[dependabot]

Bumps @tanstack/react-start from 1.168.30 to 1.169.3.

Release notes

Sourced from @​tanstack/react-start's releases.

@​tanstack/react-start@​1.169.3

Patch Changes

• Updated dependencies [18154b1]:
  • @​tanstack/start-server-core@​1.169.44
  • @​tanstack/react-router@​1.170.45
  • @​tanstack/react-start-client@​1.168.43
  • @​tanstack/react-start-rsc@​0.1.64
  • @​tanstack/react-start-server@​1.167.51
  • @​tanstack/start-client-core@​1.170.38
  • @​tanstack/start-plugin-core@​1.171.54

@​tanstack/react-start@​1.169.2

Patch Changes

• Updated dependencies [71d9694, fdc10fa, 923d98b]:
  • @​tanstack/start-server-core@​1.169.43
  • @​tanstack/start-plugin-core@​1.171.53
  • @​tanstack/router-utils@​1.162.4
  • @​tanstack/react-start-server@​1.167.50
  • @​tanstack/react-start-rsc@​0.1.63

@​tanstack/react-start@​1.169.1

Patch Changes

• Updated dependencies [740b0ce, d6ba115]:
  • @​tanstack/start-server-core@​1.169.42
  • @​tanstack/react-start-server@​1.167.49
  • @​tanstack/start-plugin-core@​1.171.52
  • @​tanstack/react-start-rsc@​0.1.62
  • @​tanstack/start-client-core@​1.170.37
  • @​tanstack/react-router@​1.170.44
  • @​tanstack/react-start-client@​1.168.42

@​tanstack/react-start@​1.169.0

Minor Changes

• #8696 f243c61 - TanStack Start is stable. To upgrade from a release candidate, follow Migrate from the Release Candidate.

Patch Changes

• #8694 550f478 - Remove the deprecated .inputValidator() from createServerFn and createMiddleware. Use .validator(), which takes the same validator.

• #7588 94d6d8e - Keep streaming a page when request middleware returns a response that reads the page body, such as a copy made through a wrapped global Response, a copy in Bun, or a body piped through a transform. Start now disposes a replaced page stream only when nothing reads it. transferResponseBodyOwnership is removed: return the derived response directly.

• #7588 94d6d8e - Remove the built-in useSession API. Applications choose a session library, such as iron-session, and save or destroy sessions explicitly before returning or redirecting. Connect a cookie adapter through getCookie and setCookie, or append serialized cookies with appendResponseHeader('set-cookie', cookie). Existing session cookies require a deliberate migration or signing in again with a new cookie name.

  createServerEntry keeps the complete callback, including custom error handling, inside the request context and converts errors that escape it. The built-in entry still converts errors automatically. Raw createStartHandler handlers now rethrow the original error. For custom reporting, catch inside createServerEntry, then rethrow for default conversion or return handleStartError(error) to preserve response-helper status, headers, and cookies. Return an explicit Response when choosing a custom error payload.

  Response helpers now apply consistently across server routes, SSR, server functions, redirects, errors, and middleware response replacements. Helper setters override returned values; cookie helpers preserve independent cookies and replace matching cookie identities. Use appendResponseHeader('set-cookie', cookie) when adding a serialized cookie without replacing other cookies. Changed responses receive copied headers and reuse the body stream, so applications should inspect the response returned by Start rather than relying on mutation of the original response.

... (truncated)

Changelog

Sourced from @​tanstack/react-start's changelog.

1.169.3

Patch Changes

• Updated dependencies [18154b1]:
  • @​tanstack/start-server-core@​1.169.44
  • @​tanstack/react-router@​1.170.45
  • @​tanstack/react-start-client@​1.168.43
  • @​tanstack/react-start-rsc@​0.1.64
  • @​tanstack/react-start-server@​1.167.51
  • @​tanstack/start-client-core@​1.170.38
  • @​tanstack/start-plugin-core@​1.171.54

1.169.2

Patch Changes

• Updated dependencies [71d9694, fdc10fa, 923d98b]:
  • @​tanstack/start-server-core@​1.169.43
  • @​tanstack/start-plugin-core@​1.171.53
  • @​tanstack/router-utils@​1.162.4
  • @​tanstack/react-start-server@​1.167.50
  • @​tanstack/react-start-rsc@​0.1.63

1.169.1

Patch Changes

• Updated dependencies [740b0ce, d6ba115]:
  • @​tanstack/start-server-core@​1.169.42
  • @​tanstack/react-start-server@​1.167.49
  • @​tanstack/start-plugin-core@​1.171.52
  • @​tanstack/react-start-rsc@​0.1.62
  • @​tanstack/start-client-core@​1.170.37
  • @​tanstack/react-router@​1.170.44
  • @​tanstack/react-start-client@​1.168.42

1.169.0

Minor Changes

• #8696 f243c61 - TanStack Start is stable. To upgrade from a release candidate, follow Migrate from the Release Candidate.

Patch Changes

• #8694 550f478 - Remove the deprecated .inputValidator() from createServerFn and createMiddleware. Use .validator(), which takes the same validator.

• #7588 94d6d8e - Keep streaming a page when request middleware returns a response that reads the page body, such as a copy made through a wrapped global Response, a copy in Bun, or a body piped through a transform. Start now disposes a replaced page stream only when nothing reads it. transferResponseBodyOwnership is removed: return the derived response directly.

• #7588 94d6d8e - Remove the built-in useSession API. Applications choose a session library, such as iron-session, and save or destroy sessions explicitly before returning or redirecting. Connect a cookie adapter through getCookie and setCookie, or append serialized cookies with appendResponseHeader('set-cookie', cookie). Existing session cookies require a deliberate migration or signing in again with a new cookie name.

... (truncated)

Commits

• caaf32d ci: Version Packages (#8733)
• 140efa4 ci: Version Packages (#8701)
• 4ff63eb ci: Version Packages (#8700)
• 80e2eab ci: Version Packages (#8661)
• f243c61 Start stable (#8696)
• 94d6d8e response reconciliation (#7588)
• c79c620 ci: Version Packages (#8580)
• df8bbf2 docs: use new query methods (#7100)
• 57e126e ci: Version Packages (#8531)
• f0e751d ci: Version Packages (#8497)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.