Skip to content

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website - #7609

Merged
PDavid merged 2 commits into
masterfrom
dependabot/npm_and_yarn/hbase-website/react-router-7.12.0
Jan 9, 2026
Merged

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website#7609
PDavid merged 2 commits into
masterfrom
dependabot/npm_and_yarn/hbase-website/react-router-7.12.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJan 9, 2026

Copy link
Copy Markdown
Contributor

Bumps react-router from 7.9.4 to 7.12.0.

Release notes

Sourced from react-router's releases.

v7.12.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120

v7.11.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110

v7.10.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101

v7.10.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100

v7.9.6

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796

v7.9.5

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v795

Changelog

Sourced from react-router's changelog.

7.12.0

Minor Changes

  • Add additional layer of CSRF protection by rejecting submissions to UI routes from external origins. If you need to permit access to specific external origins, you can specify them in the react-router.config.ts config allowedActionOrigins field. (#14708)

Patch Changes

  • Fix generatePath when used with suffixed params (i.e., "/books/:id.json") (#14269)

  • Export UNSAFE_createMemoryHistory and UNSAFE_createHashHistory alongside UNSAFE_createBrowserHistory for consistency. These are not intended to be used for new apps but intended to help apps usiong unstable_HistoryRouter migrate from v6->v7 so they can adopt the newer APIs. (#14663)

  • Escape HTML in scroll restoration keys (#14705)

  • Validate redirect locations (#14706)

  • [UNSTABLE] Pass <Scripts nonce> value through to the underlying importmapscript tag when using future.unstable_subResourceIntegrity (#14675)

  • [UNSTABLE] Add a new future.unstable_trailingSlashAwareDataRequests flag to provide consistent behavior of request.pathname inside middleware, loader, and action functions on document and data requests when a trailing slash is present in the browser URL. (#14644)

    Currently, your HTTP and request pathnames would be as follows for /a/b/c and /a/b/c/

    URL /a/b/cHTTP pathnamerequest pathname`
    Document/a/b/c/a/b/c ✅
    Data/a/b/c.data/a/b/c ✅
    URL /a/b/c/HTTP pathnamerequest pathname`
    Document/a/b/c//a/b/c/ ✅
    Data/a/b/c.data/a/b/c⚠️

    With this flag enabled, these pathnames will be made consistent though a new _.data format for client-side .data requests:

    URL /a/b/cHTTP pathnamerequest pathname`
    Document/a/b/c/a/b/c ✅
    Data/a/b/c.data/a/b/c ✅
    URL /a/b/c/HTTP pathnamerequest pathname`
    Document/a/b/c//a/b/c/ ✅
    Data/a/b/c/_.data ⬅️/a/b/c/ ✅

    This a bug fix but we are putting it behind an opt-in flag because it has the potential to be a "breaking bug fix" if you are relying on the URL format for any other application or caching logic.

    Enabling this flag also changes the format of client side .data requests from /_root.data to /_.data when navigating to / to align with the new format. This does not impact the request pathname which is still / in all cases.

  • Preserve clientLoader.hydrate=true when using <HydratedRouter unstable_instrumentations> (#14674)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-router since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 9, 2026
@Apache-HBase

This comment has been minimized.

Sign in to view
@Apache-HBase

This comment has been minimized.

Sign in to view
@dependabot@PDavid
HBASE-29818Bump react-router from 7.9.4 to 7.12.0 in /hbase-website
039face
Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) from 7.9.4 to 7.12.0.
- [Release notes](https://github.com/remix-run/react-router/releases)
- [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md)
- [Commits](https://github.com/remix-run/react-router/commits/react-router@7.12.0/packages/react-router)
---
updated-dependencies:
- dependency-name: react-router
dependency-version: 7.12.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
@PDavid
PDavidforce-pushed the dependabot/npm_and_yarn/hbase-website/react-router-7.12.0 branch from 0859161 to 039faceCompareJanuary 9, 2026 07:45
@PDavidPDavid changed the title Bump react-router from 7.9.4 to 7.12.0 in /hbase-websiteHBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-websiteJan 9, 2026
@PDavid

PDavid commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

Rebased this PR to have the Jira ticket ID in the commit message and also to have the Yetus change to rebuild the site when something changes under hbase-website. Let's see.

@PDavid

PDavid commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

For me this locally failed to build with these errors:

[INFO] --- frontend:1.15.1:npm (npm-install) @ hbase-website ---
[INFO] Running 'npm install' in /home/david/projects/upstream/hbase/hbase-website
[INFO] npm error code ERESOLVE
[INFO] npm error ERESOLVE could not resolve
[INFO] npm error
[INFO] npm error While resolving: @react-router/serve@7.9.4
[INFO] npm error Found: react-router@7.12.0
[INFO] npm error node_modules/react-router
[INFO] npm error react-router@"^7.12.0" from the root project
[INFO] npm error peer react-router@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error node_modules/@react-router/dev
[INFO] npm error dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error 1 more (@react-router/node)
[INFO] npm error
[INFO] npm error Could not resolve dependency:
[INFO] npm error peer react-router@"7.9.4" from @react-router/serve@7.9.4
[INFO] npm error node_modules/@react-router/serve
[INFO] npm error @react-router/serve@"^7.9.2" from the root project
[INFO] npm error peerOptional @react-router/serve@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error node_modules/@react-router/dev
[INFO] npm error dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error
[INFO] npm error Conflicting peer dependency: react-router@7.9.4
[INFO] npm error node_modules/react-router
[INFO] npm error peer react-router@"7.9.4" from @react-router/serve@7.9.4
[INFO] npm error node_modules/@react-router/serve
[INFO] npm error @react-router/serve@"^7.9.2" from the root project
[INFO] npm error peerOptional @react-router/serve@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error node_modules/@react-router/dev
[INFO] npm error dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error
[INFO] npm error Fix the upstream dependency conflict, or retry
[INFO] npm error this command with --force or --legacy-peer-deps
[INFO] npm error to accept an incorrect (and potentially broken) dependency resolution.
[INFO] npm error
[INFO] npm error
[INFO] npm error For a full report see:
[INFO] npm error /home/david/.npm/_logs/2026-01-09T07_44_58_389Z-eresolve-report.txt
[INFO] npm error A complete log of this run can be found in: /home/david/.npm/_logs/2026-01-09T07_44_58_389Z-debug-0.log

@Apache-HBase

This comment has been minimized.

Sign in to view
@Apache-HBase

This comment has been minimized.

Sign in to view
@PDavidPDavid self-assigned this Jan 9, 2026
@Apache-HBase

Apache-HBase commented Jan 9, 2026

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec1m 23sDocker mode activated.
-0 ⚠️yetus0m 4sUnprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
_ Prechecks _
_ master Compile Tests _
_ Patch Compile Tests _
_ Other Tests _
2m 55s
SubsystemReport/Notes
DockerClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR#7609
Optional Tests
unameLinux bf2c895259d1 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionmaster / fb7c6a6
Max. process+thread count35 (vs. ulimit of 30000)
modulesC: hbase-website U: hbase-website
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

@Apache-HBase

Apache-HBase commented Jan 9, 2026

Copy link
Copy Markdown

🎊 +1 overall

VoteSubsystemRuntimeLogfileComment
+0 🆗reexec0m 13sDocker mode activated.
_ Prechecks _
+1 💚dupname0m 0sNo case conflicting files found.
+0 🆗codespell0m 0scodespell was not available.
+0 🆗detsecrets0m 0sdetect-secrets was not available.
+0 🆗jsonlint0m 0sjsonlint was not available.
+1 💚@author0m 0sThe patch does not contain any @author tags.
_ master Compile Tests _
+1 💚mvninstall3m 25smaster passed
+1 💚mvnsite1m 0smaster passed
+1 💚spotless0m 56sbranch has no errors when running spotless:check.
_ Patch Compile Tests _
+1 💚mvninstall3m 20sthe patch passed
+1 💚blanks0m 0sThe patch has no blanks issues.
+1 💚mvnsite0m 51sthe patch passed
+1 💚spotless0m 57spatch has no errors when running spotless:check.
_ Other Tests _
+1 💚asflicense0m 14sThe patch does not generate ASF License warnings.
13m 0s
SubsystemReport/Notes
DockerClientAPI=1.52 ServerAPI=1.52 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/artifact/yetus-general-check/output/Dockerfile
GITHUB PR#7609
Optional Testsdupname asflicense mvnsite codespell detsecrets jsonlint spotless
unameLinux c3974e6cfe21 6.14.0-1018-aws #18~24.04.1-Ubuntu SMP Mon Nov 24 19:46:27 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build toolmaven
Personalitydev-support/hbase-personality.sh
git revisionmaster / fb7c6a6
Max. process+thread count124 (vs. ulimit of 30000)
modulesC: hbase-website U: hbase-website
Console outputhttps://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/console
versionsgit=2.34.1 maven=3.9.8
Powered byApache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

PDavid
PDavid approved these changes Jan 9, 2026
View reviewed changes

@PDavidPDavid left a comment •
edited
Loading

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me. 👍

@yuriipalam

yuriipalam commented Jan 9, 2026

Copy link
Copy Markdown
Contributor

LGTM, thanks David

@PDavid
PDavid merged commit f35268a into masterJan 9, 2026
1 check passed
@PDavid
PDavid deleted the dependabot/npm_and_yarn/hbase-website/react-router-7.12.0 branch January 9, 2026 10:20
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@PDavidPDavidPDavid approved these changes
@liuxiaocs7liuxiaocs7liuxiaocs7 approved these changes

Assignees

@PDavidPDavid

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@Apache-HBase@PDavid@yuriipalam@liuxiaocs7