Skip to content

chore(solid): bump to solid-js 2.0.0-rc.8 and @solidjs/vite-plugin 3.0.0-next.43 - #8348

Merged
birkskyum merged 2 commits into
solid-router-v2-prefrom
upgrade-solidjs-rc-7
Sep 11, 2026
Merged

chore(solid): bump to solid-js 2.0.0-rc.8 and @solidjs/vite-plugin 3.0.0-next.43#8348
birkskyum merged 2 commits into
solid-router-v2-prefrom
upgrade-solidjs-rc-7

Conversation

@brenelz

@brenelz brenelz commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Summary

  • solid-js / @solidjs/web: ^2.0.0-rc.6^2.0.0-rc.8 (rc.8 is ESM-only and declares engines.node >= 22.12; its exports carry default conditions, so the CJS builds still resolve it through Node's require(esm))
  • @solidjs/vite-plugin: ^3.0.0-next.35^3.0.0-next.43 (peer-requires rc.7+, depends on the rc.8 compiler)
  • @rsbuild/plugin-solid: ^2.0.0-beta.2^2.0.0-rc.0 (now ships @solidjs/compiler / @solidjs/babel-plugin instead of babel-preset-solid; the solid-start rsbuild patcher already targets its native solid loader)
  • webpack example @solidjs/babel-plugin: ^2.0.0-rc.4^2.0.0-rc.8
  • pnpm-lock.yaml: only Solid-related resolutions move, plus the @napi-rs/wasm-runtime@1.2.4 dependency the rc.8 wasm compiler binding needs. The install had also re-resolved unrelated @babel/* transitives (types/traverse 7.29.0 → 7.29.8), which broke @tanstack/router-plugin's build with two incompatible @babel/types copies, plus @emnapi/core peer re-suffixing; both were reverted to the base lockfile.

No source changes in the end. Two rc.7 regressions and one plugin regression were worked around on this branch and then fixed upstream before the bump settled:

  • rc.7 buffered every server-function POST body through new Request(request, { body }), which undici only accepts for its own instances, so srvx's Request subclass answered every POST with 400. rc.8 rebuilds that request from url, method, headers, and signal (a71e42e), so the interim normalization in @tanstack/solid-start is gone again.
  • rc.7's ssrElement read props.children twice for a string <Dynamic> (2.0.0-rc.7 SSR: ssrElement reads props.children twice for a spread, skipping a hydration id — every later element hydrates onto the wrong node solidjs/solid#3313), so the load() <Hydrate> strategy never claimed its server node. Fixed in rc.8 (3b4db21).
  • @solidjs/vite-plugin next.41/42 externalized @tanstack/start-* in vite dev because it only honored literal noExternal names, not the @tanstack/start** patterns (dev-mode e2e suites failed with Package import specifier "#tanstack-router-entry" is not defined). Fixed in next.43 by solidjs/solid-vite-plugin#360.

Verification

  • @tanstack/solid-router unit: 870 passed, 2 skipped (client) / 7 passed (server); @tanstack/solid-start-client unit: 8 passed
  • tsc for the Solid packages, test:eslint, and the build of the six Solid packages plus dependencies: green
  • e2e: solid-start/basic 80 passed + 4 skipped, solid-start/server-functions 29 passed + 1 skipped, solid-start/deferred-hydration 15 passed under both the vite and rsbuild toolchains, solid-router/basic-file-based 120 passed, solid-start/css-modules 7, solid-start/selective-ssr 11, solid-start/solid-query-layout-suspense 1 (the three dev-mode suites), solid-start/basic-solid-query 6
  • examples/solid/quickstart-webpack-file-based and quickstart-rspack-file-based build

🤖 Generated with Claude Code

…0.0-next.42

Moves solid-js/@solidjs/web to ^2.0.0-rc.7, @solidjs/vite-plugin to
^3.0.0-next.42, @rsbuild/plugin-solid to ^2.0.0-rc.0 and the webpack
example's @solidjs/babel-plugin to ^2.0.0-rc.7 across the monorepo.

