React Router

The application framework for React

[React Router @ReactRouter]

https://t.co/dtIkTjhuyG

[React Router @ReactRouter]

React Router v8.1 is available!

- create-react-router will now install our official Agent Skill (if you want it)
- Instrumentation APIs provides result meta data
- Several bug fixes

Read the changelog 👇

[Brooks Lybrand @BrooksLybrand]

There's a new React Router Agent Skill in town

[React Router @ReactRouter]

With the release of React Router v8 we are officially marking React Router v6 and Remix v2 as End of Life (EOL), so they will no longer be receiving security updates.

We will continue shipping security updates to React Router v7 as needed, just like we did with v6 and Remix v2.

[React Router @ReactRouter]

React Router v8 is now available!

- All v7 future flags are now the default (Middleware, Vite env API, Split Route Modules, etc.)
- ESM-only
- New baselines: node 22+, React 19+, Vite 7+
- Easy upgrade from v7

[React Router @ReactRouter]

https://t.co/VcOhI2G17V

[Brooks Lybrand @BrooksLybrand]

How we're approaching Agent Skills with React Router (and Remix)

- Put your docs in your `node_modules`
- Agent Skill should be small and mostly just pointing to the docs
- Full video 👇(I don't have X premium)

[Brooks Lybrand @BrooksLybrand]

Happy 1-year anniversary to React Router's Open Governance!

I'm so glad we made this shift last year, we have received so many good proposals and quality improvements from the community as a result.

Excited for even more to come as we move toward v8!

https://t.co/7p9qhrDg8V

[Matt Brophy @brophdawg11]

I *love* how boring our major releases are because of future flags. Adopt flags at your leisure in v7, and you'll basically have a non-breaking upgrade to v8

Updating the RR website involved changing 4 LOC only because we hadn't yet moved off a field deprecated earlier in v7

[React Router @ReactRouter]

https://t.co/2o5EP6WJqt

[React Router @ReactRouter]

React Router v8 is now in prerelease mode!

Please give it a try and let us know if you running into any issues.

Learn more by reading the changelog linked below.

[React Router @ReactRouter]

Denial of Service via reflected user input in single-fetch

https://t.co/sfTGgGE5tq

Framework Mode & Remix v2 with Single Fetch enabled

Affected versions:
- react-router >=7.0.0,<7.14.0
- turbo-stream <=2.4.1

[React Router @ReactRouter]

We just published 7 CVEs identifying security vulnerabilities in React Router and Remix v2

We recommend updating to the latest appropriate versions:

- React Router v7 -- 7.16.0
- React Router v6 -- 6.30.4
- Remix v2 -- 2.17.5

Details, links, and package ranges are listed below

[React Router @ReactRouter]

Stored XSS via unescaped Location header in prerendered redirect HTML

https://t.co/LQeIsT3OLH

Framework Mode with Pre-rendering only

Affected versions:
- react-router >=7.5.1,<7.13.2

[Brooks Lybrand @BrooksLybrand]

React Router v8 is coming soon!

I gave a talk a few weeks ago at React Miami about the past, present, and future of React Router and what you can expect from this update

https://t.co/JrYexdrH2a