chore(deps): bump diff to ^9.0.0 by Sheraff · Pull Request #8709 · TanStack/router

Sheraff · 2026-10-13T21:25:42Z

Bumps diff in @tanstack/router-utils from ^8.0.4 to ^9.0.0 (latest 9.0.0). The lockfile changes only the diff entry, 8.0.4 → 9.0.0.

What changed in diff 9 and why it doesn't affect us

The only usage in the repo is import { diffWords } from 'diff' in packages/router-utils/src/logger.ts (logDiff, used by router-plugin for debug output). No other package depends on diff or @types/diff.

Every breaking change in the 9.0.0 release notes is either ES5-only or patch-only:

ES5 support dropped (compiled to ES6, uses TextDecoder/Uint8Array). This doesn't matter for a Node-only build tool (engines.node >=20.19).
Patch APIs only: parsePatch, formatPatch and reversePatch get Git-style patch support, C-style quoted filenames and more tolerant handling of trailing garbage. StructuredPatch.oldFileName/newFileName are now typed string | undefined.

diffWords and its ChangeObject shape (added, removed, value) are unchanged, so no code changes are needed.

Validation

@tanstack/router-utils: test:unit (currently a no-op), test:types (TS 5.6 to 7.0), test:eslint, test:build
@tanstack/router-generator: test:unit
@tanstack/router-plugin: test:unit (consumer of logDiff)
Ran the built logDiff by hand: the output is correct.

🤖 Generated with Claude Code

Summary by CodeRabbit

Chores
- Updated an underlying package version. No user-facing changes are noted in this release.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

changeset-bot · 2026-10-13T21:25:48Z

🦋 Changeset detected

Latest commit: f84ee0e

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 10 packages

Name	Type
@tanstack/router-utils	Patch
@tanstack/react-start-rsc	Patch
@tanstack/react-start	Patch
@tanstack/router-generator	Patch
@tanstack/router-plugin	Patch
@tanstack/solid-start	Patch
@tanstack/start-plugin-core	Patch
@tanstack/vue-start	Patch
@tanstack/router-cli	Patch
@tanstack/router-vite-plugin	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

coderabbitai · 2026-10-13T21:26:33Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: TanStack/router/.coderabbit.yaml
Review profile: CHILL
Plan: Advanced
Run ID: c0a87d3a-c40f-4d75-8579-4bac22140e1d

📥 Commits

Reviewing files that changed from the base of the PR and between 4ff63eb and f84ee0e.

⛔ Files ignored due to path filters: 1

pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing: 2

.changeset/quiet-words-diff.md
packages/router-utils/package.json

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

📝 Walkthrough

The @tanstack/router-utils package updates its diff dependency from ^8.0.4 to ^9.0.0. A changeset declares a patch release for the package.

Changes: Router Utils Dependency Update

Layer / File(s)	Summary
Dependency update and release metadata `packages/router-utils/package.json`, `.changeset/quiet-words-diff.md`	The package manifest updates the `diff` dependency range to `^9.0.0`. A changeset declares a patch release.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Suggested reviewers: schiller-manuel

Merge Risk: ⚪ Minimal · up to f84ee

The diff dependency update preserves the fields used by logDiff, and the documented ES5 compatibility change is outside the package’s supported runtime contract. No concrete merge-blocking risk remains.

Pre-merge checks: 5

Passed checks: 5 passed

Check name	Status	Explanation
Title check		The title clearly and concisely identifies the dependency update from `diff` to `^9.0.0`.
Description check		The description clearly explains the dependency update, compatibility assessment, validation performed, and AI assistance. It does not use the template headings or include the checklist and release-im…
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

Commit to this branch
Create a new PR

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

socket-security · 2026-10-13T21:26:42Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	diff@9.0.0

View full report

nx-cloud · 2026-10-13T21:35:56Z

View your CI Pipeline Execution ↗ for commit f84ee0e

Command	Status	Duration	Result
`nx affected --targets=test:eslint,test:unit,tes...`	✅ Succeeded	10m 19s	View ↗