@tanstack/solid-start now normalizes Request subclasses (srvx's Node
adapter) into native Requests before Solid's server-function handler
sees them: rc.7 buffers every POST body via `new Request(request, {
body })`, which undici only accepts for its own instances, so every
POST answered 400 under srvx.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 40fe6338-d444-42a2-aff2-873539b95fb3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@nx-cloud

nx-cloud Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

View your CI Pipeline Execution ↗ for commit 3dbc6f8

Command Status Duration Result
nx affected --targets=test:eslint,test:unit,tes... ✅ Succeeded 12m 5s View ↗
nx run-many --target=build --exclude=examples/*... ✅ Succeeded 2m 10s View ↗

☁️ Nx Cloud last updated this comment at 2026-09-11 17:34:30 UTC

@socket-security

socket-security Bot commented Sep 11, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​rsbuild/​plugin-solid@​2.0.0-beta.2 ⏵ 2.0.0-rc.098 -11007495 +1100
Updated@​solidjs/​web@​2.0.0-rc.6 ⏵ 2.0.0-rc.8100 +11008397 +1100
Updated@​solidjs/​babel-plugin@​2.0.0-rc.4 ⏵ 2.0.0-rc.887 +14100100 +194 +4100
Updatedsolid-js@​2.0.0-rc.6 ⏵ 2.0.0-rc.81001009596100
Updated@​solidjs/​vite-plugin@​3.0.0-next.35 ⏵ 3.0.0-next.4397 +2100100 +196 +2100

View full report

@socket-security

socket-security Bot commented Sep 11, 2026

Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Medium
Low adoption: npm @solidjs/compiler-darwin-arm64

Location: Package overview

From: pnpm-lock.yamlnpm/@rsbuild/plugin-solid@2.0.0-rc.0npm/@solidjs/compiler-darwin-arm64@2.0.0-rc.6

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-darwin-arm64@2.0.0-rc.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm @solidjs/compiler-darwin-arm64

Location: Package overview

From: pnpm-lock.yamlnpm/@solidjs/vite-plugin@3.0.0-next.43npm/@solidjs/compiler-darwin-arm64@2.0.0-rc.8

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-darwin-arm64@2.0.0-rc.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm @solidjs/compiler-darwin-x64

Location: Package overview

From: pnpm-lock.yamlnpm/@solidjs/vite-plugin@3.0.0-next.43npm/@solidjs/compiler-darwin-x64@2.0.0-rc.8

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-darwin-x64@2.0.0-rc.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm @solidjs/compiler-linux-arm64-gnu

Location: Package overview

From: pnpm-lock.yamlnpm/@rsbuild/plugin-solid@2.0.0-rc.0npm/@solidjs/compiler-linux-arm64-gnu@2.0.0-rc.6

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-linux-arm64-gnu@2.0.0-rc.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm @solidjs/compiler-win32-x64-msvc

Location: Package overview

From: pnpm-lock.yamlnpm/@rsbuild/plugin-solid@2.0.0-rc.0npm/@solidjs/compiler-win32-x64-msvc@2.0.0-rc.6

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-win32-x64-msvc@2.0.0-rc.6. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Low adoption: npm @solidjs/compiler-win32-x64-msvc

Location: Package overview

From: pnpm-lock.yamlnpm/@solidjs/vite-plugin@3.0.0-next.43npm/@solidjs/compiler-win32-x64-msvc@2.0.0-rc.8

ℹ Read more on: This package | This alert | What are unpopular packages?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Unpopular packages may have less maintenance and contain other problems.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@solidjs/compiler-win32-x64-msvc@2.0.0-rc.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

@github-actions

Copy link
Copy Markdown
Contributor

🚀 Changeset Version Preview

6 package(s) bumped directly, 0 bumped as dependents.

🟩 Patch bumps

Package Version Reason
@tanstack/solid-router 2.0.0-rc.7 → 2.0.0-rc.8 Changeset
@tanstack/solid-router-devtools 2.0.0-rc.5 → 2.0.0-rc.6 Changeset
@tanstack/solid-router-ssr-query 2.0.0-rc.5 → 2.0.0-rc.6 Changeset
@tanstack/solid-start 2.0.0-rc.7 → 2.0.0-rc.8 Changeset
@tanstack/solid-start-client 2.0.0-rc.7 → 2.0.0-rc.8 Changeset
@tanstack/solid-start-server 2.0.0-rc.7 → 2.0.0-rc.8 Changeset

