Skip to content

Update react router dependency - #51764

Merged
stianst merged 5 commits into
keycloak:mainfrom
stianst:dep-update-react-router
Aug 27, 2026
Merged

stianst merged 5 commits into
keycloak:mainfrom
stianst:dep-update-react-router

Conversation

@stianst

@stianst stianst commented Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

6.x is no longer supported; https://github.com/remix-run/react-router?tab=security-ov-file. Not sure if we should upgrade to 7.x or 8.x. Just trying with 7.x to see if it passes CI for now

Closes #51878

Signed-off-by: stianst stianst@gmail.com

@stianst
stianst requested review from a team as code owners August 17, 2026 10:22
Copilot AI balanced review requested due to automatic review settings August 17, 2026 10:22
@stianst
stianst marked this pull request as draft August 17, 2026 10:23

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates React Router from v6 to v7 across both UI applications.

Changes:

  • Upgrades react-router-dom to 7.18.2.
  • Refreshes transitive dependencies in the PNPM lockfile.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File Description
js/apps/admin-ui/package.json Updates the Admin UI dependency.
js/apps/account-ui/package.json Updates the Account UI dependency.
js/pnpm-lock.yaml Locks React Router 7 and its transitive dependencies.
Files not reviewed (1)
  • js/pnpm-lock.yaml: Generated file

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@@ -38,7 +38,7 @@
"react-dom": "^18.3.1",
"react-hook-form": "^7.70.0",
"react-i18next": "^16.5.1",
"react-router-dom": "^6.30.4"
"react-router-dom": "^7.18.2"
@edewit

edewit commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

We could merge PR #51160 first that would make migration easier

@edewit

edewit commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

We can't move to react router 8 as we don't have react 19, that is only supported by patternfly 6

@stianst

stianst commented Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

We could merge PR #51160 first that would make migration easier

Is that something you would want to backport to 26.4, 26.6, and 26.7? If not that we should probably do this as a separate thing first, and backport it, then do that change after?

In either case I asked Claude to fix the issues with this PR, seems to make sense to me, but I'm not a JS expert for sure ;)

@stianst
stianst force-pushed the dep-update-react-router branch from 421097e to 3a2ca3e Compare August 18, 2026 07:21
edewit
edewit previously approved these changes Aug 18, 2026
Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: stianst <stianst@gmail.com>
edewit
edewit previously approved these changes Aug 20, 2026

@keycloak-github-bot keycloak-github-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unreported flaky test detected, please review

@keycloak-github-bot

Copy link
Copy Markdown

Unreported flaky test detected

If the flaky tests below are affected by the changes, please review and update the changes accordingly. Otherwise, a maintainer should report the flaky tests prior to merging the PR.

org.keycloak.testsuite.federation.ldap.LDAPGroupMapperTest#test06_addingUserToNewKeycloakGroup

Keycloak CI - Base IT (5)

java.lang.AssertionError: 

Expected: a collection with size <4>
     but: collection size was <3>
	at org.hamcrest.MatcherAssert.assertThat(MatcherAssert.java:20)
...

Report flaky test

org.keycloak.testsuite.webauthn.registration.WebAuthnOtherSettingsTest#timeout

Keycloak CI - WebAuthn IT

org.openqa.selenium.WebDriverException: 
unknown error: unhandled inspector error: {"code":-32000,"message":"Node with given id does not belong to the document"}
  (Session info: chrome=151.0.7922.137)
Build info: version: '4.46.0', revision: 'df5a634 df5a6341cbb5f8f06b836bd595752775627c80dc'
System info: os.name: 'Linux', os.arch: 'amd64', os.version: '6.17.0-1022-azure', java.version: '25.0.4'
...

Report flaky test

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
@edewit
edewit marked this pull request as ready for review August 26, 2026 13:40
Copilot AI review requested due to automatic review settings August 26, 2026 13:40

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 88 out of 89 changed files in this pull request and generated no new comments.

Files not reviewed (1)
  • js/pnpm-lock.yaml: Generated file

edewit
edewit previously approved these changes Aug 27, 2026
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Copilot AI review requested due to automatic review settings August 27, 2026 06:46

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 89 out of 90 changed files in this pull request and generated no new comments.

Files not reviewed (1)
  • js/pnpm-lock.yaml: Generated file

@stianst
stianst merged commit 0ed4f12 into keycloak:main Aug 27, 2026
150 of 152 checks passed
@stianst
stianst deleted the dep-update-react-router branch August 27, 2026 12:17
stianst added a commit that referenced this pull request Aug 28, 2026
* Update react router dependency



* Fixes



* Fix



* remove runtime route-generation crashes after React Router v7



* test stabilization



---------




(cherry picked from commit 0ed4f12)

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
stianst added a commit that referenced this pull request Sep 1, 2026
* Update react router dependency (#51764)

* Update react router dependency

Signed-off-by: stianst <stianst@gmail.com>

* Fixes

Signed-off-by: stianst <stianst@gmail.com>

* Fix

Signed-off-by: stianst <stianst@gmail.com>

* remove runtime route-generation crashes after React Router v7

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* test stabilization

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
(cherry picked from commit 0ed4f12)

* lockfile fix

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* merge error fix

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

* cherry picked test stabilization

Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>

---------

Signed-off-by: stianst <stianst@gmail.com>
Signed-off-by: Erik Jan de Wit <erikjan.dewit@gmail.com>
Co-authored-by: Stian Thorgersen <stianst@gmail.com>
@stianst stianst mentioned this pull request Sep 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

CVE-2026-53666 CVE-2026-53668 CVE-2026-53669 in react-router and react-router-dom

3 participants