Matt Brophy

@brophdawg11.com

Helping folks build better websites Remix/React Router @Shopify 💿 Philadelphia

We just published 7 CVEs identifying security vulnerabilities in React Router and Remix v2 We recommend updating to the latest appropriate versions: - React Router v7 -- 7.16.0 - React Router v6 -- 6.30.4 - Remix v2 -- 2.17.5 Details, links, and package ranges are listed below

Remix 3.0.0-beta.2 is available - 140 commits since beta.0 - nearly 30 bug fixes and stability improvements - tons of API polish - reduced client JS payload - improved documentation - improved template/getting started experience Check out the changelog for more details: github.com/remix-run/re...

github.com

React Router 7.15.1 is now available! This release introduces a new useRouterState (unstable) hook which consolidates access to active and pending router states. We've also corrected useFetchers to now return a stable identity and fixed several other outstanding bugs.

unstable_useRouterState code example. Returns active and pending objects with lots of information about the current location and any active navigations

👋 We're re-thinking the stance on React 18 support for the next major release of React Router (v8), instead making React 19 the minimum supported version. If you got thoughts, concerns, etc... feel free to drop them here: github.com/remix-run/re...

React Router v8 · remix-run react-router · Discussion #14468

React Router v7 was released almost a year ago (2024-11-21). We're at a good point to start considering what we want to include/remove in v8, which will help us build out any remaining roadmap and ...

github.com

Finally a great use of AI for my daily routine - Prompted Playlists on Spotify is a feature I've wanted for a long time. I don't have the energy/memory to go through and manually curate playlists (I still mostly listen to 90s music) so really hoping this proves to work well

The Policy Director for the President of the United States said that the VA nurse was murdered because he was an “assassin.” And not one Republican in Congress will say a god damn word about because they are spineless cowards.

We just published 6 CVEs identifying security vulnerabilities in React Router and Remix v2 We recommend updating to the latest appropriate versions: React Router v7 -- 7.12.0 React Router v6 -- 6.30.3 Remix v2 -- 2.17.2 Details, links, and package ranges are listed below

We found that the fix to address the DoS vulnerability in React Server Components (CVE-2025-55184) was incomplete and does not prevent an attack in a specific case. This is disclosed as CVE-2025-67779. New patches are available now, please update immediately.

Researchers have found two new vulnerabilities in React Server Components while attempting to exploit the patches last week. These are new issues, separate from the critical CVE last week. The patch for React2Shell remains effective for the Remote Code Execution exploit.