chore(deps): bump @remix-run/react from 2.16.7 to 2.17.3 in /dev-packages/e2e-tests/test-applications/create-remix-app-v2#18748
Conversation
Bumps [@remix-run/react](https://github.com/remix-run/remix/tree/HEAD/packages/remix-react) from 2.16.7 to 2.17.3. - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/remix@2.17.3/packages/remix-react) --- updated-dependencies: - dependency-name: "@remix-run/react" dependency-version: 2.17.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| "@remix-run/css-bundle": "2.16.7", | ||
| "@remix-run/node": "2.16.7", | ||
| "@remix-run/react": "2.16.7", | ||
| "@remix-run/react": "2.17.3", |
There was a problem hiding this comment.
Remix package version mismatch may cause compatibility issues
Medium Severity
The @remix-run/react package is being upgraded to 2.17.3 while all other @remix-run/* packages (css-bundle, node, serve, dev, eslint-config) remain at 2.16.7. Remix packages are released together from a monorepo and are designed to work with matching versions. This version mismatch between 2.17.x and 2.16.x packages could cause build failures, runtime type mismatches, or unexpected behavior in E2E tests. All Remix packages should be upgraded together to maintain compatibility.
🔬 Verification Test
Why verification test was not possible: This is a dependency version mismatch issue that manifests at build or runtime. The bug is evident from comparing the version consistency pattern across the codebase - examining create-remix-app-v2-non-vite/package.json shows all Remix packages are kept at the same version (2.7.2), while this change creates a mismatch. The actual failure would only be observable when running pnpm install && pnpm build in the test application environment, which requires the full project context and CI environment to execute.
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/dev-packages/e2e-tests/test-applications/create-remix-app-v2/remix-run/react-2.17.3
branch
1 participant
Bumps @remix-run/react from 2.16.7 to 2.17.3.
Release notes
Sourced from
@remix-run/react's releases.Commits
b1d29d9Version 2.17.35c87c08Escape HTML in scroll restoration keys (#10925)4a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.33920349Version 2.17.291ef6feVersion 2.17.16bfad4eEscape meta json ld content (#10741)3000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/reactsince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.