chore(deps): update all non-major dependencies (examples, templates & patterns) (patch) (#8411)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [@react-router/dev](https://reactrouter.com)
([source](https://redirect.github.com/remix-run/react-router/tree/HEAD/packages/react-router-dev))
| [`7.13.1` →
`7.13.2`](https://renovatebot.com/diffs/npm/@react-router%2fdev/7.13.1/7.13.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@react-router%2fdev/7.13.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-router%2fdev/7.13.1/7.13.2?slim=true)
|
|
[@react-router/node](https://redirect.github.com/remix-run/react-router)
([source](https://redirect.github.com/remix-run/react-router/tree/HEAD/packages/react-router-node))
| [`7.13.1` →
`7.13.2`](https://renovatebot.com/diffs/npm/@react-router%2fnode/7.13.1/7.13.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@react-router%2fnode/7.13.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-router%2fnode/7.13.1/7.13.2?slim=true)
|
|
[@react-router/serve](https://redirect.github.com/remix-run/react-router)
([source](https://redirect.github.com/remix-run/react-router/tree/HEAD/packages/react-router-serve))
| [`7.13.1` →
`7.13.2`](https://renovatebot.com/diffs/npm/@react-router%2fserve/7.13.1/7.13.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/@react-router%2fserve/7.13.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@react-router%2fserve/7.13.1/7.13.2?slim=true)
|
| [react-router](https://redirect.github.com/remix-run/react-router)
([source](https://redirect.github.com/remix-run/react-router/tree/HEAD/packages/react-router))
| [`7.13.1` →
`7.13.2`](https://renovatebot.com/diffs/npm/react-router/7.13.1/7.13.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/react-router/7.13.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-router/7.13.1/7.13.2?slim=true)
|
|
[typescript-eslint](https://typescript-eslint.io/packages/typescript-eslint)
([source](https://redirect.github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint))
| [`8.57.1` →
`8.57.2`](https://renovatebot.com/diffs/npm/typescript-eslint/8.57.1/8.57.2)
|
![age](https://developer.mend.io/api/mc/badges/age/npm/typescript-eslint/8.57.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript-eslint/8.57.1/8.57.2?slim=true)
|

---

### Release Notes

<details>
<summary>remix-run/react-router (@&#8203;react-router/dev)</summary>

###
[`v7.13.2`](https://redirect.github.com/remix-run/react-router/blob/HEAD/packages/react-router-dev/CHANGELOG.md#7132)

[Compare
Source](https://redirect.github.com/remix-run/react-router/compare/@react-router/dev@7.13.1...@react-router/dev@7.13.2)

##### Patch Changes

- Fix `react-router dev` crash when Unix socket files exist in the
project root
([#&#8203;14854](https://redirect.github.com/remix-run/react-router/pull/14854))

- Escape redirect locations in prerendered redirect HTML
([#&#8203;14880](https://redirect.github.com/remix-run/react-router/pull/14880))

- Add `future.unstable_passThroughRequests` flag
([#&#8203;14775](https://redirect.github.com/remix-run/react-router/pull/14775))

By default, React Router normalizes the `request.url` passed to your
`loader`, `action`, and `middleware` functions by removing React
Router's internal implementation details (`.data` suffixes, `index` +
`_routes` query params).

Enabling this flag removes that normalization and passes the raw HTTP
`request` instance to your handlers. This provides a few benefits:

- Reduces server-side overhead by eliminating multiple `new Request()`
calls on the critical path
- Allows you to distinguish document from data requests in your handlers
base don the presence of a `.data` suffix (useful for observability
purposes)

If you were previously relying on the normalization of `request.url`,
you can switch to use the new sibling `unstable_url` parameter which
contains a `URL` instance representing the normalized location:

  ```tsx
// ❌ Before: you could assume there was no `.data` suffix in
`request.url`
  export async function loader({ request }: Route.LoaderArgs) {
    let url = new URL(request.url);
    if (url.pathname === "/path") {
// This check will fail with the flag enabled because the `.data` suffix
will
      // exist on data requests
    }
  }

// ✅ After: use `unstable_url` for normalized routing logic and
`request.url`
  // for raw routing logic
export async function loader({ request, unstable_url }:
Route.LoaderArgs) {
    if (unstable_url.pathname === "/path") {
      // This will always have the `.data` suffix stripped
    }

    // And now you can distinguish between document versus data requests
    let isDataRequest = new URL(request.url).pathname.endsWith(".data");
  }
  ```

