[Cycode] Fix for vulnerable manifest file dependency - react-router-dom updated to version 6.30.4

[cycode-security]

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path	Number of packages to update
ui/app/package.json	1

📂 ui/app/package.json

1 package will be updated to resolve vulnerabilities:

Package Name	Current Version	Updated Version
react-router-dom	6.30.1	6.30.4

Warning

Lock file generation failed for one or more manifest files in this pull request. Please regenerate the lock file manually before merging.

---

Note

Low Risk
Patch-level dependency bump with no source changes; main follow-up is ensuring the lockfile is updated before merge.

Overview
Bumps react-router-dom in ui/app/package.json from ^6.30.1 to ^6.30.4 to address a Cycode-reported vulnerable dependency. There are no application or routing code changes—only the declared version range.

The PR notes that lockfile generation failed, so whoever merges should regenerate the lockfile (e.g. npm install / pnpm install in ui/app) before merge so installs actually resolve to 6.30.4.

^{Reviewed by Cursor Bugbot for commit 843a4c7. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 843a4c7. Configure here.}

[cursor]

Lockfile not updated with dependency

High Severity

The package-lock.json in ui/app is out of sync with the react-router-dom version bump in package.json. This can cause npm ci to fail or install the older 6.30.1 version, leaving the intended vulnerability fix unapplied.

 

^{Reviewed by Cursor Bugbot for commit 843a4c7. Configure here.}