fix(deps): update npm dependencies (patch)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@tanstack/react-router (source)	1.170.18 → 1.170.20
@tanstack/router-plugin (source)	1.168.23 → 1.168.25
@testing-library/user-event	14.6.1 → 14.6.3
@types/lodash (source)	4.17.24 → 4.17.25
@types/react (source)	19.2.17 → 19.2.18
@types/react-dom (source)	19.2.3 → 19.2.4
@vitejs/plugin-react (source)	6.0.4 → 6.0.5
@vitejs/plugin-react-swc (source)	4.3.2 → 4.3.3
immer	11.1.15 → 11.1.16

---

Release Notes

TanStack/router (@​tanstack/react-router)

v1.170.20

Compare Source

Patch Changes

• Updated dependencies [b2908c6]:
  • @​tanstack/router-core@​1.171.17

v1.170.19

Compare Source

Patch Changes

• #​7805 45c4ad8 - Rewrite match loading around a lane-based scheduler that tracks each navigation, preload, and background reload as an ordered unit of work. This fixes pending/redirect/retry state leaking between overlapping navigations, restores correct SSR status codes for redirects, errors, and not-found responses, and closes hydration gaps where the client re-ran work the server had already completed.

  • Invalidation now retires matching active preloads so older speculative loader results cannot become fresh cache data after invalidation.
  • Route headers() now only runs on the server, matching the documented behavior — it is no longer invoked during client-side asset projection.
  • The documented default gcTime and preloadGcTime now match the existing runtime default of 5 minutes (300_000).

  Removed / changed exported internals

  • RouterState no longer includes loadedAt, isTransitioning, statusCode, or redirect. Use match.updatedAt in place of loadedAt; subscribe to router.state.status / router.state.isLoading in place of isTransitioning; server response status and redirect handling are now internal to the server loader and are no longer exposed on router.state.
  • RouteMatch.fetchCount has been removed, with no replacement — it was purely informational.
  • RouteMatch.status no longer includes 'redirected' (it remains 'pending' | 'success' | 'error' | 'notFound') — redirected matches are dropped from the match list instead of being rendered.
  • RouteMatch.globalNotFound has been renamed and privatized to the internal _notFound field. Use match.status === 'notFound' instead.
  • The exported React, Solid, and Vue Match components now accept routeId instead of matchId.
  • The exported RouterStores adapter contract now uses route-keyed presentation stores: matchesId is replaced by ids, matchStores by byRoute, and getRouteMatchStore() by getMatchStore(). The separate loadedAt, isLoading, isTransitioning, statusCode, and redirect stores have been removed, along with the pending/cache stores and their setters. StoreConfig.init has also been removed. Read application-facing state from router.state; preload and cache coordination are now internal.
  • Removed RouterCore members getMatch(), updateMatch(), cancelMatch(), and cancelMatches() — read matches from router.state.matches (e.g. router.state.matches.find((m) => m.id === id)); there is no replacement for mutating or cancelling an individual in-flight match from outside the router.
  • Removed RouterCore.hasNotFoundMatch() — use router.state.matches.some((m) => m.status === 'notFound').
  • Removed RouterCore.looseRoutesById — use routesById.
  • Removed RouterCore.isPrerendering(), RouterCore.isViewTransitionTypesSupported, and RouterCore.viewTransitionPromise, with no replacement.
  • Removed RouterCore.getParsedLocationHref() and RouterCore.clearExpiredCache(), with no replacement — expired cache entries are now reconciled automatically as part of match commit.
  • Removed RouterCore.latestLoadPromise and RouterCore.beforeLoad(), with no replacement.
  • RouterCore.commitLocationPromise and RouterCore.pendingBuiltLocation have been replaced by the internal _commitPromise and _pendingLocation fields.
  • Removed the exported GetMatchFn and UpdateMatchFn types, along with the methods they typed.
  • Removed the standalone getMatchedRoutes() export from @tanstack/router-core — use the router.getMatchedRoutes() instance method instead.
  • RouterCore.loadRouteChunk() no longer accepts an array of component types as its second argument. One-argument usage is unchanged; the optional second argument is now 'errorComponent', 'notFoundComponent', or false for internal boundary loading.
  • Removed Redirect.redirectHandled, which was internal redirect bookkeeping.
  • MatchRoutesOpts.preload and MatchRoutesOpts.dest have been removed.
  • StartTransitionFn is now (fn, expected) => Promise<boolean> (previously (fn) => void). This only affects custom framework adapters that implement startTransition.

• Updated dependencies [45c4ad8]:

  • @​tanstack/router-core@​1.171.16

TanStack/router (@​tanstack/router-plugin)

v1.168.25

Compare Source

Patch Changes

• Updated dependencies [b2908c6]:
  • @​tanstack/router-core@​1.171.17
  • @​tanstack/react-router@​1.170.20
  • @​tanstack/router-generator@​1.167.23

v1.168.24

Compare Source

Patch Changes

• Updated dependencies [45c4ad8]:
  • @​tanstack/router-core@​1.171.16
  • @​tanstack/react-router@​1.170.19
  • @​tanstack/router-generator@​1.167.22

testing-library/user-event (@​testing-library/user-event)

v14.6.3

Compare Source

vitejs/vite-plugin-react (@​vitejs/plugin-react)

v6.0.5

Compare Source

Fixed the react compiler preset filter to be linear (#​1353)

The improved filter in v6.0.3 was non-linear and caused a performance regression (#​1349). The filter was changed to be linear to avoid that.

vitejs/vite-plugin-react (@​vitejs/plugin-react-swc)

v4.3.3

Compare Source

Add a patch for bundled-dev mode compat #​1352

Added a patch so that this plugin works with the experimental bundled dev mode. Note that because this Vite feature is experimental, compatibility in future Vite releases is not guaranteed.

immerjs/immer (immer)

v11.1.16

Compare Source

Bug Fixes

• key inserted array indices by name in the array-methods plugin (e3df956)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • "before 9am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 61b460b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates shared frontend dev dependencies across multiple packages/apps to keep type definitions and Vite React plugins in sync.

Changes:

• Bump @types/react and @types/react-dom patch versions across packages/apps.
• Bump @vitejs/plugin-react patch version across apps/packages using it.
• Bump @vitejs/plugin-react-swc and @types/lodash patch versions where used.

Reviewed changes

Copilot reviewed 10 out of 11 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
packages/ui-components/package.json	Bumps React type packages and Vite React plugin patch versions.
packages/messages-provider/package.json	Bumps React type packages patch versions.
packages/greenhouse-auth-provider/package.json	Bumps React type packages patch versions.
apps/template/package.json	Bumps React type packages and Vite React plugins patch versions.
apps/supernova/package.json	Bumps React type packages and Vite React plugin patch versions.
apps/heureka/package.json	Bumps React type packages and Vite React plugin patch versions.
apps/greenhouse/package.json	Bumps lodash types, React type packages, and Vite React plugin patch versions.
apps/example/package.json	Bumps React type packages and Vite React plugin patch versions.
apps/doop/package.json	Bumps React type packages and Vite React plugin patch versions.
apps/carbon/package.json	Bumps React type packages and Vite React plugins patch versions.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://cloudoperators.github.io/juno/pr-preview/pr-1873/
Built to branch gh-pages at 2026-08-12 22:36 UTC. Preview will be ready when the GitHub Pages deployment is complete.