- Add a new `unstable_url: URL` parameter to route handler methods
(`loader`, `action`, `middleware`, etc.) representing the normalized URL
the application is navigating to or fetching, with React Router
implementation details removed (`.data`suffix, `index`/`_routes` query
params)
([#&#8203;14775](https://redirect.github.com/remix-run/react-router/pull/14775))

This is being added alongside the new
`future.unstable_passthroughRequests` future flag so that users still
have a way to access the normalized URL when that flag is enabled and
non-normalized `request`'s are being passed to your handlers. When
adopting this flag, you will only need to start leveraging this new
parameter if you are relying on the normalization of `request.url` in
your application code.

If you don't have the flag enabled, then `unstable_url` will match
`request.url`.

- Updated dependencies:
  - `react-router@7.13.2`
  - `@react-router/node@7.13.2`
  - `@react-router/serve@7.13.2`

</details>

<details>
<summary>remix-run/react-router (@&#8203;react-router/node)</summary>

###
[`v7.13.2`](https://redirect.github.com/remix-run/react-router/blob/HEAD/packages/react-router-node/CHANGELOG.md#7132)

[Compare
Source](https://redirect.github.com/remix-run/react-router/compare/@react-router/node@7.13.1...@react-router/node@7.13.2)

##### Patch Changes

- Updated dependencies:
  - `react-router@7.13.2`

</details>

<details>
<summary>remix-run/react-router (@&#8203;react-router/serve)</summary>

###
[`v7.13.2`](https://redirect.github.com/remix-run/react-router/blob/HEAD/packages/react-router-serve/CHANGELOG.md#7132)

[Compare
Source](https://redirect.github.com/remix-run/react-router/compare/@react-router/serve@7.13.1...@react-router/serve@7.13.2)

##### Patch Changes

- Updated dependencies:
  - `react-router@7.13.2`
  - `@react-router/node@7.13.2`
  - `@react-router/express@7.13.2`

</details>

<details>
<summary>remix-run/react-router (react-router)</summary>

###
[`v7.13.2`](https://redirect.github.com/remix-run/react-router/blob/HEAD/packages/react-router/CHANGELOG.md#7132)

[Compare
Source](https://redirect.github.com/remix-run/react-router/compare/react-router@7.13.1...react-router@7.13.2)

##### Patch Changes

- Fix clientLoader.hydrate when an ancestor route is also hydrating a
clientLoader
([#&#8203;14835](https://redirect.github.com/remix-run/react-router/pull/14835))

- Fix type error when passing Framework Mode route components using
`Route.ComponentProps` to `createRoutesStub`
([#&#8203;14892](https://redirect.github.com/remix-run/react-router/pull/14892))

- Fix percent encoding in relative path navigation
([#&#8203;14786](https://redirect.github.com/remix-run/react-router/pull/14786))

- Add `future.unstable_passThroughRequests` flag
([#&#8203;14775](https://redirect.github.com/remix-run/react-router/pull/14775))

By default, React Router normalizes the `request.url` passed to your
`loader`, `action`, and `middleware` functions by removing React
Router's internal implementation details (`.data` suffixes, `index` +
`_routes` query params).

Enabling this flag removes that normalization and passes the raw HTTP
`request` instance to your handlers. This provides a few benefits:

- Reduces server-side overhead by eliminating multiple `new Request()`
calls on the critical path
- Allows you to distinguish document from data requests in your handlers
base don the presence of a `.data` suffix (useful for observability
purposes)

If you were previously relying on the normalization of `request.url`,
you can switch to use the new sibling `unstable_url` parameter which
contains a `URL` instance representing the normalized location:

  ```tsx
// ❌ Before: you could assume there was no `.data` suffix in
`request.url`
  export async function loader({ request }: Route.LoaderArgs) {
    let url = new URL(request.url);
    if (url.pathname === "/path") {
// This check will fail with the flag enabled because the `.data` suffix
will
      // exist on data requests
    }
  }

// ✅ After: use `unstable_url` for normalized routing logic and
`request.url`
  // for raw routing logic
export async function loader({ request, unstable_url }:
Route.LoaderArgs) {
    if (unstable_url.pathname === "/path") {
      // This will always have the `.data` suffix stripped
    }

    // And now you can distinguish between document versus data requests
    let isDataRequest = new URL(request.url).pathname.endsWith(".data");
  }
  ```