☁️ Nx Cloud last updated this comment at 2026-10-13 21:57:35 UTC

pkg-pr-new · 2026-10-13T21:38:06Z

More templates

@tanstack/arktype-adapter

npm i https://pkg.pr.new/@tanstack/arktype-adapter@8709

@tanstack/eslint-plugin-router

npm i https://pkg.pr.new/@tanstack/eslint-plugin-router@8709

@tanstack/eslint-plugin-start

npm i https://pkg.pr.new/@tanstack/eslint-plugin-start@8709

@tanstack/history

npm i https://pkg.pr.new/@tanstack/history@8709

@tanstack/react-router

npm i https://pkg.pr.new/@tanstack/react-router@8709

@tanstack/react-router-devtools

npm i https://pkg.pr.new/@tanstack/react-router-devtools@8709

@tanstack/react-router-ssr-query

npm i https://pkg.pr.new/@tanstack/react-router-ssr-query@8709

@tanstack/react-start

npm i https://pkg.pr.new/@tanstack/react-start@8709

@tanstack/react-start-client

npm i https://pkg.pr.new/@tanstack/react-start-client@8709

@tanstack/react-start-rsc

npm i https://pkg.pr.new/@tanstack/react-start-rsc@8709

@tanstack/react-start-server

npm i https://pkg.pr.new/@tanstack/react-start-server@8709

@tanstack/router-cli

npm i https://pkg.pr.new/@tanstack/router-cli@8709

@tanstack/router-core

npm i https://pkg.pr.new/@tanstack/router-core@8709

@tanstack/router-devtools

npm i https://pkg.pr.new/@tanstack/router-devtools@8709

@tanstack/router-devtools-core

npm i https://pkg.pr.new/@tanstack/router-devtools-core@8709

@tanstack/router-generator

npm i https://pkg.pr.new/@tanstack/router-generator@8709

@tanstack/router-plugin

npm i https://pkg.pr.new/@tanstack/router-plugin@8709

@tanstack/router-ssr-query-core

npm i https://pkg.pr.new/@tanstack/router-ssr-query-core@8709

@tanstack/router-utils

npm i https://pkg.pr.new/@tanstack/router-utils@8709

@tanstack/router-vite-plugin

npm i https://pkg.pr.new/@tanstack/router-vite-plugin@8709

@tanstack/solid-router

npm i https://pkg.pr.new/@tanstack/solid-router@8709

@tanstack/solid-router-devtools

npm i https://pkg.pr.new/@tanstack/solid-router-devtools@8709

@tanstack/solid-router-ssr-query

npm i https://pkg.pr.new/@tanstack/solid-router-ssr-query@8709

@tanstack/solid-start

npm i https://pkg.pr.new/@tanstack/solid-start@8709

@tanstack/solid-start-client

npm i https://pkg.pr.new/@tanstack/solid-start-client@8709

@tanstack/solid-start-server

npm i https://pkg.pr.new/@tanstack/solid-start-server@8709

@tanstack/start-client-core

npm i https://pkg.pr.new/@tanstack/start-client-core@8709

@tanstack/start-fn-stubs

npm i https://pkg.pr.new/@tanstack/start-fn-stubs@8709

@tanstack/start-plugin-core

npm i https://pkg.pr.new/@tanstack/start-plugin-core@8709

@tanstack/start-server-core

npm i https://pkg.pr.new/@tanstack/start-server-core@8709

@tanstack/start-static-server-functions

npm i https://pkg.pr.new/@tanstack/start-static-server-functions@8709

@tanstack/start-storage-context

npm i https://pkg.pr.new/@tanstack/start-storage-context@8709

@tanstack/valibot-adapter

npm i https://pkg.pr.new/@tanstack/valibot-adapter@8709

@tanstack/virtual-file-routes

npm i https://pkg.pr.new/@tanstack/virtual-file-routes@8709

@tanstack/vue-router

npm i https://pkg.pr.new/@tanstack/vue-router@8709

@tanstack/vue-router-devtools

npm i https://pkg.pr.new/@tanstack/vue-router-devtools@8709

@tanstack/vue-router-ssr-query

npm i https://pkg.pr.new/@tanstack/vue-router-ssr-query@8709

@tanstack/vue-start

npm i https://pkg.pr.new/@tanstack/vue-start@8709

@tanstack/vue-start-client

npm i https://pkg.pr.new/@tanstack/vue-start-client@8709

@tanstack/vue-start-server

npm i https://pkg.pr.new/@tanstack/vue-start-server@8709

@tanstack/zod-adapter

npm i https://pkg.pr.new/@tanstack/zod-adapter@8709

commit: f84ee0e

github-actions · 2026-10-13T21:42:56Z

🚀 Changeset Version Preview

1 package(s) bumped directly, 9 bumped as dependents.

