsley
Succeeded
main
1cb94439 fix: bump babel-dead-code-elimination (#3881) fixes #3824
2 days ago by schiller-m...
Succeeded
main
ab0173dd docs(start): update the list to the router examples
2 days ago by SeanCassiere
Succeeded
main
ab0173dd docs(start): update the list to the router examples
2 days ago by SeanCassiere
Succeeded
main
ab0173dd docs(start): update the list to the router examples
2 days ago by SeanCassiere
Succeeded
main
f1b2d001 docs(router): fix `_pathlessLayout` example of file-based routing (#3877) The `_pathlessLayout.tsx` should be the same name as the directory `_pathlessLayout` in order to be applied as Layout for `route-a` and `route-b` routes
3 days ago by mrmorais
Failed
main
f1b2d001 docs(router): fix `_pathlessLayout` example of file-based routing (#3877) The `_pathlessLayout.tsx` should be the same name as the directory `_pathlessLayout` in order to be applied as Layout for `route-a` and `route-b` routes
3 days ago by mrmorais
Succeeded
main
f1b2d001 docs(router): fix `_pathlessLayout` example of file-based routing (#3877) The `_pathlessLayout.tsx` should be the same name as the directory `_pathlessLayout` in order to be applied as Layout for `route-a` and `route-b` routes
3 days ago by mrmorais
Succeeded
main
3652b352 docs(start): switch from `degit` to `gitpick` (#3863) Degit is both slower and has some odd caching behaviour on the user's machine. Gitpick is faster and conforms to more native github URLs.
4 days ago by nrjdalal