From 68c70dc83e380190a967d48360535126ce23e248 Mon Sep 17 00:00:00 2001
From: github-merge-queue
 <118344674+github-merge-queue@users.noreply.github.com>
Date: Sun, 2 Aug 2026 02:49:53 +0000
Subject: [PATCH] chore(deps): bi-weekly security patch of critical
 vulnerabilities

---
 breaking_changes_report.md   |  3 +--
 echo/frontend/package.json   |  2 +-
 echo/frontend/pnpm-lock.yaml | 28 ++++++++++++++--------------
 3 files changed, 16 insertions(+), 17 deletions(-)

diff --git a/breaking_changes_report.md b/breaking_changes_report.md
index 46a331ae0..fe094e604 100644
--- a/breaking_changes_report.md
+++ b/breaking_changes_report.md
@@ -5,5 +5,4 @@ This analysis automatically maps direct dependency upgrades against our codebase
 #### 📦 Node.js (Frontend) (`echo/frontend/package.json`)
 | Package | Upgrade | Risk Level | Usages in Codebase | Guidance |
 |---|---|---|---|---|
-| `postcss` | `^8.5.3` ➡️ `^8.5.22` | **PATCH (Safe)** | **1 files** | ✅ Standard bug/security patch. Extremely safe. |
-| `react-router` | `^7.18.0` ➡️ `^7.18.1` | **PATCH (Safe)** | **118 files** | ✅ Standard bug/security patch. Extremely safe. |
+| `react-router` | `^7.18.1` ➡️ `^7.18.2` | **PATCH (Safe)** | **122 files** | ✅ Standard bug/security patch. Extremely safe. |
diff --git a/echo/frontend/package.json b/echo/frontend/package.json
index 4eb082ca2..2724f3242 100644
--- a/echo/frontend/package.json
+++ b/echo/frontend/package.json
@@ -81,7 +81,7 @@
     "react-markdown": "^9.1.0",
     "react-pdf": "^9.2.1",
     "react-qrcode-logo": "^3.0.0",
-    "react-router": "^7.18.1",
+    "react-router": "^7.18.2",
     "react-scan": "^0.5.3",
     "react-transition-group": "^4.4.5",
     "recharts": "^2.15.1",
diff --git a/echo/frontend/pnpm-lock.yaml b/echo/frontend/pnpm-lock.yaml
index 2276da7e9..5074f09cd 100644
--- a/echo/frontend/pnpm-lock.yaml
+++ b/echo/frontend/pnpm-lock.yaml
@@ -199,8 +199,8 @@ importers:
         specifier: ^3.0.0
         version: 3.0.0(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
       react-router:
-        specifier: ^7.18.1
-        version: 7.18.1(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
+        specifier: ^7.18.2
+        version: 7.18.2(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
       react-scan:
         specifier: ^0.5.3
         version: 0.5.3(@types/react@19.0.12)(react-dom@19.0.0(react@19.0.0))(react@19.0.0)(rollup@4.62.2)
@@ -2961,12 +2961,12 @@ packages:
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
-  brace-expansion@2.1.2:
-    resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==}
+  brace-expansion@2.1.3:
+    resolution: {integrity: sha512-DRdx5neNsG/QXbniLFWi2YmC/68oeOOmKz6zOjVk6ZS1ZLXgLIKqVEc6hWsmkjBbgii0SwaBTcJ5XKj5gzY/4A==}
 
-  brace-expansion@5.0.7:
-    resolution: {integrity: sha512-7oFy703dxfY3/NLxC1fh2SUCQ0H9rmAY+5EpDVfXjUTTs+HEwR2nYaqLv+GWcTsumwxPfiz6CzCNkwXwBUwqCA==}
-    engines: {node: 18 || 20 || >=22}
+  brace-expansion@5.0.8:
+    resolution: {integrity: sha512-JZyDyq3D4AUifKTPOB7DELf6XsB3WdPuNxCtob1vFXPsSXhdAiHBWJ/tJ8HAc9aH84BK+5JFZLNkJKx3G9kzQg==}
+    engines: {node: 20 || >=22}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -4801,8 +4801,8 @@ packages:
       '@types/react':
         optional: true
 
-  react-router@7.18.1:
-    resolution: {integrity: sha512-GDLgg3i3uM0aeJO3Fm+TCS+sDQ7gu12T6x0qdTEzcwqEfleci7JwugVNIF3U//0FWKnJT7ptG+20B2jfDqnZAg==}
+  react-router@7.18.2:
+    resolution: {integrity: sha512-aUVMjFm3GAPTTZL7oYr5E7ETiqfQCHRLH+B+5afnICvf0r7kkK4eR6SMuwbSTJw/7t+12khT/Kahij49fqOCIg==}
     engines: {node: '>=20.0.0'}
     peerDependencies:
       react: '>=18'
@@ -8408,11 +8408,11 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
-  brace-expansion@2.1.2:
+  brace-expansion@2.1.3:
     dependencies:
       balanced-match: 1.0.2
 
-  brace-expansion@5.0.7:
+  brace-expansion@5.0.8:
     dependencies:
       balanced-match: 4.0.4
 
@@ -10090,11 +10090,11 @@ snapshots:
 
   minimatch@10.2.5:
     dependencies:
-      brace-expansion: 5.0.7
+      brace-expansion: 5.0.8
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 2.1.2
+      brace-expansion: 2.1.3
 
   minimist@1.2.8:
     optional: true
@@ -10615,7 +10615,7 @@ snapshots:
     optionalDependencies:
       '@types/react': 19.0.12
 
-  react-router@7.18.1(react-dom@19.0.0(react@19.0.0))(react@19.0.0):
+  react-router@7.18.2(react-dom@19.0.0(react@19.0.0))(react@19.0.0):
     dependencies:
       cookie: 1.0.2
       react: 19.0.0