🟩 Patch bumps

Package	Version	Reason
`@tanstack/router-utils`	1.162.3 → 1.162.4	Changeset
`@tanstack/react-start`	1.169.1 → 1.169.2	Dependent
`@tanstack/react-start-rsc`	0.1.62 → 0.1.63	Dependent
`@tanstack/router-cli`	1.167.43 → 1.167.44	Dependent
`@tanstack/router-generator`	1.167.43 → 1.167.44	Dependent
`@tanstack/router-plugin`	1.168.45 → 1.168.46	Dependent
`@tanstack/router-vite-plugin`	1.167.45 → 1.167.46	Dependent
`@tanstack/solid-start`	1.169.1 → 1.169.2	Dependent
`@tanstack/start-plugin-core`	1.171.52 → 1.171.53	Dependent
`@tanstack/vue-start`	1.169.1 → 1.169.2	Dependent

github-actions · 2026-10-13T21:48:49Z

Bundle Size Benchmarks

This pull request does not affect bundle size in any measured scenario.

codspeed · 2026-10-13T22:28:37Z

Merging this PR will not alter performance

ℹ️ 3 benchmarks have no flame graph

The flamegraph could not be generated because too much time was spent in runtime internals, making the visualization not useful for performance analysis.

hydrate restored route state and mixed Links (solid)

client-search-params navigation loop (solid)

client-links navigation loop (solid)

✅ 194 untouched benchmarks
⏩ 3 skipped benchmarks¹

_{Comparing deps/diff-9 (f84ee0e) with main (4ff63eb)}

3 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

chore(deps): bump diff to ^9.0.0

f84ee0e

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

github-actions Bot added the package: router-utils label Oct 13, 2026

Sheraff merged commit 923d98b into main Oct 13, 2026
29 checks passed

Sheraff deleted the deps/diff-9 branch October 13, 2026 22:28

This was referenced Oct 13, 2026

ci: Version Packages #8701

Merged

ci: Version Packages SimenB/tanstack-router#850

Open

Navigation Menu

Repository navigation

chore(deps): bump diff to ^9.0.0 - #8709

chore(deps): bump diff to ^9.0.0#8709
Sheraff merged 1 commit into
mainfrom
deps/diff-9

Sheraff commented Oct 13, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

changeset-bot Bot commented Oct 13, 2026

Uh oh!

coderabbitai Bot commented Oct 13, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Oct 13, 2026

Uh oh!

nx-cloud Bot commented Oct 13, 2026 •

edited

Loading

Uh oh!

pkg-pr-new Bot commented Oct 13, 2026

Uh oh!

github-actions Bot commented Oct 13, 2026

Uh oh!

github-actions Bot commented Oct 13, 2026

Uh oh!

Uh oh!

codspeed Bot commented Oct 13, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

Sheraff commented Oct 13, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

What changed in diff 9 and why it doesn't affect us

Validation

Summary by CodeRabbit

Uh oh!

changeset-bot Bot commented Oct 13, 2026

🦋 Changeset detected

Uh oh!

coderabbitai Bot commented Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Oct 13, 2026

Uh oh!

nx-cloud Bot commented Oct 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

pkg-pr-new Bot commented Oct 13, 2026

Uh oh!

github-actions Bot commented Oct 13, 2026

🚀 Changeset Version Preview

🟩 Patch bumps

Uh oh!

github-actions Bot commented Oct 13, 2026

Bundle Size Benchmarks

Uh oh!

Uh oh!

codspeed Bot commented Oct 13, 2026

Merging this PR will not alter performance

Footnotes

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Sheraff commented Oct 13, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Oct 13, 2026 •

edited

Loading

nx-cloud Bot commented Oct 13, 2026 •

edited

Loading