archetech / archon / 29774414253

90%

main: 90%

Pull #753

github

security: bump react-router-dom to patched versions

Clears the open react-router advisories across the three apps that depend
on it directly:

- explorer, gatekeeper-client: react-router-dom ^6.30.4
  (resolves react-router 6.30.4 + @remix-run/router 1.23.3)
  fixes GHSA-9jcx-v3wj-wh4m, GHSA-2j2x-hqr9-3h42 (open redirect)
  and GHSA-2w69-qvjg-hvjx (XSS via open redirect in @remix-run/router)
- herald-client: react-router-dom ^7.15.1 (resolves 7.18.1)
  fixes GHSA-49rj-9fvp-4h2h (unauth RCE via vendored turbo-stream),
  GHSA-rxv8-25v2-qmq8 / GHSA-8x6r-g9mw-2r78 (DoS),
  GHSA-84g9-w2xq-vcv6 (CSRF)

Within-major bumps; lockfiles regenerated via npm install --package-lock-only.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2979 of 3529 branches covered (84.41%)

Branch coverage included in aggregate %.

6173 of 6599 relevant lines covered (93.54%)

835.78 hits per line