HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website #7609

dependabot · 2026-01-09T00:03:51Z

Bumps react-router from 7.9.4 to 7.12.0.

Release notes

v7.12.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7120

v7.11.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7110

v7.10.1

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7101

v7.10.0

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v7100

v7.9.6

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v796

v7.9.5

See the changelog for release notes: https://github.com/remix-run/react-router/blob/main/CHANGELOG.md#v795

Changelog

Sourced from react-router's changelog.

7.12.0

Minor Changes

Add additional layer of CSRF protection by rejecting submissions to UI routes from external origins. If you need to permit access to specific external origins, you can specify them in the react-router.config.ts config allowedActionOrigins field. (#14708)

Patch Changes

Fix generatePath when used with suffixed params (i.e., "/books/:id.json") (#14269)

Export UNSAFE_createMemoryHistory and UNSAFE_createHashHistory alongside UNSAFE_createBrowserHistory for consistency. These are not intended to be used for new apps but intended to help apps usiong unstable_HistoryRouter migrate from v6->v7 so they can adopt the newer APIs. (#14663)

Escape HTML in scroll restoration keys (#14705)

Validate redirect locations (#14706)

[UNSTABLE] Pass <Scripts nonce> value through to the underlying importmap script tag when using future.unstable_subResourceIntegrity (#14675)

[UNSTABLE] Add a new future.unstable_trailingSlashAwareDataRequests flag to provide consistent behavior of request.pathname inside middleware, loader, and action functions on document and data requests when a trailing slash is present in the browser URL. (#14644)

Currently, your HTTP and request pathnames would be as follows for /a/b/c and /a/b/c/

URL /a/b/c HTTP pathname request pathname`

Document /a/b/c /a/b/c ✅

Data /a/b/c.data /a/b/c ✅

URL /a/b/c/ HTTP pathname request pathname`

Document /a/b/c/ /a/b/c/ ✅

Data /a/b/c.data /a/b/c ⚠️

With this flag enabled, these pathnames will be made consistent though a new _.data format for client-side .data requests:

URL /a/b/c HTTP pathname request pathname`

Document /a/b/c /a/b/c ✅

Data /a/b/c.data /a/b/c ✅

URL /a/b/c/ HTTP pathname request pathname`

Document /a/b/c/ /a/b/c/ ✅

Data /a/b/c/_.data ⬅️ /a/b/c/ ✅

This a bug fix but we are putting it behind an opt-in flag because it has the potential to be a "breaking bug fix" if you are relying on the URL format for any other application or caching logic.

Enabling this flag also changes the format of client side .data requests from /_root.data to /_.data when navigating to / to align with the new format. This does not impact the request pathname which is still / in all cases.

Preserve clientLoader.hydrate=true when using <HydratedRouter unstable_instrumentations> (#14674)

... (truncated)

Commits

26653a6 chore: Update version for release (#14712)
7ac2346 chore: Update version for release (pre) (#14709)
75b1ef5 Add origin checks for UI route submissions (#14708)
c05ef93 Validate redirect locations (#14706)
c89c32c Escape HTML in scroll restoration keys (#14705)
cbcbf30 fix: pass nonce to importmap script when using subResourceIntegrity (#14675)
30f6c1d fix(react-router): handle parameters with static suffixes in generatePath (#1...
7f140e0 Handle data requests with trailing slash consistently (#14644)
1954af6 Preserve hydrate property on client loaders during instrumentation (#14674)
5ce5cd4 chore: format
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for react-router since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [react-router](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router) from 7.9.4 to 7.12.0. - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router@7.12.0/packages/react-router) --- updated-dependencies: - dependency-name: react-router dependency-version: 7.12.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

PDavid · 2026-01-09T07:48:24Z

Rebased this PR to have the Jira ticket ID in the commit message and also to have the Yetus change to rebuild the site when something changes under hbase-website. Let's see.

PDavid · 2026-01-09T07:49:15Z

For me this locally failed to build with these errors:

[INFO] --- frontend:1.15.1:npm (npm-install) @ hbase-website ---
[INFO] Running 'npm install' in /home/david/projects/upstream/hbase/hbase-website
[INFO] npm error code ERESOLVE
[INFO] npm error ERESOLVE could not resolve
[INFO] npm error
[INFO] npm error While resolving: @react-router/serve@7.9.4
[INFO] npm error Found: react-router@7.12.0
[INFO] npm error node_modules/react-router
[INFO] npm error   react-router@"^7.12.0" from the root project
[INFO] npm error   peer react-router@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error   node_modules/@react-router/dev
[INFO] npm error     dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error   1 more (@react-router/node)
[INFO] npm error
[INFO] npm error Could not resolve dependency:
[INFO] npm error peer react-router@"7.9.4" from @react-router/serve@7.9.4
[INFO] npm error node_modules/@react-router/serve
[INFO] npm error   @react-router/serve@"^7.9.2" from the root project
[INFO] npm error   peerOptional @react-router/serve@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error   node_modules/@react-router/dev
[INFO] npm error     dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error
[INFO] npm error Conflicting peer dependency: react-router@7.9.4
[INFO] npm error node_modules/react-router
[INFO] npm error   peer react-router@"7.9.4" from @react-router/serve@7.9.4
[INFO] npm error   node_modules/@react-router/serve
[INFO] npm error     @react-router/serve@"^7.9.2" from the root project
[INFO] npm error     peerOptional @react-router/serve@"^7.9.4" from @react-router/dev@7.9.4
[INFO] npm error     node_modules/@react-router/dev
[INFO] npm error       dev @react-router/dev@"^7.9.2" from the root project
[INFO] npm error
[INFO] npm error Fix the upstream dependency conflict, or retry
[INFO] npm error this command with --force or --legacy-peer-deps
[INFO] npm error to accept an incorrect (and potentially broken) dependency resolution.
[INFO] npm error
[INFO] npm error
[INFO] npm error For a full report see:
[INFO] npm error /home/david/.npm/_logs/2026-01-09T07_44_58_389Z-eresolve-report.txt
[INFO] npm error A complete log of this run can be found in: /home/david/.npm/_logs/2026-01-09T07_44_58_389Z-debug-0.log

…act-router/dev to ^7.12.0

Apache-HBase · 2026-01-09T09:04:10Z

🎊 +1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	1m 23s		Docker mode activated.
-0 ⚠️	yetus	0m 4s		Unprocessed flag(s): --brief-report-file --spotbugs-strict-precheck --author-ignore-list --blanks-eol-ignore-file --blanks-tabs-ignore-file --quick-hadoopcheck
			_ Prechecks _
			_ master Compile Tests _
			_ Patch Compile Tests _
			_ Other Tests _
		2m 55s

Subsystem	Report/Notes
Docker	ClientAPI=1.43 ServerAPI=1.43 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/artifact/yetus-jdk17-hadoop3-check/output/Dockerfile
GITHUB PR	#7609
Optional Tests
uname	Linux bf2c895259d1 5.4.0-1103-aws #111~18.04.1-Ubuntu SMP Tue May 23 20:04:10 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `fb7c6a6`
Max. process+thread count	35 (vs. ulimit of 30000)
modules	C: hbase-website U: hbase-website
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/console
versions	git=2.34.1 maven=3.9.8
Powered by	Apache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

Apache-HBase · 2026-01-09T09:14:20Z

🎊 +1 overall

Vote	Subsystem	Runtime	Logfile	Comment
+0 🆗	reexec	0m 13s		Docker mode activated.
			_ Prechecks _
+1 💚	dupname	0m 0s		No case conflicting files found.
+0 🆗	codespell	0m 0s		codespell was not available.
+0 🆗	detsecrets	0m 0s		detect-secrets was not available.
+0 🆗	jsonlint	0m 0s		jsonlint was not available.
+1 💚	@author	0m 0s		The patch does not contain any @author tags.
			_ master Compile Tests _
+1 💚	mvninstall	3m 25s		master passed
+1 💚	mvnsite	1m 0s		master passed
+1 💚	spotless	0m 56s		branch has no errors when running spotless:check.
			_ Patch Compile Tests _
+1 💚	mvninstall	3m 20s		the patch passed
+1 💚	blanks	0m 0s		The patch has no blanks issues.
+1 💚	mvnsite	0m 51s		the patch passed
+1 💚	spotless	0m 57s		patch has no errors when running spotless:check.
			_ Other Tests _
+1 💚	asflicense	0m 14s		The patch does not generate ASF License warnings.
		13m 0s

Subsystem	Report/Notes
Docker	ClientAPI=1.52 ServerAPI=1.52 base: https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/artifact/yetus-general-check/output/Dockerfile
GITHUB PR	#7609
Optional Tests	dupname asflicense mvnsite codespell detsecrets jsonlint spotless
uname	Linux c3974e6cfe21 6.14.0-1018-aws #18~24.04.1-Ubuntu SMP Mon Nov 24 19:46:27 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux
Build tool	maven
Personality	dev-support/hbase-personality.sh
git revision	master / `fb7c6a6`
Max. process+thread count	124 (vs. ulimit of 30000)
modules	C: hbase-website U: hbase-website
Console output	https://ci-hbase.apache.org/job/HBase-PreCommit-GitHub-PR/job/PR-7609/3/console
versions	git=2.34.1 maven=3.9.8
Powered by	Apache Yetus 0.15.0 https://yetus.apache.org

This message was automatically generated.

PDavid

Looks good to me. 👍

yuriipalam · 2026-01-09T10:14:50Z

LGTM, thanks David

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 9, 2026

This comment has been minimized.

Sign in to view

PDavid force-pushed the dependabot/npm_and_yarn/hbase-website/react-router-7.12.0 branch from 0859161 to 039face Compare January 9, 2026 07:45

PDavid changed the title ~~Bump react-router from 7.9.4 to 7.12.0 in /hbase-website~~ HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website Jan 9, 2026

This comment has been minimized.

Sign in to view

HBASE-29818 Also bump @react-router/node, @react-router/serve and @re…

fb7c6a6

…act-router/dev to ^7.12.0

PDavid self-assigned this Jan 9, 2026

PDavid approved these changes Jan 9, 2026

View reviewed changes

liuxiaocs7 approved these changes Jan 9, 2026

View reviewed changes

PDavid merged commit f35268a into master Jan 9, 2026
1 check passed

PDavid deleted the dependabot/npm_and_yarn/hbase-website/react-router-7.12.0 branch January 9, 2026 10:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website #7609

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website #7609

dependabot bot commented on behalf of github Jan 9, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

PDavid commented Jan 9, 2026

Uh oh!

PDavid commented Jan 9, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

Apache-HBase commented Jan 9, 2026

Uh oh!

Apache-HBase commented Jan 9, 2026

Uh oh!

PDavid left a comment •

edited

Loading

Uh oh!

yuriipalam commented Jan 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

URL `/a/b/c`	HTTP pathname	`request` pathname`
Document	`/a/b/c`	`/a/b/c` ✅
Data	`/a/b/c.data`	`/a/b/c` ✅

URL `/a/b/c/`	HTTP pathname	`request` pathname`
Document	`/a/b/c/`	`/a/b/c/` ✅
Data	`/a/b/c.data`	`/a/b/c` ⚠️

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website #7609

HBASE-29818 Bump react-router from 7.9.4 to 7.12.0 in /hbase-website #7609

Conversation

dependabot bot commented on behalf of github Jan 9, 2026

v7.12.0

v7.11.0

v7.10.1

v7.10.0

v7.9.6

v7.9.5

7.12.0

Minor Changes

Patch Changes

Uh oh!

This comment has been minimized.

This comment has been minimized.

PDavid commented Jan 9, 2026

Uh oh!

PDavid commented Jan 9, 2026

Uh oh!

This comment has been minimized.

This comment has been minimized.

Apache-HBase commented Jan 9, 2026

Uh oh!

Apache-HBase commented Jan 9, 2026

Uh oh!

PDavid left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

yuriipalam commented Jan 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

PDavid left a comment •

edited

Loading