chore(deps): bump @remix-run/server-runtime, @remix-run/express, @remix-run/node and @remix-run/dev in /examples/remix-minimal-starter #4231
Conversation
…ix-run/node and @remix-run/dev Removes [@remix-run/server-runtime](https://github.com/remix-run/remix/tree/HEAD/packages/remix-server-runtime). It's no longer used after updating ancestor dependencies [@remix-run/server-runtime](https://github.com/remix-run/remix/tree/HEAD/packages/remix-server-runtime), [@remix-run/express](https://github.com/remix-run/remix/tree/HEAD/packages/remix-express), [@remix-run/node](https://github.com/remix-run/remix/tree/HEAD/packages/remix-node) and [@remix-run/dev](https://github.com/remix-run/remix/tree/HEAD/packages/remix-dev). These dependencies need to be updated together. Removes `@remix-run/server-runtime` Updates `@remix-run/express` from 1.11.1 to 2.17.4 - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/remix@2.17.4/packages/remix-express) Updates `@remix-run/node` from 1.11.1 to 2.17.4 - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/remix@2.17.4/packages/remix-node) Updates `@remix-run/dev` from 1.11.1 to 2.17.4 - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/remix@2.17.4/packages/remix-dev) --- updated-dependencies: - dependency-name: "@remix-run/server-runtime" dependency-version: dependency-type: indirect - dependency-name: "@remix-run/express" dependency-version: 2.17.4 dependency-type: direct:production - dependency-name: "@remix-run/node" dependency-version: 2.17.4 dependency-type: direct:production - dependency-name: "@remix-run/dev" dependency-version: 2.17.4 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| "@remix-run/express": "^1.11.1", | ||
| "@remix-run/node": "^1.11.1", | ||
| "@remix-run/express": "^2.17.4", | ||
| "@remix-run/node": "^2.17.4", |
There was a problem hiding this comment.
Remix packages version mismatch breaks peer dependency requirements
High Severity
The PR updates @remix-run/express, @remix-run/node, and @remix-run/dev to v2.17.4 but leaves @remix-run/react at v1.11.1. This creates a major version mismatch. The @remix-run/dev v2.17.4 has a peer dependency requiring @remix-run/react: ^2.17.0, which v1.11.1 doesn't satisfy. Additionally, the application code uses useCatch which was removed in Remix v2, causing runtime failures.
Additional Locations (2)
| }, | ||
| "devDependencies": { | ||
| "@remix-run/dev": "^1.11.1", | ||
| "@remix-run/dev": "^2.17.4", |
There was a problem hiding this comment.
Node.js engine requirement not updated for Remix v2
Medium Severity
The engines field specifies node >= 14 but Remix v2 packages require Node.js >= 18.0.0. After this dependency upgrade, users running Node.js 14-17 will experience cryptic build or runtime failures because Remix v2 relies on Node.js 18+ features. The engine constraint was not updated to match the new dependency requirements.
| }, | ||
| "devDependencies": { | ||
| "@remix-run/dev": "^1.11.1", | ||
| "@remix-run/dev": "^2.17.4", |
There was a problem hiding this comment.
TypeScript version incompatible with Remix v2 peer dependency
Low Severity
The typescript devDependency is ^4.8.4 but @remix-run/dev v2.17.4 has a peer dependency requiring typescript: ^5.1.0. This version mismatch may cause type checking errors or build issues due to incompatible TypeScript features between v4 and v5.
|
View your CI Pipeline Execution ↗ for commit 15c0583
☁️ Nx Cloud last updated this comment at |
Removes @remix-run/server-runtime. It's no longer used after updating ancestor dependencies @remix-run/server-runtime, @remix-run/express, @remix-run/node and @remix-run/dev. These dependencies need to be updated together.
Removes
@remix-run/server-runtimeUpdates
@remix-run/expressfrom 1.11.1 to 2.17.4Release notes
Sourced from
@remix-run/express's releases.Commits
ab977d9Version 2.17.4b1d29d9Version 2.17.34a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.33920349Version 2.17.291ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)3869e0echore: Update version for release (#10643)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/expresssince your current version.Updates
@remix-run/nodefrom 1.11.1 to 2.17.4Release notes
Sourced from
@remix-run/node's releases.Commits
ab977d9Version 2.17.4b1d29d9Version 2.17.34a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.33920349Version 2.17.264d88deValidate session id in file session storage (#10806)91ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/nodesince your current version.Updates
@remix-run/devfrom 1.11.1 to 2.17.4Release notes
Sourced from
@remix-run/dev's releases.Commits
ab977d9Version 2.17.4010b356Bump router versions (#10938)b1d29d9Version 2.17.34a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.3b6aec07deps(dev): updatevalibot(#10901)3920349Version 2.17.291ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/devsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Dependency updates
@remix-run/express,@remix-run/node, and@remix-run/devto^2.17.4inexamples/remix-minimal-starter/package.json@remix-run/server-runtimedependencyOther scripts/config remain unchanged.
Written by Cursor Bugbot for commit 15c0583. This will update automatically on new commits. Configure here.