Skip to content

Upgrade TanStack Start for CVE-2026-102989 #2160

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
RhysSullivan merged 3 commits into from
Sep 30, 2026
Merged

Upgrade TanStack Start for CVE-2026-102989 #2160

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
f4745bb
Upgrade TanStack Start for CVE-2026-102989
RhysSullivan Sep 30, 2026
25b702c
Regenerate lockfile with the pinned bun 1.3.11
RhysSullivan Sep 30, 2026
b0dbbf6
Regenerate route trees with the upgraded router generator
RhysSullivan Sep 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
328 changes: 164 additions & 164 deletions apps/cloud/src/routeTree.gen.ts
View file
Open in desktop

Large diffs are not rendered by default.

226 changes: 113 additions & 113 deletions apps/host-cloudflare/web/routeTree.gen.ts
View file
Open in desktop

Large diffs are not rendered by default.

320 changes: 160 additions & 160 deletions apps/host-selfhost/web/routeTree.gen.ts
View file
Open in desktop

Large diffs are not rendered by default.

658 changes: 524 additions & 134 deletions bun.lock
View file
Open in desktop

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -119,8 +119,8 @@
"vite": "^8.0.0",
"@vitejs/plugin-react": "^6.0.1",
"@tailwindcss/vite": "^4.2.2",
"@tanstack/react-router": "^1.168.10",
"@tanstack/react-start": "^1.167.16",
"@tanstack/react-router": "^1.170.41",
"@tanstack/react-start": "^1.168.60",
"react": "^19.1.0",
"react-dom": "^19.1.0",
"@types/react": "^19.1.0",
Expand Down
220 changes: 110 additions & 110 deletions packages/app/src/routeTree.gen.ts
View file
Open in desktop

Large diffs are not rendered by default.

2 changes: 1 addition & 1 deletion packages/react/src/multiplayer/org-slug-gate.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ export function OrgSlugGate(props: OrgSlugGateProps) {
// Skip canonicalization whenever the router is currently sitting on a
// not-found match — see the file header for why.
const isNotFound = useRouterState({
select: (state) => state.matches.some((match) => match.globalNotFound),
select: (state) => state.matches.some((match) => match._notFound),
});

const needsCanonicalize = urlSlug !== activeSlug && !isNotFound;
Expand Down
234 changes: 117 additions & 117 deletions packages/react/src/routes/routeTree.gen.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,71 +10,66 @@

import { Route as rootRouteImport } from './__root'
import { Route as DotIndexRouteImport } from './index'
import { Route as DotUsersRouteImport } from './users'
import { Route as DotToolsRouteImport } from './tools'
import { Route as DotToolkitsRouteImport } from './toolkits'
import { Route as DotSecretsRouteImport } from './secrets'
import { Route as DotPoliciesRouteImport } from './policies'
import { Route as DotArtifactsRouteImport } from './artifacts'
import { Route as DotToolkitsDottoolkitSlugRouteImport } from './toolkits.$toolkitSlug'
import { Route as DotResumeDotexecutionIdRouteImport } from './resume.$executionId'
import { Route as DotIntegrationsDotbrowseRouteImport } from './integrations.browse'
import { Route as DotIntegrationsDotnamespaceRouteImport } from './integrations.$namespace'
import { Route as DotConnectDotintegrationSlugRouteImport } from './connect.$integrationSlug'
import { Route as DotPoliciesRouteImport } from './policies'
import { Route as DotSecretsRouteImport } from './secrets'
import { Route as DotToolkitsRouteImport } from './toolkits'
import { Route as DotToolsRouteImport } from './tools'
import { Route as DotUsersRouteImport } from './users'
import { Route as DotArtifactsDotartifactIdRouteImport } from './artifacts.$artifactId'
import { Route as DotPluginsDotpluginIdDotsplatRouteImport } from './plugins.$pluginId.$'
import { Route as DotConnectDotintegrationSlugRouteImport } from './connect.$integrationSlug'
import { Route as DotIntegrationsDotnamespaceRouteImport } from './integrations.$namespace'
import { Route as DotIntegrationsDotbrowseRouteImport } from './integrations.browse'
import { Route as DotResumeDotexecutionIdRouteImport } from './resume.$executionId'
import { Route as DotToolkitsDottoolkitSlugRouteImport } from './toolkits.$toolkitSlug'
import { Route as DotIntegrationsDotaddDotpluginKeyRouteImport } from './integrations.add.$pluginKey'
import { Route as DotPluginsDotpluginIdDotsplatRouteImport } from './plugins.$pluginId.$'