- Internal refactor to consolidate framework-agnostic/React-specific
route type layers - no public API changes
([#&#8203;14765](https://redirect.github.com/remix-run/react-router/pull/14765))

- Sync protocol validation to rsc flows
([#&#8203;14882](https://redirect.github.com/remix-run/react-router/pull/14882))

- Add a new `unstable_url: URL` parameter to route handler methods
(`loader`, `action`, `middleware`, etc.) representing the normalized URL
the application is navigating to or fetching, with React Router
implementation details removed (`.data`suffix, `index`/`_routes` query
params)
([#&#8203;14775](https://redirect.github.com/remix-run/react-router/pull/14775))

This is being added alongside the new
`future.unstable_passthroughRequests` future flag so that users still
have a way to access the normalized URL when that flag is enabled and
non-normalized `request`'s are being passed to your handlers. When
adopting this flag, you will only need to start leveraging this new
parameter if you are relying on the normalization of `request.url` in
your application code.

If you don't have the flag enabled, then `unstable_url` will match
`request.url`.

</details>

<details>
<summary>typescript-eslint/typescript-eslint
(typescript-eslint)</summary>

###
[`v8.57.2`](https://redirect.github.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/typescript-eslint/CHANGELOG.md#8572-2026-03-23)

[Compare
Source](https://redirect.github.com/typescript-eslint/typescript-eslint/compare/v8.57.1...v8.57.2)

This was a version bump only for typescript-eslint to align it with
other projects, there were no code changes.

See [GitHub
Releases](https://redirect.github.com/typescript-eslint/typescript-eslint/releases/tag/v8.57.2)
for more information.

You can read about our [versioning
strategy](https://typescript-eslint.io/users/versioning) and
[releases](https://typescript-eslint.io/users/releases) on our website.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/UI5/webcomponents-react).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

examples/react-router-ts/package-lock.json

@@ -11,8 +11,8 @@
     "typecheck": "react-router typegen && tsc"
   },
   "dependencies": {
-    "@react-router/node": "7.13.1",
-    "@react-router/serve": "7.13.1",
+    "@react-router/node": "7.13.2",
+    "@react-router/serve": "7.13.2",
     "@ui5/webcomponents": "2.20.2",
     "@ui5/webcomponents-base": "2.20.2",
     "@ui5/webcomponents-fiori": "2.20.2",
@@ -21,10 +21,10 @@
     "isbot": "5.1.36",
     "react": "19.2.4",
     "react-dom": "19.2.4",
-    "react-router": "7.13.1"
+    "react-router": "7.13.2"
   },
   "devDependencies": {
-    "@react-router/dev": "7.13.1",
+    "@react-router/dev": "7.13.2",
     "@types/react": "19.2.14",
     "@types/react-dom": "19.2.3",
     "eslint": "9.39.4",
@@ -35,7 +35,7 @@
     "eslint-plugin-react-hooks": "7.0.1",
     "globals": "17.4.0",
     "typescript": "5.9.3",
-    "typescript-eslint": "8.57.1",
+    "typescript-eslint": "8.57.2",
     "vite": "7.3.1",
     "vite-tsconfig-paths": "6.1.1"
   },

examples/react-router-ts/package.json

@@ -21,7 +21,7 @@
     "@ui5/webcomponents-react": "2.20.1",
     "react": "19.2.4",
     "react-dom": "19.2.4",
-    "react-router": "7.13.1"
+    "react-router": "7.13.2"
   },
   "devDependencies": {
     "@types/react": "19.2.14",
@@ -33,7 +33,7 @@
     "eslint-plugin-react-hooks": "7.0.1",
     "eslint-plugin-react-refresh": "0.5.2",
     "globals": "17.4.0",
-    "typescript-eslint": "8.57.1",
+    "typescript-eslint": "8.57.2",
     "vite": "7.3.1"
   }
 }