unstale

npm / @tanstack/router-plugin

@tanstack/router-plugin

What changed in @tanstack/router-plugin 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-27.

1 breaking1 security6 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.8 on npm

@tanstack/router-plugin 18 changes

Breaking changes 1

  • The option was removed because route generation now always runs, ensuring autoCodeSplitting has the route metadata it needs.

    1.168.48release notes

Security 1

  • Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys

    1.168.7security advisory

Fixes and other changes 6

  • Preserves React component state during development HMR for route components declared with lowercase function names, including split route component groups and unsplit root route component options, without changing production output.

    1.168.23release notes

  • Aliased route imports keep generated route properties after hot reloads.

    1.168.17release notes

  • Fixed generated route type preferences for duplicate pathless/index routes.

    1.168.6release notes

  • Fixed HMR route index refresh for duplicate pathless/index routes.

    1.168.6release notes

  • Fixed route mismatch warnings for duplicate pathless/index routes.

    1.168.6release notes

  • Fixes Fast Refresh detection for root routes created with createRootRouteWithContext type arguments.

    1.168.5release notes