const DotIndexRoute = DotIndexRouteImport.update({
id: '/{-$orgSlug}/',
path: '/{-$orgSlug}/',
getParentRoute: () => rootRouteImport,
} as any)
const DotUsersRoute = DotUsersRouteImport.update({
id: '/{-$orgSlug}/users',
path: '/{-$orgSlug}/users',
getParentRoute: () => rootRouteImport,
} as any)
const DotToolsRoute = DotToolsRouteImport.update({
id: '/{-$orgSlug}/tools',
path: '/{-$orgSlug}/tools',
const DotArtifactsRoute = DotArtifactsRouteImport.update({
id: '/{-$orgSlug}/artifacts',
path: '/{-$orgSlug}/artifacts',
getParentRoute: () => rootRouteImport,
} as any)
const DotToolkitsRoute = DotToolkitsRouteImport.update({
id: '/{-$orgSlug}/toolkits',
path: '/{-$orgSlug}/toolkits',
const DotPoliciesRoute = DotPoliciesRouteImport.update({
id: '/{-$orgSlug}/policies',
path: '/{-$orgSlug}/policies',
getParentRoute: () => rootRouteImport,
} as any)
const DotSecretsRoute = DotSecretsRouteImport.update({
id: '/{-$orgSlug}/secrets',
path: '/{-$orgSlug}/secrets',
getParentRoute: () => rootRouteImport,
} as any)
const DotPoliciesRoute = DotPoliciesRouteImport.update({
id: '/{-$orgSlug}/policies',
path: '/{-$orgSlug}/policies',
const DotToolkitsRoute = DotToolkitsRouteImport.update({
id: '/{-$orgSlug}/toolkits',
path: '/{-$orgSlug}/toolkits',
getParentRoute: () => rootRouteImport,
} as any)
const DotArtifactsRoute = DotArtifactsRouteImport.update({
id: '/{-$orgSlug}/artifacts',
path: '/{-$orgSlug}/artifacts',
const DotToolsRoute = DotToolsRouteImport.update({
id: '/{-$orgSlug}/tools',
path: '/{-$orgSlug}/tools',
getParentRoute: () => rootRouteImport,
} as any)
const DotToolkitsDottoolkitSlugRoute =
DotToolkitsDottoolkitSlugRouteImport.update({
id: '/$toolkitSlug',
path: '/$toolkitSlug',
getParentRoute: () => DotToolkitsRoute,
} as any)
const DotResumeDotexecutionIdRoute = DotResumeDotexecutionIdRouteImport.update({
id: '/{-$orgSlug}/resume/$executionId',
path: '/{-$orgSlug}/resume/$executionId',
const DotUsersRoute = DotUsersRouteImport.update({
id: '/{-$orgSlug}/users',
path: '/{-$orgSlug}/users',
getParentRoute: () => rootRouteImport,
} as any)
const DotIntegrationsDotbrowseRoute =
DotIntegrationsDotbrowseRouteImport.update({
id: '/{-$orgSlug}/integrations/browse',
path: '/{-$orgSlug}/integrations/browse',
const DotArtifactsDotartifactIdRoute =
DotArtifactsDotartifactIdRouteImport.update({
id: '/$artifactId',
path: '/$artifactId',
getParentRoute: () => DotArtifactsRoute,
} as any)
const DotConnectDotintegrationSlugRoute =
DotConnectDotintegrationSlugRouteImport.update({
id: '/{-$orgSlug}/connect/$integrationSlug',
path: '/{-$orgSlug}/connect/$integrationSlug',
getParentRoute: () => rootRouteImport,
} as any)
const DotIntegrationsDotnamespaceRoute =
Expand All @@ -83,30 +78,35 @@ const DotIntegrationsDotnamespaceRoute =
path: '/{-$orgSlug}/integrations/$namespace',
getParentRoute: () => rootRouteImport,
} as any)
const DotConnectDotintegrationSlugRoute =
DotConnectDotintegrationSlugRouteImport.update({
id: '/{-$orgSlug}/connect/$integrationSlug',
path: '/{-$orgSlug}/connect/$integrationSlug',
const DotIntegrationsDotbrowseRoute =
DotIntegrationsDotbrowseRouteImport.update({
id: '/{-$orgSlug}/integrations/browse',
path: '/{-$orgSlug}/integrations/browse',
getParentRoute: () => rootRouteImport,
} as any)
const DotArtifactsDotartifactIdRoute =
DotArtifactsDotartifactIdRouteImport.update({
id: '/$artifactId',
path: '/$artifactId',
getParentRoute: () => DotArtifactsRoute,
} as any)
const DotPluginsDotpluginIdDotsplatRoute =
DotPluginsDotpluginIdDotsplatRouteImport.update({
id: '/{-$orgSlug}/plugins/$pluginId/$',
path: '/{-$orgSlug}/plugins/$pluginId/$',
getParentRoute: () => rootRouteImport,
const DotResumeDotexecutionIdRoute = DotResumeDotexecutionIdRouteImport.update({
id: '/{-$orgSlug}/resume/$executionId',
path: '/{-$orgSlug}/resume/$executionId',
getParentRoute: () => rootRouteImport,
} as any)
const DotToolkitsDottoolkitSlugRoute =
DotToolkitsDottoolkitSlugRouteImport.update({
id: '/$toolkitSlug',
path: '/$toolkitSlug',
getParentRoute: () => DotToolkitsRoute,
} as any)
const DotIntegrationsDotaddDotpluginKeyRoute =
DotIntegrationsDotaddDotpluginKeyRouteImport.update({
id: '/{-$orgSlug}/integrations/add/$pluginKey',
path: '/{-$orgSlug}/integrations/add/$pluginKey',
getParentRoute: () => rootRouteImport,
} as any)
const DotPluginsDotpluginIdDotsplatRoute =
DotPluginsDotpluginIdDotsplatRouteImport.update({
id: '/{-$orgSlug}/plugins/$pluginId/$',
path: '/{-$orgSlug}/plugins/$pluginId/$',
getParentRoute: () => rootRouteImport,
} as any)