@pkg-pr-new

pkg-pr-new Bot commented Sep 11, 2026

Copy link
Copy Markdown
More templates

@tanstack/arktype-adapter

npm i https://pkg.pr.new/@tanstack/arktype-adapter@8348

@tanstack/eslint-plugin-router

npm i https://pkg.pr.new/@tanstack/eslint-plugin-router@8348

@tanstack/eslint-plugin-start

npm i https://pkg.pr.new/@tanstack/eslint-plugin-start@8348

@tanstack/history

npm i https://pkg.pr.new/@tanstack/history@8348

@tanstack/nitro-v2-vite-plugin

npm i https://pkg.pr.new/@tanstack/nitro-v2-vite-plugin@8348

@tanstack/react-router

npm i https://pkg.pr.new/@tanstack/react-router@8348

@tanstack/react-router-devtools

npm i https://pkg.pr.new/@tanstack/react-router-devtools@8348

@tanstack/react-router-ssr-query

npm i https://pkg.pr.new/@tanstack/react-router-ssr-query@8348

@tanstack/react-start

npm i https://pkg.pr.new/@tanstack/react-start@8348

@tanstack/react-start-client

npm i https://pkg.pr.new/@tanstack/react-start-client@8348

@tanstack/react-start-rsc

npm i https://pkg.pr.new/@tanstack/react-start-rsc@8348

@tanstack/react-start-server

npm i https://pkg.pr.new/@tanstack/react-start-server@8348

@tanstack/router-cli

npm i https://pkg.pr.new/@tanstack/router-cli@8348

@tanstack/router-core

npm i https://pkg.pr.new/@tanstack/router-core@8348

@tanstack/router-devtools

npm i https://pkg.pr.new/@tanstack/router-devtools@8348

@tanstack/router-devtools-core

npm i https://pkg.pr.new/@tanstack/router-devtools-core@8348

@tanstack/router-generator

npm i https://pkg.pr.new/@tanstack/router-generator@8348

@tanstack/router-plugin

npm i https://pkg.pr.new/@tanstack/router-plugin@8348

@tanstack/router-ssr-query-core

npm i https://pkg.pr.new/@tanstack/router-ssr-query-core@8348

@tanstack/router-utils

npm i https://pkg.pr.new/@tanstack/router-utils@8348

@tanstack/router-vite-plugin

npm i https://pkg.pr.new/@tanstack/router-vite-plugin@8348

@tanstack/solid-router

npm i https://pkg.pr.new/@tanstack/solid-router@8348

@tanstack/solid-router-devtools

npm i https://pkg.pr.new/@tanstack/solid-router-devtools@8348

@tanstack/solid-router-ssr-query

npm i https://pkg.pr.new/@tanstack/solid-router-ssr-query@8348

@tanstack/solid-start

npm i https://pkg.pr.new/@tanstack/solid-start@8348

@tanstack/solid-start-client

npm i https://pkg.pr.new/@tanstack/solid-start-client@8348

@tanstack/solid-start-server

npm i https://pkg.pr.new/@tanstack/solid-start-server@8348

@tanstack/start-client-core

npm i https://pkg.pr.new/@tanstack/start-client-core@8348

@tanstack/start-fn-stubs

npm i https://pkg.pr.new/@tanstack/start-fn-stubs@8348

@tanstack/start-plugin-core

npm i https://pkg.pr.new/@tanstack/start-plugin-core@8348

@tanstack/start-server-core

npm i https://pkg.pr.new/@tanstack/start-server-core@8348

@tanstack/start-static-server-functions

npm i https://pkg.pr.new/@tanstack/start-static-server-functions@8348

@tanstack/start-storage-context

npm i https://pkg.pr.new/@tanstack/start-storage-context@8348

@tanstack/valibot-adapter

npm i https://pkg.pr.new/@tanstack/valibot-adapter@8348

@tanstack/virtual-file-routes

npm i https://pkg.pr.new/@tanstack/virtual-file-routes@8348

@tanstack/vue-router

npm i https://pkg.pr.new/@tanstack/vue-router@8348

@tanstack/vue-router-devtools

npm i https://pkg.pr.new/@tanstack/vue-router-devtools@8348

@tanstack/vue-router-ssr-query

npm i https://pkg.pr.new/@tanstack/vue-router-ssr-query@8348

@tanstack/vue-start

npm i https://pkg.pr.new/@tanstack/vue-start@8348

@tanstack/vue-start-client

npm i https://pkg.pr.new/@tanstack/vue-start-client@8348

@tanstack/vue-start-server

npm i https://pkg.pr.new/@tanstack/vue-start-server@8348

@tanstack/zod-adapter

npm i https://pkg.pr.new/@tanstack/zod-adapter@8348

commit: 3dbc6f8

@github-actions

github-actions Bot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Bundle Size Benchmarks

  • Commit: 1d58843e9eaa
  • Measured at: 2026-09-11T17:23:36.897Z
  • Baseline source: history:f021f6d1c6dc
  • Dashboard: bundle-size history

The following scenarios have bundle-size changes compared with the baseline:

Scenario Current (gzip) Delta vs baseline Initial gzip Raw Brotli Trend
react-router.minimal 83.84 KiB -139 B (-0.16%) 83.70 KiB 262.48 KiB 72.97 KiB ███████▅▅▅▅▁
react-router.full 87.35 KiB -124 B (-0.14%) 87.22 KiB 274.19 KiB 75.97 KiB ███████▅▅▅▅▁
solid-router.minimal 41.41 KiB +7.96 KiB (+23.78%) 41.29 KiB 118.19 KiB 37.35 KiB ▁▁▁▁▁▁▁▁▁▁▁█
solid-router.full 50.06 KiB +11.78 KiB (+30.76%) 49.94 KiB 144.36 KiB 44.96 KiB ▁▁▁▁▁▁▁▁▁▁▁█
vue-router.minimal 49.58 KiB -3 B (-0.01%) 49.46 KiB 138.42 KiB 44.75 KiB ███████▁▁▁▁▁
vue-router.full 55.19 KiB +1 B (+0.00%) 55.07 KiB 156.63 KiB 49.65 KiB ███████▁▁▁▁▁
react-start.minimal 96.66 KiB -235 B (-0.24%) 96.52 KiB 304.69 KiB 83.79 KiB ███████▆▆▆▆▁
react-start.deferred-hydration 97.38 KiB -237 B (-0.24%) 96.54 KiB 306.05 KiB 84.51 KiB ███████▆▆▆▆▁
react-start.full 99.83 KiB -218 B (-0.21%) 99.70 KiB 314.41 KiB 86.53 KiB ███████▅▅▅▅▁
react-start.rsbuild.minimal 99.97 KiB -164 B (-0.16%) 99.79 KiB 315.11 KiB 86.19 KiB ███████▅▅▅▅▁
react-start.rsbuild.minimal-iife 100.37 KiB -164 B (-0.16%) 100.21 KiB 316.05 KiB 86.55 KiB ███████▅▅▅▅▁
react-start.rsbuild.full 103.29 KiB -132 B (-0.12%) 103.12 KiB 325.20 KiB 88.98 KiB ███████▄▄▄▄▁
solid-start.minimal 63.36 KiB +17.02 KiB (+36.72%) 63.23 KiB 184.46 KiB 56.71 KiB ▁▁▁▁▁▁▁▁▁▁▁█
solid-start.deferred-hydration 67.82 KiB +18.42 KiB (+37.28%) 64.55 KiB 195.29 KiB 60.90 KiB ▁▁▁▁▁▁▁▁▁▁▁█
solid-start.full 79.53 KiB +28.14 KiB (+54.77%) 73.11 KiB 235.28 KiB 70.80 KiB ▁▁▁▁▁▁▁▁▁▁▁█
vue-start.minimal 65.63 KiB -99 B (-0.15%) 65.51 KiB 189.24 KiB 58.42 KiB ███████▃▃▃▃▁
vue-start.full 69.44 KiB -141 B (-0.20%) 69.31 KiB 201.55 KiB 61.64 KiB ███████▃▃▃▃▁

Current gzip tracks all emitted client JS chunks. Initial gzip tracks only the entry/import graph. Trend sparkline is historical current gzip ending with this PR measurement; lower is better.

@codspeed-hq

codspeed-hq Bot commented Sep 11, 2026

Copy link
Copy Markdown

Hooray! CodSpeed harness just leveled up!

The base and head of this comparison were measured with different runner settings, so their benchmark values are not directly comparable.

What changed between base and head:

Re-run the base with the same settings to get a valid performance comparison.


Comparing upgrade-solidjs-rc-7 (3dbc6f8) with solid-router-v2-pre (67a9040)1

Open in CodSpeed

Footnotes

  1. No successful run was found on solid-router-v2-pre (a35eeb5) during the generation of this report, so 67a9040 was used instead as the comparison base. There might be some changes unrelated to this pull request in this report.

…0.0-next.43

Moves solid-js/@solidjs/web to ^2.0.0-rc.8, @solidjs/vite-plugin to
^3.0.0-next.43 and the webpack example's @solidjs/babel-plugin to
^2.0.0-rc.8. rc.8 is ESM-only with engines.node >= 22.12.

rc.8 ships the upstream fix for the buffered server-function request
(a71e42e), so the srvx Request normalization from the rc.7 commit is
dropped again. @solidjs/vite-plugin next.43 honors the host's
resolve.noExternal patterns when externalizing the dependencies of
Solid consumers (solidjs/solid-vite-plugin#360), which is what broke
`vite dev` with "Package import specifier '#tanstack-router-entry' is
not defined" on next.41/42.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
@brenelz brenelz changed the title chore(solid): bump to solid-js 2.0.0-rc.7 and @solidjs/vite-plugin 3.0.0-next.42 chore(solid): bump to solid-js 2.0.0-rc.8 and @solidjs/vite-plugin 3.0.0-next.43 Sep 11, 2026
@birkskyum
birkskyum merged commit 8981eb7 into solid-router-v2-pre Sep 11, 2026
26 checks passed
@birkskyum
birkskyum deleted the upgrade-solidjs-rc-7 branch September 11, 2026 17:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants