Skip to content

[Snyk] Security upgrade react-router from 7.10.1 to 7.12.0#3717

Open
dlobo wants to merge 1 commit intomasterfrom
snyk-fix-e4496a22aa673db41e89f06a58f95d95
Open

[Snyk] Security upgrade react-router from 7.10.1 to 7.12.0#3717
dlobo wants to merge 1 commit intomasterfrom
snyk-fix-e4496a22aa673db41e89f06a58f95d95

Conversation

@dlobo
Copy link
Copy Markdown
Contributor

@dlobo dlobo commented Jan 13, 2026

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

  • package.json
  • yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Cross-site Scripting (XSS)
SNYK-JS-REACTROUTER-14908531
  646  
medium severity Cross-site Request Forgery (CSRF)
SNYK-JS-REACTROUTER-14908429
  631  
medium severity Cross-site Scripting (XSS)
SNYK-JS-REACTROUTER-14908293
  601  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Jan 13, 2026

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions
Copy link
Copy Markdown

@github-actions github-actions bot temporarily deployed to pull request January 13, 2026 07:21 Inactive
@codecov
Copy link
Copy Markdown

codecov bot commented Jan 13, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.76%. Comparing base (ecc06b4) to head (b93f05e).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #3717      +/-   ##
==========================================
- Coverage   82.77%   82.76%   -0.01%     
==========================================
  Files         317      317              
  Lines       11837    11837              
  Branches     2477     2477              
==========================================
- Hits         9798     9797       -1     
  Misses       1288     1288              
- Partials      751      752       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cypress
Copy link
Copy Markdown

cypress bot commented Jan 13, 2026

Glific    Run #6973

Run Properties:  status check passed Passed #6973  •  git commit eba5a6b38f ℹ️: Merge b93f05e66f0c757593a269a3cad5b4d7ec3e1fdc into ecc06b43aba76a1e6f7c8f240dfd...
Project Glific
Branch Review snyk-fix-e4496a22aa673db41e89f06a58f95d95
Run status status check passed Passed #6973
Run duration 29m 15s
Commit git commit eba5a6b38f ℹ️: Merge b93f05e66f0c757593a269a3cad5b4d7ec3e1fdc into ecc06b43aba76a1e6f7c8f240dfd...
Committer Donald A Lobo
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 2
Tests that did not run due to a developer annotating a test with .skip  Pending 0
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 191
View all changes introduced in this branch ↗︎

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants