chore(deps): bump @remix-run/node and @remix-run/express in /examples/remix-minimal-starter #4222
Conversation
Bumps [@remix-run/node](https://github.com/remix-run/remix/tree/HEAD/packages/remix-node) and [@remix-run/express](https://github.com/remix-run/remix/tree/HEAD/packages/remix-express). These dependencies needed to be updated together. Updates `@remix-run/node` from 1.11.1 to 2.17.3 - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/[email protected]/packages/remix-node) Updates `@remix-run/express` from 1.11.1 to 2.17.3 - [Release notes](https://github.com/remix-run/remix/releases) - [Commits](https://github.com/remix-run/remix/commits/[email protected]/packages/remix-express) --- updated-dependencies: - dependency-name: "@remix-run/node" dependency-version: 2.17.3 dependency-type: direct:production - dependency-name: "@remix-run/express" dependency-version: 2.17.3 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>
|
| "@remix-run/express": "^1.11.1", | ||
| "@remix-run/node": "^1.11.1", | ||
| "@remix-run/express": "^2.17.3", | ||
| "@remix-run/node": "^2.17.3", |
There was a problem hiding this comment.
Remix major version mismatch causes incompatibility
High Severity
This PR upgrades @remix-run/node and @remix-run/express from v1 to v2, but leaves @remix-run/react at v1.11.1. Remix packages are designed to work together at matching major versions. The v2 packages use @remix-run/router 1.23.0 internally while @remix-run/react v1 uses router 1.3.0, which can cause runtime incompatibilities. Additionally, the new v2 packages require Node.js >= 18.0.0, but the project's engines field still specifies node >= 14, creating a deployment compatibility issue.
Additional Locations (1)
|
View your CI Pipeline Execution ↗ for commit 8232fb0
☁️ Nx Cloud last updated this comment at |
Bumps @remix-run/node and @remix-run/express. These dependencies needed to be updated together.
Updates
@remix-run/nodefrom 1.11.1 to 2.17.3Release notes
Sourced from
@remix-run/node's releases.Commits
b1d29d9Version 2.17.34a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.33920349Version 2.17.264d88deValidate session id in file session storage (#10806)91ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)3869e0echore: Update version for release (#10643)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/nodesince your current version.Updates
@remix-run/expressfrom 1.11.1 to 2.17.3Release notes
Sourced from
@remix-run/express's releases.Commits
b1d29d9Version 2.17.34a5ffd1Revert "Version 2.17.3"98c89faVersion 2.17.33920349Version 2.17.291ef6feVersion 2.17.13000859chore: Update version for release (#10698)3004a98chore: Update version for release (pre) (#10692)fc5cb1fchore: Update version for release (pre) (#10691)3869e0echore: Update version for release (#10643)00107c5chore: Update version for release (pre) (#10642)Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for
@remix-run/expresssince your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Upgrades Remix server packages to v2 in the minimal starter; no application code changes.
@remix-run/nodeand@remix-run/expressto2.17.3; updatespackage.jsonandpackage-lock.json>=18engine requirements for Remix packages, addsundici, and updates@remix-run/web-*to latest (web-fetch4.4.x,web-blob/web-file/web-form-data3.1.x)express4.22.xand related middleware (body-parser,send,serve-static,qs, etc.)Written by Cursor Bugbot for commit 8232fb0. This will update automatically on new commits. Configure here.