• bundle-analyzer: record historical snapshots on each analyze run: #93520

• test: restore deployment exclusion for shared Cache Components tests: #98464
• Resolve metadata independently across parallel routes: #97345
• docs: preserve route behavior during Cache Components adoption: #98275
• Add a fast-path to 'get_relative_path_to' for a potential common case when 'from' is empty: #98440
• docs: document React browser API: #97621
• Enable React browser bailout by default: #98439
• [evals] Cover focused Cache Components and Partial Prefetching cases: #97813
• Deflake gc_interrupt_is_self_healing: #98445
• Adds this.target for webpack loaders: #98436
• test(evals): validate delegated error boundary components: #98387
• test: stabilize deferred entries HMR assertions: #98418

Huge thanks to @gnoff, @aurorascharff, @bgw, @devjiwonchoi, @wbinnssmith, @lukesandberg, @jimmyhmiller, @gaojude, and @sokra for helping!

• f311287: Fixed .card-code so the code block follows the card corners instead of drawing its own border-radius.
• 718fdd7: Fixed invisible box-shadows in dark mode with a new global --tblr-shadow-color light-dark() token.
• 6f64f33: Fixed the .dropdown-menu-arrow border color and replaced the deprecated clip with clip-path.
• b8e61db: Fixed the folded sidebar flashing the active submenu as a flyout on reload before tabler.js closed it.
• 692a3a2: Fixed the invisible .form-switch knob in light mode by restoring a gray $form-switch-color.
• d4c5be6: Fixed unreadable counter digit on not-yet-reached steps by giving .step-item ::before the --tblr-disabled-color.

• 4ddc9e9: Updated the avatar list and brand card descriptions on the avatars preview page.
• ac001f8: Updated astro to 7.3.1 and @astrojs/vercel to 11.0.10, and stopped installing optional peers such as next.
• 2f37632: Removed the playground and playground-* scratch pages from the preview build and the repository.
• d9ed942: Fixed the unstyled message list on the email-inbox page: a hoverable list group with label dots, dates and row actions.
• 9efa76a: Fixed the footer on preview.tabler.io to show the version link instead of the Generated build stamp.
• b4b10f9: Fixed the preview icons page to render all icons in production builds, keeping the 20-icon limit only for the dev server.
• 99b318c: Updated the preview card descriptions to name CSS classes and markup instead of Astro component props.

• 8fc079d: Added the color palette, flags, payments and social icons tables to the docs .md mirrors via a new MarkdownSource component.
• 57a29eb: Fixed the docs "On this page" list running past the viewport; the sticky rail now scrolls on its own.

Release 2026-09-09 21:48

• harden URL handling across Router and Start (#8308) (9c1871ccc8) by @Sheraff
• router-core: reload documents for cross-origin rewrites (#8287) (0654c0a1a4) by @Sheraff

• router-core: avoid empty query serializer allocations (#8313) (f9836f16f0) by @schiller-manuel
• react-router: avoid redundant Link state prop allocations (#8311) (9aec5a7012) by @schiller-manuel
• router-core: index cache membership checks per commit (#8288) (9871c06258) by @LadyBluenotes
• start-plugin-core: skip unused manifest build data (#8261) (919c397149) by @LadyBluenotes
• react-router: avoid unnecessary composed handlers (#8279) (aee42c6b64) by @Sheraff

• refresh Router and Start dependencies (#8300) (49bcd4db74) by @LadyBluenotes

• @tanstack/history@1.162.3
• @tanstack/nitro-v2-vite-plugin@1.155.2
• @tanstack/react-router@1.170.34
• @tanstack/react-start@1.168.51
• @tanstack/react-start-client@1.168.32
• @tanstack/react-start-rsc@0.1.50
• @tanstack/react-start-server@1.167.39
• @tanstack/router-cli@1.167.35
• @tanstack/router-core@1.171.29
• @tanstack/router-generator@1.167.35
• @tanstack/router-plugin@1.168.37
• @tanstack/router-utils@1.162.3
• @tanstack/router-vite-plugin@1.167.37
• @tanstack/solid-router@1.170.32
• @tanstack/solid-start@1.168.49
• @tanstack/solid-start-client@1.168.31
• @tanstack/solid-start-server@1.167.38
• @tanstack/start-client-core@1.170.29
• @tanstack/start-plugin-core@1.171.41
• @tanstack/start-server-core@1.169.33
• @tanstack/start-static-server-functions@1.167.34
• @tanstack/start-storage-context@1.167.31
• @tanstack/vue-router@1.170.31
• @tanstack/vue-start@1.168.48
• @tanstack/vue-start-client@1.167.34
• @tanstack/vue-start-server@1.167.38

• Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:
  • @tanstack/router-core@1.171.29
  • @tanstack/vue-router@1.170.31
  • @tanstack/start-client-core@1.170.29

• #8308 9c1871c - Validate navigation and redirect destinations, keep ambiguous relative URLs on the current origin, and constrain prerender requests and output paths. Prevent redirect headers from appearing in serialized server function response bodies.

  Preserve native form HTTP redirects, route error handling and masks for document redirects, and per-navigation destinations for shared loader redirects. Avoid redundant origin parsing and reduce link styling and server-rendering work. Configured origins must already be normalized.

  Keep blocked-link inactive props consistent during React hydration, honor explicit redirect Location headers before checking route options, and refresh Vue link state when destinations become internal. Reuse the protocol-relative URL check while parsing redirect schemes once.

  Reduce React link bundle size by sharing pathname comparisons, state-prop selection, and element creation.

  Share normalized pathname comparisons in Solid and Vue links to reduce bundle size.

• Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:

  • @tanstack/router-core@1.171.29
  • @tanstack/history@1.162.3
  • @tanstack/start-client-core@1.170.29
  • @tanstack/start-storage-context@1.167.31

• Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:
  • @tanstack/router-core@1.171.29

• Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:
  • @tanstack/router-core@1.171.29
  • @tanstack/vue-router@1.170.31
  • @tanstack/start-server-core@1.169.33

• #8308 9c1871c - Validate navigation and redirect destinations, keep ambiguous relative URLs on the current origin, and constrain prerender requests and output paths. Prevent redirect headers from appearing in serialized server function response bodies.

  Preserve native form HTTP redirects, route error handling and masks for document redirects, and per-navigation destinations for shared loader redirects. Avoid redundant origin parsing and reduce link styling and server-rendering work. Configured origins must already be normalized.

  Keep blocked-link inactive props consistent during React hydration, honor explicit redirect Location headers before checking route options, and refresh Vue link state when destinations become internal. Reuse the protocol-relative URL check while parsing redirect schemes once.

  Reduce React link bundle size by sharing pathname comparisons, state-prop selection, and element creation.

  Share normalized pathname comparisons in Solid and Vue links to reduce bundle size.

• Updated dependencies [f9836f1, 9c1871c, 9871c06, 0654c0a]:

  • @tanstack/router-core@1.171.29
  • @tanstack/history@1.162.3

• Updated dependencies [49bcd4d, 9c1871c, 919c397]:
  • @tanstack/start-plugin-core@1.171.41
  • @tanstack/vue-router@1.170.31
  • @tanstack/start-server-core@1.169.33
  • @tanstack/start-client-core@1.170.29
  • @tanstack/vue-start-client@1.167.34
  • @tanstack/vue-start-server@1.167.38

• Updated dependencies []:
  • @tanstack/start-client-core@1.170.29
  • @tanstack/react-start@1.168.51
  • @tanstack/solid-start@1.168.49