export interface FileRoutesByFullPath {
'/{-$orgSlug}/artifacts': typeof DotArtifactsRouteWithChildren
Expand Down Expand Up @@ -239,25 +239,18 @@ declare module '@tanstack/react-router' {
preLoaderRoute: typeof DotIndexRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/users': {
id: '/{-$orgSlug}/users'
path: '/{-$orgSlug}/users'
fullPath: '/{-$orgSlug}/users'
preLoaderRoute: typeof DotUsersRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/tools': {
id: '/{-$orgSlug}/tools'
path: '/{-$orgSlug}/tools'
fullPath: '/{-$orgSlug}/tools'
preLoaderRoute: typeof DotToolsRouteImport
'/{-$orgSlug}/artifacts': {
id: '/{-$orgSlug}/artifacts'
path: '/{-$orgSlug}/artifacts'
fullPath: '/{-$orgSlug}/artifacts'
preLoaderRoute: typeof DotArtifactsRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/toolkits': {
id: '/{-$orgSlug}/toolkits'
path: '/{-$orgSlug}/toolkits'
fullPath: '/{-$orgSlug}/toolkits'
preLoaderRoute: typeof DotToolkitsRouteImport
'/{-$orgSlug}/policies': {
id: '/{-$orgSlug}/policies'
path: '/{-$orgSlug}/policies'
fullPath: '/{-$orgSlug}/policies'
preLoaderRoute: typeof DotPoliciesRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/secrets': {
Expand All @@ -267,39 +260,39 @@ declare module '@tanstack/react-router' {
preLoaderRoute: typeof DotSecretsRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/policies': {
id: '/{-$orgSlug}/policies'
path: '/{-$orgSlug}/policies'
fullPath: '/{-$orgSlug}/policies'
preLoaderRoute: typeof DotPoliciesRouteImport
'/{-$orgSlug}/toolkits': {
id: '/{-$orgSlug}/toolkits'
path: '/{-$orgSlug}/toolkits'
fullPath: '/{-$orgSlug}/toolkits'
preLoaderRoute: typeof DotToolkitsRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/artifacts': {
id: '/{-$orgSlug}/artifacts'
path: '/{-$orgSlug}/artifacts'
fullPath: '/{-$orgSlug}/artifacts'
preLoaderRoute: typeof DotArtifactsRouteImport
'/{-$orgSlug}/tools': {
id: '/{-$orgSlug}/tools'
path: '/{-$orgSlug}/tools'
fullPath: '/{-$orgSlug}/tools'
preLoaderRoute: typeof DotToolsRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/toolkits/$toolkitSlug': {
id: '/{-$orgSlug}/toolkits/$toolkitSlug'
path: '/$toolkitSlug'
fullPath: '/{-$orgSlug}/toolkits/$toolkitSlug'
preLoaderRoute: typeof DotToolkitsDottoolkitSlugRouteImport
parentRoute: typeof DotToolkitsRoute
}
'/{-$orgSlug}/resume/$executionId': {
id: '/{-$orgSlug}/resume/$executionId'
path: '/{-$orgSlug}/resume/$executionId'
fullPath: '/{-$orgSlug}/resume/$executionId'
preLoaderRoute: typeof DotResumeDotexecutionIdRouteImport
'/{-$orgSlug}/users': {
id: '/{-$orgSlug}/users'
path: '/{-$orgSlug}/users'
fullPath: '/{-$orgSlug}/users'
preLoaderRoute: typeof DotUsersRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/integrations/browse': {
id: '/{-$orgSlug}/integrations/browse'
path: '/{-$orgSlug}/integrations/browse'
fullPath: '/{-$orgSlug}/integrations/browse'
