# What changed in @tanstack/router-plugin

> 8 changes in @tanstack/router-plugin 1 from its official release notes, upgrade guides and advisories: 1 breaking, 1 security. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/npm/@tanstack/router-plugin/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @tanstack/router-plugin 1

### Breaking changes

- The option was removed because route generation now always runs, ensuring autoCodeSplitting has the route metadata it needs. (1.168.48) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.48)

### Security

- Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys (1.168.7) — [security advisory](https://github.com/advisories/GHSA-G7CV-RXG3-HMPX)

### Fixes and other changes

- Preserves React component state during development HMR for route components declared with lowercase function names, including split route component groups and unsplit root route component options, without changing production output. (1.168.23) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.23)
- Aliased route imports keep generated route properties after hot reloads. (1.168.17) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.17)
- Fixed generated route type preferences for duplicate pathless/index routes. (1.168.6) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.6)
- Fixed HMR route index refresh for duplicate pathless/index routes. (1.168.6) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.6)
- Fixed route mismatch warnings for duplicate pathless/index routes. (1.168.6) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.6)
- Fixes Fast Refresh detection for root routes created with createRootRouteWithContext type arguments. (1.168.5) — [release notes](https://github.com/TanStack/router/releases/tag/%40tanstack/router-plugin%401.168.5)