Repository navigation
chore(deps-dev): Bump @tanstack/vue-router from 1.141.4 to 1.170.42 - #26010
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [@tanstack/vue-router](https://github.com/TanStack/router/tree/HEAD/packages/vue-router) from 1.141.4 to 1.170.42. - [Release notes](https://github.com/TanStack/router/releases) - [Changelog](https://github.com/TanStack/router/blob/main/packages/vue-router/CHANGELOG.md) - [Commits](https://github.com/TanStack/router/commits/@tanstack/vue-router@1.170.42/packages/vue-router) --- updated-dependencies: - dependency-name: "@tanstack/vue-router" dependency-version: 1.170.42 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 9fb1b9d. Configure here.
| }, | ||
| "peerDependencies": { | ||
| "@tanstack/vue-router": "^1.64.0", | ||
| "@tanstack/vue-router": "^1.170.42", |
There was a problem hiding this comment.
Peer range drops older router versions
Medium Severity
This Dependabot bump also raises the optional @tanstack/vue-router peer from ^1.64.0 to ^1.170.42, which drops previously supported 1.x versions. The integration still documents 1.64.0 as the minimum, and there is no changelog or migration note. Flagged because the review rules require an explicit docs or changelog callout when a support minimum is raised.
Triggered by project rule: PR Review Guidelines for Cursor Bot
Reviewed by Cursor Bugbot for commit 9fb1b9d. Configure here.
|
Closing this. The bump also raises the |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
…26015) ## What Dependabot no longer opens bumps for dependencies that are also peer dependencies with a single caret range. - Ignore `@tanstack/vue-router`, `@tanstack/solid-router`, `solid-js`, and `elysia`. ## Why With the `increase` strategy, these bumps also raise the peer dependency range. That drops support for older versions, which is a breaking change (see #26010). Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>


Bumps @tanstack/vue-router from 1.141.4 to 1.170.42.
Release notes
Sourced from @tanstack/vue-router's releases.
Changelog
Sourced from @tanstack/vue-router's changelog.
... (truncated)
Commits
6b9fe6dci: Version Packages (#8745)32a3360docs(skills): reference cross-package skills by intent ID (#8670)caaf32dci: Version Packages (#8733)18154b1perf: lower manifest script preload priority (#8212)7a06725chore(deps): upgrade Vitest to 5 and migrate benchmarks to the bench fixture ...4ff63ebci: Version Packages (#8700)80e2eabci: Version Packages (#8661)c79c620ci: Version Packages (#8580)f6d21derevert: keep server-rendered pending UI of no-SSR routes through hydration (#...ff9f753fix: keep server-rendered pending UI of no-SSR routes through hydration (#8643)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)