preLoaderRoute: typeof DotIntegrationsDotbrowseRouteImport
'/{-$orgSlug}/artifacts/$artifactId': {
id: '/{-$orgSlug}/artifacts/$artifactId'
path: '/$artifactId'
fullPath: '/{-$orgSlug}/artifacts/$artifactId'
preLoaderRoute: typeof DotArtifactsDotartifactIdRouteImport
parentRoute: typeof DotArtifactsRoute
}
'/{-$orgSlug}/connect/$integrationSlug': {
id: '/{-$orgSlug}/connect/$integrationSlug'
path: '/{-$orgSlug}/connect/$integrationSlug'
fullPath: '/{-$orgSlug}/connect/$integrationSlug'
preLoaderRoute: typeof DotConnectDotintegrationSlugRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/integrations/$namespace': {
Expand All @@ -309,34 +302,41 @@ declare module '@tanstack/react-router' {
preLoaderRoute: typeof DotIntegrationsDotnamespaceRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/connect/$integrationSlug': {
id: '/{-$orgSlug}/connect/$integrationSlug'
path: '/{-$orgSlug}/connect/$integrationSlug'
fullPath: '/{-$orgSlug}/connect/$integrationSlug'
preLoaderRoute: typeof DotConnectDotintegrationSlugRouteImport
'/{-$orgSlug}/integrations/browse': {
id: '/{-$orgSlug}/integrations/browse'
path: '/{-$orgSlug}/integrations/browse'
fullPath: '/{-$orgSlug}/integrations/browse'
preLoaderRoute: typeof DotIntegrationsDotbrowseRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/artifacts/$artifactId': {
id: '/{-$orgSlug}/artifacts/$artifactId'
path: '/$artifactId'
fullPath: '/{-$orgSlug}/artifacts/$artifactId'
preLoaderRoute: typeof DotArtifactsDotartifactIdRouteImport
parentRoute: typeof DotArtifactsRoute
}
'/{-$orgSlug}/plugins/$pluginId/$': {
id: '/{-$orgSlug}/plugins/$pluginId/$'
path: '/{-$orgSlug}/plugins/$pluginId/$'
fullPath: '/{-$orgSlug}/plugins/$pluginId/$'
preLoaderRoute: typeof DotPluginsDotpluginIdDotsplatRouteImport
'/{-$orgSlug}/resume/$executionId': {
id: '/{-$orgSlug}/resume/$executionId'
path: '/{-$orgSlug}/resume/$executionId'
fullPath: '/{-$orgSlug}/resume/$executionId'
preLoaderRoute: typeof DotResumeDotexecutionIdRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/toolkits/$toolkitSlug': {
id: '/{-$orgSlug}/toolkits/$toolkitSlug'
path: '/$toolkitSlug'
fullPath: '/{-$orgSlug}/toolkits/$toolkitSlug'
preLoaderRoute: typeof DotToolkitsDottoolkitSlugRouteImport
parentRoute: typeof DotToolkitsRoute
}
'/{-$orgSlug}/integrations/add/$pluginKey': {
id: '/{-$orgSlug}/integrations/add/$pluginKey'
path: '/{-$orgSlug}/integrations/add/$pluginKey'
fullPath: '/{-$orgSlug}/integrations/add/$pluginKey'
preLoaderRoute: typeof DotIntegrationsDotaddDotpluginKeyRouteImport
parentRoute: typeof rootRouteImport
}
'/{-$orgSlug}/plugins/$pluginId/$': {
id: '/{-$orgSlug}/plugins/$pluginId/$'
path: '/{-$orgSlug}/plugins/$pluginId/$'
fullPath: '/{-$orgSlug}/plugins/$pluginId/$'
preLoaderRoute: typeof DotPluginsDotpluginIdDotsplatRouteImport
parentRoute: typeof rootRouteImport
}
}
}

Expand Down
Loading