Bump react-router-dom from 7.0.2 to 7.1.1 #33
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
dependabot
bot
added
dependencies
Minder Vulnerability Report ✅Minder analyzed this PR and found it does not add any new vulnerable dependencies.
|
![stacklok-cloud-staging[bot]](https://avatars.githubusercontent.com/u/110237746?s=60&v=4){kind=small}
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: react-router
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.6 |
| Repository activity | 9.3 |
| User activity | 9.9 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 579 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-native-navigation | 0 | |
| connected-react-router | 0 | |
| redux-first-router | 0 | |
| found | 0 | |
| react-router-hash-link | 0 | |
| react-router-config | 0 | |
| react-breadcrumbs-dynamic | 0 |
📦 Dependency: react-router-dom
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 473 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/react-router-dom-7.1.1
branch
from
1ebd78f to
f31e426
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: react-router
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.6 |
| Repository activity | 9.3 |
| User activity | 9.9 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 579 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
📦 Dependency: react-router-dom
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 473 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
dependabot
bot
force-pushed
the
dependabot/npm_and_yarn/react-router-dom-7.1.1
branch
from
f31e426 to
9487798
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: react-router
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 579 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router-dom | 0 | |
| react-native-navigation | 0 | |
| connected-react-router | 0 | |
| redux-first-router | 0 | |
| found | 0 | |
| react-router-hash-link | 0 | |
| react-router-config | 0 | |
| react-breadcrumbs-dynamic | 0 |
📦 Dependency: react-router-dom
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 473 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router | 0 | |
| react-router-hash-link | 0 |
peppescg
force-pushed
the
dependabot/npm_and_yarn/react-router-dom-7.1.1
branch
from
9487798 to
5546448
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: react-router
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 579 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router-dom | 0 | |
| react-native-navigation | 0 | |
| connected-react-router | 0 | |
| redux-first-router | 0 | |
| found | 0 | |
| react-router-hash-link | 0 | |
| react-router-config | 0 | |
| react-breadcrumbs-dynamic | 0 |
📦 Dependency: react-router-dom
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 473 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router | 0 | |
| react-router-hash-link | 0 |
Bumps [react-router-dom](https://github.com/remix-run/react-router/tree/HEAD/packages/react-router-dom) from 7.0.2 to 7.1.1. - [Release notes](https://github.com/remix-run/react-router/releases) - [Changelog](https://github.com/remix-run/react-router/blob/main/packages/react-router-dom/CHANGELOG.md) - [Commits](https://github.com/remix-run/react-router/commits/react-router-dom@7.1.1/packages/react-router-dom) --- updated-dependencies: - dependency-name: react-router-dom dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
peppescg
force-pushed
the
dependabot/npm_and_yarn/react-router-dom-7.1.1
branch
from
5546448 to
162fcca
Compare
There was a problem hiding this comment.
Dependency Information
Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.
📦 Dependency: react-router
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 579 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router-dom | 0 | |
| react-native-navigation | 0 | |
| connected-react-router | 0 | |
| redux-first-router | 0 | |
| found | 0 | |
| react-router-hash-link | 0 | |
| react-router-config | 0 | |
| react-breadcrumbs-dynamic | 0 |
📦 Dependency: react-router-dom
Trusty Score: 0
Scoring details
| Component | Score |
|---|---|
| Package activity | 9.7 |
| Repository activity | 9.3 |
| User activity | 10 |
| Provenance | historical_provenance_match |
Proof of Origin (Provenance)
This package can be linked back to its source code using a historical provenance map.
We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.
| Published package versions | 473 |
| Number of git tags or releases | 862 |
| Versions matched to tags or releases | 256 |
Alternatives
| Package | Score | Description |
|---|---|---|
| react-router | 0 | |
| react-router-hash-link | 0 |
Bumps react-router-dom from 7.0.2 to 7.1.1.
Release notes
Sourced from react-router-dom's releases.
... (truncated)
Changelog
Sourced from react-router-dom's changelog.
Commits
2c5563echore: Update version for release (#12631)e360c30chore: Update version for release (pre) (#12630)041701echore: formatc51985echore: Update version for release (#12604)d81928echore: Update version for release (pre) (#12585)e1fd999chore: formatDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)